Skip to content

chore: fix deps audit#27620

Merged
chloeYue merged 7 commits intodevelopfrom
fix-deps-audit
Oct 4, 2024
Merged

chore: fix deps audit#27620
chloeYue merged 7 commits intodevelopfrom
fix-deps-audit

Conversation

@chloeYue
Copy link
Copy Markdown
Contributor

@chloeYue chloeYue commented Oct 4, 2024 •
edited by Gudahtt
Loading

Description

Resolve the security advisory causing the audit CI job to fail by updating the @sentry/browser package.

Open in GitHub Codespaces

Related issues

N/A

Manual testing steps

N/A

Screenshots/Recordings

N/A

Pre-merge author checklist

Pre-merge reviewer checklist

  • I've manually tested the PR (e.g. pull and build branch, run the app, test code being changed).
  • I confirm that this PR addresses all acceptance criteria described in the ticket it closes and includes the necessary testing evidence such as recordings and or screenshots.

@chloeYue chloeYue added the team-extension-platform Extension Platform team label Oct 4, 2024
@chloeYue chloeYue self-assigned this Oct 4, 2024
@chloeYue chloeYue requested a review from a team as a code owner October 4, 2024 11:26
@chloeYue chloeYue marked this pull request as draft October 4, 2024 11:27
@github-actions
Copy link
Copy Markdown
Contributor

github-actions bot commented Oct 4, 2024

CLA Signature Action: All authors have signed the CLA. You may need to manually re-run the blocking PR check if it doesn't pass in a few minutes.

@socket-security
Copy link
Copy Markdown

socket-security bot commented Oct 4, 2024 •
edited
Loading

New and removed dependencies detected. Learn more about Socket for GitHub ↗︎

Package New capabilities Transitives Size Publisher
npm/@sentry-internal/browser-utils@8.33.1 network 0 747 kB sentry-bot
npm/@sentry-internal/feedback@8.33.1 None 0 576 kB sentry-bot
npm/@sentry-internal/replay-canvas@8.33.1 None 0 531 kB sentry-bot
npm/@sentry-internal/replay@8.33.1 None 0 3.76 MB sentry-bot
npm/@sentry/browser@8.33.1 network 0 973 kB sentry-bot
npm/@sentry/core@8.33.1 None 0 1.94 MB sentry-bot
npm/@sentry/types@8.33.1 None 0 338 kB sentry-bot
npm/@sentry/utils@8.33.1 network 0 1.19 MB sentry-bot

🚮 Removed packages: npm/@sentry-internal/browser-utils@8.19.0, npm/@sentry-internal/feedback@8.19.0, npm/@sentry-internal/replay-canvas@8.19.0, npm/@sentry-internal/replay@8.19.0, npm/@sentry/browser@8.19.0, npm/@sentry/core@8.19.0, npm/@sentry/types@8.20.0, npm/@sentry/utils@8.19.0

View full report↗︎

@chloeYue
Copy link
Copy Markdown
Contributor Author

chloeYue commented Oct 4, 2024

@metamaskbot update-policies

@metamaskbot
Copy link
Copy Markdown
Collaborator

metamaskbot commented Oct 4, 2024

Policies updated.
👀 Please review the diff for suspicious new powers.

🧠 Learn how: https://lavamoat.github.io/guides/policy-diff/#what-to-look-for-when-reviewing-a-policy-diff

@chloeYue chloeYue marked this pull request as ready for review October 4, 2024 12:30
@chloeYue chloeYue requested a review from a team as a code owner October 4, 2024 12:30
@sonarqubecloud
Copy link
Copy Markdown

sonarqubecloud bot commented Oct 4, 2024

Quality Gate Passed Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarCloud

Gudahtt
Gudahtt approved these changes Oct 4, 2024
View reviewed changes
Copy link
Copy Markdown
Member

@Gudahtt Gudahtt left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM!

@chloeYue chloeYue added this pull request to the merge queue Oct 4, 2024
@metamaskbot
Copy link
Copy Markdown
Collaborator

metamaskbot commented Oct 4, 2024

Builds ready [bfc3230]
Page Load Metrics (1754 ± 71 ms)
PlatformPageMetricMin (ms)Max (ms)Average (ms)StandardDeviation (ms)MarginOfError (ms)
ChromeHomefirstPaint32422071682342164
domContentLoaded15442087172312661
load15522243175414771
domInteractive1577452110
Bundle size diffs [🚨 Warning! Bundle size has increased!]
  • background: 0 Bytes (0.00%)
  • ui: 0 Bytes (0.00%)
  • common: 15.78 KiB (0.21%)

Merged via the queue into develop with commit c805f75 Oct 4, 2024
@chloeYue chloeYue deleted the fix-deps-audit branch October 4, 2024 12:59
@github-actions github-actions bot locked and limited conversation to collaborators Oct 4, 2024
@metamaskbot metamaskbot added the release-12.7.0 Issue or pull request that will be included in release 12.7.0 label Oct 4, 2024
@gauthierpetetin gauthierpetetin added release-12.6.0 Issue or pull request that will be included in release 12.6.0 and removed release-12.7.0 Issue or pull request that will be included in release 12.7.0 labels Oct 21, 2024
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Reviewers

@Gudahtt Gudahtt Gudahtt approved these changes

@vinistevam vinistevam vinistevam approved these changes

Assignees

@chloeYue chloeYue

Labels

release-12.6.0 Issue or pull request that will be included in release 12.6.0 team-extension-platform Extension Platform team

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

5 participants

@chloeYue @metamaskbot @Gudahtt @vinistevam @gauthierpetetin