Skip to content

bump: bump snow to v2.0.4#31763

Closed
weizman wants to merge 3 commits intomainfrom
weizman/bump-snow-204
Closed

bump: bump snow to v2.0.4#31763
weizman wants to merge 3 commits intomainfrom
weizman/bump-snow-204

Conversation

@weizman
Copy link
Contributor

@weizman weizman commented Apr 9, 2025

bump snow version to defend against document.execCommand attacks LavaMoat/snow#167

@socket-security
Copy link

socket-security bot commented Apr 9, 2025

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Updated@​lavamoat/​snow@​2.0.3 ⏵ 2.0.4100 +24100100 +1100 +18100

View full report

@metamaskbot metamaskbot added the INVALID-PR-TEMPLATE PR's body doesn't match template label Apr 9, 2025
@weizman weizman changed the title [draft] bump snow 204 chore: bump snow to v2.0.4 Apr 17, 2025
@weizman weizman marked this pull request as ready for review April 17, 2025 13:13
@metamaskbot
Copy link
Collaborator

Builds ready [4074f38]
UI Startup Metrics (1192 ± 66 ms)
PlatformBuildTypePageMetricMean (ms)Min (ms)Max (ms)Std Dev (ms)P 75 (ms)P 95 (ms)
ChromeBrowserifyHomeuiStartup1192107714236612271320
load103193712465810621137
domContentLoaded102693312425810581127
domInteractive181367111660
firstPaint75668125139510481128
backgroundConnect73333710
firstReactRender21154062136
getState1253381830
initialActions001001
loadScripts789701100554820886
setupStore75192811
WebpackHomeuiStartup21121639239817522602367
load16361287187013717641820
domContentLoaded16291283186013617571811
domInteractive161167131357
firstPaint1786845864209296
backgroundConnect25961142857
firstReactRender21655375120337360
getState144175181527
initialActions318145
loadScripts16241277185513717541809
setupStore1766181934
FirefoxBrowserifyHomeuiStartup13431172161510513981551
load11971005148410612581391
domContentLoaded11961004148410612581390
domInteractive1043920433114176
firstPaintNaNNaNNaNNaNNaNNaN
backgroundConnect2312228282037
firstReactRender22183022227
getState74334813
initialActions001001
loadScripts1175989146510312311365
setupStore6435468
WebpackHomeuiStartup15441388207614016171865
load13181179178112413731571
domContentLoaded13181179178112413721570
domInteractive80561642185134
firstPaintNaNNaNNaNNaNNaNNaN
backgroundConnect22154362338
firstReactRender36305453846
getState105346930
initialActions102111
loadScripts12991164176412313521545
setupStore86284917

@HowardBraham HowardBraham changed the title chore: bump snow to v2.0.4 bump: bump snow to v2.0.4 Jun 13, 2025
@github-actions
Copy link
Contributor

This PR has been automatically marked as stale because it has not had recent activity in the last 90 days. It will be closed in 7 days. Thank you for your contributions.

@github-actions github-actions bot added the stale issues and PRs marked as stale label Sep 12, 2025
@github-actions
Copy link
Contributor

This PR was closed because there has been no follow up activity in 7 days. Thank you for your contributions.

@github-actions github-actions bot closed this Sep 20, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

INVALID-PR-TEMPLATE PR's body doesn't match template stale issues and PRs marked as stale team-lavamoat

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants