-
Notifications
You must be signed in to change notification settings - Fork 105
fix all biome errors #815
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
fix all biome errors #815
Conversation
|
👍 Dependency issues cleared. Learn more about Socket for GitHub ↗︎ This PR previously contained dependency changes with security issues that have been resolved, removed, or ignored. |
2ba9f41 to
2c294a9
Compare
2c294a9 to
498a9b3
Compare
589cf6f to
2c11dea
Compare
2c11dea to
a9a2068
Compare
| matrix: | ||
| include: | ||
| - platform: linux/amd64 | ||
| runner: ubuntu-latest |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I'm not sure the implication of this one. cc @d4mr
| "@thirdweb-dev/auth/**/axios": ">=1.7.8", | ||
| "@thirdweb-dev/auth/**/web3-utils": ">=4.2.1", | ||
| "ethers-gcp-kms-signer/**/protobufjs": ">=7.2.5", | ||
| "fastify/**/find-my-way": ">=8.2.2", |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
These are needed to pin versions that don't have reported vulnerabilities. synk test on this branch brings back these vulns if we remove this:
✗ Cross-site Request Forgery (CSRF) [High Severity][https://security.snyk.io/vuln/SNYK-JS-AXIOS-6032459] in [email protected]
✗ Regular Expression Denial of Service (ReDoS) [Medium Severity][https://security.snyk.io/vuln/SNYK-JS-AXIOS-6124857] in [email protected]
✗ Cross-site Scripting (XSS) [Medium Severity][https://security.snyk.io/vuln/SNYK-JS-AXIOS-6671926] in [email protected]
✗ Prototype Pollution [High Severity][https://security.snyk.io/vuln/SNYK-JS-WEB3UTILS-6229337] in [email protected]
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Some of these may be removable since I only see the first two deps in this vuln report list.
| ( | ||
| await userOpRes.json() | ||
| ) as RpcResponse; |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Did biome format this? This seems weird and lower redability.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
My biome corrects this back
|
Report too large to display inline |
* bump yarn to berry * fix all biome errors * bring back pinned resolved deps, fix whitepsace --------- Co-authored-by: Phillip Ho <[email protected]>
* bump yarn to berry * fix all biome errors * bring back pinned resolved deps, fix whitepsace --------- Co-authored-by: Phillip Ho <[email protected]> Signed-off-by: Phillip Ho <[email protected]>
* regenerate sdk (#808) Co-authored-by: Phillip Ho <[email protected]> Signed-off-by: Phillip Ho <[email protected]> * bump sdk version (#813) Signed-off-by: Phillip Ho <[email protected]> * update workflow action versions (#812) Signed-off-by: Phillip Ho <[email protected]> * fix all biome errors (#815) * bump yarn to berry * fix all biome errors * bring back pinned resolved deps, fix whitepsace --------- Co-authored-by: Phillip Ho <[email protected]> Signed-off-by: Phillip Ho <[email protected]> * get-balance and get-all-events migrated to v5 (#816) Signed-off-by: Phillip Ho <[email protected]> * thirdweb version bump (#818) thirdweb sdk version bump to v5.78.0 Signed-off-by: Phillip Ho <[email protected]> * chore: fix some typos in comment Signed-off-by: toofooboo <[email protected]> Signed-off-by: Phillip Ho <[email protected]> --------- Signed-off-by: Phillip Ho <[email protected]> Signed-off-by: toofooboo <[email protected]> Co-authored-by: Nicholas St. Germain <[email protected]> Co-authored-by: Nischit Prasad Nhuchhe Pradhan <[email protected]> Co-authored-by: toofooboo <[email protected]>

Changes
How this PR will be tested
Output
(Example: Screenshot/GIF for UI changes, cURL output for API changes)
PR-Codex overview
This PR focuses on updating error handling, type safety, and configuration settings across various files, as well as upgrading dependencies to newer versions.
Detailed summary
.github/workflowsto useubuntu-24.04.unknowntype instead ofany.assyntax.src/shared/lib/cache/swr.ts.viemversion^2.21.54.