a9fcf0ea86
Use getTokenTrackerLink for asset view etherscan link in token-asset.js ( #9913 )
4 years ago
198b503f94
Bump @metamask/eth-token-tracker from 3.0.1 to 3.1.0 ( #9901 )
...
Bumps [@metamask/eth-token-tracker ](https://github.com/MetaMask/eth-token-tracker ) from 3.0.1 to 3.1.0.
- [Release notes](https://github.com/MetaMask/eth-token-tracker/releases )
- [Changelog](https://github.com/MetaMask/eth-token-tracker/blob/master/CHANGELOG.md )
- [Commits](https://github.com/MetaMask/eth-token-tracker/commits )
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
4 years ago
74839831c0
@metamask/controllers@4.2.0 ( #9849 )
4 years ago
aa85533368
@metamask/controllers@4.0.2 ( #9839 )
4 years ago
80834b775d
@metamask/controllers@4.0.0 ( #9838 )
4 years ago
5e61955d99
deps - yarn-deduplicate ( #9519 )
4 years ago
6aa6052318
eth-sig-util@3.0.0
4 years ago
dcd2927f03
Update etherscan-link to 1.2.0 ( #9789 )
4 years ago
a6f676764f
@metamask/test-dapp@4.0.1
4 years ago
d2dc4a62c4
@metamask/test-dapp@4.0.0
4 years ago
3c171de44c
potential fix for METAMASK-GKCN ( #9768 )
4 years ago
2ebf8756a4
[RFC] add prettier to eslint ( #8595 )
4 years ago
a8cb6fb4f6
Bump eth-contract-metadata from 1.16.0 to 1.17.0 ( #9736 )
...
Bumps [eth-contract-metadata](https://github.com/MetaMask/ethereum-contract-icons ) from 1.16.0 to 1.17.0.
- [Release notes](https://github.com/MetaMask/ethereum-contract-icons/releases )
- [Commits](https://github.com/MetaMask/ethereum-contract-icons/compare/v1.16.0...v1.17.0 )
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
4 years ago
d1b4d29219
Update `ganache-core` and `ganache-cli` ( #9725 )
...
`ganache-core` and `ganache-cli` have been updated to the latest
published versions.
Two Yarn resolutions have been made unnecessary by this update, so they
have been removed. They were added to update dependencies of
`ganache-core` to address security advisories. They have since been
updated in the latest `ganache-core` release.
4 years ago
7d50357684
remove matomo and route to segment ( #9646 )
4 years ago
bb2eed6a8d
@metamask/test-dapp@3.2.0 ( #9707 )
4 years ago
69d45ab46c
Add ses lockdown to build system ( #9568 )
...
* Add ses lockdown to build system using lavamoat-core
* use proper object.assign version
* disable lint rules for ses lockdown
* deps - update rtlcss
Co-authored-by: kumavis <aaron@kumavis.me>
Co-authored-by: Mark Stacey <markjstacey@gmail.com>
4 years ago
b0bbc2b366
Bump @metamask/controllers from 3.1.0 to 3.2.0 ( #9692 )
...
Bumps [@metamask/controllers ](https://github.com/MetaMask/controllers ) from 3.1.0 to 3.2.0.
- [Release notes](https://github.com/MetaMask/controllers/releases )
- [Changelog](https://github.com/MetaMask/controllers/blob/develop/CHANGELOG.md )
- [Commits](https://github.com/MetaMask/controllers/commits )
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
4 years ago
343b982fe2
Bump @metamask/inpage-provider from 6.1.0 to 6.3.0 ( #9691 )
...
Bumps [@metamask/inpage-provider ](https://github.com/MetaMask/inpage-provider ) from 6.1.0 to 6.3.0.
- [Release notes](https://github.com/MetaMask/inpage-provider/releases )
- [Changelog](https://github.com/MetaMask/inpage-provider/blob/master/CHANGELOG.md )
- [Commits](https://github.com/MetaMask/inpage-provider/compare/v6.1.0...v6.3.0 )
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
4 years ago
7d0a7ab301
Update `@metamask/eslint-config` to v4.1.0 ( #9663 )
...
`@metamask/eslint-config` has been updated to v4.1.0. This update
requires that we update `eslint` to v7 as well, which in turn requires
updating most `eslint`-related packages.
Most notably, `babel-eslint` was replaced with `@babel/eslint-parser`,
and `babel-eslint-plugin` was replaced by `@babel/eslint-plugin`. This
required renaming all the `babel/*` rules to `@babel/*`.
Most new or updated rules that resulted in lint errors have been
temporarily disabled. They will be fixed and re-enabled in subsequent
PRs.
4 years ago
c3fafe311e
Spawn yarn processes in a cmd subshell on Windows ( #9628 )
...
On Windows, spawn fails if the exact filename
of a binary isn't passed. e.g. `spawn('yarn')` fails
because the binary is named `yarn.cmd`.
Instead, we depend on `cross-spawn` which handles differences
in `spawn` across platforms.
4 years ago
aae176537f
Update Sentry to the latest version. ( #9597 )
...
All three of our Sentry packages have been updated to the latest
versions. There appear to have been no breaking changes - just bug
fixes and new features.
4 years ago
3353c33981
Use eth-contract-metadata@1.16.0 ( #9540 )
4 years ago
8f3b81f67a
Use node-forge@0.10.0 ( #9473 )
...
This change updates `node-forge` to the latest published version, 0.10.0. This
update resolves a security advisory [1] brought in via our `3box` dependency.
[1]:https://www.npmjs.com/advisories/1561
4 years ago
48e2880731
rpc-cap@3.2.0 ( #9461 )
4 years ago
60d4b6aa41
@metamask/controllers@3.1.0 ( #9460 )
4 years ago
97b49b7614
Add `prettier-plugin-sort-json` ( #9450 )
...
JSON files are now sorted by key with `prettier`, using the plugin
`prettier-plugin-sort-json`. This does not affect `package.json`
because `prettier` uses a special parser for that file, as it has
a more restrictive format than JSON.
4 years ago
3f2a7fd6ac
eth-json-rpc-filters@4.2.1 ( #9452 )
4 years ago
242a5b3f23
eth-json-rpc-infura@5.1.0 ( #9451 )
4 years ago
2eb8a9aca9
eth-json-rpc-middleware@6.0.0 ( #9448 )
4 years ago
0263ac3067
Use eth-phishing-detect@1.1.14 ( #9423 )
4 years ago
c3ece93a43
Use @metamask/controllers@3.0.1 ( #9416 )
4 years ago
7a9eee28a1
Bump node-fetch from 2.6.0 to 2.6.1 ( #9399 )
...
Bumps [node-fetch](https://github.com/bitinn/node-fetch ) from 2.6.0 to 2.6.1.
- [Release notes](https://github.com/bitinn/node-fetch/releases )
- [Changelog](https://github.com/node-fetch/node-fetch/blob/master/docs/CHANGELOG.md )
- [Commits](https://github.com/bitinn/node-fetch/compare/v2.6.0...v2.6.1 )
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
4 years ago
8443ee5416
Use bl@3.0.1, dedupe bl@1.x ( #9375 )
4 years ago
7f4c84967a
Use bl@1.2.3 ( #9349 )
4 years ago
b83bca7223
Use eth-phishing-detect@1.1.14 ( #9423 )
4 years ago
3b70cf64ec
Use @metamask/controllers@3.0.1 ( #9416 )
4 years ago
34b3953815
Use eth-json-rpc-middleware@5.0.3 ( #9405 )
4 years ago
b1665dedc6
Bump node-fetch from 2.6.0 to 2.6.1 ( #9399 )
...
Bumps [node-fetch](https://github.com/bitinn/node-fetch ) from 2.6.0 to 2.6.1.
- [Release notes](https://github.com/bitinn/node-fetch/releases )
- [Changelog](https://github.com/node-fetch/node-fetch/blob/master/docs/CHANGELOG.md )
- [Commits](https://github.com/bitinn/node-fetch/compare/v2.6.0...v2.6.1 )
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
4 years ago
8b24f624dd
add segment implementation of metametrics ( #9382 )
...
Co-authored-by: Whymarrh Whitby <whymarrh.whitby@gmail.com>
Co-authored-by: Mark Stacey <markjstacey@gmail.com>
4 years ago
9391eac670
Update `@metamask/eth-token-tracker` from `v3.0.0` to `v3.0.1` ( #9398 )
...
`v3.0.1` of `@metamask/eth-token-tracker` fixes how token balances are
displayed when they are between 1 and 0.1. See here for more details:
https://github.com/MetaMask/eth-token-tracker/pull/47
4 years ago
ce66ddcf0d
Use `prettier` for JSON linting ( #9396 )
...
Instead of using `eslint-plugin-json` for linting JSON files,
`prettier` is now used. `prettier` is capable of detecting and
correcting more problems than `eslint-plugin-json` can, such as
indentation.
All JSON files have been run through `prettier`. The changes are all
superficial.
4 years ago
e2dedaacdb
Use Infura v3 API ( #9368 )
...
* Use eth-json-rpc-infura@5.0.0
* Use Infura v3 API
* Add example .metamaskrc file
4 years ago
89eade97c5
Use bl@3.0.1, dedupe bl@1.x ( #9375 )
4 years ago
253cd12bbb
Use yargs@7.1.1 ( #9364 )
...
This change updates the `yargs` dependency introduced by `gulp-cli` to the latest
`^7` version, addressing [`GHSA-p9pc-299p-vxgp`][1].
[1]:https://github.com/advisories/GHSA-p9pc-299p-vxgp
The `yarn audit` output:
```
┌───────────────┬──────────────────────────────────────────────────────────────┐
│ low │ Prototype Pollution │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package │ yargs-parser │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Patched in │ >=13.1.2 <14.0.0 || >=15.0.1 <16.0.0 || >=18.1.2 │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ gulp │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path │ gulp > gulp-cli > yargs > yargs-parser │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info │ https://www.npmjs.com/advisories/1500 │
└───────────────┴──────────────────────────────────────────────────────────────┘
```
4 years ago
9c77f6add2
Use bl@1.2.3 ( #9349 )
4 years ago
1e99a7b0c3
Migrate to scoped @metamask/jazzicon ( #9341 )
4 years ago
a6e93a6344
Use ganache-core/websocket@1.0.32 ( #9340 )
...
This change updates `websocket` to address a low-severity security advisory
with `yargs-parser`.
See https://www.npmjs.com/advisories/1500 for more information.
The `yarn audit` output:
```
┌───────────────┬──────────────────────────────────────────────────────────────┐
│ low │ Prototype Pollution │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package │ yargs-parser │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Patched in │ >=13.1.2 <14.0.0 || >=15.0.1 <16.0.0 || >=18.1.2 │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ ganache-core │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path │ ganache-core > websocket > gulp > gulp-cli > yargs > │
│ │ yargs-parser │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info │ https://www.npmjs.com/advisories/1500 │
└───────────────┴──────────────────────────────────────────────────────────────┘
```
4 years ago
72313f011d
Use derequire@2.1.1 ( #9332 )
...
This change updates `derequire` to address a low-severity security advisory
with `yargs-parser`.
See https://www.npmjs.com/advisories/1500 for more information.
The `yarn audit` output:
```
┌───────────────┬──────────────────────────────────────────────────────────────┐
│ low │ Prototype Pollution │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package │ yargs-parser │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Patched in │ >=13.1.2 <14.0.0 || >=15.0.1 <16.0.0 || >=18.1.2 │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ browserify-derequire │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path │ browserify-derequire > derequire > yargs > yargs-parser │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info │ https://www.npmjs.com/advisories/1500 │
└───────────────┴──────────────────────────────────────────────────────────────┘
```
4 years ago
ba9af7d7bf
Use react-inspector@4.0.1 ( #9331 )
...
This change addresses a low-severity security advisory for `yargs-parser`.
See https://www.npmjs.com/advisories/1500 for more information.
The `yarn audit` output:
```
┌───────────────┬──────────────────────────────────────────────────────────────┐
│ low │ Prototype Pollution │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package │ yargs-parser │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Patched in │ >=13.1.2 <14.0.0 || >=15.0.1 <16.0.0 || >=18.1.2 │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ @storybook/addon-actions │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path │ @storybook/addon-actions > react-inspector > │
│ │ storybook-chromatic > @chromaui/localtunnel > yargs > │
│ │ yargs-parser │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info │ https://www.npmjs.com/advisories/1500 │
└───────────────┴──────────────────────────────────────────────────────────────┘
```
4 years ago
Dan J Miller
dependabot[bot]
Erik Marks
kumavis
Erik Marks
David Walsh
Brad Decker
Mark Stacey
Etienne Dusseault
Ari Lotter
Whymarrh Whitby