Files
pezkuwi-extension/tsconfig.build.json
T
SatoshiQaziMuhammed c3070ab5a0 Drop zod 3 from the tree (GHSA-mrhx-c7xc-m3w5) (#31)
zod 3.25.76 reached the extension along two paths, and 3.x has no fix:

- extension-compat-metamask took all of web3 4 for one call,
  Web3.utils.sha3 on the eth_sign payload; web3-validator pins zod ^3.21.4
  and has had no release since. ethSignHash replaces it with keccakAsHex
  from @pezkuwi/util-crypto. Both read hex as bytes and anything else as
  UTF-8, and agree on every input but empty data, for which web3 returned
  nothing and MetaMask rejected the request; that is now refused up front.
  web3 leaves the lockfile (about 480 lines).

- extension-ui used @paraspell/xcm-analyser 1.x, whose last release depends
  on zod 3. 3.4.0 uses zod 4, renames convertMultilocationToUrl to
  convertLocationToUrl, and no longer accepts the digit-grouped strings
  that SignerPayload.toHuman() produces ("1,984"), so a plain bump would
  have dropped the readable asset location from the signing popup without
  an error. assetIdUrl turns those strings back into numbers first.

zod resolves to 4.6.7 alone. Lockfile changes resolved with a 14-day
minimum release age.
2026-11-15 05:09:49 +04:00

23 lines
1009 B
JSON

{
"compilerOptions": {
"composite": true
},
"files": [],
"references": [
{ "path": "./packages/extension/tsconfig.build.json" },
{ "path": "./packages/extension/tsconfig.spec.json" },
{ "path": "./packages/extension-base/tsconfig.build.json" },
{ "path": "./packages/extension-base/tsconfig.spec.json" },
{ "path": "./packages/extension-chains/tsconfig.build.json" },
{ "path": "./packages/extension-compat-metamask/tsconfig.build.json" },
{ "path": "./packages/extension-compat-metamask/tsconfig.spec.json" },
{ "path": "./packages/extension-dapp/tsconfig.build.json" },
{ "path": "./packages/extension-dapp/tsconfig.spec.json" },
{ "path": "./packages/extension-inject/tsconfig.build.json" },
{ "path": "./packages/extension-inject/tsconfig.spec.json" },
{ "path": "./packages/extension-mocks/tsconfig.build.json" },
{ "path": "./packages/extension-ui/tsconfig.build.json" },
{ "path": "./packages/extension-ui/tsconfig.spec.json" }
]
}