From a8696c7ab1a83fc0ad6552b7a88545ed08dd89af Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Fri, 29 May 2026 06:05:20 +0000 Subject: [PATCH 1/3] chore: Bump lavamoat from 11.1.2 to 11.1.3 Bumps [lavamoat](https://github.com/LavaMoat/lavamoat/tree/HEAD/packages/lavamoat-node) from 11.1.2 to 11.1.3. - [Release notes](https://github.com/LavaMoat/lavamoat/releases) - [Changelog](https://github.com/LavaMoat/LavaMoat/blob/main/packages/lavamoat-node/CHANGELOG.md) - [Commits](https://github.com/LavaMoat/lavamoat/commits/lavamoat-v11.1.3/packages/lavamoat-node) --- updated-dependencies: - dependency-name: lavamoat dependency-version: 11.1.3 dependency-type: direct:development update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] --- .../snaps-execution-environments/package.json | 2 +- yarn.lock | 47 +++++++++++++++---- 2 files changed, 40 insertions(+), 9 deletions(-) diff --git a/packages/snaps-execution-environments/package.json b/packages/snaps-execution-environments/package.json index 3f52cbe976..17139faa56 100644 --- a/packages/snaps-execution-environments/package.json +++ b/packages/snaps-execution-environments/package.json @@ -111,7 +111,7 @@ "jest-environment-node": "^29.5.0", "jest-fetch-mock": "^3.0.3", "jest-silent-reporter": "^0.6.0", - "lavamoat": "^11.1.2", + "lavamoat": "^11.1.3", "prettier": "^3.3.3", "rimraf": "^4.1.2", "serve-handler": "^6.1.5", diff --git a/yarn.lock b/yarn.lock index 2124218905..26b1281019 100644 --- a/yarn.lock +++ b/yarn.lock @@ -425,7 +425,7 @@ __metadata: languageName: node linkType: hard -"@babel/parser@npm:^7.1.0, @babel/parser@npm:^7.14.7, @babel/parser@npm:^7.20.15, @babel/parser@npm:^7.20.7, @babel/parser@npm:^7.21.3, @babel/parser@npm:^7.23.0, @babel/parser@npm:^7.23.9, @babel/parser@npm:^7.25.4, @babel/parser@npm:^7.27.1, @babel/parser@npm:^7.28.6, @babel/parser@npm:^7.29.0": +"@babel/parser@npm:7.29.3, @babel/parser@npm:^7.1.0, @babel/parser@npm:^7.14.7, @babel/parser@npm:^7.20.15, @babel/parser@npm:^7.20.7, @babel/parser@npm:^7.21.3, @babel/parser@npm:^7.23.0, @babel/parser@npm:^7.23.9, @babel/parser@npm:^7.25.4, @babel/parser@npm:^7.27.1, @babel/parser@npm:^7.28.6, @babel/parser@npm:^7.29.0": version: 7.29.3 resolution: "@babel/parser@npm:7.29.3" dependencies: @@ -4337,7 +4337,7 @@ __metadata: jest-environment-node: "npm:^29.5.0" jest-fetch-mock: "npm:^3.0.3" jest-silent-reporter: "npm:^0.6.0" - lavamoat: "npm:^11.1.2" + lavamoat: "npm:^11.1.3" prettier: "npm:^3.3.3" readable-stream: "npm:^3.6.2" rimraf: "npm:^4.1.2" @@ -13765,6 +13765,21 @@ __metadata: languageName: node linkType: hard +"lavamoat-core@npm:^18.0.4": + version: 18.0.4 + resolution: "lavamoat-core@npm:18.0.4" + dependencies: + "@babel/types": "npm:7.29.0" + "@lavamoat/types": "npm:^1.0.1" + json-stable-stringify: "npm:1.3.0" + lavamoat-tofu: "npm:^9.0.2" + ses: "npm:1.15.0" + bin: + lavamoat-sort-policy: src/policy-sort-cli.js + checksum: 10/28eee28b61275c349ab9d846e7d58f5a03499de2ea120448d463243217b4e6345cb7df902e72fdd331148b486229091bf9bd56939aa3d284bf811fb2e28c36fb + languageName: node + linkType: hard + "lavamoat-tofu@npm:^9.0.1": version: 9.0.1 resolution: "lavamoat-tofu@npm:9.0.1" @@ -13781,9 +13796,25 @@ __metadata: languageName: node linkType: hard -"lavamoat@npm:^11.1.2": - version: 11.1.2 - resolution: "lavamoat@npm:11.1.2" +"lavamoat-tofu@npm:^9.0.2": + version: 9.0.2 + resolution: "lavamoat-tofu@npm:9.0.2" + dependencies: + "@babel/parser": "npm:7.29.3" + "@babel/traverse": "npm:7.29.0" + "@babel/types": "npm:7.29.0" + "@lavamoat/types": "npm:^1.0.1" + "@types/babel__traverse": "npm:7.28.0" + type-fest: "npm:4.41.0" + peerDependencies: + lavamoat-core: ">15.4.0" + checksum: 10/b80fc9961c91922e2f0cef8cdf6235258770af37ad0972029d91bfdef424534408b13b7987058902fe416e64a5e7cbbb4e84ab3756709c2753383d7eeeb88071 + languageName: node + linkType: hard + +"lavamoat@npm:^11.1.3": + version: 11.1.3 + resolution: "lavamoat@npm:11.1.3" dependencies: "@babel/code-frame": "npm:7.29.0" "@babel/highlight": "npm:7.25.9" @@ -13791,15 +13822,15 @@ __metadata: bindings: "npm:1.5.0" corepack: "npm:0.34.6" htmlescape: "npm:1.1.1" - lavamoat-core: "npm:^18.0.3" - lavamoat-tofu: "npm:^9.0.1" + lavamoat-core: "npm:^18.0.4" + lavamoat-tofu: "npm:^9.0.2" node-gyp-build: "npm:4.8.4" resolve: "npm:1.22.12" yargs: "npm:17.7.2" bin: lavamoat: src/cli.js lavamoat-run-command: src/run-command.js - checksum: 10/760650b650ec636bc635126ab2cbf00c9e7b4888a0df7f9cf85c1719f9dfe889b9bbe1ffa0367758688ac7bfa62624daeb1fa33a65132487fde7489949f605a0 + checksum: 10/e2920689d90829cadc6ccf1650ba6f060e43a167f93191ddfda6e98ea4a73418d4598bd15d00b4f2db4a539f6edce8cf899fae310c29ef96f77b0a6dca8e5da1 languageName: node linkType: hard From ae47e339a26f93a4f3a617dfc8f551014de3411e Mon Sep 17 00:00:00 2001 From: MetaMask Bot Date: Fri, 29 May 2026 06:14:37 +0000 Subject: [PATCH 2/3] [dependabot skip] Deduplicate yarn.lock --- yarn.lock | 33 +-------------------------------- 1 file changed, 1 insertion(+), 32 deletions(-) diff --git a/yarn.lock b/yarn.lock index 26b1281019..cf00680566 100644 --- a/yarn.lock +++ b/yarn.lock @@ -13750,22 +13750,7 @@ __metadata: languageName: node linkType: hard -"lavamoat-core@npm:^18.0.3": - version: 18.0.3 - resolution: "lavamoat-core@npm:18.0.3" - dependencies: - "@babel/types": "npm:7.29.0" - "@lavamoat/types": "npm:^1.0.1" - json-stable-stringify: "npm:1.3.0" - lavamoat-tofu: "npm:^9.0.1" - ses: "npm:1.15.0" - bin: - lavamoat-sort-policy: src/policy-sort-cli.js - checksum: 10/606d1f34357b53f6290e9932791278b3ea586099c226672abd1d138713e250a4bdbde291a84f963486edb7963803002e654ee10fd6152aacaaa1670c104ac72d - languageName: node - linkType: hard - -"lavamoat-core@npm:^18.0.4": +"lavamoat-core@npm:^18.0.3, lavamoat-core@npm:^18.0.4": version: 18.0.4 resolution: "lavamoat-core@npm:18.0.4" dependencies: @@ -13780,22 +13765,6 @@ __metadata: languageName: node linkType: hard -"lavamoat-tofu@npm:^9.0.1": - version: 9.0.1 - resolution: "lavamoat-tofu@npm:9.0.1" - dependencies: - "@babel/parser": "npm:7.29.2" - "@babel/traverse": "npm:7.29.0" - "@babel/types": "npm:7.29.0" - "@lavamoat/types": "npm:^1.0.1" - "@types/babel__traverse": "npm:7.28.0" - type-fest: "npm:4.41.0" - peerDependencies: - lavamoat-core: ">15.4.0" - checksum: 10/ec323dd154bd42159a05c47ffe3dff6568166edde6a366ea9de33caf4a6ce58d0b777cf717e60634da7d40e2cbc2e824611fb07229608d839e2f343b93c6f0cb - languageName: node - linkType: hard - "lavamoat-tofu@npm:^9.0.2": version: 9.0.2 resolution: "lavamoat-tofu@npm:9.0.2" From 32d0502ac906ba8ffa74d7ba19fe7b563032b448 Mon Sep 17 00:00:00 2001 From: MetaMask Bot Date: Fri, 29 May 2026 06:14:38 +0000 Subject: [PATCH 3/3] [dependabot skip] Update LavaMoat policies --- .../lavamoat/build-system/policy.json | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/packages/snaps-execution-environments/lavamoat/build-system/policy.json b/packages/snaps-execution-environments/lavamoat/build-system/policy.json index 7a178dc54c..0394ac3434 100644 --- a/packages/snaps-execution-environments/lavamoat/build-system/policy.json +++ b/packages/snaps-execution-environments/lavamoat/build-system/policy.json @@ -731,7 +731,7 @@ "console.log": true }, "packages": { - "lavamoat>lavamoat-tofu>@babel/parser": true, + "depcheck>@babel/parser": true, "depcheck>@babel/traverse": true } },