Skip to content

Release 969.0.0 (TEST)#8740

Draft
mcmire wants to merge 1 commit intomainfrom
test-release
Draft

Release 969.0.0 (TEST)#8740
mcmire wants to merge 1 commit intomainfrom
test-release

Conversation

@mcmire
Copy link
Copy Markdown
Contributor

@mcmire mcmire commented May 7, 2026

(This is a PR to test the update-changelog workflow. I don't intend on merging this.)

@mcmire mcmire temporarily deployed to default-branch May 7, 2026 20:07 — with GitHub Actions Inactive
@mcmire mcmire changed the title Test release Release 969.0.0 May 7, 2026
@mcmire mcmire temporarily deployed to default-branch May 7, 2026 20:08 — with GitHub Actions Inactive
@mcmire mcmire changed the title Release 969.0.0 Release 969.0.0 (TEST) May 7, 2026
@socket-security
Copy link
Copy Markdown

Caution

MetaMask internal reviewing guidelines:

  • Do not ignore-all
  • Each alert has instructions on how to review if you don't know what it means. If lost, ask your Security Liaison or the supply-chain group
  • Copy-paste ignore lines for specific packages or a group of one kind with a note on what research you did to deem it safe.
    @SocketSecurity ignore npm/PACKAGE@VERSION
Action Severity Alert  (click "▶" to expand/collapse)
Block Medium
Network access: npm @metamask/network-controller in module globalThis["fetch"]

Module: globalThis["fetch"]

Location: Package overview

From: ?npm/@metamask/network-controller@30.1.0

ℹ Read more on: This package | This alert | What is network access?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Packages should remove all network access that is functionally unnecessary. Consumers should audit network access to ensure legitimate use.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/@metamask/network-controller@30.1.0. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

View full report

@metamaskbotv2
Copy link
Copy Markdown

metamaskbotv2 Bot commented May 7, 2026

✅ No changelog changes needed.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant