Skip to content

Conversation

@matthiasgeihs
Copy link
Contributor

@matthiasgeihs matthiasgeihs commented Jul 10, 2025

Explanation

The dependencies @noble/hashes, @noble/ciphers, @noble/curves were mistakenly listed as dev-dependencies in seedless-controller. Moving them to main dependencies here.

Also upgrading all @noble dependencies to most recent version. In particular, @noble/ciphers has now a v1 which is audited.

References

Changelog

Checklist

  • I've updated the test suite for new or updated code as appropriate
  • I've updated documentation (JSDoc, Markdown, etc.) for new or updated code as appropriate
  • I've communicated my changes to consumers by updating changelogs for packages I've changed, highlighting breaking changes as necessary
  • I've prepared draft pull requests for clients and consumer packages to resolve any breaking changes

@matthiasgeihs matthiasgeihs requested review from a team as code owners July 10, 2025 14:57
@matthiasgeihs matthiasgeihs force-pushed the mg/fix-seedless-dependencies branch from c8788f9 to d2fe10f Compare July 14, 2025 09:15
@matthiasgeihs matthiasgeihs requested review from a team as code owners July 14, 2025 09:15
@matthiasgeihs matthiasgeihs force-pushed the mg/fix-seedless-dependencies branch from d2fe10f to 74026d4 Compare July 14, 2025 09:27
@matthiasgeihs matthiasgeihs changed the title Seedless controller: Add "@noble/ciphers" and "@noble/curves" as core dependencies Seedless controller: Add "@noble" dependencies as main dependencies Jul 14, 2025
"@metamask/base-controller": "^8.0.1",
"@metamask/controller-utils": "^11.11.0",
"@noble/hashes": "^1.4.0",
"@noble/hashes": "^1.8.0",
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Nit: instead of using no-changelog could we add a changelog entry for this bump

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

done

Comment on lines +106 to +107
"@noble/ciphers": "^1.3.0",
"@noble/hashes": "^1.8.0",
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Nit: instead of using no-changelog could we add a changelog entries for these bumps

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

done

Comment on lines +54 to +56
"@noble/ciphers": "^1.3.0",
"@noble/curves": "^1.9.2",
"@noble/hashes": "^1.8.0",
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Nit: instead of using no-changelog could we add a changelog entries for these bumps and that they are being now used as dependencies

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

done

@matthiasgeihs matthiasgeihs force-pushed the mg/fix-seedless-dependencies branch from 2983e5c to c0e611a Compare July 15, 2025 20:16
@matthiasgeihs
Copy link
Contributor Author

rebased

@matthiasgeihs matthiasgeihs force-pushed the mg/fix-seedless-dependencies branch from c0e611a to 29a2046 Compare July 16, 2025 11:47
@matthiasgeihs matthiasgeihs force-pushed the mg/fix-seedless-dependencies branch from 29a2046 to 79b0b08 Compare August 4, 2025 08:46
@mathieuartu
Copy link
Contributor

Thanks for doing this. LGTM!

I know this could be a hassle, but considering how critical backup & sync features are, could we please make sure to include client test-drive PRs to make sure:

  1. E2Es are still passing
  2. Manual backup and sync tests are successful

@mathieuartu
Copy link
Contributor

Thanks for doing this. LGTM!

I know this could be a hassle, but considering how critical backup & sync features are, could we please make sure to include client test-drive PRs to make sure:

  1. E2Es are still passing
  2. Manual backup and sync tests are successful

This can be done following those steps:

  1. Comment @metamaskbot publish-preview in the PR
  2. Wait for the release package to be published and copy the version
  3. Create branches in both mobile & extension repos
  4. Update their @metamask/profile-sync-controller entries in package.json to be npm:@metamask-previews/profile-sync-controller@PREVIEW_VERSION
  5. yarn
  6. Push and verify E2E CI

Copy link
Contributor

@lwin-kyaw lwin-kyaw left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@matthiasgeihs
Copy link
Contributor Author

@metamaskbot publish-preview

@github-actions
Copy link
Contributor

github-actions bot commented Aug 4, 2025

Preview builds have been published. See these instructions for more information about preview builds.

Expand for full list of packages and versions.
{
  "@metamask-previews/account-tree-controller": "0.7.0-preview-79b0b08",
  "@metamask-previews/accounts-controller": "32.0.1-preview-79b0b08",
  "@metamask-previews/address-book-controller": "6.1.1-preview-79b0b08",
  "@metamask-previews/announcement-controller": "7.0.3-preview-79b0b08",
  "@metamask-previews/app-metadata-controller": "1.0.0-preview-79b0b08",
  "@metamask-previews/approval-controller": "7.1.3-preview-79b0b08",
  "@metamask-previews/assets-controllers": "73.0.1-preview-79b0b08",
  "@metamask-previews/base-controller": "8.0.1-preview-79b0b08",
  "@metamask-previews/bridge-controller": "37.1.0-preview-79b0b08",
  "@metamask-previews/bridge-status-controller": "37.0.0-preview-79b0b08",
  "@metamask-previews/build-utils": "3.0.3-preview-79b0b08",
  "@metamask-previews/chain-agnostic-permission": "1.0.0-preview-79b0b08",
  "@metamask-previews/composable-controller": "11.0.0-preview-79b0b08",
  "@metamask-previews/controller-utils": "11.11.0-preview-79b0b08",
  "@metamask-previews/delegation-controller": "0.6.0-preview-79b0b08",
  "@metamask-previews/earn-controller": "4.0.0-preview-79b0b08",
  "@metamask-previews/eip1193-permission-middleware": "1.0.0-preview-79b0b08",
  "@metamask-previews/ens-controller": "17.0.1-preview-79b0b08",
  "@metamask-previews/error-reporting-service": "2.0.0-preview-79b0b08",
  "@metamask-previews/eth-json-rpc-provider": "4.1.8-preview-79b0b08",
  "@metamask-previews/foundryup": "1.0.1-preview-79b0b08",
  "@metamask-previews/gas-fee-controller": "24.0.0-preview-79b0b08",
  "@metamask-previews/json-rpc-engine": "10.0.3-preview-79b0b08",
  "@metamask-previews/json-rpc-middleware-stream": "8.0.7-preview-79b0b08",
  "@metamask-previews/keyring-controller": "22.1.0-preview-79b0b08",
  "@metamask-previews/logging-controller": "6.0.4-preview-79b0b08",
  "@metamask-previews/message-manager": "12.0.2-preview-79b0b08",
  "@metamask-previews/messenger": "0.0.0-preview-79b0b08",
  "@metamask-previews/multichain-account-service": "0.3.0-preview-79b0b08",
  "@metamask-previews/multichain-api-middleware": "1.0.0-preview-79b0b08",
  "@metamask-previews/multichain-network-controller": "0.11.0-preview-79b0b08",
  "@metamask-previews/multichain-transactions-controller": "4.0.0-preview-79b0b08",
  "@metamask-previews/name-controller": "8.0.3-preview-79b0b08",
  "@metamask-previews/network-controller": "24.0.1-preview-79b0b08",
  "@metamask-previews/notification-services-controller": "16.0.0-preview-79b0b08",
  "@metamask-previews/permission-controller": "11.0.6-preview-79b0b08",
  "@metamask-previews/permission-log-controller": "4.0.0-preview-79b0b08",
  "@metamask-previews/phishing-controller": "13.1.0-preview-79b0b08",
  "@metamask-previews/polling-controller": "14.0.0-preview-79b0b08",
  "@metamask-previews/preferences-controller": "18.4.1-preview-79b0b08",
  "@metamask-previews/profile-sync-controller": "23.0.0-preview-79b0b08",
  "@metamask-previews/rate-limit-controller": "6.0.3-preview-79b0b08",
  "@metamask-previews/remote-feature-flag-controller": "1.6.0-preview-79b0b08",
  "@metamask-previews/sample-controllers": "1.0.0-preview-79b0b08",
  "@metamask-previews/seedless-onboarding-controller": "2.5.0-preview-79b0b08",
  "@metamask-previews/selected-network-controller": "23.0.0-preview-79b0b08",
  "@metamask-previews/signature-controller": "32.0.0-preview-79b0b08",
  "@metamask-previews/token-search-discovery-controller": "3.3.0-preview-79b0b08",
  "@metamask-previews/transaction-controller": "59.0.0-preview-79b0b08",
  "@metamask-previews/user-operation-controller": "38.0.0-preview-79b0b08"
}

@matthiasgeihs
Copy link
Contributor Author

@mathieuartu have created PRs in mobile and extension, please have a look.
MetaMask/metamask-extension#34833
MetaMask/metamask-mobile#17907

Copy link
Contributor

@mathieuartu mathieuartu left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks a ton! Verified E2Es and did manual test runs, all seems to be working fine :)

@matthiasgeihs matthiasgeihs force-pushed the mg/fix-seedless-dependencies branch from 79b0b08 to b69aa52 Compare August 4, 2025 15:20
@matthiasgeihs matthiasgeihs enabled auto-merge (squash) August 4, 2025 15:20
@matthiasgeihs matthiasgeihs merged commit b390acc into main Aug 4, 2025
219 checks passed
@matthiasgeihs matthiasgeihs deleted the mg/fix-seedless-dependencies branch August 4, 2025 15:25
@AugmentedMode AugmentedMode mentioned this pull request Sep 24, 2025
4 tasks
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

6 participants