-
Notifications
You must be signed in to change notification settings - Fork 60
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
fix all biome errors #815
fix all biome errors #815
Conversation
👍 Dependency issues cleared. Learn more about Socket for GitHub ↗︎ This PR previously contained dependency changes with security issues that have been resolved, removed, or ignored. |
2ba9f41
to
2c294a9
Compare
2c294a9
to
498a9b3
Compare
589cf6f
to
2c11dea
Compare
2c11dea
to
a9a2068
Compare
@@ -14,7 +14,7 @@ jobs: | |||
matrix: | |||
include: | |||
- platform: linux/amd64 | |||
runner: ubuntu-latest |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I'm not sure the implication of this one. cc @d4mr
package.json
Outdated
"@thirdweb-dev/auth/**/axios": ">=1.7.8", | ||
"@thirdweb-dev/auth/**/web3-utils": ">=4.2.1", | ||
"ethers-gcp-kms-signer/**/protobufjs": ">=7.2.5", | ||
"fastify/**/find-my-way": ">=8.2.2", |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
These are needed to pin versions that don't have reported vulnerabilities. synk test
on this branch brings back these vulns if we remove this:
✗ Cross-site Request Forgery (CSRF) [High Severity][https://security.snyk.io/vuln/SNYK-JS-AXIOS-6032459] in [email protected]
✗ Regular Expression Denial of Service (ReDoS) [Medium Severity][https://security.snyk.io/vuln/SNYK-JS-AXIOS-6124857] in [email protected]
✗ Cross-site Scripting (XSS) [Medium Severity][https://security.snyk.io/vuln/SNYK-JS-AXIOS-6671926] in [email protected]
✗ Prototype Pollution [High Severity][https://security.snyk.io/vuln/SNYK-JS-WEB3UTILS-6229337] in [email protected]
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Some of these may be removable since I only see the first two deps in this vuln report list.
( | ||
await userOpRes.json() | ||
) as RpcResponse; |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Did biome format this? This seems weird and lower redability.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
My biome corrects this back
Report too large to display inline |
* bump yarn to berry * fix all biome errors * bring back pinned resolved deps, fix whitepsace --------- Co-authored-by: Phillip Ho <[email protected]>
Changes
How this PR will be tested
Output
(Example: Screenshot/GIF for UI changes, cURL output for API changes)
PR-Codex overview
This PR focuses on updating error handling, type safety, and configuration settings across various files, as well as upgrading dependencies to newer versions.
Detailed summary
.github/workflows
to useubuntu-24.04
.unknown
type instead ofany
.as
syntax.src/shared/lib/cache/swr.ts
.viem
version^2.21.54
.