Snyk upgrade 3fe4cfc619bccfd394cc67f7c071504c

.github/ISSUE_TEMPLATE/BUG.yml

@@ -46,7 +46,7 @@ body:
         - '@web3-onboard/decent'
         - '@web3-onboard/formatic'
         - '@web3-onboard/gnosis'
-        - '@web3-onboard/injected'
+        - '@web3-onboard/injected-wallets'
         - '@web3-onboard/keepkey'
         - '@web3-onboard/keystone'
         - '@web3-onboard/ledger'

.github/workflows/docs.yml

@@ -2,10 +2,6 @@
 name: Deploy documentation to Pages
 
 on:
-  # Runs on pushes targeting the default branch
-  push:
-    branches: ["docs"]
-
   # Allows you to run this workflow manually from the Actions tab
   workflow_dispatch:
 
@@ -32,15 +28,15 @@ jobs:
         working-directory: ./docs
     steps:
       - name: Checkout
-        uses: actions/checkout@v3
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683
 
       - name: Setup Pages
-        uses: actions/configure-pages@v2
+        uses: actions/configure-pages@983d7736d9b0ae728b81ab479565c72886d7745b
 
       - name: Setup Nodejs and yarn
-        uses: actions/setup-node@v2
+        uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020
         with:
-          node-version: "16"
+          node-version: "18.18"
           cache: yarn
 
       - name: Install dependencies
@@ -52,21 +48,21 @@ jobs:
         run: yarn build
 
       - name: Generate the sitemap
-        uses: cicirello/generate-sitemap@v1
+        uses: cicirello/generate-sitemap@f76c8312a5a364c49e2610b8af12ae861805a056
         with:
           path-to-root: './docs/build'
           drop-html-extension: true
-          base-url-path: https://onboard.blocknative.com
+          base-url-path: https://web3onboard.thirdweb.com
 
       - name: Peak at folder contents
         run: ls -al
 
       - name: Upload artifact
-        uses: actions/upload-pages-artifact@v1
+        uses: actions/upload-pages-artifact@56afc609e74202658d3ffba0e8f6dda462b719fa
         with:
           # Upload entire repository
           path: './docs/build'
 
       - name: Deploy to GitHub Pages
         id: deployment
-        uses: actions/deploy-pages@v1
+        uses: actions/deploy-pages@d6db90164ac5ed86f2b6aed7e0febac5b3c0c03e

.github/workflows/jekyll-gh-pages.yml

@@ -0,0 +1,51 @@
+# Sample workflow for building and deploying a Jekyll site to GitHub Pages
+name: Deploy Jekyll with GitHub Pages dependencies preinstalled
+
+on:
+  # Runs on pushes targeting the default branch
+  push:
+    branches: ["main"]
+
+  # Allows you to run this workflow manually from the Actions tab
+  workflow_dispatch:
+
+# Sets permissions of the GITHUB_TOKEN to allow deployment to GitHub Pages
+permissions:
+  contents: read
+  pages: write
+  id-token: write
+
+# Allow only one concurrent deployment, skipping runs queued between the run in-progress and latest queued.
+# However, do NOT cancel in-progress runs as we want to allow these production deployments to complete.
+concurrency:
+  group: "pages"
+  cancel-in-progress: false
+
+jobs:
+  # Build job
+  build:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+      - name: Setup Pages
+        uses: actions/configure-pages@v5
+      - name: Build with Jekyll
+        uses: actions/jekyll-build-pages@v1
+        with:
+          source: ./
+          destination: ./_site
+      - name: Upload artifact
+        uses: actions/upload-pages-artifact@v3
+
+  # Deployment job
+  deploy:
+    environment:
+      name: github-pages
+      url: ${{ steps.deployment.outputs.page_url }}
+    runs-on: ubuntu-latest
+    needs: build
+    steps:
+      - name: Deploy to GitHub Pages
+        id: deployment
+        uses: actions/deploy-pages@v4

.github/workflows/node-production.yml

@@ -0,0 +1,175 @@
+name: Node Packages – Production Release
+
+on:
+  push:
+    branches: [main]
+
+permissions:
+  contents: read
+  id-token: write      # for provenance / npm‑pkg OIDC
+  packages: write
+
+env:
+  NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
+
+jobs:
+  build-and-publish:
+    name: Build & publish ${{ matrix.package }}
+    runs-on: ubuntu-latest
+
+    strategy:
+      fail-fast: false
+      matrix:
+        include:
+          - package: core                 # 1
+            node: 22
+          - package: common               # 2
+            node: 22
+          - package: fortmatic            # 3
+            node: 22
+          - package: gnosis               # 4
+            node: 22
+          - package: injected             # 5
+            node: 22
+          - package: frame                # 6
+            node: 22
+          - package: keepkey              # 7
+            node: 22
+          - package: keystone             # 8
+            node: 22
+          - package: ledger               # 9
+            node: 22
+          - package: mew                  # 10
+            node: 22
+          - package: mew-wallet           # 11
+            node: 22
+          - package: portis               # 12
+            node: 22
+          - package: torus                # 13
+            node: 22
+          - package: trezor               # 14
+            node: 22
+          - package: trust                # 15
+            node: 22
+          - package: okx                  # 16
+            node: 22
+          - package: frontier             # 17
+            node: 22
+          - package: walletconnect        # 18
+            node: 22
+          - package: walletlink           # 19
+            node: 22
+          - package: react                # 20
+            node: 22
+          - package: magic                # 21
+            node: 22
+          - package: coinbase             # 22
+            node: 22
+          - package: web3auth             # 23
+            node: 22
+          - package: dcent                # 24
+            node: 22
+          - package: vue                  # 25
+            node: 22
+          - package: gas                  # 26
+            node: 22
+          - package: hw-common            # 27
+            node: 22
+          - package: sequence             # 28
+            node: 22
+          - package: tallyho              # 29
+            node: 22
+          - package: enkrypt              # 30
+            node: 22
+          - package: uauth                # 31
+            node: 22
+          - package: transaction-preview  # 32
+            node: 22
+          - package: zeal                 # 33
+            node: 22
+          - package: phantom              # 34
+            node: 22
+          - package: xdefi                # 35
+            node: 22
+          - package: infinity-wallet      # 36
+            node: 22
+          - package: taho                 # 37
+            node: 22
+          - package: unstoppable-resolution  # 38
+            node: 22
+          - package: cede-store           # 39
+            node: 22
+          - package: arcana-auth          # 40
+            node: 22
+          - package: blocto               # 41
+            node: 22
+          - package: venly                # 42
+            node: 22
+          - package: bitget               # 43
+            node: 22
+          - package: bitkeep              # 44
+            node: 22
+          - package: metamask             # 45
+            node: 22
+          - package: solid                # 46
+            node: 22
+          - package: para                 # 47
+            node: 22
+          - package: particle-network     # 48
+            node: 22
+          - package: finoaconnect         # 49
+            node: 22
+          - package: wagmi                # 50
+            node: 22
+          - package: passport             # 51
+            node: 22
+          - package: bloom                # 52
+            node: 22
+          - package: keplr                # 53
+            node: 22
+
+    defaults:
+      run:
+        shell: bash
+        working-directory: packages/${{ matrix.package }}
+
+    steps:
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+
+      - name: Use Node ${{ matrix.node }}
+        uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
+        with:
+          node-version: ${{ matrix.node }}
+          registry-url: https://registry.npmjs.org/
+
+      # ────── skip alpha versions ──────
+      - id: version
+        run: echo "v=$(node -p 'require(\"./package.json\").version')" >> "$GITHUB_OUTPUT"
+
+      - name: Skip alpha builds on main
+        if: contains(steps.version.outputs.v, '-alpha')
+        run: echo "Alpha version detected – skipping publish."
+      # ─────────────────────────────────
+
+      - name: Cache Yarn
+        uses: actions/cache@5a3ec84eff668545956fd18022155c47e93e2684 # v4.2.3
+        with:
+          path: |
+            ~/.cache/yarn
+            node_modules
+          key: ${{ runner.os }}-${{ matrix.node }}-${{ hashFiles('**/yarn.lock') }}
+
+      - name: Generate workspace lock‑file
+        run: yarn generate-lock-entry >> yarn.lock
+
+      - name: Install dependencies
+        run: yarn --immutable
+
+      - name: Type‑check & build
+        run: |
+          yarn type-check
+          yarn build
+
+      - name: Publish to npm (latest)
+        if: ${{ !contains(steps.version.outputs.v, '-alpha') }}
+        run: npm publish --access public