From c2b03b2be1d9e4f08f84dcf85d1b2ccbba050073 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Fri, 29 May 2026 06:06:03 +0000 Subject: [PATCH 1/3] chore: Bump @lavamoat/webpack from 2.2.1 to 2.2.2 Bumps [@lavamoat/webpack](https://github.com/LavaMoat/lavamoat/tree/HEAD/packages/webpack) from 2.2.1 to 2.2.2. - [Release notes](https://github.com/LavaMoat/lavamoat/releases) - [Changelog](https://github.com/LavaMoat/LavaMoat/blob/main/packages/webpack/CHANGELOG.md) - [Commits](https://github.com/LavaMoat/lavamoat/commits/webpack-v2.2.2/packages/webpack) --- updated-dependencies: - dependency-name: "@lavamoat/webpack" dependency-version: 2.2.2 dependency-type: direct:development update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] --- .../snaps-execution-environments/package.json | 2 +- yarn.lock | 47 +++++++++++++++---- 2 files changed, 40 insertions(+), 9 deletions(-) diff --git a/packages/snaps-execution-environments/package.json b/packages/snaps-execution-environments/package.json index 3f52cbe976..4887466189 100644 --- a/packages/snaps-execution-environments/package.json +++ b/packages/snaps-execution-environments/package.json @@ -92,7 +92,7 @@ "@esbuild-plugins/node-modules-polyfill": "^0.2.2", "@lavamoat/allow-scripts": "^4.0.0", "@lavamoat/lavatube": "^1.0.0", - "@lavamoat/webpack": "^2.2.1", + "@lavamoat/webpack": "^2.2.2", "@metamask/auto-changelog": "^6.1.1", "@swc/core": "1.11.31", "@swc/jest": "^0.2.38", diff --git a/yarn.lock b/yarn.lock index 2124218905..9fa696e1f4 100644 --- a/yarn.lock +++ b/yarn.lock @@ -425,7 +425,7 @@ __metadata: languageName: node linkType: hard -"@babel/parser@npm:^7.1.0, @babel/parser@npm:^7.14.7, @babel/parser@npm:^7.20.15, @babel/parser@npm:^7.20.7, @babel/parser@npm:^7.21.3, @babel/parser@npm:^7.23.0, @babel/parser@npm:^7.23.9, @babel/parser@npm:^7.25.4, @babel/parser@npm:^7.27.1, @babel/parser@npm:^7.28.6, @babel/parser@npm:^7.29.0": +"@babel/parser@npm:7.29.3, @babel/parser@npm:^7.1.0, @babel/parser@npm:^7.14.7, @babel/parser@npm:^7.20.15, @babel/parser@npm:^7.20.7, @babel/parser@npm:^7.21.3, @babel/parser@npm:^7.23.0, @babel/parser@npm:^7.23.9, @babel/parser@npm:^7.25.4, @babel/parser@npm:^7.27.1, @babel/parser@npm:^7.28.6, @babel/parser@npm:^7.29.0": version: 7.29.3 resolution: "@babel/parser@npm:7.29.3" dependencies: @@ -2781,20 +2781,20 @@ __metadata: languageName: node linkType: hard -"@lavamoat/webpack@npm:^2.2.1": - version: 2.2.1 - resolution: "@lavamoat/webpack@npm:2.2.1" +"@lavamoat/webpack@npm:^2.2.2": + version: 2.2.2 + resolution: "@lavamoat/webpack@npm:2.2.2" dependencies: - "@babel/parser": "npm:7.29.2" + "@babel/parser": "npm:7.29.3" "@lavamoat/aa": "npm:^5.0.1" "@lavamoat/types": "npm:^1.0.1" browser-resolve: "npm:2.0.0" json-stable-stringify: "npm:1.3.0" - lavamoat-core: "npm:^18.0.3" + lavamoat-core: "npm:^18.0.4" ses: "npm:1.15.0" peerDependencies: webpack: ^5.80.2 - checksum: 10/dc2841f18a893b020d91dcff2f5efad01614614f0b874fc40dd7fd193f7def912e0f6f74cacee29a98c75a36afc343cb5fbc6c3a759d0d12aa634f1a41a8b49b + checksum: 10/a2f04932a78a3a88a6a72d600b950f6b776b7793cd9fd7f355b525672a3771fb4f380bdfdb2b647b2b5d84f02f39590b37199f736ccb9c6adba7dc3fb9e2f911 languageName: node linkType: hard @@ -4309,7 +4309,7 @@ __metadata: "@esbuild-plugins/node-modules-polyfill": "npm:^0.2.2" "@lavamoat/allow-scripts": "npm:^4.0.0" "@lavamoat/lavatube": "npm:^1.0.0" - "@lavamoat/webpack": "npm:^2.2.1" + "@lavamoat/webpack": "npm:^2.2.2" "@metamask/auto-changelog": "npm:^6.1.1" "@metamask/json-rpc-engine": "npm:^10.5.0" "@metamask/object-multiplex": "npm:^2.1.0" @@ -13765,6 +13765,21 @@ __metadata: languageName: node linkType: hard +"lavamoat-core@npm:^18.0.4": + version: 18.0.4 + resolution: "lavamoat-core@npm:18.0.4" + dependencies: + "@babel/types": "npm:7.29.0" + "@lavamoat/types": "npm:^1.0.1" + json-stable-stringify: "npm:1.3.0" + lavamoat-tofu: "npm:^9.0.2" + ses: "npm:1.15.0" + bin: + lavamoat-sort-policy: src/policy-sort-cli.js + checksum: 10/28eee28b61275c349ab9d846e7d58f5a03499de2ea120448d463243217b4e6345cb7df902e72fdd331148b486229091bf9bd56939aa3d284bf811fb2e28c36fb + languageName: node + linkType: hard + "lavamoat-tofu@npm:^9.0.1": version: 9.0.1 resolution: "lavamoat-tofu@npm:9.0.1" @@ -13781,6 +13796,22 @@ __metadata: languageName: node linkType: hard +"lavamoat-tofu@npm:^9.0.2": + version: 9.0.2 + resolution: "lavamoat-tofu@npm:9.0.2" + dependencies: + "@babel/parser": "npm:7.29.3" + "@babel/traverse": "npm:7.29.0" + "@babel/types": "npm:7.29.0" + "@lavamoat/types": "npm:^1.0.1" + "@types/babel__traverse": "npm:7.28.0" + type-fest: "npm:4.41.0" + peerDependencies: + lavamoat-core: ">15.4.0" + checksum: 10/b80fc9961c91922e2f0cef8cdf6235258770af37ad0972029d91bfdef424534408b13b7987058902fe416e64a5e7cbbb4e84ab3756709c2753383d7eeeb88071 + languageName: node + linkType: hard + "lavamoat@npm:^11.1.2": version: 11.1.2 resolution: "lavamoat@npm:11.1.2" From 4e8b3c695e065fa107cdd2732209182a40aa1879 Mon Sep 17 00:00:00 2001 From: MetaMask Bot Date: Fri, 29 May 2026 06:15:46 +0000 Subject: [PATCH 2/3] [dependabot skip] Deduplicate yarn.lock --- yarn.lock | 46 ++-------------------------------------------- 1 file changed, 2 insertions(+), 44 deletions(-) diff --git a/yarn.lock b/yarn.lock index 9fa696e1f4..a337c2a4ad 100644 --- a/yarn.lock +++ b/yarn.lock @@ -414,17 +414,6 @@ __metadata: languageName: node linkType: hard -"@babel/parser@npm:7.29.2": - version: 7.29.2 - resolution: "@babel/parser@npm:7.29.2" - dependencies: - "@babel/types": "npm:^7.29.0" - bin: - parser: ./bin/babel-parser.js - checksum: 10/45d050bf75aa5194b3255f156173e8553d615ff5a2434674cc4a10cdc7c261931befb8618c996a1c449b87f0ef32a3407879af2ac967d95dc7b4fdbae7037efa - languageName: node - linkType: hard - "@babel/parser@npm:7.29.3, @babel/parser@npm:^7.1.0, @babel/parser@npm:^7.14.7, @babel/parser@npm:^7.20.15, @babel/parser@npm:^7.20.7, @babel/parser@npm:^7.21.3, @babel/parser@npm:^7.23.0, @babel/parser@npm:^7.23.9, @babel/parser@npm:^7.25.4, @babel/parser@npm:^7.27.1, @babel/parser@npm:^7.28.6, @babel/parser@npm:^7.29.0": version: 7.29.3 resolution: "@babel/parser@npm:7.29.3" @@ -13750,22 +13739,7 @@ __metadata: languageName: node linkType: hard -"lavamoat-core@npm:^18.0.3": - version: 18.0.3 - resolution: "lavamoat-core@npm:18.0.3" - dependencies: - "@babel/types": "npm:7.29.0" - "@lavamoat/types": "npm:^1.0.1" - json-stable-stringify: "npm:1.3.0" - lavamoat-tofu: "npm:^9.0.1" - ses: "npm:1.15.0" - bin: - lavamoat-sort-policy: src/policy-sort-cli.js - checksum: 10/606d1f34357b53f6290e9932791278b3ea586099c226672abd1d138713e250a4bdbde291a84f963486edb7963803002e654ee10fd6152aacaaa1670c104ac72d - languageName: node - linkType: hard - -"lavamoat-core@npm:^18.0.4": +"lavamoat-core@npm:^18.0.3, lavamoat-core@npm:^18.0.4": version: 18.0.4 resolution: "lavamoat-core@npm:18.0.4" dependencies: @@ -13780,23 +13754,7 @@ __metadata: languageName: node linkType: hard -"lavamoat-tofu@npm:^9.0.1": - version: 9.0.1 - resolution: "lavamoat-tofu@npm:9.0.1" - dependencies: - "@babel/parser": "npm:7.29.2" - "@babel/traverse": "npm:7.29.0" - "@babel/types": "npm:7.29.0" - "@lavamoat/types": "npm:^1.0.1" - "@types/babel__traverse": "npm:7.28.0" - type-fest: "npm:4.41.0" - peerDependencies: - lavamoat-core: ">15.4.0" - checksum: 10/ec323dd154bd42159a05c47ffe3dff6568166edde6a366ea9de33caf4a6ce58d0b777cf717e60634da7d40e2cbc2e824611fb07229608d839e2f343b93c6f0cb - languageName: node - linkType: hard - -"lavamoat-tofu@npm:^9.0.2": +"lavamoat-tofu@npm:^9.0.1, lavamoat-tofu@npm:^9.0.2": version: 9.0.2 resolution: "lavamoat-tofu@npm:9.0.2" dependencies: From a6dedc1adb4eba8c26c55fa0f311db03dbbbb6ab Mon Sep 17 00:00:00 2001 From: MetaMask Bot Date: Fri, 29 May 2026 06:15:47 +0000 Subject: [PATCH 3/3] [dependabot skip] Update LavaMoat policies --- .../lavamoat/build-system/policy.json | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/packages/snaps-execution-environments/lavamoat/build-system/policy.json b/packages/snaps-execution-environments/lavamoat/build-system/policy.json index 7a178dc54c..b16902264c 100644 --- a/packages/snaps-execution-environments/lavamoat/build-system/policy.json +++ b/packages/snaps-execution-environments/lavamoat/build-system/policy.json @@ -126,7 +126,7 @@ "process._rawDebug": true }, "packages": { - "@lavamoat/webpack>@babel/parser": true, + "depcheck>@babel/parser": true, "lavamoat>@lavamoat/aa": true, "@lavamoat/webpack>browser-resolve": true, "lavamoat>lavamoat-core": true, @@ -731,7 +731,7 @@ "console.log": true }, "packages": { - "lavamoat>lavamoat-tofu>@babel/parser": true, + "depcheck>@babel/parser": true, "depcheck>@babel/traverse": true } },