Skip to content

v12.2.0 sync v12.1.1#26842

Merged
Gudahtt merged 19 commits intoVersion-v12.2.0from
v12.2.0-sync-v12.1.1
Sep 3, 2024
Merged

v12.2.0 sync v12.1.1#26842
Gudahtt merged 19 commits intoVersion-v12.2.0from
v12.2.0-sync-v12.1.1

Conversation

@Gudahtt
Copy link
Copy Markdown
Member

@Gudahtt Gudahtt commented Sep 2, 2024

Description

Update v12.2.0 with changes from v12.1.1

Open in GitHub Codespaces

Related issues

N/A

Manual testing steps

N/A

Screenshots/Recordings

N/A

Pre-merge author checklist

Pre-merge reviewer checklist

  • I've manually tested the PR (e.g. pull and build branch, run the app, test code being changed).
  • I confirm that this PR addresses all acceptance criteria described in the ticket it closes and includes the necessary testing evidence such as recordings and or screenshots.

metamaskbot and others added 11 commits August 28, 2024 20:30
… under certain conditions (#26726) (#26733)

## **Description**

Fix issue where `wallet_addEthereumChain` does not attach a result to
the response object when the currently selected rpcUrl matches the
request.

This would cause the request to get "stuck" in the
`QueuedRequestController` queue, preventing the queue from progressing
and causing confusing behavior.

[![Open in GitHub

Codespaces](https://github.com/codespaces/badge.svg)](https://codespaces.new/MetaMask/metamask-extension/pull/26726?quickstart=1)

## **Related issues**

Fixes: #26706

## **Manual testing steps**

1. Go to https://chainlist.org/?chain=56&search=blast
2. Connect the wallet and add Blast Mainnet (For other chains it appears
Chainlist cycles to the next rpcUrl you don't have which avoids this
bug, so use Blast)
3. After successfully adding the network, attempt to add Blast again.
Nothing should happen.
4. Then go to https://faucet.quicknode.com/blast/sepolia (or any dapp
where your wallet isn't already connected) and attempt to connect
5. You should be able to connect as usual

## **Screenshots/Recordings**

### **Before**



https://github.com/user-attachments/assets/b997027f-1c62-4279-87c6-0fe70989abb3


### **After**



https://github.com/user-attachments/assets/08307a88-8f6f-44cd-9b75-877aadb1805a


## **Pre-merge author checklist**

- [ ] I've followed [MetaMask Contributor
Docs](https://github.com/MetaMask/contributor-docs) and [MetaMask
Extension Coding

Standards](https://github.com/MetaMask/metamask-extension/blob/develop/.github/guidelines/CODING_GUIDELINES.md).
- [ ] I've completed the PR template to the best of my ability
- [ ] I’ve included tests if applicable
- [ ] I’ve documented my code using [JSDoc](https://jsdoc.app/) format
if applicable
- [ ] I’ve applied the right labels on the PR (see [labeling
guidelines](https://github.com/MetaMask/metamask-extension/blob/develop/.github/guidelines/LABELING_GUIDELINES.md)).
Not required for external contributors.

## **Pre-merge reviewer checklist**

- [ ] I've manually tested the PR (e.g. pull and build branch, run the
app, test code being changed).
- [ ] I confirm that this PR addresses all acceptance criteria described
in the ticket it closes and includes the necessary testing evidence such
as recordings and or screenshots.


<!--
Please submit this PR as a draft initially.
Do not mark it as "Ready for review" until the template has been
completely filled out, and PR status checks have passed at least once.
-->

## **Description**

<!--
Write a short description of the changes included in this pull request,
also include relevant motivation and context. Have in mind the following
questions:
1. What is the reason for the change?
2. What is the improvement/solution?
-->

[![Open in GitHub
Codespaces](https://github.com/codespaces/badge.svg)](https://codespaces.new/MetaMask/metamask-extension/pull/26733?quickstart=1)

## **Related issues**

Fixes:

## **Manual testing steps**

1. Go to this page...
2.
3.

## **Screenshots/Recordings**

<!-- If applicable, add screenshots and/or recordings to visualize the
before and after of your change. -->

### **Before**

<!-- [screenshots/recordings] -->

### **After**

<!-- [screenshots/recordings] -->

## **Pre-merge author checklist**

- [ ] I've followed [MetaMask Contributor
Docs](https://github.com/MetaMask/contributor-docs) and [MetaMask
Extension Coding
Standards](https://github.com/MetaMask/metamask-extension/blob/develop/.github/guidelines/CODING_GUIDELINES.md).
- [ ] I've completed the PR template to the best of my ability
- [ ] I’ve included tests if applicable
- [ ] I’ve documented my code using [JSDoc](https://jsdoc.app/) format
if applicable
- [ ] I’ve applied the right labels on the PR (see [labeling
guidelines](https://github.com/MetaMask/metamask-extension/blob/develop/.github/guidelines/LABELING_GUIDELINES.md)).
Not required for external contributors.

## **Pre-merge reviewer checklist**

- [ ] I've manually tested the PR (e.g. pull and build branch, run the
app, test code being changed).
- [ ] I confirm that this PR addresses all acceptance criteria described
in the ticket it closes and includes the necessary testing evidence such
as recordings and or screenshots.
## **Description**

This PR cherry picks two improvements to the latest accounts controller
migrations into the latest release.
- #26742
- #26773

[![Open in GitHub
Codespaces](https://github.com/codespaces/badge.svg)](https://codespaces.new/MetaMask/metamask-extension/pull/26778?quickstart=1)

## **Related issues**

Fixes: #26377

## **Manual testing steps**


## **Screenshots/Recordings**

<!-- If applicable, add screenshots and/or recordings to visualize the
before and after of your change. -->

### **Before**

<!-- [screenshots/recordings] -->

### **After**

<!-- [screenshots/recordings] -->

## **Pre-merge author checklist**

- [ ] I've followed [MetaMask Contributor
Docs](https://github.com/MetaMask/contributor-docs) and [MetaMask
Extension Coding
Standards](https://github.com/MetaMask/metamask-extension/blob/develop/.github/guidelines/CODING_GUIDELINES.md).
- [ ] I've completed the PR template to the best of my ability
- [ ] I’ve included tests if applicable
- [ ] I’ve documented my code using [JSDoc](https://jsdoc.app/) format
if applicable
- [ ] I’ve applied the right labels on the PR (see [labeling
guidelines](https://github.com/MetaMask/metamask-extension/blob/develop/.github/guidelines/LABELING_GUIDELINES.md)).
Not required for external contributors.

## **Pre-merge reviewer checklist**

- [ ] I've manually tested the PR (e.g. pull and build branch, run the
app, test code being changed).
- [ ] I confirm that this PR addresses all acceptance criteria described
in the ticket it closes and includes the necessary testing evidence such
as recordings and or screenshots.

---------

Co-authored-by: Monte Lai <monte.lai@consensys.net>
Co-authored-by: Mark Stacey <markjstacey@gmail.com>
## **Description**

Backports changes from MATIC - POL update, including state migration:
#26671

[![Open in GitHub
Codespaces](https://github.com/codespaces/badge.svg)](https://codespaces.new/MetaMask/metamask-extension/pull/26780?quickstart=1)

## **Related issues**

Fixes: MATIC ticker should now be POL. Should automatically update for
users.

## **Manual testing steps**

## **Screenshots/Recordings**

## **Pre-merge author checklist**

- [x] I've followed [MetaMask Contributor
Docs](https://github.com/MetaMask/contributor-docs) and [MetaMask
Extension Coding
Standards](https://github.com/MetaMask/metamask-extension/blob/develop/.github/guidelines/CODING_GUIDELINES.md).
- [x] I've completed the PR template to the best of my ability
- [x] I’ve included tests if applicable
- [x] I’ve documented my code using [JSDoc](https://jsdoc.app/) format
if applicable
- [x] I’ve applied the right labels on the PR (see [labeling
guidelines](https://github.com/MetaMask/metamask-extension/blob/develop/.github/guidelines/LABELING_GUIDELINES.md)).
Not required for external contributors.

## **Pre-merge reviewer checklist**

- [ ] I've manually tested the PR (e.g. pull and build branch, run the
app, test code being changed).
- [ ] I confirm that this PR addresses all acceptance criteria described
in the ticket it closes and includes the necessary testing evidence such
as recordings and or screenshots.
…4.0.0` (#26143) (#26626)

## **Description**

Cherry-pick of #26143 for ~v12.1.0-rc~ v12.1.1-rc.

This is a very different PR from the original, as I had to remove diffs
to a significant amount of code that has not yet been introduced to the
release candidate.

The diffs that were excluded here will need to be reapplied to a future
release. I'm also keeping an eye out for new cherry-picks that may
introduce changes requiring me to restore certain diffs.

Aligning `@metamask/eth-block-tracker` to `^11.0.1` is deferred, as it's
blocked by #26150, which is not included in this release candidate. The
`@metamask/transaction-controller` major version bump from `^34.0.0` to
`^35.1.1` is also removed for now.

See below for new changelog.

## Changelog

### Added

- Add and export `PPOMMiddlewareRequest` type for `JsonRpcRequest` types
that include the `securityAlertResponse` property.
  - `securityAlertResponse` is defined as both optional and nullable.
- Add `PPOMRequest` type for `eth-sendTransaction` requests.

### Changed

- **BREAKING:** Bump `@metamask/eth-json-rpc-middleware` from `^12.1.1`
to `^14.0.0`.
- Bump `@trezor/connect-web` from `9.2.2` to `9.3.0`.

### Fixed

- **BREAKING:** Narrow `Params` generic parameter of
`createPPOMMiddleware` function from `JsonRpcParams` to `(string | { to:
string })[]`.
- Add `Params` generic parameter to `handleSnapRequest` function, which
is constrained by `Record<string, unknown>` and defaults to
`JsonRpcParams`.
  - `handleSnapRequest` can now be typed correctly with any `params`
object.

### Security

- **BREAKING:** Typed signature validation only replaces `0X` prefix
with `0x`, and contract address normalization is removed for decimal and
octal values.
- Threat actors have been manipulating `eth_signTypedData_v4` fields to
cause failures in blockaid's detectors.
- Extension crashes with an error when performing Malicious permit with
a non-0x prefixed integer address.
  - This fixes an issue where the key value row or petname component
disappears if a signed address is prefixed by "0X" instead of "0x".

## **Manual testing steps**

## **Screenshots/Recordings**

## **Pre-merge author checklist**

- [x] I've followed [MetaMask Contributor
Docs](https://github.com/MetaMask/contributor-docs) and [MetaMask
Extension Coding
Standards](https://github.com/MetaMask/metamask-extension/blob/develop/.github/guidelines/CODING_GUIDELINES.md).
- [x] I've completed the PR template to the best of my ability
- [x] I’ve included tests if applicable
- [x] I’ve documented my code using [JSDoc](https://jsdoc.app/) format
if applicable
- [x] I’ve applied the right labels on the PR (see [labeling
guidelines](https://github.com/MetaMask/metamask-extension/blob/develop/.github/guidelines/LABELING_GUIDELINES.md)).
Not required for external contributors.

## **Pre-merge reviewer checklist**

- [ ] I've manually tested the PR (e.g. pull and build branch, run the
app, test code being changed).
- [ ] I confirm that this PR addresses all acceptance criteria described
in the ticket it closes and includes the necessary testing evidence such
as recordings and or screenshots.

---------

Co-authored-by: MetaMask Bot <metamaskbot@users.noreply.github.com>
## **Description**

Update changelog for v12.1.1

[![Open in GitHub
Codespaces](https://github.com/codespaces/badge.svg)](https://codespaces.new/MetaMask/metamask-extension/pull/26824?quickstart=1)

## **Related issues**

N/A

## **Manual testing steps**

N/A

## **Screenshots/Recordings**

N/A

## **Pre-merge author checklist**

- [x] I've followed [MetaMask Contributor
Docs](https://github.com/MetaMask/contributor-docs) and [MetaMask
Extension Coding
Standards](https://github.com/MetaMask/metamask-extension/blob/develop/.github/guidelines/CODING_GUIDELINES.md).
- [x] I've completed the PR template to the best of my ability
- [x] I’ve included tests if applicable
- [x] I’ve documented my code using [JSDoc](https://jsdoc.app/) format
if applicable
- [x] I’ve applied the right labels on the PR (see [labeling
guidelines](https://github.com/MetaMask/metamask-extension/blob/develop/.github/guidelines/LABELING_GUIDELINES.md)).
Not required for external contributors.

## **Pre-merge reviewer checklist**

- [ ] I've manually tested the PR (e.g. pull and build branch, run the
app, test code being changed).
- [ ] I confirm that this PR addresses all acceptance criteria described
in the ticket it closes and includes the necessary testing evidence such
as recordings and or screenshots.
<!--
Please submit this PR as a draft initially.
Do not mark it as "Ready for review" until the template has been
completely filled out, and PR status checks have passed at least once.
-->

## **Description**

<!--
Write a short description of the changes included in this pull request,
also include relevant motivation and context. Have in mind the following
questions:
1. What is the reason for the change?
2. What is the improvement/solution?
-->

[![Open in GitHub
Codespaces](https://github.com/codespaces/badge.svg)](https://codespaces.new/MetaMask/metamask-extension/pull/26827?quickstart=1)

## **Related issues**

Fixes:

## **Manual testing steps**

1. Go to this page...
2.
3.

## **Screenshots/Recordings**

<!-- If applicable, add screenshots and/or recordings to visualize the
before and after of your change. -->

### **Before**

<!-- [screenshots/recordings] -->

### **After**

<!-- [screenshots/recordings] -->

## **Pre-merge author checklist**

- [ ] I've followed [MetaMask Contributor
Docs](https://github.com/MetaMask/contributor-docs) and [MetaMask
Extension Coding
Standards](https://github.com/MetaMask/metamask-extension/blob/develop/.github/guidelines/CODING_GUIDELINES.md).
- [ ] I've completed the PR template to the best of my ability
- [ ] I’ve included tests if applicable
- [ ] I’ve documented my code using [JSDoc](https://jsdoc.app/) format
if applicable
- [ ] I’ve applied the right labels on the PR (see [labeling
guidelines](https://github.com/MetaMask/metamask-extension/blob/develop/.github/guidelines/LABELING_GUIDELINES.md)).
Not required for external contributors.

## **Pre-merge reviewer checklist**

- [ ] I've manually tested the PR (e.g. pull and build branch, run the
app, test code being changed).
- [ ] I confirm that this PR addresses all acceptance criteria described
in the ticket it closes and includes the necessary testing evidence such
as recordings and or screenshots.
…4.0.0` (#26143) (#26626)

Cherry-pick of #26143 for ~v12.1.0-rc~ v12.1.1-rc.

This is a very different PR from the original, as I had to remove diffs
to a significant amount of code that has not yet been introduced to the
release candidate.

The diffs that were excluded here will need to be reapplied to a future
release. I'm also keeping an eye out for new cherry-picks that may
introduce changes requiring me to restore certain diffs.

Aligning `@metamask/eth-block-tracker` to `^11.0.1` is deferred, as it's
blocked by #26150, which is not included in this release candidate. The
`@metamask/transaction-controller` major version bump from `^34.0.0` to
`^35.1.1` is also removed for now.

See below for new changelog.

- Add and export `PPOMMiddlewareRequest` type for `JsonRpcRequest` types
that include the `securityAlertResponse` property.
  - `securityAlertResponse` is defined as both optional and nullable.
- Add `PPOMRequest` type for `eth-sendTransaction` requests.

- **BREAKING:** Bump `@metamask/eth-json-rpc-middleware` from `^12.1.1`
to `^14.0.0`.
- Bump `@trezor/connect-web` from `9.2.2` to `9.3.0`.

- **BREAKING:** Narrow `Params` generic parameter of
`createPPOMMiddleware` function from `JsonRpcParams` to `(string | { to:
string })[]`.
- Add `Params` generic parameter to `handleSnapRequest` function, which
is constrained by `Record<string, unknown>` and defaults to
`JsonRpcParams`.
  - `handleSnapRequest` can now be typed correctly with any `params`
object.

- **BREAKING:** Typed signature validation only replaces `0X` prefix
with `0x`, and contract address normalization is removed for decimal and
octal values.
- Threat actors have been manipulating `eth_signTypedData_v4` fields to
cause failures in blockaid's detectors.
- Extension crashes with an error when performing Malicious permit with
a non-0x prefixed integer address.
  - This fixes an issue where the key value row or petname component
disappears if a signed address is prefixed by "0X" instead of "0x".

- [x] I've followed [MetaMask Contributor
Docs](https://github.com/MetaMask/contributor-docs) and [MetaMask
Extension Coding
Standards](https://github.com/MetaMask/metamask-extension/blob/develop/.github/guidelines/CODING_GUIDELINES.md).
- [x] I've completed the PR template to the best of my ability
- [x] I’ve included tests if applicable
- [x] I’ve documented my code using [JSDoc](https://jsdoc.app/) format
if applicable
- [x] I’ve applied the right labels on the PR (see [labeling
guidelines](https://github.com/MetaMask/metamask-extension/blob/develop/.github/guidelines/LABELING_GUIDELINES.md)).
Not required for external contributors.

- [ ] I've manually tested the PR (e.g. pull and build branch, run the
app, test code being changed).
- [ ] I confirm that this PR addresses all acceptance criteria described
in the ticket it closes and includes the necessary testing evidence such
as recordings and or screenshots.

---------

Co-authored-by: MetaMask Bot <metamaskbot@users.noreply.github.com>
* origin/master:
  fix: Swaps UI should show POL not MATIC (#26827)
  chore: Update v12.1.1 changelog (#26824)
  cherry-pick(v12.1.1):  Bump `@metamask/eth-json-rpc-middleware` to `^14.0.0` (#26143) (#26626)
  fix: Cherry pick `1b4417d` for 12.1.1 (#26780)
  chore(cherry-pick):759b92e to 12.1.1 (#26802)
  fix: cherry pick accounts controller migration improvements (#26778)
  cherrypick: fix: `wallet_addEthereumChain` does not attach a `result` under certain conditions (#26726) (#26733)
  Version v12.1.1
@github-actions
Copy link
Copy Markdown
Contributor

github-actions bot commented Sep 2, 2024

CLA Signature Action: All authors have signed the CLA. You may need to manually re-run the blocking PR check if it doesn't pass in a few minutes.

…nc-v12.1.1

* origin/Version-v12.2.0:
  fix(cherry-pick): remove BTC accounts from send flow (#26271) (#26821)
@Gudahtt
Copy link
Copy Markdown
Member Author

Gudahtt commented Sep 2, 2024

@metamaskbot update-policies

@socket-security
Copy link
Copy Markdown

socket-security bot commented Sep 2, 2024

New and removed dependencies detected. Learn more about Socket for GitHub ↗︎

Package New capabilities Transitives Size Publisher
npm/@babel/runtime@7.25.6 None 0 248 kB nicolo-ribaudo
npm/@metamask/abi-utils@2.0.4 None 0 202 kB metamaskbot
npm/@metamask/accounts-controller@18.1.0 None 0 391 kB metamaskbot
npm/@metamask/eth-block-tracker@11.0.1 None 0 63.6 kB mcmire
npm/@metamask/eth-json-rpc-middleware@14.0.0 network 0 172 kB metamaskbot
npm/@metamask/eth-json-rpc-provider@4.1.3 None 0 96.8 kB metamaskbot
npm/@metamask/eth-sig-util@7.0.3 None 0 133 kB metamaskbot
npm/@metamask/json-rpc-engine@9.0.2 None 0 198 kB metamaskbot
npm/@metamask/key-tree@9.1.2 None 0 799 kB metamaskbot
npm/@metamask/keyring-api@8.1.0 None 0 250 kB metamaskbot
npm/@metamask/rpc-errors@6.3.1 None 0 133 kB metamaskbot
npm/@metamask/snaps-registry@3.2.1 None 0 54.1 kB metamaskbot
npm/@metamask/snaps-utils@7.8.1 network 0 1.04 MB metamaskbot
npm/@metamask/superstruct@3.1.0 None 0 437 kB metamaskbot
npm/@sinclair/typebox@0.27.8 None 0 442 kB sinclair
npm/@storybook/addon-a11y@7.6.20 None 0 43.3 kB valentinpalkovic
npm/@storybook/addon-actions@7.6.20 None 0 54.8 kB valentinpalkovic
npm/@storybook/addon-backgrounds@7.6.20 None 0 13.5 kB valentinpalkovic
npm/@storybook/addon-controls@7.6.20 None 0 12.6 kB valentinpalkovic
npm/@storybook/addon-docs@7.6.20 None 0 106 kB valentinpalkovic
npm/@storybook/addon-essentials@7.6.20 None 0 9.39 kB valentinpalkovic
npm/@storybook/addon-highlight@7.6.20 None 0 8.43 kB valentinpalkovic
npm/@storybook/addon-mdx-gfm@7.6.20 None 0 3.42 kB valentinpalkovic
npm/@storybook/addon-measure@7.6.20 None 0 18.5 kB valentinpalkovic
npm/@storybook/addon-outline@7.6.20 None 0 14 kB valentinpalkovic
npm/@storybook/addon-toolbars@7.6.20 None 0 10.1 kB valentinpalkovic
npm/@storybook/addon-viewport@7.6.20 None 0 16.5 kB valentinpalkovic
npm/@storybook/addons@7.6.20 None 0 4.5 kB valentinpalkovic
npm/@storybook/api@7.6.20 None 0 2.69 kB valentinpalkovic
npm/@storybook/blocks@7.6.20 eval 0 346 kB valentinpalkovic
npm/@storybook/builder-manager@7.6.20 filesystem 0 115 kB valentinpalkovic
npm/@storybook/builder-webpack5@7.6.20 filesystem 0 148 kB valentinpalkovic
npm/@storybook/channels@7.6.20 None 0 42.1 kB valentinpalkovic
npm/@storybook/cli@7.6.20 environment, filesystem 0 1.36 MB valentinpalkovic
npm/@storybook/client-api@7.6.20 None 0 2.8 kB valentinpalkovic
npm/@storybook/client-logger@7.6.20 None 0 7.72 kB valentinpalkovic
npm/@storybook/codemod@7.6.20 filesystem 0 604 kB valentinpalkovic
npm/@storybook/components@7.6.20 environment, eval 0 3.96 MB valentinpalkovic
npm/@storybook/core-client@7.6.20 None 0 3.47 kB valentinpalkovic
npm/@storybook/core-common@7.6.20 environment, filesystem, network, unsafe 0 81.1 kB valentinpalkovic
npm/@storybook/core-events@7.6.20 None 0 73.1 kB valentinpalkovic
npm/@storybook/core-server@7.6.20 filesystem 0 2.91 MB valentinpalkovic
npm/@storybook/core-webpack@7.6.20 None 0 15.4 kB valentinpalkovic
npm/@storybook/csf-plugin@7.6.20 filesystem 0 6.21 kB valentinpalkovic
npm/@storybook/csf-tools@7.6.20 eval, filesystem 0 46.6 kB valentinpalkovic
npm/@storybook/docs-tools@7.6.20 None 0 39.8 kB valentinpalkovic
npm/@storybook/icons@1.2.10 None 0 1.19 MB ndelangen
npm/@storybook/manager-api@7.6.20 environment, network 0 253 kB valentinpalkovic
npm/@storybook/manager@7.6.20 None 0 2.57 MB valentinpalkovic
npm/@storybook/node-logger@7.6.20 environment 0 168 kB valentinpalkovic
npm/@storybook/postinstall@7.6.20 None 0 7.21 kB valentinpalkovic
npm/@storybook/preset-react-webpack@7.6.20 None 0 25.2 kB valentinpalkovic
npm/@storybook/preview-api@7.6.20 network 0 791 kB valentinpalkovic
npm/@storybook/preview@7.6.20 eval, network 0 365 kB valentinpalkovic
npm/@storybook/react-dom-shim@7.6.20 None 0 98.9 kB valentinpalkovic
npm/@storybook/react-webpack5@7.6.20 None 0 98.6 kB valentinpalkovic
npm/@storybook/react@7.6.20 None 0 104 kB valentinpalkovic
npm/@storybook/router@7.6.20 environment, eval 0 84.4 kB valentinpalkovic
npm/@storybook/telemetry@7.6.20 environment, filesystem, network, shell 0 429 kB valentinpalkovic
npm/@storybook/theming@7.6.20 environment 0 747 kB valentinpalkovic
npm/@storybook/types@7.6.20 None 0 164 kB valentinpalkovic
npm/@types/ws@8.2.2 None 0 19.6 kB types
npm/big-integer@1.6.52 None 0 175 kB peterolson
npm/bplist-parser@0.2.0 filesystem 0 47.9 kB joeferner
npm/commander@7.2.0 filesystem, shell 0 145 kB abetomo
npm/find-up@3.0.0 None 0 4.84 kB sindresorhus
npm/locate-path@3.0.0 None 0 3.87 kB sindresorhus
npm/long@5.2.3 None 0 119 kB dcode
npm/p-limit@2.3.0 None 0 7.39 kB sindresorhus
npm/p-locate@3.0.0 None 0 5.05 kB sindresorhus
npm/p-try@2.2.0 None 0 4.37 kB sindresorhus
npm/path-exists@3.0.0 filesystem 0 3.32 kB sindresorhus
npm/storybook-dark-mode@4.0.2 None 0 75.6 kB alisowski
npm/storybook@7.6.20 None 0 1.25 kB valentinpalkovic
npm/ws@8.17.1 environment, network 0 141 kB lpinca

🚮 Removed packages: npm/@babel/runtime@7.24.6), npm/@emurgo/cardano-serialization-lib-browser@11.5.0), npm/@emurgo/cardano-serialization-lib-nodejs@11.5.0), npm/@expo/config-plugins@7.9.2), npm/@expo/config-types@50.0.1), npm/@expo/config@8.5.6), npm/@expo/fingerprint@0.6.1), npm/@expo/json-file@8.3.3), npm/@expo/plist@0.1.3), npm/@expo/sdk-runtime-versions@1.0.0), npm/@expo/spawn-async@1.7.2), npm/@fivebinaries/coin-selection@2.2.1), npm/@metamask/abi-utils@2.0.2), npm/@metamask/accounts-controller@17.2.0), npm/@metamask/eth-block-tracker@9.0.3), npm/@metamask/eth-json-rpc-middleware@12.1.1), npm/@metamask/eth-json-rpc-provider@3.0.2), npm/@metamask/eth-sig-util@7.0.1), npm/@metamask/json-rpc-engine@9.0.0), npm/@metamask/json-rpc-middleware-stream@7.0.1), npm/@metamask/key-tree@9.1.1), npm/@metamask/keyring-api@8.0.0), npm/@metamask/rpc-errors@6.2.1), npm/@metamask/snaps-registry@3.1.0), npm/@metamask/snaps-utils@7.7.0), npm/@mobily/ts-belt@3.13.1), npm/@react-native/normalize-color@2.1.0), npm/@sinclair/typebox@0.31.28), npm/@solana/buffer-layout@4.0.1), npm/@solana/web3.js@1.91.8), npm/@storybook/addon-a11y@7.6.19), npm/@storybook/addon-actions@7.6.19), npm/@storybook/addon-backgrounds@7.6.19), npm/@storybook/addon-controls@7.6.19), npm/@storybook/addon-docs@7.6.19), npm/@storybook/addon-essentials@7.6.19), npm/@storybook/addon-highlight@7.6.19), npm/@storybook/addon-mdx-gfm@7.6.19), npm/@storybook/addon-measure@7.6.19), npm/@storybook/addon-outline@7.6.19), npm/@storybook/addon-toolbars@7.6.19), npm/@storybook/addon-viewport@7.6.19), npm/@storybook/addons@7.6.19), npm/@storybook/api@7.6.19), npm/@storybook/blocks@7.6.19), npm/@storybook/builder-manager@7.6.19), npm/@storybook/builder-webpack5@7.6.19), npm/@storybook/channels@7.6.19), npm/@storybook/cli@7.6.19), npm/@storybook/client-api@7.6.19), npm/@storybook/client-logger@7.6.19), npm/@storybook/codemod@7.6.19), npm/@storybook/components@7.6.19), npm/@storybook/core-client@7.6.19), npm/@storybook/core-common@7.6.19), npm/@storybook/core-events@7.6.19), npm/@storybook/core-server@7.6.19), npm/@storybook/core-webpack@7.6.19), npm/@storybook/csf-plugin@7.6.19), npm/@storybook/csf-tools@7.6.19), npm/@storybook/docs-tools@7.6.19), npm/@storybook/manager-api@7.6.19), npm/@storybook/manager@7.6.19), npm/@storybook/node-logger@7.6.19), npm/@storybook/postinstall@7.6.19), npm/@storybook/preset-react-webpack@7.6.19), npm/@storybook/preview-api@7.6.19), npm/@storybook/preview@7.6.19), npm/@storybook/react-dom-shim@7.6.19), npm/@storybook/react-webpack5@7.6.19), npm/@storybook/react@7.6.19), npm/@storybook/router@7.6.19), npm/@storybook/telemetry@7.6.19), npm/@storybook/theming@7.6.19), npm/@storybook/types@7.6.19), npm/@trezor/analytics@1.0.16), npm/@trezor/blockchain-link-types@1.0.15), npm/@trezor/blockchain-link-utils@1.0.16), npm/@trezor/blockchain-link@2.1.28), npm/@trezor/connect-analytics@1.0.14), npm/@trezor/connect-common@0.0.31), npm/@trezor/connect-web@9.2.2), npm/@trezor/connect@9.2.2), npm/@trezor/env-utils@1.0.15), npm/@trezor/protobuf@1.0.11), npm/@trezor/protocol@1.0.7), npm/@trezor/schema-utils@1.0.3), npm/@trezor/transport@1.1.27), npm/@trezor/type-utils@1.0.5), npm/@trezor/utils@9.0.23), npm/@trezor/utxo-lib@2.0.8), npm/@types/w3c-web-usb@1.0.10), npm/@types/web@0.0.138), npm/@types/ws@7.4.7), npm/@xmldom/xmldom@0.7.13), npm/agentkeepalive@4.5.0), npm/bchaddrjs@0.5.2), npm/big-integer@1.6.36), npm/bigint-buffer@1.1.5), npm/bip66@1.1.5), npm/bitcoin-ops@1.4.1), npm/blake-hash@2.0.0), npm/blakejs@1.2.1), npm/borsh@0.7.0), npm/bplist-creator@0.1.1), npm/bplist-parser@0.3.2), npm/cashaddrjs@0.4.4), npm/commander@2.20.3), npm/delay@5.0.0), npm/es6-promise@4.2.8), npm/es6-promisify@5.0.0), npm/expo-constants@15.4.5), npm/eyes@0.1.8), npm/fast-stable-stringify@1.0.0), npm/find-up@5.0.0), npm/getenv@1.0.0), npm/humanize-ms@1.2.1), npm/int64-buffer@1.0.1), npm/jayson@4.1.0), npm/locate-path@6.0.0), npm/long@4.0.0), npm/nan@2.15.0), npm/p-limit@3.1.0), npm/p-locate@5.0.0), npm/path-exists@4.0.0), npm/plist@3.1.0), npm/pushdata-bitcoin@1.0.1), npm/ripple-address-codec@4.2.3), npm/ripple-binary-codec@1.3.0), npm/ripple-keypairs@1.1.3), npm/ripple-lib-transactionparser@0.8.2), npm/ripple-lib@1.10.1), npm/sax@1.3.0), npm/simple-plist@1.4.0), npm/slugify@1.6.6), npm/storybook-dark-mode@3.0.3), npm/storybook@7.6.19), npm/stream-buffers@2.2.0), npm/text-encoding-utf-8@1.0.2), npm/tiny-secp256k1@1.1.6), npm/tweetnacl-util@0.15.1), npm/typeforce@1.18.0), npm/ua-parser-js@1.0.37), npm/usb@2.12.0), npm/varuint-bitcoin@1.1.2), npm/wif@4.0.0), npm/write-file-atomic@2.4.3), npm/ws@7.5.10), npm/xcode@3.0.1), npm/xml2js@0.6.0), npm/xmlbuilder@11.0.1), npm/yocto-queue@0.1.0)

View full report↗︎

@socket-security
Copy link
Copy Markdown

socket-security bot commented Sep 2, 2024

👍 Dependency issues cleared. Learn more about Socket for GitHub ↗︎

This PR previously contained dependency changes with security issues that have been resolved, removed, or ignored.

Ignoring: npm/@storybook/addon-a11y@7.6.20, npm/@storybook/addon-actions@7.6.20, npm/@storybook/addon-backgrounds@7.6.20, npm/@storybook/addon-controls@7.6.20, npm/@storybook/addon-docs@7.6.20, npm/@storybook/addon-essentials@7.6.20, npm/@storybook/addon-highlight@7.6.20, npm/@storybook/addon-mdx-gfm@7.6.20, npm/@storybook/addon-measure@7.6.20, npm/@storybook/addon-outline@7.6.20, npm/@storybook/addon-toolbars@7.6.20, npm/@storybook/addon-viewport@7.6.20, npm/@storybook/addons@7.6.20, npm/@storybook/api@7.6.20, npm/@storybook/blocks@7.6.20, npm/@storybook/builder-manager@7.6.20, npm/@storybook/builder-webpack5@7.6.20, npm/@storybook/channels@7.6.20, npm/@storybook/cli@7.6.20, npm/@storybook/client-api@7.6.20, npm/@storybook/client-logger@7.6.20, npm/@storybook/codemod@7.6.20, npm/@storybook/components@7.6.20, npm/@storybook/core-client@7.6.20, npm/@storybook/core-common@7.6.20, npm/@storybook/core-events@7.6.20, npm/@storybook/core-server@7.6.20, npm/@storybook/core-webpack@7.6.20, npm/@storybook/csf-plugin@7.6.20, npm/@storybook/csf-tools@7.6.20, npm/@storybook/docs-tools@7.6.20, npm/@storybook/manager-api@7.6.20, npm/@storybook/manager@7.6.20, npm/@storybook/node-logger@7.6.20, npm/@storybook/postinstall@7.6.20, npm/@storybook/preset-react-webpack@7.6.20, npm/@storybook/preview-api@7.6.20, npm/@storybook/preview@7.6.20, npm/@storybook/react-dom-shim@7.6.20, npm/@storybook/react-webpack5@7.6.20, npm/@storybook/react@7.6.20, npm/@storybook/router@7.6.20, npm/@storybook/telemetry@7.6.20, npm/@storybook/theming@7.6.20, npm/@storybook/types@7.6.20, npm/storybook@7.6.20

View full report↗︎

Next steps

Take a deeper look at the dependency

Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support [AT] socket [DOT] dev.

Remove the package

If you happen to install a dependency that Socket reports as Known Malware you should immediately remove it and select a different dependency. For other alert types, you may may wish to investigate alternative packages or consider if there are other ways to mitigate the specific risk posed by the dependency.

Mark a package as acceptable risk

To ignore an alert, reply with a comment starting with @SocketSecurity ignore followed by a space separated list of ecosystem/package-name@version specifiers. e.g. @SocketSecurity ignore npm/foo@1.0.0 or ignore all packages with @SocketSecurity ignore-all

@metamaskbot
Copy link
Copy Markdown
Collaborator

Policies updated

@Gudahtt
Copy link
Copy Markdown
Member Author

Gudahtt commented Sep 2, 2024

@SocketSecurity ignore npm/@storybook/addon-toolbars@7.6.20
@SocketSecurity ignore npm/@storybook/node-logger@7.6.20
@SocketSecurity ignore npm/@storybook/client-logger@7.6.20
@SocketSecurity ignore npm/@storybook/postinstall@7.6.20
@SocketSecurity ignore npm/@storybook/react-dom-shim@7.6.20
@SocketSecurity ignore npm/@storybook/preview@7.6.20
@SocketSecurity ignore npm/@storybook/manager@7.6.20
@SocketSecurity ignore npm/@storybook/addon-essentials@7.6.20
@SocketSecurity ignore npm/@storybook/react@7.6.20
@SocketSecurity ignore npm/storybook@7.6.20
@SocketSecurity ignore npm/@storybook/addon-actions@7.6.20
@SocketSecurity ignore npm/@storybook/addon-backgrounds@7.6.20
@SocketSecurity ignore npm/@storybook/addon-controls@7.6.20
@SocketSecurity ignore npm/@storybook/addon-docs@7.6.20
@SocketSecurity ignore npm/@storybook/addon-highlight@7.6.20
@SocketSecurity ignore npm/@storybook/addon-measure@7.6.20
@SocketSecurity ignore npm/@storybook/addon-outline@7.6.20
@SocketSecurity ignore npm/@storybook/addon-viewport@7.6.20
@SocketSecurity ignore npm/@storybook/core-common@7.6.20
@SocketSecurity ignore npm/@storybook/manager-api@7.6.20
@SocketSecurity ignore npm/@storybook/preview-api@7.6.20
@SocketSecurity ignore npm/@storybook/core-events@7.6.20
@SocketSecurity ignore npm/@storybook/blocks@7.6.20
@SocketSecurity ignore npm/@storybook/components@7.6.20
@SocketSecurity ignore npm/@storybook/csf-plugin@7.6.20
@SocketSecurity ignore npm/@storybook/csf-tools@7.6.20
@SocketSecurity ignore npm/@storybook/theming@7.6.20
@SocketSecurity ignore npm/@storybook/types@7.6.20
@SocketSecurity ignore npm/@storybook/channels@7.6.20
@SocketSecurity ignore npm/@storybook/docs-tools@7.6.20
@SocketSecurity ignore npm/@storybook/router@7.6.20
@SocketSecurity ignore npm/@storybook/builder-webpack5@7.6.20
@SocketSecurity ignore npm/@storybook/preset-react-webpack@7.6.20
@SocketSecurity ignore npm/@storybook/core-webpack@7.6.20
@SocketSecurity ignore npm/@storybook/core-client@7.6.20
@SocketSecurity ignore npm/@storybook/cli@7.6.20
@SocketSecurity ignore npm/@storybook/codemod@7.6.20
@SocketSecurity ignore npm/@storybook/core-server@7.6.20
@SocketSecurity ignore npm/@storybook/telemetry@7.6.20
@SocketSecurity ignore npm/@storybook/addon-a11y@7.6.20
@SocketSecurity ignore npm/@storybook/builder-manager@7.6.20
@SocketSecurity ignore npm/@storybook/react-webpack5@7.6.20
@SocketSecurity ignore npm/@storybook/addons@7.6.20
@SocketSecurity ignore npm/@storybook/api@7.6.20
@SocketSecurity ignore npm/@storybook/addon-mdx-gfm@7.6.20
@SocketSecurity ignore npm/@storybook/client-api@7.6.20

New author OK (seems to be a storybook maintainer), and these releases are pretty old and were not flagged as malicious

@Gudahtt
Copy link
Copy Markdown
Member Author

Gudahtt commented Sep 2, 2024

@metamaskbot update-policies

@metamaskbot
Copy link
Copy Markdown
Collaborator

Policies updated

@Gudahtt
Copy link
Copy Markdown
Member Author

Gudahtt commented Sep 2, 2024

@metamaskbot update-policies

@Gudahtt Gudahtt changed the title V12.2.0 sync v12.1.1 v12.2.0 sync v12.1.1 Sep 2, 2024
@metamaskbot
Copy link
Copy Markdown
Collaborator

No policy changes

@codecov
Copy link
Copy Markdown

codecov bot commented Sep 3, 2024

Codecov Report

Attention: Patch coverage is 98.40000% with 2 lines in your changes missing coverage. Please review.

Project coverage is 70.46%. Comparing base (945b77c) to head (fa444cf).
Report is 19 commits behind head on Version-v12.2.0.

Files with missing lines Patch % Lines
app/scripts/lib/accounts/BalancesController.ts 85.71% 1 Missing ⚠️
...nents/multichain/pages/connections/connections.tsx 88.89% 1 Missing ⚠️
Additional details and impacted files
@@                 Coverage Diff                 @@
##           Version-v12.2.0   #26842      +/-   ##
===================================================
+ Coverage            70.16%   70.46%   +0.30%     
===================================================
  Files                 1402     1401       -1     
  Lines                49435    49590     +155     
  Branches             13585    13638      +53     
===================================================
+ Hits                 34685    34941     +256     
+ Misses               14750    14649     -101     

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

@metamaskbot
Copy link
Copy Markdown
Collaborator

Builds ready [ee3ad72]
Page Load Metrics (237 ± 254 ms)
PlatformPageMetricMin (ms)Max (ms)Average (ms)StandardDeviation (ms)MarginOfError (ms)
ChromeHomefirstPaint754491147938
domContentLoaded116923126
load431984237529254
domInteractive116923126

@Gudahtt Gudahtt marked this pull request as ready for review September 3, 2024 11:39
@Gudahtt Gudahtt requested review from a team as code owners September 3, 2024 11:39
@metamaskbot
Copy link
Copy Markdown
Collaborator

Builds ready [fa444cf]
Page Load Metrics (383 ± 353 ms)
PlatformPageMetricMin (ms)Max (ms)Average (ms)StandardDeviation (ms)MarginOfError (ms)
ChromeHomefirstPaint763011224622
domContentLoaded105227136
load462292383736353
domInteractive105227136

Copy link
Copy Markdown
Contributor

@danjm danjm left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Approved! I looked into each difference in file diffs between this PR and the v12.1.1 PR to master, and they all make sense.

On slack I asked: "My only uncertainty is the diff in app/scripts/lib/accounts/BalancesController.ts (https://github.com/MetaMask/metamask-extension/pull/26842/files#diff-0d3633900770a1833627e99171dba672e3dcbdd9e05a6437215fe455813bfd9c), even though it seems that this file was not changed in the v12.1.1 PR (https://github.com/MetaMask/metamask-extension/pull/26730/files)"

And the answer: "Those changes were made as part of cherry-picking this commit: https://github.com/MetaMask/metamask-extension/commit/27655eb8e3a125212484ee23a659e85f6c328290#diff-0d3633900770a1833627[…]9e05a6437215fe455813bfd9c
It required additional changes because this file was in v12.2.0, but it was not present in v12.1.1"

So LGTM

@Gudahtt Gudahtt merged commit 8fa9cc0 into Version-v12.2.0 Sep 3, 2024
@Gudahtt Gudahtt deleted the v12.2.0-sync-v12.1.1 branch September 3, 2024 14:10
@github-actions github-actions bot locked and limited conversation to collaborators Sep 3, 2024
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

8 participants