Skip to content

Conversation

@ccharly
Copy link
Contributor

@ccharly ccharly commented Oct 7, 2025

Bumping all accounts dependencies to the latest so we can start re-using this Snap to do dev testing.


Note

Upgrades MetaMask keyring to v21 with new snap client/sdk, updates imports and account scopes, and adds a Yarn patch for @noble/hashes to resolve crypto in bundlers.

  • Dependencies
    • Upgrade @metamask/keyring-api to ^21.0.0 and add @metamask/keyring-snap-client (site) and @metamask/keyring-snap-sdk (snap).
    • Add Yarn patch for @noble/hashes@1.7.1 and set resolutions; fallback to Node crypto when webcrypto is unavailable in bundlers.
  • Site (packages/site)
    • Switch KeyringSnapRpcClient import to @metamask/keyring-snap-client.
  • Snap (packages/snap)
    • Move keyring request handling and event emission to @metamask/keyring-snap-sdk and update types (KeyringEventPayload).
    • Add scopes: [EthScope.Eoa] to created accounts and make #emitEvent generic.
  • Manifest
    • Update snap.manifest.json source.shasum.

Written by Cursor Bugbot for commit fd8bf57. This will update automatically on new commits. Configure here.

cursor[bot]

This comment was marked as outdated.

@socket-security
Copy link

socket-security bot commented Oct 7, 2025

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Added@​metamask/​keyring-snap-client@​8.0.0991007397100
Added@​metamask/​keyring-snap-sdk@​7.0.0731007392100
Updated@​metamask/​keyring-api@​8.1.3 ⏵ 21.0.0100 +110010099 +750 -50

View full report

@socket-security
Copy link

socket-security bot commented Oct 7, 2025

All alerts resolved. Learn more about Socket for GitHub.

This PR previously contained dependency changes with security issues that have been resolved, removed, or ignored.

Ignoring alerts on:

  • @ethereumjs/util@9.1.0

View full report

@ccharly
Copy link
Contributor Author

ccharly commented Oct 7, 2025

@SocketSecurity ignore npm/@ethereumjs/util@9.1.0

  • This repo is a dev-tool
  • We already use this dependency in other repos

cursor[bot]

This comment was marked as outdated.

Comment on lines +62 to +64
"@noble/hashes@^1.1.2": "patch:@noble/hashes@npm%3A1.7.1#./.yarn/patches/@noble-hashes-npm-1.7.1-4106ab26c5.patch",
"@noble/hashes@^1.3.1": "patch:@noble/hashes@npm%3A1.7.1#./.yarn/patches/@noble-hashes-npm-1.7.1-4106ab26c5.patch",
"@noble/hashes@^1.3.2": "patch:@noble/hashes@npm%3A1.7.1#./.yarn/patches/@noble-hashes-npm-1.7.1-4106ab26c5.patch"
Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

We only add the resolutions for the packages that were causing the webpack build issue

@ccharly ccharly enabled auto-merge (squash) November 28, 2025 12:27
@ccharly ccharly merged commit f65dabc into main Nov 28, 2025
18 checks passed
@ccharly ccharly deleted the chore/bump-account-deps branch November 28, 2025 12:27
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants