Fork sync#36
Open
mateumiralles wants to merge 929 commits into
Open
Conversation
Bumps [svgo](https://github.com/svg/svgo) from 3.3.2 to 3.3.3. - [Release notes](https://github.com/svg/svgo/releases) - [Commits](svg/svgo@v3.3.2...v3.3.3) --- updated-dependencies: - dependency-name: svgo dependency-version: 3.3.3 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>
feat: wrapped image
…active-keys fix: show wrong-fee-recipient alert only for already active keys
fix: add blob into img CSP config
Merge develop into main
Add matomo events and tests for monitoring and dashboard links
Bumps [socket.io-parser](https://github.com/socketio/socket.io) from 4.2.5 to 4.2.6. - [Release notes](https://github.com/socketio/socket.io/releases) - [Changelog](https://github.com/socketio/socket.io/blob/main/CHANGELOG.md) - [Commits](https://github.com/socketio/socket.io/compare/socket.io-parser@4.2.5...socket.io-parser@4.2.6) --- updated-dependencies: - dependency-name: socket.io-parser dependency-version: 4.2.6 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>
* fix: update Node.js version to 24 and clean up workflow files * fix: add encryption and upload for Playwright report in CI workflows * fix: remove artifact upload and add Slack notification for skipped tests * feat: add Slack notification action for broken workflows * feat: add Slack notification action for broken workflows * fix: update Slack notification action to use environment variable for duty tag * fix: update Node.js version from 24 to 20 in workflow * fix: update Node.js version from 20 to 24 in workflow * fix: update navigation paths and improve test assertions for manager and rewards address pages * fix: increase test timeout to 60 minutes and update Slack notification condition for scheduled runs * fix: increase test timeout to 60 minutes and update Slack notification condition for scheduled runs * fix: update bond rewards reference in dashboard page open method * fix: update upload-artifact action to v7 and increase test timeout to 90 minutes
Update reef-knot from 8.0.0-alpha.1 and align @walletconnect/ethereum-provider to ^2.23.8. Reconcile matomo wallet events with the trimmed WalletIdsEthereum set in v8.1: drop binanceWallet, brave, coin98, coinbase, exodus, trust, ctrl; add anchorageDigital.
Address 29/43 open Dependabot alerts: - axios ^1.15.0 -> ^1.16.0 (17 alerts: prototype pollution, SSRF, header injection, CRLF injection, etc.) - hono ^4.12.14 -> ^4.12.18 (5 alerts: CSS injection, JWT validation, cache leakage, JSX injection, bodyLimit bypass) - next ^12.3.4 -> ^12.3.5 (1 critical: middleware auth bypass) - postcss ^8.4.31 -> ^8.5.10 (XSS in CSS stringify) - @babel/plugin-transform-modules-systemjs ^7.29.4 (arbitrary code gen) - fast-uri ^3.1.2 (host confusion + path traversal) - ws ^8.20.1 (uninitialized memory disclosure) - bn.js ^5.2.3 (infinite loop)
- Direct dep: uuid ^8.3.2 -> ^14.0.0 - Drop @types/uuid devDep (uuid v9+ ships its own types) - Add resolution "uuid": "^14.0.0" to also bump transitive consumers (@metamask/sdk, jayson, rpc-websockets, @lidofinance/pg-reporter etc.) — all verified to use only v4() which is API-stable across versions. Closes Dependabot #180 (uuid <11.1.1 missing buffer bounds check) and #165 (uuid 13.0.0 same advisory).
# Conflicts: # .github/workflows/build-push-harbor.yml # yarn.lock
Sync develop-cm → develop
Replace the inbox empty state with a "No pending requests" heading and guidance paragraph, and add the descriptive paragraph below the "Choose request to accept" title, matching the latest Figma.
…cker/build-push-action-7 chore(deps): bump docker/build-push-action from 6 to 7
…tions/checkout-6 chore(deps): bump actions/checkout from 4 to 6
Sync develop-cm → develop
…cker/login-action-4 chore(deps): bump docker/login-action from 3 to 4
Runtime now fails open when VALIDATION_FILE_PATH is set but the file is missing, unreadable, malformed JSON, or has the wrong schema: each case returns an empty deny-list, logs a structured error, and increments a Prom counter with a stable bucket label. Previously every failure set isBroken=true, which the provider treated as "deny everyone" — a broken file locked all users out. - Bucketed error labels (stat_failed / read_failed / invalid_json / invalid_format) replace String(error), fixing a Prometheus cardinality bomb where every distinct error message became its own series. - Discrete stat → read → parse → validate steps so logs and metrics name what actually failed. - mtime-based in-memory cache avoids re-reading the file on every getServerSideProps call; the cache invalidates as soon as mtime moves. - Drops the isBroken flag from AddressValidationFile and the matching branch in AddressValidationProvider. Deploy-time misconfig is still caught by scripts/startup-checks/ validation-file.mjs, which hard-fails on a bad file when RUN_STARTUP_CHECKS=true.
* fix: add data-testid attributes for improved testing * feat: move csm tests to additional folder * fix: update node version to 24 in workflow files * feat: move shared services * feat: update yarn command add moved config * feat: added tests for keys * feat: update DashboardPage and RolesSection with new locators and tests * feat: add more tests * feat: added tests for first step * feat: added tests for first step * feat: added tests for second step * chore: update dependencies and add detailed link to welcome section * feat: add NotEligiblePage and related tests for not eligible section * feat: enhance tests for operator steps with detailed checks and Qase integration * feat: implement CreateOperatorStep3Page and associated tests for step 3 functionality * feat: implement Step 4 functionality with UI components and tests for operator creation summary * feat: update error handling in form controls and add tests for operator creation steps * feat: enhance validation tests with Qase integration and improve error handling for keys * feat: integrate Qase reporting into dashboard tests and enhance tooltip verifications * feat: add tests for dashboard stake keys section * feat: navigation tests * feat: add edit metadata link and corresponding test for dashboard navigation * feat: add delete keys card functionality and corresponding tests for navigation * feat: implement metadata management with validation and update functionality in settings * feat: update wallet configuration to use WC_SDK_COMMON_CONFIG and add @noble/hashes resolution * feat: add navigation tests for empty validator with Create Operator visibility * feat: add tests for rewards cliaimer * fix: fixed tests after refactor * fix: fixed tests after refactor * feat: add tooltip test for current rewards claimer info icon * feat: dvt form * feat: added tests for claim blances * fix: validation get/set nested errors * fix: update dvt form status * feat: refactor * test: restructure claim tests — SDK assertions, shared constants, concise names * test: added new tests * fix: correct data-testid references for curated operator form * feat: add tests for splitters bond reward * feat: claim IDVTC * refactor: small refactors * feat: parameters table with 3 columns * feat: update select-operator-type-create modal * fix: pass operator type to create page * fix: file path * feat: keys-cache used internally in sdk * fix: test dulicated-keys * feat: try to add job * fix: update Foundry version to v1.7.1 in tests-fork workflow * fix: update wallet secrets and module references in tests-fork workflow * fix: update wallet secrets and module references in tests-fork workflow * fix: update test command to use yarn in tests-fork workflow * fix: add null check for snapshotId before reverting in multiple test files * fix: add Pinata API credentials to test-cm job in tests-fork workflow * fix: revert group names * fix: dummy qa-config * fix: downgrade sdk * fix: remove artifact upload steps from test workflows * fix: current-stake without external-stake * feat: group name * chore: ci * chore: skip rpc check * fix: update global setup to start node only in CI, refactor global teardown, enhance test fixtures * feat: implement wallet presets and enhance global setup for CI * fix: remove redundant node-version line in setup-node action * fix: improve error handling and logging in presets state management * feat: enhance wallet presets and update test descriptions with tags * fix: remove .only from test.describe in keysBreakdown and groupSummary tests * chore: trigger rebuild * feat: enhance wallet preset handling and improve logging in fork actions * fix: add global timeout for CI and improve error handling in waitForCallback * feat: add withDeposit handler and update wallet presets to include it * feat: add keys generator binary download step in test workflows * fix: reorder and reintroduce Playwright report encryption step in test workflow * feat: update wallet preset definitions and enhance validation checks in tests * fix: added qase ids * feat: remove old * feat: remove old * feat: remove old * feat: remove old * feat: remove old * feat: remove old * feat: remove old * feat: remove old * feat: remove old * feat: remove old * feat: remove old * feat: remove old * feat: remove old * feat: remove old --------- Co-authored-by: exromany <exromany@lido.fi>
* feat: use SecGuardReporter to hide sensetive env in pw report * fix: fixed sensetive env array
Sync develop-cm → develop
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
5 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Fork sync