Skip to content

chore: Bump Snaps dependencies #27335

Merged
Mrtenz merged 6 commits into
mainfrom
mrtenz/snaps-146
Mar 11, 2026
Merged

chore: Bump Snaps dependencies #27335
Mrtenz merged 6 commits into
mainfrom
mrtenz/snaps-146

Conversation

@Mrtenz

@Mrtenz Mrtenz commented Mar 11, 2026 •
edited by cursor Bot
Loading

Copy link
Copy Markdown
Member

Description

This bumps Snaps dependencies to the latest versions.

Changelog

CHANGELOG entry: Add support for additional icon colors in Snaps Icon component.

Related issues

Fixes:

Manual testing steps

Feature: my feature name

  Scenario: user [verb for user action]
    Given [describe expected initial app state]

    When user [verb for user action]
    Then [describe expected outcome]

Screenshots/Recordings

Before

After

Pre-merge author checklist

Pre-merge reviewer checklist

  • I've manually tested the PR (e.g. pull and build branch, run the app, test code being changed).
  • I confirm that this PR addresses all acceptance criteria described in the ticket it closes and includes the necessary testing evidence such as recordings and or screenshots.

Note

Medium Risk
Updates multiple @metamask/snaps-* packages and wires new/changed SnapInterface controller actions, which could subtly affect Snap UI rendering and interface lifecycle behavior. Main functional change is limited, but dependency upgrades and messenger action-surface changes increase regression risk.

Overview
Bumps Snaps dependencies (notably @metamask/snaps-sdk to ^11.0.0 and related snaps-controllers, snaps-rpc-methods, snaps-utils, execution environments), updating yarn.lock accordingly.

Extends the Snap UI Icon renderer to support additional color variants (error, warning, success). Aligns Snap interface plumbing with updated controller APIs by switching getInterfaceState to call SnapInterfaceController:getInterfaceState, adding SnapInterfaceController:setInterfaceDisplayed to allowed messenger actions/permission specs, and updating Snap UI test utilities to include displayed: true. Also bumps the test-snaps fixture URL to 3.4.1.

Written by Cursor Bugbot for commit 0702f6e. This will update automatically on new commits. Configure here.

@metamaskbot metamaskbot added the team-core-platform Core Platform team label Mar 11, 2026
@socket-security

socket-security Bot commented Mar 11, 2026 •
edited
Loading

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security		 Vulnerability Quality Maintenance License
Updatednpm/​@​metamask/​snaps-controllers@​18.0.2 ⏵ 18.0.471 +110076 +198 +250
Addednpm/​@​metamask/​snaps-rpc-methods@​15.0.098100769650
Updatednpm/​@​metamask/​snaps-execution-environments@​11.0.0 ⏵ 11.0.199 +11007797 +180

View full report

@socket-security

socket-security Bot commented Mar 11, 2026 •
edited
Loading

Copy link
Copy Markdown

All alerts resolved. Learn more about Socket for GitHub.

This PR previously contained dependency changes with security issues that have been resolved, removed, or ignored.

Ignoring alerts on:

  • npm/ses@1.15.0

View full report

@Mrtenz

Mrtenz commented Mar 11, 2026

Copy link
Copy Markdown
Member Author

@SocketSecurity ignore npm/ses@1.15.0

Trusted author.

@Mrtenz Mrtenz marked this pull request as ready for review March 11, 2026 12:39
@Mrtenz Mrtenz requested review from a team as code owners March 11, 2026 12:39
cursor[bot]
cursor Bot reviewed Mar 11, 2026
View reviewed changes

@cursor cursor Bot left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Cursor Bugbot has reviewed your changes and found 1 potential issue.

Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, have a team admin enable autofix in the Cursor dashboard.

Comment thread app/components/Snaps/SnapUIRenderer/testUtils.tsx
cryptodev-2s
cryptodev-2s previously approved these changes Mar 11, 2026
View reviewed changes
@Mrtenz Mrtenz requested a review from cryptodev-2s March 11, 2026 14:52
@github-actions

github-actions Bot commented Mar 11, 2026

Copy link
Copy Markdown
Contributor

🔍 Smart E2E Test Selection

  • Selected E2E tags: SmokeAccounts, SmokeConfirmations, SmokeIdentity, SmokeNetworkAbstractions, SmokeNetworkExpansion, SmokeTrade, SmokeWalletPlatform, SmokeCard, SmokePerps, SmokeRamps, SmokeMultiChainAPI, SmokePredictions, FlaskBuildTests
  • Selected Performance tags: @PerformanceAccountList, @PerformanceOnboarding, @PerformanceLogin, @PerformanceSwaps, @PerformanceLaunch, @PerformanceAssetLoading, @PerformancePredict, @PerformancePreps
  • Risk Level: high
  • AI Confidence: 100%
click to see 🤖 AI reasoning details

E2E Test Selection:
Hard rule (controller-version-update): @MetaMask controller package version updated in package.json: @metamask/snaps-controllers. Running all tests.

Performance Test Selection:
Hard rule (controller-version-update): @MetaMask controller package version updated in package.json: @metamask/snaps-controllers. Running all tests.

View GitHub Actions results

@Mrtenz Mrtenz enabled auto-merge March 11, 2026 14:58
@sonarqubecloud

sonarqubecloud Bot commented Mar 11, 2026

Copy link
Copy Markdown

Quality Gate Failed Quality Gate failed

Failed conditions
0.0% Coverage on New Code (required ≥ 80%)
5.0% Duplication on New Code (required ≤ 3%)

See analysis details on SonarQube Cloud

@github-actions

github-actions Bot commented Mar 11, 2026

Copy link
Copy Markdown
Contributor

✅ E2E Fixture Validation — Schema is up to date
11 value mismatches detected (expected — fixture represents an existing user).
View details

@Mrtenz Mrtenz added the skip-sonar-cloud Only used for bypassing sonar cloud when failures are not relevant to the changes. label Mar 11, 2026
@Mrtenz Mrtenz added this pull request to the merge queue Mar 11, 2026
Merged via the queue into main with commit 2513c6f Mar 11, 2026
201 of 206 checks passed
@Mrtenz Mrtenz deleted the mrtenz/snaps-146 branch March 11, 2026 16:23
@github-actions github-actions Bot locked and limited conversation to collaborators Mar 11, 2026
@metamaskbot metamaskbot added the release-7.70.0 Issue or pull request that will be included in release 7.70.0 label Mar 11, 2026
@chloeYue chloeYue changed the title chore: Bump Snaps dependencies chore: Bump Snaps dependencies cp-7.68.1 Mar 11, 2026
@chloeYue chloeYue changed the title chore: Bump Snaps dependencies cp-7.68.1 chore: Bump Snaps dependencies Mar 11, 2026
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Reviewers

@cursor cursor[bot] cursor[bot] left review comments

@FrederikBolding FrederikBolding FrederikBolding approved these changes

@jvbriones jvbriones jvbriones approved these changes

@tommasini tommasini tommasini approved these changes

@christopherferreira9 christopherferreira9 christopherferreira9 approved these changes

@cryptodev-2s cryptodev-2s Awaiting requested review from cryptodev-2s

Assignees

No one assigned

Labels

release-7.70.0 Issue or pull request that will be included in release 7.70.0 size-S skip-sonar-cloud Only used for bypassing sonar cloud when failures are not relevant to the changes. team-core-platform Core Platform team

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

7 participants

@Mrtenz @FrederikBolding @jvbriones @tommasini @christopherferreira9 @cryptodev-2s @metamaskbot