Skip to content

release(runway): cherry-pick chore: bump @metamask/tron-wallet-snap to 1.25.6#43038

Merged
vpintorico merged 2 commits into
release/13.33.0from
cherry-pick-13-33-0-4d85bd5
May 28, 2026
Merged

release(runway): cherry-pick chore: bump @metamask/tron-wallet-snap to 1.25.6#43038
vpintorico merged 2 commits into
release/13.33.0from
cherry-pick-13-33-0-4d85bd5

Conversation

@runway-github

@runway-github runway-github Bot commented May 28, 2026

Copy link
Copy Markdown
Contributor

Description

This PR bumps @metamask/tron-wallet-snap from ^1.25.3 to ^1.25.6.

The main purpose of this update is to pull in the latest Tron snap
validation fixes, in particular a mechanism to refresh stale or invalid
expiration, ref_block_bytes and ref_block_hash before signing in
both send/broadcast paths.

Preview package:

  • @metamask-previews/tron-wallet-snap@1.25.3-preview-995ddc5

Release:

  • @metamask-previews/tron-wallet-snap@^1.25.6

Upstream PR:

Updated following e2e test files to adapt new logic for refresh
transaction expiration

  • test/e2e/flask/tron-connect/mocks/trongrid.ts
  • test/e2e/flask/tron-connect/common-tron.ts
  • test/e2e/tests/tron/mocks/common-tron.ts
  • test/e2e/flask/tron-connect/signAndSendTrx.spec.ts
  • test/e2e/flask/tron-connect/signAndSendUsdt.spec.ts

Changelog

CHANGELOG entry: bump the @metamask/tron-wallet-snap to ^1.25.6

Related issues

n/a

Manual testing steps

  1. Go to this page...

Screenshots/Recordings

Before

After

Pre-merge author checklist

Pre-merge reviewer checklist

  • I've manually tested the PR (e.g. pull and build branch, run the
    app, test code being changed).
  • I confirm that this PR addresses all acceptance criteria described
    in the ticket it closes and includes the necessary testing evidence such
    as recordings and or screenshots.

Note

Medium Risk
Ships a snap version that changes pre-sign transaction
validation/refresh on Tron send paths; risk is mitigated by e2e mock
updates but still affects real signing behavior.

Overview
Bumps @metamask/tron-wallet-snap from ^1.25.3 to ^1.25.6
(and lockfile) so the extension picks up upstream fixes that refresh
stale Tron transaction fields
(expiration, ref_block_bytes,
ref_block_hash) before sign/broadcast.

E2E mocks are expanded so tests match that behavior: shared block
payloads, new handlers for getnowblock, getblockbynum, and
Infura getnowblock; broadcast mocks now return success instead of
expiration errors; swap/bridge fixture data uses future-dated
expirations and aligned ref-block values for stable CI.

Reviewed by Cursor Bugbot for commit
a92c9de. Bugbot is set up for automated
code reviews on this repo. Configure
here.


Co-authored-by: gabrieledm gabriele.delmonte@proton.me
Co-authored-by: Gabriele Del Monte 37625739+gabrieledm@users.noreply.github.com
Co-authored-by: Maxime OUAIRY maxime.ouairy-ext@consensys.net 4d85bd5

<!--
Please submit this PR as a draft initially.
Do not mark it as "Ready for review" until the template has been
completely filled out, and PR status checks have passed at least once.
-->

<!--
Write a short description of the changes included in this pull request,
also include relevant motivation and context. Have in mind the following
questions:
1. What is the reason for the change?
2. What is the improvement/solution?
-->

This PR bumps @metamask/tron-wallet-snap from `^1.25.3` to `^1.25.6`.

The main purpose of this update is to pull in the latest Tron snap
validation fixes, in particular a mechanism to refresh stale or invalid
`expiration`, `ref_block_bytes` and `ref_block_hash` before signing in
both send/broadcast paths.

Preview package:
- `@metamask-previews/tron-wallet-snap@1.25.3-preview-995ddc5`

Release:
- `@metamask-previews/tron-wallet-snap@^1.25.6`

Upstream PR:
- MetaMask/snap-tron-wallet#305

Updated following `e2e` test files to adapt new logic for refresh
transaction expiration
- `test/e2e/flask/tron-connect/mocks/trongrid.ts`
- `test/e2e/flask/tron-connect/common-tron.ts`
- `test/e2e/tests/tron/mocks/common-tron.ts`
- `test/e2e/flask/tron-connect/signAndSendTrx.spec.ts`
- `test/e2e/flask/tron-connect/signAndSendUsdt.spec.ts`

<!--
If this PR is not End-User-Facing and should not show up in the
CHANGELOG, you can choose to either:
1. Write `CHANGELOG entry: null`
2. Label with `no-changelog`

If this PR is End-User-Facing, please write a short User-Facing
description in the past tense like:
`CHANGELOG entry: Added a new tab for users to see their NFTs`
`CHANGELOG entry: Fixed a bug that was causing some NFTs to flicker`

(This helps the Release Engineer do their job more quickly and
accurately)
-->

CHANGELOG entry: bump the `@metamask/tron-wallet-snap` to `^1.25.6`

n/a

1. Go to this page...
2.
3.

<!-- If applicable, add screenshots and/or recordings to visualize the
before and after of your change. -->

<!-- [screenshots/recordings] -->

<!-- [screenshots/recordings] -->

- [X] I've followed [MetaMask Contributor
Docs](https://github.com/MetaMask/contributor-docs) and [MetaMask
Extension Coding
Standards](https://github.com/MetaMask/metamask-extension/blob/main/.github/guidelines/CODING_GUIDELINES.md).
- [X] I've completed the PR template to the best of my ability
- [X] I’ve included tests if applicable
- [ ] I’ve documented my code using [JSDoc](https://jsdoc.app/) format
if applicable
- [ ] I’ve applied the right labels on the PR (see [labeling
guidelines](https://github.com/MetaMask/metamask-extension/blob/main/.github/guidelines/LABELING_GUIDELINES.md)).
Not required for external contributors.

- [ ] I've manually tested the PR (e.g. pull and build branch, run the
app, test code being changed).
- [ ] I confirm that this PR addresses all acceptance criteria described
in the ticket it closes and includes the necessary testing evidence such
as recordings and or screenshots.

<!-- CURSOR_SUMMARY -->
---

> [!NOTE]
> **Medium Risk**
> Ships a snap version that changes pre-sign transaction
validation/refresh on Tron send paths; risk is mitigated by e2e mock
updates but still affects real signing behavior.
>
> **Overview**
> Bumps **`@metamask/tron-wallet-snap`** from `^1.25.3` to **`^1.25.6`**
(and lockfile) so the extension picks up upstream fixes that **refresh
stale Tron transaction fields** (`expiration`, `ref_block_bytes`,
`ref_block_hash`) before sign/broadcast.
>
> E2E mocks are expanded so tests match that behavior: shared block
payloads, new handlers for **`getnowblock`**, **`getblockbynum`**, and
Infura **`getnowblock`**; broadcast mocks now return success instead of
expiration errors; swap/bridge fixture data uses **future-dated**
expirations and aligned ref-block values for stable CI.
>
> <sup>Reviewed by [Cursor Bugbot](https://cursor.com/bugbot) for commit
a92c9de. Bugbot is set up for automated
code reviews on this repo. Configure
[here](https://www.cursor.com/dashboard/bugbot).</sup>
<!-- /CURSOR_SUMMARY -->

---------

Co-authored-by: gabrieledm <gabriele.delmonte@proton.me>
Co-authored-by: Gabriele Del Monte <37625739+gabrieledm@users.noreply.github.com>
Co-authored-by: Maxime OUAIRY <maxime.ouairy-ext@consensys.net>
@github-actions

Copy link
Copy Markdown
Contributor

CLA Signature Action: All authors have signed the CLA. You may need to manually re-run the blocking PR check if it doesn't pass in a few minutes.

@metamaskbot metamaskbot added the team-bots Bot team (for MetaMask Bot, Runway Bot, etc.) label May 28, 2026
@socket-security

socket-security Bot commented May 28, 2026

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Updated@​metamask/​tron-wallet-snap@​1.25.3 ⏵ 1.25.810010097 +198 +1100

View full report

@vpintorico vpintorico enabled auto-merge (squash) May 28, 2026 19:32
@metamaskbotv2

metamaskbotv2 Bot commented May 28, 2026

Copy link
Copy Markdown
Contributor
Builds ready [11c7c22]
Deprecated Browserify fallback builds
⚡ Performance Benchmarks (Total: 🟢 14 pass · 🟡 10 warn · 🔴 0 fail)

Baseline (latest main): 51036da | Date: 5/2/2026 | Pipeline: 26597194714 | Baseline logs

Interaction Benchmarks · Samples: 5
Benchmarkchrome-webpackfirefox-webpack
loadNewAccount
[Sentry log · main/release]
🟡 [CI log]🟢 [CI log]
confirmTx
[Sentry log · main/release]
🟡 [CI log]🟢 [CI log]
bridgeUserActions
[Sentry log · main/release]
🟡 [CI log]🟢 [CI log]

📈 Results compared to the previous 5 runs on main

  • loadNewAccount/load_new_account: -75%
  • loadNewAccount/total: -75%
  • bridgeUserActions/bridge_load_page: -37%
  • bridgeUserActions/bridge_load_asset_picker: -56%
  • bridgeUserActions/bridge_search_token: -25%
  • bridgeUserActions/total: -34%
  • loadNewAccount/load_new_account: -46%
  • loadNewAccount/total: -46%
  • bridgeUserActions/bridge_load_page: +41%
  • bridgeUserActions/bridge_load_asset_picker: -21%
  • bridgeUserActions/bridge_search_token: -21%
  • bridgeUserActions/total: -18%

🌐 Core Web Vitals — 🟢 good · 🟡 needs improvement · 🔴 poor (web.dev thresholds)

  • 🟡 loadNewAccount/FCP: p75 1.9s
  • 🟡 confirmTx/FCP: p75 1.9s
  • 🟡 bridgeUserActions/FCP: p75 1.9s
Startup Benchmarks · Samples: 100
Benchmarkchrome-webpackfirefox-webpack
startupStandardHome
[Sentry log · main/release]
🟢 [CI log]🟢 [CI log]
startupPowerUserHome
[Sentry log · main/release]
🟡 [CI log]

📈 Results compared to the previous 5 runs on main

  • startupStandardHome/uiStartup: -26%
  • startupStandardHome/load: -22%
  • startupStandardHome/domContentLoaded: -21%
  • startupStandardHome/firstPaint: -49%
  • startupStandardHome/backgroundConnect: -44%
  • startupStandardHome/firstReactRender: -26%
  • startupStandardHome/loadScripts: -22%
  • startupStandardHome/setupStore: -14%
  • startupStandardHome/numNetworkReqs: -50%
  • startupStandardHome/domInteractive: -55%
  • startupStandardHome/initialActions: +20%
  • startupStandardHome/setupStore: -43%
  • startupStandardHome/numNetworkReqs: -45%
  • startupPowerUserHome/uiStartup: -24%
  • startupPowerUserHome/load: +13%
  • startupPowerUserHome/domContentLoaded: +13%
  • startupPowerUserHome/domInteractive: -54%
  • startupPowerUserHome/backgroundConnect: -48%
  • startupPowerUserHome/loadScripts: +13%
  • startupPowerUserHome/setupStore: -29%
  • startupPowerUserHome/numNetworkReqs: -74%

🌐 Core Web Vitals — 🟢 good · 🟡 needs improvement · 🔴 poor (web.dev thresholds)

  • 🟡 startupPowerUserHome/LCP: p75 3.8s
User Journey Benchmarks · Samples: 5 · mock API
Benchmarkchrome-webpackfirefox-webpack
onboardingImportWallet
[Sentry log · main/release]
🟢 [CI log]🟢 [CI log]
onboardingNewWallet
[Sentry log · main/release]
🟢 [CI log]🟢 [CI log]
assetDetails
[Sentry log · main/release]
🟡 [CI log]🟢 [CI log]
solanaAssetDetails
[Sentry log · main/release]
🟡 [CI log]🟢 [CI log]
importSrpHome
[Sentry log · main/release]
🟡 [CI log]🟡 [CI log]
sendTransactions
[Sentry log · main/release]
🟡 [CI log]🟢 [CI log]
swap
[Sentry log · main/release]
🟡 [CI log]🟢 [CI log]

📈 Results compared to the previous 5 runs on main

  • onboardingImportWallet/srpButtonToSrpForm: -62%
  • onboardingImportWallet/pwFormToMetricsScreen: +670%
  • onboardingImportWallet/metricsToWalletReadyScreen: -24%
  • onboardingImportWallet/doneButtonToHomeScreen: -75%
  • onboardingImportWallet/total: -45%
  • onboardingNewWallet/srpButtonToPwForm: -76%
  • onboardingNewWallet/createPwToRecoveryScreen: +1127%
  • onboardingNewWallet/skipBackupToMetricsScreen: -65%
  • onboardingNewWallet/agreeButtonToOnboardingSuccess: +31%
  • onboardingNewWallet/doneButtonToAssetList: -44%
  • onboardingNewWallet/total: -37%
  • assetDetails/assetClickToPriceChart: -60%
  • assetDetails/total: -60%
  • solanaAssetDetails/assetClickToPriceChart: -71%
  • solanaAssetDetails/total: -71%
  • importSrpHome/loginToHomeScreen: -46%
  • importSrpHome/openAccountMenuAfterLogin: -69%
  • importSrpHome/homeAfterImportWithNewWallet: -69%
  • importSrpHome/total: -65%
  • swap/openSwapPageFromHome: -97%
  • swap/fetchAndDisplaySwapQuotes: +36%
  • swap/total: +12%

🌐 Core Web Vitals — 🟢 good · 🟡 needs improvement · 🔴 poor (web.dev thresholds)

  • 🟡 assetDetails/INP: p75 216ms
  • 🟡 assetDetails/FCP: p75 1.9s
  • 🟡 solanaAssetDetails/FCP: p75 1.9s
  • 🟡 importSrpHome/FCP: p75 1.8s
  • 🟡 sendTransactions/FCP: p75 1.9s
  • 🟡 swap/FCP: p75 1.9s
  • 🟡 importSrpHome/FCP: p75 1.8s
Dapp Page Load Benchmarks · Samples: 100
Benchmarkchrome-webpack
dappPageLoad
[Sentry log · main/release]
🟢 [CI log]

📈 Results compared to the previous 5 runs on main

  • dappPageLoad/pageLoadTime: +26%
Bundle size diffs [🚨 Warning! Bundle size has increased!]
  • background: 1.13 KiB (0.02%)
  • ui: -171 Bytes (0%)
  • common: 844 Bytes (0.01%)

@vpintorico vpintorico disabled auto-merge May 28, 2026 19:58
@vpintorico vpintorico merged commit d449c71 into release/13.33.0 May 28, 2026
194 checks passed
@vpintorico vpintorico deleted the cherry-pick-13-33-0-4d85bd5 branch May 28, 2026 19:59
@github-actions github-actions Bot locked and limited conversation to collaborators May 28, 2026
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Labels

team-bots Bot team (for MetaMask Bot, Runway Bot, etc.)

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants