Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Chore(deps): Bump @safe-global/safe-modules-deployments from 2.2.1 to 2.2.4 #55

Conversation

dependabot[bot]
Copy link

@dependabot dependabot bot commented on behalf of github Jan 13, 2025

Bumps @safe-global/safe-modules-deployments from 2.2.1 to 2.2.4.

Release notes

Sourced from @​safe-global/safe-modules-deployments's releases.

v2.2.4

What's Changed

Full Changelog: safe-global/safe-modules-deployments@v2.2.3...v2.2.4

v2.2.3

What's Changed

Full Changelog: safe-global/safe-modules-deployments@v2.2.2...v2.2.3

v2.2.2

What's Changed

New Contributors

Full Changelog: safe-global/safe-modules-deployments@v2.2.1...v2.2.2

Commits
Maintainer changes

This version was pushed to npm by remedcu, a new releaser for @​safe-global/safe-modules-deployments since your current version.


Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Summary by Sourcery

Chores:

  • Bump @safe-global/safe-modules-deployments from 2.2.1 to 2.2.4.

Bumps [@safe-global/safe-modules-deployments](https://github.com/safe-global/safe-modules-deployments) from 2.2.1 to 2.2.4.
- [Release notes](https://github.com/safe-global/safe-modules-deployments/releases)
- [Commits](safe-global/safe-modules-deployments@v2.2.1...v2.2.4)

---
updated-dependencies:
- dependency-name: "@safe-global/safe-modules-deployments"
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Jan 13, 2025
Copy link

vercel bot commented Jan 13, 2025

The latest updates on your projects. Learn more about Vercel for Git ↗︎

Name Status Preview Comments Updated (UTC)
safe-wallet-web ❌ Failed (Inspect) Jan 13, 2025 5:04pm

Copy link

codesandbox bot commented Jan 13, 2025

Review or Edit in CodeSandbox

Open the branch in Web EditorVS CodeInsiders

Open Preview

Copy link

sourcery-ai bot commented Jan 13, 2025

Reviewer's Guide by Sourcery

This PR bumps the @safe-global/safe-modules-deployments dependency from version 2.2.1 to 2.2.4. This includes BNB support for the v0.2.0 4337 module, a Safe Module Setup Deployment, and several other additions and updates as detailed in the release notes. No other changes were made.

No diagrams generated as the changes look simple and do not need a visual representation.

File-Level Changes

Change Details Files
Bumped @safe-global/safe-modules-deployments from 2.2.1 to 2.2.4.
  • Updated the @safe-global/safe-modules-deployments dependency version in package.json.
  • Regenerated yarn.lock to reflect the updated dependency version and resolve any related changes in transitive dependencies.
package.json
yarn.lock

Tips and commands

Interacting with Sourcery

  • Trigger a new review: Comment @sourcery-ai review on the pull request.
  • Continue discussions: Reply directly to Sourcery's review comments.
  • Generate a GitHub issue from a review comment: Ask Sourcery to create an
    issue from a review comment by replying to it.
  • Generate a pull request title: Write @sourcery-ai anywhere in the pull
    request title to generate a title at any time.
  • Generate a pull request summary: Write @sourcery-ai summary anywhere in
    the pull request body to generate a PR summary at any time. You can also use
    this command to specify where the summary should be inserted.

Customizing Your Experience

Access your dashboard to:

  • Enable or disable review features such as the Sourcery-generated pull request
    summary, the reviewer's guide, and others.
  • Change the review language.
  • Add, remove or edit custom review instructions.
  • Adjust other review settings.

Getting Help

Copy link

@sourcery-ai sourcery-ai bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

We have skipped reviewing this pull request. It seems to have been created by a bot (hey, dependabot[bot]!). We assume it knows what it's doing!

Copy link

socket-security bot commented Jan 13, 2025

🚨 Potential security issues detected. Learn more about Socket for GitHub ↗︎

To accept the risk, merge this PR and you will not be notified again.

Alert Package NoteSourceCI
License Policy Violation npm/[email protected]
  • License: GPL-2.0 - Not allowed by license policy (npm metadata, package/LICENSE, package/package.json, package/flash/package.json)
⚠︎
Critical CVE npm/[email protected] ⚠︎
Protestware or potentially unwanted behavior npm/[email protected]
  • Note: This package prints a protestware console message on install regarding Ukraine for users with Russian language locale
⚠︎
Protestware or potentially unwanted behavior npm/[email protected]
  • Note: The script attempts to run a local post-install script, which could potentially contain malicious code. The error handling suggests that it is designed to fail silently, which is a common tactic in malicious scripts.
⚠︎
License Policy Violation npm/[email protected]
  • License: CC-BY-SA-4.0 - Not allowed by license policy (package/LICENSE, package/LICENSE)
⚠︎
License Policy Violation npm/[email protected]
  • License: CC-BY-4.0 - Not allowed by license policy (npm metadata, package/LICENSE, package/package.json)
⚠︎

View full report↗︎

Next steps

What is a license policy violation?

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Find a package that does not violate your license policy or adjust your policy to allow this package's license.

What is a critical CVE?

Contains a Critical Common Vulnerability and Exposure (CVE).

Remove or replace dependencies that include known critical CVEs. Consumers can use dependency overrides or npm audit fix --force to remove vulnerable dependencies.

What is protestware?

This package is a joke, parody, or includes undocumented or hidden behavior unrelated to its primary function.

Consider that consuming this package may come along with functionality unrelated to its primary purpose.

Take a deeper look at the dependency

Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support [AT] socket [DOT] dev.

Remove the package

If you happen to install a dependency that Socket reports as Known Malware you should immediately remove it and select a different dependency. For other alert types, you may may wish to investigate alternative packages or consider if there are other ways to mitigate the specific risk posed by the dependency.

Mark a package as acceptable risk

To ignore an alert, reply with a comment starting with @SocketSecurity ignore followed by a space separated list of ecosystem/package-name@version specifiers. e.g. @SocketSecurity ignore npm/[email protected] or ignore all packages with @SocketSecurity ignore-all

Copy link

github-actions bot commented Jan 13, 2025

Branch preview

❌ Deploy failed!

Copy link

Coverage report

Action wasn't able to generate report within GitHub comment limit. If you're facing this issue, please let me know by commenting under this issue.

Report generated by 🧪jest coverage report action from 195baee

Copy link
Author

dependabot bot commented on behalf of github Feb 3, 2025

Superseded by #60.

@dependabot dependabot bot closed this Feb 3, 2025
auto-merge was automatically disabled February 3, 2025 16:30

Pull request was closed

@dependabot dependabot bot deleted the dependabot/npm_and_yarn/safe-global/safe-modules-deployments-2.2.4 branch February 3, 2025 16:30
@github-actions github-actions bot locked and limited conversation to collaborators Feb 3, 2025
@Dargon789 Dargon789 restored the dependabot/npm_and_yarn/safe-global/safe-modules-deployments-2.2.4 branch February 5, 2025 17:54
@Dargon789 Dargon789 reopened this Feb 5, 2025
@Dargon789 Dargon789 enabled auto-merge (squash) February 5, 2025 17:56
Repository owner unlocked this conversation Feb 5, 2025
Copy link

Report too large to display inline

View full report↗︎

Copy link
Author

dependabot bot commented on behalf of github Feb 10, 2025

Superseded by #61.

@dependabot dependabot bot closed this Feb 10, 2025
auto-merge was automatically disabled February 10, 2025 17:17

Pull request was closed

@dependabot dependabot bot deleted the dependabot/npm_and_yarn/safe-global/safe-modules-deployments-2.2.4 branch February 10, 2025 17:17
@github-actions github-actions bot locked and limited conversation to collaborators Feb 10, 2025
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.