Skip to content

Fork sync#36

Open
mateumiralles wants to merge 904 commits into
dappnode:developfrom
lidofinance:develop
Open

Fork sync#36
mateumiralles wants to merge 904 commits into
dappnode:developfrom
lidofinance:develop

Conversation

@mateumiralles
Copy link
Copy Markdown

Fork sync

exromany and others added 30 commits February 21, 2026 22:01
In default (non-zoomed) mode, endPosition didn't include capacity,
so the limit line was capped at the bar edge with no visible gap.
Now capacity is included in the range when within reasonable distance.
Remove interactive slideshow, share modal, progress bar, navigation,
auto-advance, context provider, and all data-driven slides. Keep only
static intro and outro slides with simplified backgrounds.
…splay

fix: improve rewards history table display
feat: remove wrapped interactive slideshow
fix: show gap between queue end and stake limit in default view
…sh-4.17.23

chore(deps): bump lodash from 4.17.21 to 4.17.23
….15.5

chore(deps): bump h3 from 1.15.1 to 1.15.5
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 6 to 7.
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](actions/upload-artifact@v6...v7)

---
updated-dependencies:
- dependency-name: actions/upload-artifact
  dependency-version: '7'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
…tions/setup-node-6

chore(deps): bump actions/setup-node from 4 to 6
* feat: update core deps

* fix: lint error
Bumps [svgo](https://github.com/svg/svgo) from 3.3.2 to 3.3.3.
- [Release notes](https://github.com/svg/svgo/releases)
- [Commits](svg/svgo@v3.3.2...v3.3.3)

---
updated-dependencies:
- dependency-name: svgo
  dependency-version: 3.3.3
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Vorobeyko and others added 30 commits May 13, 2026 12:38
- restore curatedOperatorForm testid
- drop extra <div> wrapper in token-select, pass data-testid to <Note>
- widen Note props to allow data-testid override
- widen WeightChip, KeysItem, ParamSection, SummaryRow types
  so data-testid is exposed in the public prop contract
- move default data-testid before {...props} in owner-chip
  and icon-tooltip so callers can override
- use plain string literals (no template) in gate-card
- drop leftover fieldName arg in token-amount-input-hook-form
  to match updated testableError signature
feat: added data attr for elements
* fix: update Node.js version to 24 and clean up workflow files

* fix: add encryption and upload for Playwright report in CI workflows

* fix: remove artifact upload and add Slack notification for skipped tests

* feat: add Slack notification action for broken workflows

* feat: add Slack notification action for broken workflows

* fix: update Slack notification action to use environment variable for duty tag

* fix: update Node.js version from 24 to 20 in workflow

* fix: update Node.js version from 20 to 24 in workflow

* fix: update navigation paths and improve test assertions for manager and rewards address pages

* fix: increase test timeout to 60 minutes and update Slack notification condition for scheduled runs

* fix: increase test timeout to 60 minutes and update Slack notification condition for scheduled runs

* fix: update bond rewards reference in dashboard page open method

* fix: update upload-artifact action to v7 and increase test timeout to 90 minutes
* fix: update Node.js version to 24 and clean up workflow files

* fix: add encryption and upload for Playwright report in CI workflows

* fix: remove artifact upload and add Slack notification for skipped tests

* feat: add Slack notification action for broken workflows

* feat: add Slack notification action for broken workflows

* fix: update Slack notification action to use environment variable for duty tag

* fix: update Node.js version from 24 to 20 in workflow

* fix: update Node.js version from 20 to 24 in workflow

* fix: update navigation paths and improve test assertions for manager and rewards address pages

* fix: increase test timeout to 60 minutes and update Slack notification condition for scheduled runs

* fix: increase test timeout to 60 minutes and update Slack notification condition for scheduled runs

* fix: update bond rewards reference in dashboard page open method

* fix: update upload-artifact action to v7 and increase test timeout to 90 minutes
Update reef-knot from 8.0.0-alpha.1 and align @walletconnect/ethereum-provider
to ^2.23.8. Reconcile matomo wallet events with the trimmed WalletIdsEthereum
set in v8.1: drop binanceWallet, brave, coin98, coinbase, exodus, trust, ctrl;
add anchorageDigital.
Address 29/43 open Dependabot alerts:

- axios ^1.15.0 -> ^1.16.0 (17 alerts: prototype pollution, SSRF,
  header injection, CRLF injection, etc.)
- hono ^4.12.14 -> ^4.12.18 (5 alerts: CSS injection, JWT validation,
  cache leakage, JSX injection, bodyLimit bypass)
- next ^12.3.4 -> ^12.3.5 (1 critical: middleware auth bypass)
- postcss ^8.4.31 -> ^8.5.10 (XSS in CSS stringify)
- @babel/plugin-transform-modules-systemjs ^7.29.4 (arbitrary code gen)
- fast-uri ^3.1.2 (host confusion + path traversal)
- ws ^8.20.1 (uninitialized memory disclosure)
- bn.js ^5.2.3 (infinite loop)
- Direct dep: uuid ^8.3.2 -> ^14.0.0
- Drop @types/uuid devDep (uuid v9+ ships its own types)
- Add resolution "uuid": "^14.0.0" to also bump transitive consumers
  (@metamask/sdk, jayson, rpc-websockets, @lidofinance/pg-reporter etc.)
  — all verified to use only v4() which is API-stable across versions.

Closes Dependabot #180 (uuid <11.1.1 missing buffer bounds check) and
#165 (uuid 13.0.0 same advisory).
# Conflicts:
#	.github/workflows/build-push-harbor.yml
#	yarn.lock
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants