Skip to content

chore: bump snaps and messenger dependencies#500

Merged
cryptodev-2s merged 1 commit intomainfrom
chore/bump-snaps-messenger-deps
Apr 3, 2026
Merged

chore: bump snaps and messenger dependencies#500
cryptodev-2s merged 1 commit intomainfrom
chore/bump-snaps-messenger-deps

Conversation

@cryptodev-2s
Copy link
Copy Markdown
Contributor

@cryptodev-2s cryptodev-2s commented Apr 3, 2026

Bump snaps and messenger dependencies to drop the legacy @metamask/messenger@0.3.0 from the lock file.

Changes:

  • @metamask/messenger: ^1.0.0^1.1.1
  • @metamask/snaps-controllers: ^19.0.0^19.0.1
  • @metamask/snaps-utils: ^12.1.2^12.1.3

These updated snaps packages now depend on @metamask/messenger@^1.1.0 instead of ^0.3.0, so the 0.3.0 resolution is no longer needed.

Examples

See MetaMask/snaps#3939 for the snaps release that bumped messenger to ^1.1.0.


Note

Low Risk
Primarily dependency/lockfile updates; risk is limited to potential behavioral changes introduced by the bumped upstream packages.

Overview
Updates @metamask/keyring-internal-snap-client and @metamask/eth-snap-keyring to use @metamask/messenger@^1.1.1 and bumps related Snaps dependencies (@metamask/snaps-controllers@^19.0.1, @metamask/snaps-utils@^12.1.3).

Refreshes yarn.lock accordingly, removing the legacy @metamask/messenger@0.3.0 resolution and aligning transitive Snaps packages to newer messenger/controller versions; changelogs are updated to reflect the bumps.

Written by Cursor Bugbot for commit ffd6bac. This will update automatically on new commits. Configure here.

@cryptodev-2s cryptodev-2s requested a review from a team as a code owner April 3, 2026 13:41
@cryptodev-2s cryptodev-2s self-assigned this Apr 3, 2026
@socket-security
Copy link
Copy Markdown

socket-security bot commented Apr 3, 2026

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Updated@​metamask/​snaps-controllers@​19.0.0 ⏵ 19.0.1711007699 +150
Updated@​metamask/​snaps-utils@​12.1.2 ⏵ 12.1.3981007698 +1100
Updated@​metamask/​messenger@​1.0.0 ⏵ 1.1.19910078 +294 +4100

View full report

Upgrade @metamask/messenger to ^1.1.1, @metamask/snaps-controllers to
^19.0.1, and @metamask/snaps-utils to ^12.1.3 to drop messenger 0.3.0
from the lock file.
@cryptodev-2s cryptodev-2s force-pushed the chore/bump-snaps-messenger-deps branch from dac9dd3 to ffd6bac Compare April 3, 2026 13:43
@cryptodev-2s cryptodev-2s added this pull request to the merge queue Apr 3, 2026
Merged via the queue into main with commit 15a39af Apr 3, 2026
39 checks passed
@cryptodev-2s cryptodev-2s deleted the chore/bump-snaps-messenger-deps branch April 3, 2026 14:04
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants