-
Notifications
You must be signed in to change notification settings - Fork 5.4k
chore: Update JSON-RPC related packages #36954
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
base: main
Are you sure you want to change the base?
Conversation
Review the following changes in direct dependencies. Learn more about Socket for GitHub.
|
All alerts resolved. Learn more about Socket for GitHub. This PR previously contained dependency changes with security issues that have been resolved, removed, or ignored. Ignoring alerts on:
|
3dc67a8
to
616116e
Compare
@metamaskbot update-policies |
@SocketSecurity ignore npm/@metamask/[email protected] Trusted author |
Policies updated. 🧠 Learn how: https://lavamoat.github.io/guides/policy-diff/#what-to-look-for-when-reviewing-a-policy-diff |
✨ Files requiring CODEOWNER review ✨🧩 @MetaMask/extension-devs (5 files, +15 -85)
📜 @MetaMask/policy-reviewers (5 files, +15 -85)
Tip Follow the policy review process outlined in the LavaMoat Policy Review Process doc before expecting an approval from Policy Reviewers. 🔗 @MetaMask/supply-chain (5 files, +15 -85)
|
Update JSON-RPC related packages. This includes two major updates: * `eth-json-rpc-provider` is updated from v4 to v5 * The breaking change is the removal of the `data` event, which we don't use. * Changelog: https://github.com/MetaMask/core/blob/main/packages/eth-json-rpc-provider/CHANGELOG.md#500 * `eth-json-rpc-middlware` is updated from v18 to v21 * Breaking changes include: * Remove `ethersProviderAsMiddleware` (which we don't use). * Add `exports` field, which breaks sub-path exports (which we don't use). * Update minimum Node.js version from v18.16 to v18.18 * Changelogs: * Old repo: https://github.com/MetaMask/eth-json-rpc-middleware/blob/main/CHANGELOG.md * Core: https://github.com/MetaMask/core/blob/main/packages/eth-json-rpc-middleware/CHANGELOG.md#2100 The `@metamask/network-controller` has also been updated to a later version that uses these updated JSON-RPC packages. This version includes a new `lookupNetwork` parameter for the `initializeProvider` method, which lets us finally eliminate the `network-controller` patch we have to prevent the `lookupNetwork` call during initialization.
581a270
to
c127664
Compare
📊 Page Load Benchmark ResultsCurrent Commit: 📄 Localhost MetaMask Test DappSamples: 100 Summary
📈 Detailed Results
Results generated automatically by MetaMask CI |
Builds ready [581a270]
UI Startup Metrics (1231 ± 64 ms)
Bundle size diffs [🚀 Bundle size reduced!]
|
❌ test-e2e-chrome-api-specs failed. View the html report here. |
📊 Page Load Benchmark ResultsCurrent Commit: 📄 Localhost MetaMask Test DappSamples: 100 Summary
📈 Detailed Results
Results generated automatically by MetaMask CI |
Builds ready [c127664]
UI Startup Metrics (1243 ± 66 ms)
Bundle size diffs [🚀 Bundle size reduced!]
|
Blocked by #36061 |
Description
Update JSON-RPC related packages. This includes two major updates:
eth-json-rpc-provider
is updated from v4 to v5data
event, which we don't use.eth-json-rpc-middlware
is updated from v18 to v21ethersProviderAsMiddleware
(which we don't use).exports
field, which breaks sub-path exports (which we don't use).The
@metamask/network-controller
has also been updated to a later version that uses these updated JSON-RPC packages. This version includes a newlookupNetwork
parameter for theinitializeProvider
method, which lets us finally eliminate thenetwork-controller
patch we have to prevent thelookupNetwork
call during initialization.Changelog
CHANGELOG entry: null
Related issues
N/A
Manual testing steps
N/A
Screenshots/Recordings
N/A
Pre-merge author checklist
Pre-merge reviewer checklist