Skip to content

[Snyk] Security upgrade wagmi from 2.14.15 to 3.0.0 - #27

Merged
Dargon789 merged 1 commit into
mainfrom
snyk-fix-da415bbd7b133b5ea57801b209256c6d
Dec 15, 2025
Merged

Dargon789 merged 1 commit into
mainfrom
snyk-fix-da415bbd7b133b5ea57801b209256c6d

Conversation

@snyk-io

@snyk-io snyk-io Bot commented Nov 20, 2025

Copy link
Copy Markdown

snyk-top-banner

Snyk has created this PR to fix 1 vulnerabilities in the pnpm dependencies of this project.

Snyk changed the following file(s):

  • examples/minikit-example/package.json
⚠️ Warning
Failed to update the pnpm-lock.yaml, please update manually before merging.

Vulnerabilities that will be fixed with an upgrade:

Issue Score
critical severity Improper Verification of Cryptographic Signature
SNYK-JS-ELLIPTIC-8187303
  228  

Important

  • Check the changes in this PR to ensure they won't cause issues with your project.
  • Max score is 1000. Note that the real score may have changed since the PR was raised.
  • This PR was automatically created by Snyk using the credentials of a real user.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report
📜 Customise PR templates
🛠 Adjust project settings
📚 Read about Snyk's upgrade logic


Learn how to fix vulnerabilities with free interactive lessons:

🦉 Learn about vulnerability in an interactive lesson of Snyk Learn.

@vercel

vercel Bot commented Nov 20, 2025

Copy link
Copy Markdown

Deployment failed with the following error:

Resource is limited - try again in 1 hour (more than 100, code: "api-deployments-free-per-day").

Learn More: https://vercel.com/dargon789-forge?upgradeToPro=build-rate-limit

@snyk-io

snyk-io Bot commented Nov 20, 2025

Copy link
Copy Markdown
Author

✅ Snyk checks have passed. No issues have been found so far.

Status Scanner Critical High Medium Low Total (0)
✅ Open Source Security 0 0 0 0 0 issues

💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse.

@github-actions

Copy link
Copy Markdown

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

OpenSSF Scorecard

PackageVersionScoreDetails
npm/wagmi ^3.0.0 🟢 8.2
Details
CheckScoreReason
Code-Review🟢 3Found 7/19 approved changesets -- score normalized to 3
Security-Policy🟢 9security policy file detected
Dependency-Update-Tool🟢 10update tool detected
Token-Permissions🟢 10GitHub workflow tokens follow principle of least privilege
Maintained🟢 1030 commit(s) and 6 issue activity found in the last 90 days -- score normalized to 10
Packaging⚠️ -1packaging workflow not detected
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Binary-Artifacts🟢 10no binaries found in the repo
Pinned-Dependencies🟢 10all dependencies are pinned
CII-Best-Practices🟢 5badge detected: Passing
SAST🟢 7SAST tool is not run on all commits -- score normalized to 7
License🟢 10license file detected
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration
Fuzzing⚠️ 0project is not fuzzed
Signed-Releases⚠️ -1no releases found
Vulnerabilities🟢 91 existing vulnerabilities detected
CI-Tests🟢 715 out of 21 merged PRs checked by a CI test -- score normalized to 7
Contributors🟢 10project has 30 contributing companies or organizations

Scanned Files

  • examples/minikit-example/package.json

@Dargon789 Dargon789 linked an issue Nov 24, 2025 that may be closed by this pull request
@Dargon789
Dargon789 enabled auto-merge December 15, 2025 10:06
@Dargon789
Dargon789 merged commit a53783a into main Dec 15, 2025
13 of 20 checks passed
@Dargon789
Dargon789 deleted the snyk-fix-da415bbd7b133b5ea57801b209256c6d branch December 15, 2025 10:08
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

#AutoConnect in MiniKitProvider

1 participant