safe-wallet-web icon indicating copy to clipboard operation
safe-wallet-web copied to clipboard

[Snyk] Upgrade msw from 2.7.3 to 2.11.5

Open katspaugh opened this issue 1 month ago • 3 comments

snyk-top-banner

Snyk has created this PR to upgrade msw from 2.7.3 to 2.11.5.

:information_source: Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.


  • The recommended version is 24 versions ahead of your current version.

  • The recommended version was released 23 days ago.


[!IMPORTANT]

  • Check the changes in this PR to ensure they won't cause issues with your project.
  • This PR was automatically created by Snyk using the credentials of a real user.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:


[!NOTE] Upgrade msw dependency from 2.7.3 to 2.11.5.

Written by Cursor Bugbot for commit 6e667603a53aa9ca5ad9ecfb3a90375d45f3b880. This will update automatically on new commits. Configure here.

katspaugh avatar Nov 01 '25 23:11 katspaugh

Branch preview

❌ Deploy failed!

github-actions[bot] avatar Nov 01 '25 23:11 github-actions[bot]

💡 Codex Review

https://github.com/safe-global/safe-wallet-monorepo/blob/6e667603a53aa9ca5ad9ecfb3a90375d45f3b880/yarn.lock#L1-L20 P1 Badge Avoid replacing the entire yarn.lock

This change rewrites yarn.lock from ~37k lines to ~960 lines (the header now shows __metadata.version: 6) and removes entries for most workspace dependencies—there is no lock entry for core packages like react at all. As a result, yarn install will either fail or resolve arbitrary latest versions, eliminating deterministic installs for the entire monorepo. The upgrade should only adjust the msw resolution; please regenerate the lock with the repository’s Yarn configuration so that unrelated dependency pins are preserved.

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Updatedmsw@​2.7.3 ⏵ 2.11.694 +110010094 -1100

View full report

socket-security[bot] avatar Nov 01 '25 23:11 socket-security[bot]

@katspaugh snyk broke the lock file.

compojoom avatar Nov 04 '25 09:11 compojoom