socket-security[bot] comments

Results 7112 comments of


                                            socket-security[bot]

chore(devdeps): @lavamoat/allow-scripts@^2.3.1->^3.3.0

**👍 Dependency issues cleared.** Learn more about [Socket for GitHub ↗︎](https://socket.dev?utm_medium=gh) This PR previously contained dependency changes with security issues that have been resolved, removed, or ignored. Ignoring: npm/[email protected], npm/[email protected],...

chore(deps): update actions/checkout action to v6

**Review the following changes in direct dependencies.** Learn more about [Socket for GitHub](https://socket.dev?utm_medium=gh). Diff Package Supply ChainSecurity Vulnerability Quality Maintenance License regenerator-runtime@0.14.1 ts-node@10.9.2 unbuild@2.0.0 typescript@5.9.3 rimraf@5.0.10 prettier@3.6.2 semantic-release@23.1.1 [View full...

fix: mv2 firefox csp header

**New dependencies detected.** Learn more about [Socket for GitHub ↗︎](https://socket.dev?utm_medium=gh) | Package | New capabilities | Transitives | Size | Publisher | |:--- |:--- |:--- |:--- |:--- | | [npm/@types/[email protected]](https://socket.dev/npm/package/@types/serve-handler/overview/6.1.4)...

chore: Replace `lavamoat` with `@lavamoat/node`

**Review the following changes in direct dependencies.** Learn more about [Socket for GitHub](https://socket.dev?utm_medium=gh). Diff Package Supply ChainSecurity Vulnerability Quality Maintenance License @babel/types@7.28.4 ⏵ 7.28.5 +1 +1 @types/node@22.7.5 ⏵ 22.18.12 +1...

chore: Replace `lavamoat` with `@lavamoat/node`

> [!CAUTION] > MetaMask internal reviewing guidelines: > - Do not ignore-all > - Each alert has instructions on how to review if you don't know what it means. If...

chore: Bump @metamask/eslint-config from 14.0.0 to 14.1.0

**Review the following changes in direct dependencies.** Learn more about [Socket for GitHub](https://socket.dev?utm_medium=gh). Diff Package Supply ChainSecurity Vulnerability Quality Maintenance License @metamask/eslint-config@14.0.0 ⏵ 14.1.0 +1 +7 [View full report](https://socket.dev/dashboard/org/MetaMask/diff-scan/b2d8810a-c3d2-496c-8aa0-e13bfc090cf0?tab=dependencies)

Bump @fortawesome/fontawesome-svg-core from 6.5.2 to 6.6.0

**New and removed dependencies detected.** Learn more about [Socket for GitHub ↗︎](https://socket.dev?utm_medium=gh) | Package | New capabilities | Transitives | Size | Publisher | |:--- |:--- |:--- |:--- |:--- |...

chore(deps): update dependency eslint to ^8.57.1

feat: port getLogFilter helper from Rollup for advanced log filtering

**Review the following changes in direct dependencies.** Learn more about [Socket for GitHub](https://socket.dev?utm_medium=gh). Diff Package Supply ChainSecurity Vulnerability Quality Maintenance License rollup-plugin-esbuild@6.2.1 remeda@2.32.0 remark-parse@11.0.0 rimraf@6.1.0 remove-unused-vars@0.0.9 source-map@0.7.6 semver@7.7.3 rolldown-plugin-dts@0.17.6 rollup@4.53.2...