Bump @metamask/controllers from 26.0.0 to 30.3.0

[dependabot]

Bumps @metamask/controllers from 26.0.0 to 30.3.0.

Release notes

Sourced from @​metamask/controllers's releases.

30.3.0

Added

• Add new functionality to the CollectiblesController to verify the transaction state of a collectible (#762).
  • Add new method to the CollectiblesController to search a Collectible by smart contract address and token ID (findCollectibleByAddressAndTokenId).
  • Add new method to the CollectiblesController to update the state of a Collectible (updateCollectible).
  • Add new method to the CollectiblesController to reset the transaction status of a Collectible (resetCollectibleTransactionStatusByTransactionId).
• Add new method validatePassword to KeyringController to validate the password (#884)
• Add formatIconUrlWithProxy function for formatting iconUrl Proxy for tokens from Swaps API (#889)

30.2.0

Changed

• Updated the Testnet Ticker string format to be prefixed with the network name (e.g. ETH) (#868)

30.1.0

Added

• Allow clients to avoid third party tokenlist polling (#861):
  • Added a new configuration property preventPollingOnNetworkRestart is added to TokenListController.
  • Added a method to update the new preventPollingOnNetworkRestart property value.
  • Added a method to reset the tokenList and tokensChainsCache properties in state.

30.0.2

Added

• Adds method isTokenListSupportedForNetwork which returns SupportedTokenDetectionNetworks plus the local ganache network chainId. Then changes TokenListController to use this method to check whether or not to start polling, so that polling can occur on ganache networks to allow for e2e testing (#855)

30.0.1

Fixed

• Change formatIconUrlWithProxy to accept hex strings for chainId (#851)
• This change fixes an issue introduced in v30.0.0 for metamask-extension where the chainId is currently represented as a hexadecimal in the TokensController and was, as a result, getting invalid URL responses from formatIconUrlWithProxy which previously expected its chainId argument to be in decimal format.

30.0.0

Added

• BREAKING: Introduce getNetworkState, getPreferencesState, and onTokenListStateChange to the TokenDetectionController constructor options object (#808)
  • getPreferencesState provides the default value for useTokenDetection from the PreferencesController state.
  • getNetworkState provides the default value for chainId from the NetworkController state.
  • onTokenListStateChange listener triggers a detect action whenever the TokenListController finishes fetching a token list.
• BREAKING: Update AssetsContractController to keep track of the current network (accessible via config.chainId) as well as whether the network supports token detection (#809)
  • Consumers will need to pass listener method onNetworkStateChange in AssetsContractController constructor options object. This method should be called with network/provider details when network changes occur.
• Add onCollectibleAdded event handler to the CollectiblesController constructor (#814)
  • This event handler was added to allow us to capture metrics.

Changed

• BREAKING: Rename addTokens on the TokenDetectionController constructor options object to addDetectedTokens (#808)
  • We are no longer automatically adding detected tokens to the wallet. This will provide users with the ability to manually import or ignore detected tokens.
• BREAKING: Rename useStaticTokenList to useTokenDetection on the PreferencesController constructor options object and set the value to be true by default (#808)
  • Token detection will now be enabled by default.
• BREAKING: Append phishfort blocklist to list used by PhishingController (#715)
  • The test method on PhishingController no longer returns a boolean, it now returns an object matching the EthPhishingDetectResult interface (defined in PhishingController.ts).
  • Designs may need to be updated to account for the fact that sites may now be blocked by Phishfort. We should ensure users are not directed to the eth-phishing-detect repository to dispute Phishfort blocks, because we will not be able to help them.
• BREAKING: Rename convertPriceToDecimal function name to convertHexToDecimal (#808)
• Rename fetchFromDynamicTokenList to fetchTokenList (#806)

... (truncated)

Changelog

Sourced from @​metamask/controllers's changelog.

[30.3.0]

Added

• Add new functionality to the CollectiblesController to verify the transaction state of a collectible (#762).
  • Add new method to the CollectiblesController to search a Collectible by smart contract address and token ID (findCollectibleByAddressAndTokenId).
  • Add new method to the CollectiblesController to update the state of a Collectible (updateCollectible).
  • Add new method to the CollectiblesController to reset the transaction status of a Collectible (resetCollectibleTransactionStatusByTransactionId).
• Add new method validatePassword to KeyringController to validate the password (#884)
• Add formatIconUrlWithProxy function for formatting iconUrl Proxy for tokens from Swaps API (#889)

[30.2.0]

Changed

• Updated the Testnet Ticker string format to be prefixed with the network name (e.g. ETH) (#868)

[30.1.0]

Added

• Allow clients to avoid third party tokenlist polling (#861):
  • Added a new configuration property preventPollingOnNetworkRestart is added to TokenListController.
  • Added a method to update the new preventPollingOnNetworkRestart property value.
  • Added a method to reset the tokenList and tokensChainsCache properties in state.

[30.0.2]

Added

• Adds method isTokenListSupportedForNetwork which returns SupportedTokenDetectionNetworks plus the local ganache network chainId. Then changes TokenListController to use this method to check whether or not to start polling, so that polling can occur on ganache networks to allow for e2e testing (#855)

[30.0.1]

Fixed

• Change formatIconUrlWithProxy to accept hex strings for chainId (#851)
• This change fixes an issue introduced in v30.0.0 for metamask-extension where the chainId is currently represented as a hexadecimal in the TokensController and was, as a result, getting invalid URL responses from formatIconUrlWithProxy which previously expected its chainId argument to be in decimal format.

[30.0.0]

Added

• BREAKING: Introduce getNetworkState, getPreferencesState, and onTokenListStateChange to the TokenDetectionController constructor options object (#808)
  • getPreferencesState provides the default value for useTokenDetection from the PreferencesController state.
  • getNetworkState provides the default value for chainId from the NetworkController state.
  • onTokenListStateChange listener triggers a detect action whenever the TokenListController finishes fetching a token list.
• BREAKING: Update AssetsContractController to keep track of the current network (accessible via config.chainId) as well as whether the network supports token detection (#809)
  • Consumers will need to pass listener method onNetworkStateChange in AssetsContractController constructor options object. This method should be called with network/provider details when network changes occur.
• Add onCollectibleAdded event handler to the CollectiblesController constructor (#814)
  • This event handler was added to allow us to capture metrics.

Changed

• BREAKING: Rename addTokens on the TokenDetectionController constructor options object to addDetectedTokens (#808)
  • We are no longer automatically adding detected tokens to the wallet. This will provide users with the ability to manually import or ignore detected tokens.
• BREAKING: Rename useStaticTokenList to useTokenDetection on the PreferencesController constructor options object and set the value to be true by default (#808)
  • Token detection will now be enabled by default.
• BREAKING: Append phishfort blocklist to list used by PhishingController (#715)
  • The test method on PhishingController no longer returns a boolean, it now returns an object matching the EthPhishingDetectResult interface (defined in PhishingController.ts).
  • Designs may need to be updated to account for the fact that sites may now be blocked by Phishfort. We should ensure users are not directed to the eth-phishing-detect repository to dispute Phishfort blocks, because we will not be able to help them.
• BREAKING: Rename convertPriceToDecimal function name to convertHexToDecimal (#808)
• Rename fetchFromDynamicTokenList to fetchTokenList (#806)

... (truncated)

Commits

• 62ba2a3 30.3.0 (#892)
• 9e8f35e Update is-release filter (#891)
• 2e8bf4e Exporting formatIconUrlWithProxy to format iconUrl Proxy for tokens from swap...
• 4012330 Fix/keep nft when transaction fail (#762)
• 9b70924 Add method to validate keyring password (#884)
• eaab028 update is-release filter (#888)
• dc32d17 use MetaMask/action-is-release@v1.0 (#883)
• f24adf7 30.2.0 (#881)
• 15129ad turn check-release step into job (#874)
• 7de1070 check release (#873)
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by metamaskbot, a new releaser for @​metamask/controllers since your current version.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[socket-security]

Socket Security Report

Dependency issues detected. If you merge this pull request, you will not be alerted to the instances of these issues again.

📜 New install scripts detected

A dependency change in this PR is introducing new install scripts to your install step.

Package	Script field	Location
secp256k1@4.0.3 (upgraded)	binding.gyp	package.json via ethereumjs-util@7.1.5, ethereum-cryptography@0.1.3
secp256k1@4.0.3 (upgraded)	install	package.json via ethereumjs-util@7.1.5, ethereum-cryptography@0.1.3

🫣 Native code

Contains native code which could be a vector to obscure malicious code, and generally decrease the likelihood of reproducible or reliable installs.

Package	Location
secp256k1@4.0.3 (upgraded)	package.json via ethereumjs-util@7.1.5, ethereum-cryptography@0.1.3

Socket.dev scan summary

Issue	Status
Did you mean?	✅ no new possible package typos
Install scripts	⚠️ 2 new install scripts detected
Telemetry	✅ no new telemetry
Troll package	✅ no new troll packages
Malware	✅ no new malware
Native code	⚠️ 1 new native module detected

Powered by socket.dev

[dependabot]

Superseded by #132.