Bump dependency versions #43

Activity

1. leonardostsouza

   assigned

   leonardostsouza

   and

   lucasfernandes

   on Apr 28, 2026
2. leonardostsouza

   linked a pull request that will close this issuerefactor: bump dev dependency versions #44on Apr 28, 2026
3. leonardostsouza commented on Apr 28, 2026

   

   leonardostsouza

   on Apr 28, 2026

   ContributorAuthor

   More actions

   Most of the vulnerabilities shown here are related only to devDependencies, with the exception of 1 moderate warning on @metamask/key-tree

   The problem is that there is currently no fix for @metamask/key-tree, as this is related to the library uuid, which is included by one of key-tree's dependencies.

   All other warnings were solved by just generating package-lock.json again, so merging it to main is not urgent.

   A draft PR was opened. THis task will be put this on hold until uuid and @metamask/key-tree update to solve the issues.
4. b-garbacz

   closed this as completedin #44on Apr 30, 2026