Skip to content

chore: bump assets-controllers and phishing controller#26340

Merged
sahar-fehri merged 3 commits into
mainfrom
chore/bump-assets-controllers-and-phishing-controller
Feb 20, 2026
Merged

chore: bump assets-controllers and phishing controller#26340
sahar-fehri merged 3 commits into
mainfrom
chore/bump-assets-controllers-and-phishing-controller

Conversation

@sahar-fehri

@sahar-fehri sahar-fehri commented Feb 20, 2026

Copy link
Copy Markdown
Contributor

Description

  • Bump @metamask/assets-controllers from ^99.4.0 to 100.0.2 and @metamask/phishing-controller from ^15.0.0 to ^16.3.0
  • Wire up the new PhishingController:bulkScanTokens action into the MultichainAssetsController messenger so the assets controller can leverage bulk token phishing detection

Changelog

CHANGELOG entry: bump assets-controllers and phishing-controller versions

Related issues

Fixes:

Manual testing steps

Feature: my feature name

  Scenario: user [verb for user action]
    Given [describe expected initial app state]

    When user [verb for user action]
    Then [describe expected outcome]

Screenshots/Recordings

Before

After

Pre-merge author checklist

Pre-merge reviewer checklist

  • I've manually tested the PR (e.g. pull and build branch, run the app, test code being changed).
  • I confirm that this PR addresses all acceptance criteria described in the ticket it closes and includes the necessary testing evidence such as recordings and or screenshots.

Note

Medium Risk
Primarily dependency upgrades plus a new phishing-scan action routed through the controller messenger; risk is moderate due to behavior changes coming from external controller version bumps and new security-alerts API traffic.

Overview
Bumps @metamask/assets-controllers to ^100.0.2 and @metamask/phishing-controller to ^16.3.0 (with corresponding yarn.lock updates).

Wires the new PhishingController:bulkScanTokens action into getMultichainAssetsControllerMessenger, and updates API test mocks to handle POST https://security-alerts.api.cx.metamask.io/token/scan-bulk.

Written by Cursor Bugbot for commit 908ef8a. This will update automatically on new commits. Configure here.

@sahar-fehri sahar-fehri requested a review from a team as a code owner February 20, 2026 12:26
@github-actions

Copy link
Copy Markdown
Contributor

CLA Signature Action: All authors have signed the CLA. You may need to manually re-run the blocking PR check if it doesn't pass in a few minutes.

@socket-security

socket-security Bot commented Feb 20, 2026

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Updatednpm/​@​metamask/​phishing-controller@​16.2.0 ⏵ 16.3.09910078 +196 +7100
Addednpm/​@​metamask/​assets-controllers@​100.0.2951009199100
Updatednpm/​@​metamask/​network-enablement-controller@​4.1.0 ⏵ 4.1.29910010097 +2100

View full report

@sahar-fehri sahar-fehri requested a review from a team as a code owner February 20, 2026 13:32
@github-actions

Copy link
Copy Markdown
Contributor

🔍 Smart E2E Test Selection

  • Selected E2E tags: SmokeAccounts, SmokeConfirmations, SmokeIdentity, SmokeNetworkAbstractions, SmokeNetworkExpansion, SmokeTrade, SmokeWalletPlatform, SmokeCard, SmokePerps, SmokeRamps, SmokeMultiChainAPI, SmokePredictions, FlaskBuildTests
  • Selected Performance tags: @PerformanceAccountList, @PerformanceOnboarding, @PerformanceLogin, @PerformanceSwaps, @PerformanceLaunch, @PerformanceAssetLoading, @PerformancePredict, @PerformancePreps
  • Risk Level: high
  • AI Confidence: 100%
click to see 🤖 AI reasoning details

E2E Test Selection:
Hard rule (controller-version-update): @MetaMask controller package version updated in package.json: @metamask/assets-controllers, @metamask/phishing-controller. Running all tests.

Performance Test Selection:
Hard rule (controller-version-update): @MetaMask controller package version updated in package.json: @metamask/assets-controllers, @metamask/phishing-controller. Running all tests.

View GitHub Actions results

@sonarqubecloud

Copy link
Copy Markdown

@sahar-fehri sahar-fehri added this pull request to the merge queue Feb 20, 2026
Merged via the queue into main with commit f3d2ee8 Feb 20, 2026
110 checks passed
@sahar-fehri sahar-fehri deleted the chore/bump-assets-controllers-and-phishing-controller branch February 20, 2026 17:45
@github-actions github-actions Bot locked and limited conversation to collaborators Feb 20, 2026
@metamaskbot metamaskbot added the release-7.68.0 Issue or pull request that will be included in release 7.68.0 label Feb 20, 2026
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Labels

release-7.68.0 Issue or pull request that will be included in release 7.68.0 size-XS team-assets

Projects

None yet

Development

Successfully merging this pull request may close these issues.

5 participants