Skip to content

Conversation

@runway-github
Copy link
Contributor

@runway-github runway-github bot commented Nov 25, 2025

Description

Fix Predict withdraw when using gas station with insufficient existing
token balance.

Bump transaction-controller and transaction-pay-controller.

Changelog

CHANGELOG entry: null

Related issues

Fixes: #23137 #23126

Manual testing steps

Screenshots/Recordings

Before

After

Pre-merge author checklist

Pre-merge reviewer checklist

  • I've manually tested the PR (e.g. pull and build branch, run the
    app, test code being changed).
  • I confirm that this PR addresses all acceptance criteria described
    in the ticket it closes and includes the necessary testing evidence such
    as recordings and or screenshots.

Note

Skips adding gas-fee-token batch/7702 external sign when txMeta.isGasFeeTokenIgnoredIfBalance is true, adds tests, exposes remote feature flag to messengers, and bumps transaction-related dependencies.

  • Confirmations:
    • Respect txMeta.isGasFeeTokenIgnoredIfBalance in useTransactionConfirm to avoid adding batchTransactions or setting isExternalSign.
    • Add tests ensuring no batchTransactions/isExternalSign when gas fee token should be ignored.
  • Engine/Messaging:
    • Delegate RemoteFeatureFlagController:getState to transaction controller messengers.
    • Minor typing adjustment around getNetworkClientRegistry.
  • Dependencies:
    • Bump @metamask/transaction-controller to 62.3.0 and @metamask/transaction-pay-controller to 10.1.0 (with related lockfile updates).

Written by Cursor Bugbot for commit 8f80ad1. This will update automatically on new commits. Configure here.

69d1ae2

Fix Predict withdraw when using gas station with insufficient existing
token balance.

Bump `transaction-controller` and `transaction-pay-controller`.

CHANGELOG entry: null

Fixes: #23137 #23126

- [x] I’ve followed [MetaMask Contributor
Docs](https://github.com/MetaMask/contributor-docs) and [MetaMask Mobile
Coding
Standards](https://github.com/MetaMask/metamask-mobile/blob/main/.github/guidelines/CODING_GUIDELINES.md).
- [x] I've completed the PR template to the best of my ability
- [x] I’ve included tests if applicable
- [x] I’ve documented my code using [JSDoc](https://jsdoc.app/) format
if applicable
- [x] I’ve applied the right labels on the PR (see [labeling
guidelines](https://github.com/MetaMask/metamask-mobile/blob/main/.github/guidelines/LABELING_GUIDELINES.md)).
Not required for external contributors.

- [ ] I've manually tested the PR (e.g. pull and build branch, run the
app, test code being changed).
- [ ] I confirm that this PR addresses all acceptance criteria described
in the ticket it closes and includes the necessary testing evidence such
as recordings and or screenshots.

<!-- CURSOR_SUMMARY -->
---

> [!NOTE]
> Prevents gas-fee token injection/external sign when
`txMeta.isGasFeeTokenIgnoredIfBalance` is set; wires Remote Feature Flag
messenger action; bumps transaction/transaction-pay controllers.
>
> - **Confirmations**:
> - Update `useTransactionConfirm` to skip adding `batchTransactions`
and `isExternalSign` when `txMeta.isGasFeeTokenIgnoredIfBalance` is
true.
> - Include `isGasFeeTokenIgnoredIfBalance` in metadata handling for
smart transactions and 7702 flows.
> - **Tests**:
> - Add tests ensuring no gas-fee token batching or external signing
when `isGasFeeTokenIgnoredIfBalance` is set.
> - **Messaging**:
> - Allow `RemoteFeatureFlagController:getState` in
`transaction-controller` init messenger.
> - **Dependencies**:
> - Bump `@metamask/transaction-controller` to `62.3.0` and
`@metamask/transaction-pay-controller` to `10.1.0` (with corresponding
lockfile updates).
>
> <sup>Written by [Cursor
Bugbot](https://cursor.com/dashboard?tab=bugbot) for commit
ccbc4d8. This will update automatically
on new commits. Configure
[here](https://cursor.com/dashboard?tab=bugbot).</sup>
<!-- /CURSOR_SUMMARY -->
@runway-github runway-github bot requested review from a team as code owners November 25, 2025 22:12
@github-actions
Copy link
Contributor

CLA Signature Action: All authors have signed the CLA. You may need to manually re-run the blocking PR check if it doesn't pass in a few minutes.

@socket-security
Copy link

socket-security bot commented Nov 25, 2025

@socket-security
Copy link

socket-security bot commented Nov 25, 2025

All alerts resolved. Learn more about Socket for GitHub.

This PR previously contained dependency changes with security issues that have been resolved, removed, or ignored.

Ignoring alerts on:

  • npm/@metamask/transaction-pay-controller@10.1.0

View full report

@joaoloureirop joaoloureirop enabled auto-merge (squash) November 25, 2025 23:04
@github-actions
Copy link
Contributor

🔍 Smart E2E Test Selection

  • Selected E2E tags: SmokeAccounts, SmokeCore, SmokeConfirmationsRedesigned, SmokeIdentity, SmokeNetworkAbstractions, SmokeNetworkExpansion, SmokeTrade, SmokeWalletPlatform, SmokeWalletUX, SmokeAssets, SmokeSwaps, SmokeStake, SmokeCard, SmokeNotifications, SmokeRewards, SmokePerps, SmokeRamps, SmokeMultiChainPermissions, SmokeAnalytics, SmokeMultiChainAPI, SmokePredictions
  • Risk Level: high
  • AI Confidence: %
click to see 🤖 AI reasoning details

Fallback: AI analysis did not complete successfully. Running all tests.

View GitHub Actions results

@joaoloureirop
Copy link
Contributor

@SocketSecurity ignore npm/@metamask/transaction-pay-controller@10.1.0

@sonarqubecloud
Copy link

@joaoloureirop joaoloureirop merged commit f166939 into release/7.60.0 Nov 26, 2025
124 of 130 checks passed
@joaoloureirop joaoloureirop deleted the cherry-pick-7-60-0-69d1ae2 branch November 26, 2025 15:35
@github-actions github-actions bot locked and limited conversation to collaborators Nov 26, 2025
@metamaskbot metamaskbot added the release-7.60.0 Issue or pull request that will be included in release 7.60.0 label Nov 26, 2025
@metamaskbot
Copy link
Collaborator

No release label on PR. Adding release label release-7.60.0 on PR, as PR was cherry-picked in branch 7.60.0.

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Labels

release-7.60.0 Issue or pull request that will be included in release 7.60.0

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants