From 775735d88507c3ebe0c005f47738acd7af3ab5bc Mon Sep 17 00:00:00 2001 From: Howard Braham Date: Fri, 24 Jul 2026 11:12:05 -0700 Subject: [PATCH 1/3] build: ignore react-router advisories --- .yarnrc.yml | 18 ++++++++++++++++++ 1 file changed, 18 insertions(+) diff --git a/.yarnrc.yml b/.yarnrc.yml index d98ebf06d21e..3993d33f676a 100644 --- a/.yarnrc.yml +++ b/.yarnrc.yml @@ -39,6 +39,24 @@ npmAuditIgnoreAdvisories: # There is no fix for this low-severity advisory - 1112030 + # Issue: React Router: Open redirect via backslash in and useNavigate + # URL: https://github.com/advisories/GHSA-wrjc-x8rr-h8h6 + # The extension uses HashRouter rather than BrowserRouter, so it does not + # process attacker-controlled paths from a web server. + - 1124268 + + # Issue: React Router: Open redirect leading to XSS + # URL: https://github.com/advisories/GHSA-jjmj-jmhj-qwj2 + # The extension uses HashRouter rather than BrowserRouter, so it does not + # use browser-history paths supplied by a web server. + - 1124270 + + # Issue: React Router: Arbitrary Constructor Injection via deserializeErrors() + # in React Router SSR Hydration + # URL: https://github.com/advisories/GHSA-337j-9hxr-rhxg + # The extension does not use server-side rendering or React Router hydration. + - 1124272 + ### Package Deprecations: # React-tippy brings in popper.js and react-tippy has not been updated in From bcbaf9a2085f83a813dd79618321f026cf56035b Mon Sep 17 00:00:00 2001 From: Howard Braham Date: Fri, 24 Jul 2026 11:36:40 -0700 Subject: [PATCH 2/3] bump: tar --- yarn.lock | 141 ++++++++++++++++++++++++++++++++++++++++++------------ 1 file changed, 110 insertions(+), 31 deletions(-) diff --git a/yarn.lock b/yarn.lock index 3aeee93fdc8f..9497dca83108 100644 --- a/yarn.lock +++ b/yarn.lock @@ -19645,10 +19645,15 @@ __metadata: languageName: node linkType: hard -"b4a@npm:^1.6.4": - version: 1.6.4 - resolution: "b4a@npm:1.6.4" - checksum: 10/223158e626a7e024a8d945ce85e7d8871c0689c0375c5b0df5880eedcb5683a12eeb3557591ff5ccd515f3ee8d1664e370c6ff7917fa257405571b81b946604a +"b4a@npm:^1.6.4, b4a@npm:^1.8.1": + version: 1.8.1 + resolution: "b4a@npm:1.8.1" + peerDependencies: + react-native-b4a: "*" + peerDependenciesMeta: + react-native-b4a: + optional: true + checksum: 10/8536650b525f9f916e8fff9f5976fbeba2fc3238f047cad52e91073cf9825306ce7a68d0077ba2d06e3d20c95b445dccc2ab97ed45773331244d82251329cf8d languageName: node linkType: hard @@ -19897,6 +19902,36 @@ __metadata: languageName: node linkType: hard +"bare-events@npm:^2.5.4, bare-events@npm:^2.7.0": + version: 2.9.1 + resolution: "bare-events@npm:2.9.1" + peerDependencies: + bare-abort-controller: "*" + peerDependenciesMeta: + bare-abort-controller: + optional: true + checksum: 10/0692be1767f4f326e39c8b1ec76f88e9f566d96fce4fe23ff10c1a6e69843237d1eee0d14a52d9aa4b89c8efa6511fe6c0e640d96fa8586241bfa877c4f7bb46 + languageName: node + linkType: hard + +"bare-fs@npm:^4.5.5": + version: 4.7.4 + resolution: "bare-fs@npm:4.7.4" + dependencies: + bare-events: "npm:^2.5.4" + bare-path: "npm:^3.0.0" + bare-stream: "npm:^2.6.4" + bare-url: "npm:^2.2.2" + fast-fifo: "npm:^1.3.2" + peerDependencies: + bare-buffer: "*" + peerDependenciesMeta: + bare-buffer: + optional: true + checksum: 10/b0c7c92081739908352a36911abca88281c7d5ea5c8689bc6628e7360358a6ff79f2c7d3321f3f6dd23eae326698071e2abf9f0d51d51cc59628ceb2ce3d7e4c + languageName: node + linkType: hard + "bare-module-resolve@npm:^1.10.0": version: 1.11.1 resolution: "bare-module-resolve@npm:1.11.1" @@ -19934,12 +19969,34 @@ __metadata: languageName: node linkType: hard -"bare-url@npm:^2.1.0": - version: 2.1.6 - resolution: "bare-url@npm:2.1.6" +"bare-stream@npm:^2.6.4": + version: 2.13.3 + resolution: "bare-stream@npm:2.13.3" + dependencies: + b4a: "npm:^1.8.1" + streamx: "npm:^2.25.0" + teex: "npm:^1.0.1" + peerDependencies: + bare-abort-controller: "*" + bare-buffer: "*" + bare-events: "*" + peerDependenciesMeta: + bare-abort-controller: + optional: true + bare-buffer: + optional: true + bare-events: + optional: true + checksum: 10/771f0f5a05af4a1bc33e86ba18c5afd90c73496bfa2b457d71146ce78837c7c4cdef4b980f7889108434ceab57ac29e219a3a3cc39892db81a5cae2c54c91c38 + languageName: node + linkType: hard + +"bare-url@npm:^2.1.0, bare-url@npm:^2.2.2": + version: 2.4.6 + resolution: "bare-url@npm:2.4.6" dependencies: bare-path: "npm:^3.0.0" - checksum: 10/5679ffc833addcc03b05ee7bccff80042d8bf89ca06f624f5b09cdc77de8d558e986357ebb2368418d3ff76296c39da69ad03613fb2d3704f2afc69983fbd682 + checksum: 10/6343e10b23d93813e16b8945d155d80c0f5b3432545b431743f3f06e36d79b6144edc46664f9edad01f69351c25b4346bf5d6aef9c5be140d2e4bcb7be18748f languageName: node linkType: hard @@ -25572,6 +25629,15 @@ __metadata: languageName: node linkType: hard +"events-universal@npm:^1.0.0": + version: 1.0.1 + resolution: "events-universal@npm:1.0.1" + dependencies: + bare-events: "npm:^2.7.0" + checksum: 10/71b2e6079b4dc030c613ef73d99f1acb369dd3ddb6034f49fd98b3e2c6632cde9f61c15fb1351004339d7c79672252a4694ecc46a6124dc794b558be50a83867 + languageName: node + linkType: hard + "events@npm:3.3.0, events@npm:^3.0.0, events@npm:^3.2.0, events@npm:^3.3.0": version: 3.3.0 resolution: "events@npm:3.3.0" @@ -25922,7 +25988,7 @@ __metadata: languageName: node linkType: hard -"fast-fifo@npm:^1.1.0, fast-fifo@npm:^1.2.0": +"fast-fifo@npm:^1.2.0, fast-fifo@npm:^1.3.2": version: 1.3.2 resolution: "fast-fifo@npm:1.3.2" checksum: 10/6bfcba3e4df5af7be3332703b69a7898a8ed7020837ec4395bb341bd96cc3a6d86c3f6071dd98da289618cf2234c70d84b2a6f09a33dd6f988b1ff60d8e54275 @@ -36930,13 +36996,6 @@ __metadata: languageName: node linkType: hard -"queue-tick@npm:^1.0.1": - version: 1.0.1 - resolution: "queue-tick@npm:1.0.1" - checksum: 10/f447926c513b64a857906f017a3b350f7d11277e3c8d2a21a42b7998fa1a613d7a829091e12d142bb668905c8f68d8103416c7197856efb0c72fa835b8e254b5 - languageName: node - linkType: hard - "quick-format-unescaped@npm:^4.0.3": version: 4.0.4 resolution: "quick-format-unescaped@npm:4.0.4" @@ -40658,13 +40717,14 @@ __metadata: languageName: node linkType: hard -"streamx@npm:^2.15.0": - version: 2.15.1 - resolution: "streamx@npm:2.15.1" +"streamx@npm:^2.12.5, streamx@npm:^2.15.0, streamx@npm:^2.25.0": + version: 2.28.0 + resolution: "streamx@npm:2.28.0" dependencies: - fast-fifo: "npm:^1.1.0" - queue-tick: "npm:^1.0.1" - checksum: 10/5c5143d832b4d4c2cba09d3e77dcc099f62bfc44bffac38e7b196cdd7f17dcd46bc2012c614fad934c0d706712c2e9455e485435810504cf748906b2f1746837 + events-universal: "npm:^1.0.0" + fast-fifo: "npm:^1.3.2" + text-decoder: "npm:^1.1.0" + checksum: 10/ed9a289f09dca9a7bb03790f8b60f9e6bab1032e3fc426e939e7c8207b0511777d96905589a7c9c6d9c9b32e2f94dc884c2e5477ac38524e37f9ea0dfaf8227d languageName: node linkType: hard @@ -41514,14 +41574,14 @@ __metadata: linkType: hard "tar-fs@npm:^2.1.1": - version: 2.1.4 - resolution: "tar-fs@npm:2.1.4" + version: 2.1.5 + resolution: "tar-fs@npm:2.1.5" dependencies: chownr: "npm:^1.1.1" mkdirp-classic: "npm:^0.5.2" pump: "npm:^3.0.0" tar-stream: "npm:^2.1.4" - checksum: 10/bdf7e3cb039522e39c6dae3084b1bca8d7bcc1de1906eae4a1caea6a2250d22d26dcc234118bf879b345d91ebf250a744b196e379334a4abcbb109a78db7d3be + checksum: 10/9dfbde66d223e3164a8018521c7c1eb205696917cbfb116d15cde286ccc7f2445964bb3d4772f369eb003aad67c2573e4f1390c74266fee32fa16cb846b6d144 languageName: node linkType: hard @@ -41539,26 +41599,36 @@ __metadata: linkType: hard "tar-stream@npm:^3.1.7": - version: 3.1.7 - resolution: "tar-stream@npm:3.1.7" + version: 3.2.0 + resolution: "tar-stream@npm:3.2.0" dependencies: b4a: "npm:^1.6.4" + bare-fs: "npm:^4.5.5" fast-fifo: "npm:^1.2.0" streamx: "npm:^2.15.0" - checksum: 10/b21a82705a72792544697c410451a4846af1f744176feb0ff11a7c3dd0896961552e3def5e1c9a6bbee4f0ae298b8252a1f4c9381e9f991553b9e4847976f05c + checksum: 10/ce57a81521de73ae7a3b7d55a08da50d6771427c249bfa89a208518e48faf5254c8fa7201a8f5419ab8bde9601a74e6dd512b31a13ec89774aec96178f99a8d3 languageName: node linkType: hard "tar@npm:^7.5.16": - version: 7.5.20 - resolution: "tar@npm:7.5.20" + version: 7.5.22 + resolution: "tar@npm:7.5.22" dependencies: "@isaacs/fs-minipass": "npm:^4.0.0" chownr: "npm:^3.0.0" minipass: "npm:^7.1.2" minizlib: "npm:^3.1.0" yallist: "npm:^5.0.0" - checksum: 10/90a0fe423ac921197ad5eefc5e5f7ad7f42b06e80444c8c347c1e4112384cbe9cb53ade3ef71748eed3684888756869c2aeef6b6303c766101f3217e254d4be9 + checksum: 10/129606384b3c895f422aaca48bf316357be6dc7aa35c1066c3f06c28acfff0be5b356e1b0a0be7c53a7a8945534ac06cec6d8e296d170d8a09c8bff67b29300e + languageName: node + linkType: hard + +"teex@npm:^1.0.1": + version: 1.0.1 + resolution: "teex@npm:1.0.1" + dependencies: + streamx: "npm:^2.12.5" + checksum: 10/36bf7ce8bb5eb428ad7b14b695ee7fb0a02f09c1a9d8181cc42531208543a920b299d711bf78dad4ff9bcf36ac437ae8e138053734746076e3e0e7d6d76eef64 languageName: node linkType: hard @@ -41656,6 +41726,15 @@ __metadata: languageName: node linkType: hard +"text-decoder@npm:^1.1.0": + version: 1.2.7 + resolution: "text-decoder@npm:1.2.7" + dependencies: + b4a: "npm:^1.6.4" + checksum: 10/151f89339a497353ad579b32536be94bf90a0785fd2aa2dc0a5ec8a4b71ed59998f4adb872201bdc536805425aa8c5cf8f4a936c449be614c1d3c4527688b3d0 + languageName: node + linkType: hard + "text-encoding-utf-8@npm:^1.0.2": version: 1.0.2 resolution: "text-encoding-utf-8@npm:1.0.2" From e8463881a7819028c7ad143741a067f135e47d33 Mon Sep 17 00:00:00 2001 From: MetaMask Bot Date: Fri, 24 Jul 2026 18:51:01 +0000 Subject: [PATCH 3/3] Update LavaMoat policies --- lavamoat/webpack/mv2/beta/policy.json | 23 +++++++++++++------ lavamoat/webpack/mv2/experimental/policy.json | 23 +++++++++++++------ lavamoat/webpack/mv2/flask/policy.json | 23 +++++++++++++------ lavamoat/webpack/mv2/main/policy.json | 23 +++++++++++++------ lavamoat/webpack/mv3/beta/policy.json | 23 +++++++++++++------ lavamoat/webpack/mv3/experimental/policy.json | 23 +++++++++++++------ lavamoat/webpack/mv3/flask/policy.json | 23 +++++++++++++------ lavamoat/webpack/mv3/main/policy.json | 23 +++++++++++++------ 8 files changed, 128 insertions(+), 56 deletions(-) diff --git a/lavamoat/webpack/mv2/beta/policy.json b/lavamoat/webpack/mv2/beta/policy.json index 17760ec4f5a8..fc35adbe73a0 100644 --- a/lavamoat/webpack/mv2/beta/policy.json +++ b/lavamoat/webpack/mv2/beta/policy.json @@ -4787,6 +4787,11 @@ "eth-method-registry>@metamask/ethjs-contract>ethjs-abi>number-to-bn": true } }, + "@metamask/snaps-controllers>tar-stream>streamx>events-universal": { + "packages": { + "webpack>events": true + } + }, "webpack>events": { "globals": { "console": true @@ -5656,11 +5661,6 @@ "string.prototype.matchall>side-channel": true } }, - "@metamask/snaps-controllers>tar-stream>streamx>queue-tick": { - "globals": { - "queueMicrotask": true - } - }, "@hello-pangea/dnd>raf-schd": { "globals": { "cancelAnimationFrame": true, @@ -6569,10 +6569,14 @@ } }, "@metamask/snaps-controllers>tar-stream>streamx": { + "globals": { + "process.nextTick": true, + "queueMicrotask": true + }, "packages": { - "webpack>events": true, + "@metamask/snaps-controllers>tar-stream>streamx>events-universal": true, "@metamask/snaps-controllers>tar-stream>fast-fifo": true, - "@metamask/snaps-controllers>tar-stream>streamx>queue-tick": true + "@metamask/snaps-controllers>tar-stream>streamx>text-decoder": true } }, "browserify>string_decoder": { @@ -6607,6 +6611,11 @@ "@metamask/snaps-controllers>tar-stream>streamx": true } }, + "@metamask/snaps-controllers>tar-stream>streamx>text-decoder": { + "packages": { + "@metamask/snaps-controllers>tar-stream>b4a": true + } + }, "@ngraveio/bc-ur>sha.js>to-buffer": { "packages": { "@lavamoat/webpack>json-stable-stringify>isarray": true, diff --git a/lavamoat/webpack/mv2/experimental/policy.json b/lavamoat/webpack/mv2/experimental/policy.json index 17760ec4f5a8..fc35adbe73a0 100644 --- a/lavamoat/webpack/mv2/experimental/policy.json +++ b/lavamoat/webpack/mv2/experimental/policy.json @@ -4787,6 +4787,11 @@ "eth-method-registry>@metamask/ethjs-contract>ethjs-abi>number-to-bn": true } }, + "@metamask/snaps-controllers>tar-stream>streamx>events-universal": { + "packages": { + "webpack>events": true + } + }, "webpack>events": { "globals": { "console": true @@ -5656,11 +5661,6 @@ "string.prototype.matchall>side-channel": true } }, - "@metamask/snaps-controllers>tar-stream>streamx>queue-tick": { - "globals": { - "queueMicrotask": true - } - }, "@hello-pangea/dnd>raf-schd": { "globals": { "cancelAnimationFrame": true, @@ -6569,10 +6569,14 @@ } }, "@metamask/snaps-controllers>tar-stream>streamx": { + "globals": { + "process.nextTick": true, + "queueMicrotask": true + }, "packages": { - "webpack>events": true, + "@metamask/snaps-controllers>tar-stream>streamx>events-universal": true, "@metamask/snaps-controllers>tar-stream>fast-fifo": true, - "@metamask/snaps-controllers>tar-stream>streamx>queue-tick": true + "@metamask/snaps-controllers>tar-stream>streamx>text-decoder": true } }, "browserify>string_decoder": { @@ -6607,6 +6611,11 @@ "@metamask/snaps-controllers>tar-stream>streamx": true } }, + "@metamask/snaps-controllers>tar-stream>streamx>text-decoder": { + "packages": { + "@metamask/snaps-controllers>tar-stream>b4a": true + } + }, "@ngraveio/bc-ur>sha.js>to-buffer": { "packages": { "@lavamoat/webpack>json-stable-stringify>isarray": true, diff --git a/lavamoat/webpack/mv2/flask/policy.json b/lavamoat/webpack/mv2/flask/policy.json index 17760ec4f5a8..fc35adbe73a0 100644 --- a/lavamoat/webpack/mv2/flask/policy.json +++ b/lavamoat/webpack/mv2/flask/policy.json @@ -4787,6 +4787,11 @@ "eth-method-registry>@metamask/ethjs-contract>ethjs-abi>number-to-bn": true } }, + "@metamask/snaps-controllers>tar-stream>streamx>events-universal": { + "packages": { + "webpack>events": true + } + }, "webpack>events": { "globals": { "console": true @@ -5656,11 +5661,6 @@ "string.prototype.matchall>side-channel": true } }, - "@metamask/snaps-controllers>tar-stream>streamx>queue-tick": { - "globals": { - "queueMicrotask": true - } - }, "@hello-pangea/dnd>raf-schd": { "globals": { "cancelAnimationFrame": true, @@ -6569,10 +6569,14 @@ } }, "@metamask/snaps-controllers>tar-stream>streamx": { + "globals": { + "process.nextTick": true, + "queueMicrotask": true + }, "packages": { - "webpack>events": true, + "@metamask/snaps-controllers>tar-stream>streamx>events-universal": true, "@metamask/snaps-controllers>tar-stream>fast-fifo": true, - "@metamask/snaps-controllers>tar-stream>streamx>queue-tick": true + "@metamask/snaps-controllers>tar-stream>streamx>text-decoder": true } }, "browserify>string_decoder": { @@ -6607,6 +6611,11 @@ "@metamask/snaps-controllers>tar-stream>streamx": true } }, + "@metamask/snaps-controllers>tar-stream>streamx>text-decoder": { + "packages": { + "@metamask/snaps-controllers>tar-stream>b4a": true + } + }, "@ngraveio/bc-ur>sha.js>to-buffer": { "packages": { "@lavamoat/webpack>json-stable-stringify>isarray": true, diff --git a/lavamoat/webpack/mv2/main/policy.json b/lavamoat/webpack/mv2/main/policy.json index 17760ec4f5a8..fc35adbe73a0 100644 --- a/lavamoat/webpack/mv2/main/policy.json +++ b/lavamoat/webpack/mv2/main/policy.json @@ -4787,6 +4787,11 @@ "eth-method-registry>@metamask/ethjs-contract>ethjs-abi>number-to-bn": true } }, + "@metamask/snaps-controllers>tar-stream>streamx>events-universal": { + "packages": { + "webpack>events": true + } + }, "webpack>events": { "globals": { "console": true @@ -5656,11 +5661,6 @@ "string.prototype.matchall>side-channel": true } }, - "@metamask/snaps-controllers>tar-stream>streamx>queue-tick": { - "globals": { - "queueMicrotask": true - } - }, "@hello-pangea/dnd>raf-schd": { "globals": { "cancelAnimationFrame": true, @@ -6569,10 +6569,14 @@ } }, "@metamask/snaps-controllers>tar-stream>streamx": { + "globals": { + "process.nextTick": true, + "queueMicrotask": true + }, "packages": { - "webpack>events": true, + "@metamask/snaps-controllers>tar-stream>streamx>events-universal": true, "@metamask/snaps-controllers>tar-stream>fast-fifo": true, - "@metamask/snaps-controllers>tar-stream>streamx>queue-tick": true + "@metamask/snaps-controllers>tar-stream>streamx>text-decoder": true } }, "browserify>string_decoder": { @@ -6607,6 +6611,11 @@ "@metamask/snaps-controllers>tar-stream>streamx": true } }, + "@metamask/snaps-controllers>tar-stream>streamx>text-decoder": { + "packages": { + "@metamask/snaps-controllers>tar-stream>b4a": true + } + }, "@ngraveio/bc-ur>sha.js>to-buffer": { "packages": { "@lavamoat/webpack>json-stable-stringify>isarray": true, diff --git a/lavamoat/webpack/mv3/beta/policy.json b/lavamoat/webpack/mv3/beta/policy.json index fed3335a75ab..cd4bc3ccc6df 100644 --- a/lavamoat/webpack/mv3/beta/policy.json +++ b/lavamoat/webpack/mv3/beta/policy.json @@ -4918,6 +4918,11 @@ "eth-method-registry>@metamask/ethjs-contract>ethjs-abi>number-to-bn": true } }, + "@metamask/snaps-controllers>tar-stream>streamx>events-universal": { + "packages": { + "webpack>events": true + } + }, "webpack>events": { "globals": { "console": true @@ -5787,11 +5792,6 @@ "string.prototype.matchall>side-channel": true } }, - "@metamask/snaps-controllers>tar-stream>streamx>queue-tick": { - "globals": { - "queueMicrotask": true - } - }, "@hello-pangea/dnd>raf-schd": { "globals": { "cancelAnimationFrame": true, @@ -6718,10 +6718,14 @@ } }, "@metamask/snaps-controllers>tar-stream>streamx": { + "globals": { + "process.nextTick": true, + "queueMicrotask": true + }, "packages": { - "webpack>events": true, + "@metamask/snaps-controllers>tar-stream>streamx>events-universal": true, "@metamask/snaps-controllers>tar-stream>fast-fifo": true, - "@metamask/snaps-controllers>tar-stream>streamx>queue-tick": true + "@metamask/snaps-controllers>tar-stream>streamx>text-decoder": true } }, "browserify>string_decoder": { @@ -6756,6 +6760,11 @@ "@metamask/snaps-controllers>tar-stream>streamx": true } }, + "@metamask/snaps-controllers>tar-stream>streamx>text-decoder": { + "packages": { + "@metamask/snaps-controllers>tar-stream>b4a": true + } + }, "@ngraveio/bc-ur>sha.js>to-buffer": { "packages": { "@lavamoat/webpack>json-stable-stringify>isarray": true, diff --git a/lavamoat/webpack/mv3/experimental/policy.json b/lavamoat/webpack/mv3/experimental/policy.json index fed3335a75ab..cd4bc3ccc6df 100644 --- a/lavamoat/webpack/mv3/experimental/policy.json +++ b/lavamoat/webpack/mv3/experimental/policy.json @@ -4918,6 +4918,11 @@ "eth-method-registry>@metamask/ethjs-contract>ethjs-abi>number-to-bn": true } }, + "@metamask/snaps-controllers>tar-stream>streamx>events-universal": { + "packages": { + "webpack>events": true + } + }, "webpack>events": { "globals": { "console": true @@ -5787,11 +5792,6 @@ "string.prototype.matchall>side-channel": true } }, - "@metamask/snaps-controllers>tar-stream>streamx>queue-tick": { - "globals": { - "queueMicrotask": true - } - }, "@hello-pangea/dnd>raf-schd": { "globals": { "cancelAnimationFrame": true, @@ -6718,10 +6718,14 @@ } }, "@metamask/snaps-controllers>tar-stream>streamx": { + "globals": { + "process.nextTick": true, + "queueMicrotask": true + }, "packages": { - "webpack>events": true, + "@metamask/snaps-controllers>tar-stream>streamx>events-universal": true, "@metamask/snaps-controllers>tar-stream>fast-fifo": true, - "@metamask/snaps-controllers>tar-stream>streamx>queue-tick": true + "@metamask/snaps-controllers>tar-stream>streamx>text-decoder": true } }, "browserify>string_decoder": { @@ -6756,6 +6760,11 @@ "@metamask/snaps-controllers>tar-stream>streamx": true } }, + "@metamask/snaps-controllers>tar-stream>streamx>text-decoder": { + "packages": { + "@metamask/snaps-controllers>tar-stream>b4a": true + } + }, "@ngraveio/bc-ur>sha.js>to-buffer": { "packages": { "@lavamoat/webpack>json-stable-stringify>isarray": true, diff --git a/lavamoat/webpack/mv3/flask/policy.json b/lavamoat/webpack/mv3/flask/policy.json index fed3335a75ab..cd4bc3ccc6df 100644 --- a/lavamoat/webpack/mv3/flask/policy.json +++ b/lavamoat/webpack/mv3/flask/policy.json @@ -4918,6 +4918,11 @@ "eth-method-registry>@metamask/ethjs-contract>ethjs-abi>number-to-bn": true } }, + "@metamask/snaps-controllers>tar-stream>streamx>events-universal": { + "packages": { + "webpack>events": true + } + }, "webpack>events": { "globals": { "console": true @@ -5787,11 +5792,6 @@ "string.prototype.matchall>side-channel": true } }, - "@metamask/snaps-controllers>tar-stream>streamx>queue-tick": { - "globals": { - "queueMicrotask": true - } - }, "@hello-pangea/dnd>raf-schd": { "globals": { "cancelAnimationFrame": true, @@ -6718,10 +6718,14 @@ } }, "@metamask/snaps-controllers>tar-stream>streamx": { + "globals": { + "process.nextTick": true, + "queueMicrotask": true + }, "packages": { - "webpack>events": true, + "@metamask/snaps-controllers>tar-stream>streamx>events-universal": true, "@metamask/snaps-controllers>tar-stream>fast-fifo": true, - "@metamask/snaps-controllers>tar-stream>streamx>queue-tick": true + "@metamask/snaps-controllers>tar-stream>streamx>text-decoder": true } }, "browserify>string_decoder": { @@ -6756,6 +6760,11 @@ "@metamask/snaps-controllers>tar-stream>streamx": true } }, + "@metamask/snaps-controllers>tar-stream>streamx>text-decoder": { + "packages": { + "@metamask/snaps-controllers>tar-stream>b4a": true + } + }, "@ngraveio/bc-ur>sha.js>to-buffer": { "packages": { "@lavamoat/webpack>json-stable-stringify>isarray": true, diff --git a/lavamoat/webpack/mv3/main/policy.json b/lavamoat/webpack/mv3/main/policy.json index fed3335a75ab..cd4bc3ccc6df 100644 --- a/lavamoat/webpack/mv3/main/policy.json +++ b/lavamoat/webpack/mv3/main/policy.json @@ -4918,6 +4918,11 @@ "eth-method-registry>@metamask/ethjs-contract>ethjs-abi>number-to-bn": true } }, + "@metamask/snaps-controllers>tar-stream>streamx>events-universal": { + "packages": { + "webpack>events": true + } + }, "webpack>events": { "globals": { "console": true @@ -5787,11 +5792,6 @@ "string.prototype.matchall>side-channel": true } }, - "@metamask/snaps-controllers>tar-stream>streamx>queue-tick": { - "globals": { - "queueMicrotask": true - } - }, "@hello-pangea/dnd>raf-schd": { "globals": { "cancelAnimationFrame": true, @@ -6718,10 +6718,14 @@ } }, "@metamask/snaps-controllers>tar-stream>streamx": { + "globals": { + "process.nextTick": true, + "queueMicrotask": true + }, "packages": { - "webpack>events": true, + "@metamask/snaps-controllers>tar-stream>streamx>events-universal": true, "@metamask/snaps-controllers>tar-stream>fast-fifo": true, - "@metamask/snaps-controllers>tar-stream>streamx>queue-tick": true + "@metamask/snaps-controllers>tar-stream>streamx>text-decoder": true } }, "browserify>string_decoder": { @@ -6756,6 +6760,11 @@ "@metamask/snaps-controllers>tar-stream>streamx": true } }, + "@metamask/snaps-controllers>tar-stream>streamx>text-decoder": { + "packages": { + "@metamask/snaps-controllers>tar-stream>b4a": true + } + }, "@ngraveio/bc-ur>sha.js>to-buffer": { "packages": { "@lavamoat/webpack>json-stable-stringify>isarray": true,