Skip to content

Dargon789 patch 1 #7972

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Open
wants to merge 10 commits into
base: main
Choose a base branch
from
Open

Dargon789 patch 1 #7972

wants to merge 10 commits into from

Conversation

@Dargon789
Copy link

No description provided.

Dargon789 and others added 10 commits September 23, 2025 15:48
@Dargon789
Create config.yml (#56)
c2e03b7 
Signed-off-by: AU_gdev_19 <[email protected]>
@Dargon789
Merge branch 'Uniswap:main' into circleci-project-setup
a272a7c
@Dargon789
Merge pull request #62 from Dargon789/circleci-project-setup
4e41d0b 
Circleci project setup
@Dargon789 @snyk-bot
fix: apps/mobile/Gemfile & apps/mobile/Gemfile.lock to reduce vulnera…
b7ece14 
…bilities (#60)

The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-RUBY-REXML-12878608
- https://snyk.io/vuln/SNYK-RUBY-WEBRICK-10500756
- https://snyk.io/vuln/SNYK-RUBY-WEBRICK-8068535

Co-authored-by: snyk-bot <[email protected]>
@dependabot
build(deps): bump the npm_and_yarn group across 6 directories with 5 …
58d9f6c 
…updates (#61)

Bumps the npm_and_yarn group with 2 updates in the /apps/extension directory: [webpack](https://github.com/webpack/webpack) and [webpack-dev-server](https://github.com/webpack/webpack-dev-server).
Bumps the npm_and_yarn group with 1 update in the /apps/mobile directory: [react-native-mmkv](https://github.com/mrousavy/react-native-mmkv).
Bumps the npm_and_yarn group with 3 updates in the /apps/web directory: [webpack](https://github.com/webpack/webpack), [graphql](https://github.com/graphql/graphql-js) and [hono](https://github.com/honojs/hono).
Bumps the npm_and_yarn group with 2 updates in the /packages/uniswap directory: [react-native-mmkv](https://github.com/mrousavy/react-native-mmkv) and [graphql](https://github.com/graphql/graphql-js).
Bumps the npm_and_yarn group with 1 update in the /packages/utilities directory: [graphql](https://github.com/graphql/graphql-js).
Bumps the npm_and_yarn group with 1 update in the /packages/wallet directory: [graphql](https://github.com/graphql/graphql-js).


Updates `webpack` from 5.90.0 to 5.94.0
- [Release notes](https://github.com/webpack/webpack/releases)
- [Commits](webpack/webpack@v5.90.0...v5.94.0)

Updates `webpack-dev-server` from 4.15.1 to 5.2.1
- [Release notes](https://github.com/webpack/webpack-dev-server/releases)
- [Changelog](https://github.com/webpack/webpack-dev-server/blob/main/CHANGELOG.md)
- [Commits](webpack/webpack-dev-server@v4.15.1...v5.2.1)

Updates `react-native-mmkv` from 2.10.1 to 2.11.0
- [Release notes](https://github.com/mrousavy/react-native-mmkv/releases)
- [Commits](mrousavy/react-native-mmkv@v2.10.1...v2.11.0)

Updates `webpack` from 5.90.0 to 5.94.0
- [Release notes](https://github.com/webpack/webpack/releases)
- [Commits](webpack/webpack@v5.90.0...v5.94.0)

Updates `graphql` from 16.6.0 to 16.8.1
- [Release notes](https://github.com/graphql/graphql-js/releases)
- [Commits](graphql/graphql-js@v16.6.0...v16.8.1)

Updates `hono` from 4.8.4 to 4.9.7
- [Release notes](https://github.com/honojs/hono/releases)
- [Commits](honojs/hono@v4.8.4...v4.9.7)

Updates `react-native-mmkv` from 2.10.1 to 2.11.0
- [Release notes](https://github.com/mrousavy/react-native-mmkv/releases)
- [Commits](mrousavy/react-native-mmkv@v2.10.1...v2.11.0)

Updates `graphql` from 16.6.0 to 16.8.1
- [Release notes](https://github.com/graphql/graphql-js/releases)
- [Commits](graphql/graphql-js@v16.6.0...v16.8.1)

Updates `graphql` from 16.6.0 to 16.8.1
- [Release notes](https://github.com/graphql/graphql-js/releases)
- [Commits](graphql/graphql-js@v16.6.0...v16.8.1)

Updates `graphql` from 16.6.0 to 16.8.1
- [Release notes](https://github.com/graphql/graphql-js/releases)
- [Commits](graphql/graphql-js@v16.6.0...v16.8.1)

---
updated-dependencies:
- dependency-name: webpack
  dependency-version: 5.94.0
  dependency-type: direct:development
  dependency-group: npm_and_yarn
- dependency-name: webpack-dev-server
  dependency-version: 5.2.1
  dependency-type: direct:development
  dependency-group: npm_and_yarn
- dependency-name: react-native-mmkv
  dependency-version: 2.11.0
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: webpack
  dependency-version: 5.94.0
  dependency-type: direct:development
  dependency-group: npm_and_yarn
- dependency-name: graphql
  dependency-version: 16.8.1
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: hono
  dependency-version: 4.9.7
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: react-native-mmkv
  dependency-version: 2.11.0
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: graphql
  dependency-version: 16.8.1
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: graphql
  dependency-version: 16.8.1
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: graphql
  dependency-version: 16.8.1
  dependency-type: direct:production
  dependency-group: npm_and_yarn
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@Dargon789 @github-advanced-security
Potential fix for code scanning alert no. 19: Incomplete regular expr…
607e2db 
…ession for hostnames (#63)

Signed-off-by: AU_gdev_19 <[email protected]>
Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>
@Dargon789 @gemini-code-assist
Update issue templates (#64)
036022c 
* Update issue templates

* Update .github/ISSUE_TEMPLATE/feature_request.md

Co-authored-by: gemini-code-assist[bot] <176961590+gemini-code-assist[bot]@users.noreply.github.com>
Signed-off-by: AU_gdev_19 <[email protected]>

---------

Signed-off-by: AU_gdev_19 <[email protected]>
Co-authored-by: gemini-code-assist[bot] <176961590+gemini-code-assist[bot]@users.noreply.github.com>
@Dargon789 @github-advanced-security
Potential fix for code scanning alert no. 17: Incomplete regular expr…
87893de 
…ession for hostnames (#65)

Signed-off-by: AU_gdev_19 <[email protected]>
Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>
@Dargon789
Update tag_and_release.yml
b6ab792 
Signed-off-by: AU_gdev_19 <[email protected]>
@Dargon789
Merge branch 'Uniswap:main' into Dargon789-patch-1
06175f4
@socket-security
Copy link

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security		 Vulnerability Quality Maintenance License
Updatedgem/​fastlane@​2.214.0 ⏵ 2.215.067 +1100100100100
Updatednpm/​hono@​4.8.4 ⏵ 4.9.7100 +174 +1497 -196100
Updatednpm/​webpack-dev-server@​4.15.1 ⏵ 5.2.197 +1100 +1310084100
Updatedgem/​cocoapods@​1.14.3 ⏵ 1.15.085100100100100
Updatednpm/​react-native-mmkv@​2.10.1 ⏵ 2.11.0100100 +510094 +1180
Addednpm/​graphql@​16.8.110010010091100
Updatednpm/​webpack@​5.90.0 ⏵ 5.94.097 +1100 +810095100

View full report

@socket-security
Copy link

Caution

Review the following alerts detected in dependencies.

According to your organization's Security Policy, you must resolve all "Block" alerts before proceeding. It is recommended to resolve "Warn" alerts too. Learn more about Socket for GitHub.

Action Severity Alert  (click "▶" to expand/collapse)
Block Medium
npm/@jsonjoy.com/[email protected] has a Potential vulnerability.

Location: Package overview

From: ? → npm/[email protected] → npm/@jsonjoy.com/[email protected]

ℹ Read more on: This package | This alert | Navigating potential vulnerabilities

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at [email protected].

Suggestion: It is advisable to proceed with caution. Engage in a review of the package's security aspects and consider reaching out to the package maintainer for the latest information or patches.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/@jsonjoy.com/[email protected]. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

Warn Medium
gem/[email protected] has Shell access.

Location: Package overview

From: apps/mobile/Gemfile.lock → gem/[email protected] → gem/[email protected] → gem/[email protected]

ℹ Read more on: This package | This alert | What is shell access?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at [email protected].

Suggestion: Packages should avoid accessing the shell which can reduce portability, and make it easier for malicious shell access to be introduced.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore gem/[email protected]. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

Warn Medium
gem/[email protected] has Shell access.

Location: Package overview

From: apps/mobile/Gemfile.lock → gem/[email protected] → gem/[email protected] → gem/[email protected]

ℹ Read more on: This package | This alert | What is shell access?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at [email protected].

Suggestion: Packages should avoid accessing the shell which can reduce portability, and make it easier for malicious shell access to be introduced.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore gem/[email protected]. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

Warn Low
gem/[email protected] has Filesystem access.

Location: Package overview

From: apps/mobile/Gemfile.lock → gem/[email protected] → gem/[email protected]

ℹ Read more on: This package | This alert | What is filesystem access?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at [email protected].

Suggestion: If a package must read the file system, clarify what it will read and ensure it reads only what it claims to. If appropriate, packages can leave file system access to consumers and operate on data passed to it instead.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore gem/[email protected]. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

Warn Low
gem/[email protected] has Filesystem access.

Location: Package overview

From: apps/mobile/Gemfile.lock → gem/[email protected] → gem/[email protected]

ℹ Read more on: This package | This alert | What is filesystem access?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at [email protected].

Suggestion: If a package must read the file system, clarify what it will read and ensure it reads only what it claims to. If appropriate, packages can leave file system access to consumers and operate on data passed to it instead.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore gem/[email protected]. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

Warn Low
gem/[email protected] has Filesystem access.

Location: Package overview

From: apps/mobile/Gemfile.lock → gem/[email protected] → gem/[email protected]

ℹ Read more on: This package | This alert | What is filesystem access?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at [email protected].

Suggestion: If a package must read the file system, clarify what it will read and ensure it reads only what it claims to. If appropriate, packages can leave file system access to consumers and operate on data passed to it instead.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore gem/[email protected]. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

Warn Low
gem/[email protected] has Filesystem access.

Location: Package overview

From: apps/mobile/Gemfile.lock → gem/[email protected] → gem/[email protected] → gem/[email protected]

ℹ Read more on: This package | This alert | What is filesystem access?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at [email protected].

Suggestion: If a package must read the file system, clarify what it will read and ensure it reads only what it claims to. If appropriate, packages can leave file system access to consumers and operate on data passed to it instead.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore gem/[email protected]. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

View full report

Dargon789
Dargon789 commented Oct 26, 2025
View reviewed changes
Copy link
Author

@Dargon789 Dargon789 left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

checks path1 #7972

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@Dargon789