chore(deps): Bump @metamask/composable-controller from ^3.0.0 to ^10.0.0

[MajorLift]

Description

This commit updates @metamask/composable-controller to ^10.0.0.

This involves fixing bugs outlined in #10073, and applying the major changes to the ComposableController API that has accumulated between the intervening versions.

Blocked by

• [composable-controller] perf: Optimize expensive reduce operations, fix metadata instantiation core#4968
  • composable-controller v10 has been written to ensure that the effect of this optimization is maximized.
• fix: Remove stateless "non-controllers" from background engine state #12348
• fix: Resolve errors, omissions, duplicates in Engine types Global{Actions,Events} #12407
• test: e2e fixes for #10441 #11162

Changelog

Changed

• BREAKING: Bump @metamask/composable-controller from ^3.0.0 to ^10.0.0.
• BREAKING: Instantiate ComposableController class constructor option messenger with a RestrictedControllerMessenger instance derived from the controllerMessenger class field instance of Engine, instead of passing in the unrestricted controllerMessenger instance directly.
  • BREAKING: Narrow external actions allowlist for messenger instance passed into ComposableController constructor from GlobalActions['type'] to an empty union.
  • BREAKING: Narrow external events allowlist for messenger instance passed into ComposableController constructor from GlobalEvents['type'] to a union of the stateChange events of all controllers included in the EngineState type.
• Convert the EngineState interface to use type alias syntax to ensure compatibility with types used in MetaMask controllers.

Fixed

• BREAKING: Narrow Engine class datamodel field from any to ComposableController<EngineState, StatefulControllers>.
• BREAKING: The CurrencyRatesController constructor now normalizes null into 0 for the conversionRate values of all native currencies keyed in the currencyRates object of CurrencyRatesControllerState.
• Restore previously suppressed type-level validation for ComposableController constructor option controllers.

Related issues

• Closes fix: ComposableController instantiation and functionality is broken #10073
• Applies [composable-controller] Fix incorrect behavior and improve type-level safeguards core#4467
  • Blocked by @metamask/[email protected] release.
• Supersedes fix(deps): bump @metamask/composable-controller from ^3.0.0 to ^6.0.2 #10011

Manual testing steps

Screenshots/Recordings

Pre-merge author checklist

• I’ve followed MetaMask Contributor Docs and MetaMask Mobile Coding Standards.
• I've completed the PR template to the best of my ability
• I’ve included tests if applicable
• I’ve documented my code using JSDoc format if applicable
• I’ve applied the right labels on the PR (see labeling guidelines). Not required for external contributors.

Pre-merge reviewer checklist

• I've manually tested the PR (e.g. pull and build branch, run the app, test code being changed).
• I confirm that this PR addresses all acceptance criteria described in the ticket it closes and includes the necessary testing evidence such as recordings and or screenshots.

[github-actions]

CLA Signature Action: All authors have signed the CLA. You may need to manually re-run the blocking PR check if it doesn't pass in a few minutes.

[socket-security]

New and removed dependencies detected. Learn more about Socket for GitHub ↗︎

Package	New capabilities	Transitives	Size	Publisher
npm/@metamask/[email protected]	None	0	70.3 kB	metamaskbot

🚮 Removed packages: npm/@metamask/[email protected]

View full report↗︎

[MajorLift]

Notes for reviewers:

[metamaskbot]

Bitrise

✅✅✅ pr_smoke_e2e_pipeline passed on Bitrise! ✅✅✅

Commit hash: 9610b54
Build link: https://app.bitrise.io/app/be69d4368ee7e86d/pipelines/e1b02249-1d25-44b5-ba99-968733b8b609

Note

• You can kick off another pr_smoke_e2e_pipeline on Bitrise by removing and re-applying the Run Smoke E2E label on the pull request

[metamaskbot]

Bitrise

✅✅✅ pr_smoke_e2e_pipeline passed on Bitrise! ✅✅✅

Commit hash: 9610b54
Build link: https://app.bitrise.io/app/be69d4368ee7e86d/pipelines/051b6e1b-13b9-4c05-ab2c-57ccffc9b5c3

Note

• You can kick off another pr_smoke_e2e_pipeline on Bitrise by removing and re-applying the Run Smoke E2E label on the pull request

[Cal-L]

Looks good for platform

[sonarqubecloud]

Quality Gate passed

Issues
2 New issues
0 Accepted issues

Measures
0 Security Hotspots
78.3% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

[Cal-L]

LGTM

[christopherferreira9]

Looks good for SDK, will validate in the next RC