Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Snyk] Upgrade @metamask/key-tree from 7.0.0 to 7.1.1 #2

Merged
merged 1 commit into from
Jul 22, 2024

Conversation

Elenore23
Copy link
Owner

This PR was automatically created by Snyk using the credentials of a real user.


![snyk-top-banner](https://github.com/andygongea/OWASP-Benchmark/assets/818805/c518c423-16fe-447e-b67f-ad5a49b5d123)

Snyk has created this PR to upgrade @metamask/key-tree from 7.0.0 to 7.1.1.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.


  • The recommended version is 2 versions ahead of your current version.

  • The recommended version was released on a year ago.

Release notes
Package name: @metamask/key-tree
  • 7.1.1 - 2023-06-20

    Fixed

    • Fix isValidBIP32PathSegment to correctly check if BIP-32 path segment is <= 2^31-1 (#134)
  • 7.1.0 - 2023-06-20

    Added

    • Add isValidBIP32PathSegment function (#131)

    Changed

    • Bump @ metamask/utils to 6.0.1 (#132)
  • 7.0.0 - 2023-03-10

    Added

    • BREAKING: Add SLIP-10 (slip10:) path type (#124)
      • bip32: can no longer be used to derive ed25519 keys

    Changed

    • Handle errors when resulting public or private key is invalid (#120)
      • Rather than throwing an error, a new key will be derived instead, as per the SLIP-10 or BIP-32 specification
    • Improve extended key validation (#121)
    • Validate that master private key and seed are within bounds (#118)
    • Allow zero private key for ed25519 (#122)
      • Previously a zero private key 0x000..000 would be rejected when using ed25519, but all private keys are valid for ed25519
from @metamask/key-tree GitHub release notes

Important

  • Check the changes in this PR to ensure they won't cause issues with your project.
  • This PR was automatically created by Snyk using the credentials of a real user.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

Snyk has created this PR to upgrade @metamask/key-tree from 7.0.0 to 7.1.1.

See this package in npm:
@metamask/key-tree

See this project in Snyk:
https://app.snyk.io/org/elenore23/project/3692f0d5-459f-4f0b-9e69-39c600d8d11b?utm_source=github&utm_medium=referral&page=upgrade-pr
Copy link

New and removed dependencies detected. Learn more about Socket for GitHub ↗︎

Package New capabilities Transitives Size Publisher
npm/@metamask/key-tree@7.1.1 Transitive: environment, network +29 6.91 MB metamaskbot

🚮 Removed packages: npm/@metamask/key-tree@7.0.0

View full report↗︎

@Elenore23 Elenore23 merged commit f4fa8ca into master Jul 22, 2024
4 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants