Skip to content

fix: packages/uniswap/package.json to reduce vulnerabilities#97

Open
Dargon789 wants to merge 1 commit into
uniswap/mainfrom
snyk-fix-0c7d2c59121ad8f8fa0754ce05b8477c
Open

fix: packages/uniswap/package.json to reduce vulnerabilities#97
Dargon789 wants to merge 1 commit into
uniswap/mainfrom
snyk-fix-0c7d2c59121ad8f8fa0754ce05b8477c

Conversation

@Dargon789

Copy link
Copy Markdown
Owner

The following vulnerabilities are fixed with an upgrade:

@snyk-io

snyk-io Bot commented Mar 10, 2026

Copy link
Copy Markdown

Snyk checks have passed. No issues have been found so far.

Status Scan Engine Critical High Medium Low Total (0)
Open Source Security 0 0 0 0 0 issues

💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse.

@mergify

mergify Bot commented Mar 10, 2026

Copy link
Copy Markdown

⚠️ The sha of the head commit of this PR conflicts with #55. Mergify cannot evaluate rules on this PR. Once #55 is merged or closed, Mergify will resume processing this PR. ⚠️

@gemini-code-assist

Copy link
Copy Markdown
Contributor

Summary of Changes

Hello, I'm Gemini Code Assist1! I'm currently reviewing this pull request and will post my feedback shortly. In the meantime, here's a summary to help you and other reviewers quickly get up to speed!

This pull request focuses on enhancing the security posture of the uniswap package by performing a critical dependency upgrade. The primary change involves updating the ethers library to its latest major version, which is expected to resolve known vulnerabilities and improve overall stability.

Highlights

  • Dependency Upgrade: Upgraded the ethers library from version 5.7.2 to 6.0.0 within the packages/uniswap/package.json file.
  • Vulnerability Resolution: This upgrade is intended to address reported vulnerabilities, specifically referencing the SNYK-JS-ELLIPTIC-14908844 vulnerability, by updating underlying dependencies.
Changelog
  • packages/uniswap/package.json
    • Upgraded the ethers dependency from 5.7.2 to 6.0.0.
Activity
  • No human activity has been recorded on this pull request yet.
Using Gemini Code Assist

The full guide for Gemini Code Assist can be found on our documentation page, here are some quick tips.

Invoking Gemini

You can request assistance from Gemini at any point by creating a comment using either /gemini <command> or @gemini-code-assist <command>. Below is a summary of the supported commands on the current page.

Feature Command Description
Code Review /gemini review Performs a code review for the current pull request in its current state.
Pull Request Summary /gemini summary Provides a summary of the current pull request in its current state.
Comment @gemini-code-assist Responds in comments when explicitly tagged, both in pull request comments and review comments.
Help /gemini help Displays a list of available commands.

Customization

To customize Gemini Code Assist for GitHub experience, repository maintainers can create a configuration file and/or provide a custom code review style guide (such as PEP-8 for Python) by creating and adding files to a .gemini/ folder in the base of the repository. Detailed instructions can be found here.

Limitations & Feedback

Gemini Code Assist may make mistakes. Please leave feedback on any instances where its feedback is incorrect or counter productive. You can react with 👍 and 👎 on @gemini-code-assist comments. If you're interested in giving your feedback about your experience with Gemini Code Assist for GitHub and other Google products, sign up here.

You can also get AI-powered code generation, chat, as well as code reviews directly in the IDE at no cost with the Gemini Code Assist IDE Extension.

Footnotes

  1. Review the Privacy Notices, Generative AI Prohibited Use Policy, Terms of Service, and learn how to configure Gemini Code Assist in GitHub here. Gemini can make mistakes, so double check it and use code with caution.

@gemini-code-assist gemini-code-assist Bot left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Code Review

The ethers dependency in packages/uniswap/package.json was updated from version 5.7.2 to 6.0.0.

Note: Security Review has been skipped due to the limited scope of the PR.

@Dargon789 Dargon789 force-pushed the snyk-fix-0c7d2c59121ad8f8fa0754ce05b8477c branch from 9182f0b to a6d081a Compare April 5, 2026 15:48
@vercel vercel Bot temporarily deployed to Preview – uniswap-app-web April 5, 2026 15:48 Inactive
@vercel

vercel Bot commented Apr 5, 2026

Copy link
Copy Markdown
Contributor

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated (UTC)
dargon789.uni.eth Canceled Canceled Apr 5, 2026 3:48pm
uniswap-app-web Canceled Canceled Apr 5, 2026 3:48pm

@vercel vercel Bot temporarily deployed to Preview – dargon789.uni.eth April 5, 2026 15:48 Inactive
@mergify

mergify Bot commented Apr 5, 2026

Copy link
Copy Markdown

⚠️ The sha of the head commit of this PR conflicts with #55. Mergify cannot evaluate rules on this PR. Once #55 is merged or closed, Mergify will resume processing this PR. ⚠️

@Dargon789 Dargon789 force-pushed the snyk-fix-0c7d2c59121ad8f8fa0754ce05b8477c branch from a6d081a to 9182f0b Compare April 17, 2026 17:56
@mergify

mergify Bot commented Apr 17, 2026

Copy link
Copy Markdown

⚠️ The sha of the head commit of this PR conflicts with #55. Mergify cannot evaluate rules on this PR. Once #55 is merged or closed, Mergify will resume processing this PR. ⚠️

An error occurred while trying to automatically change base from uniswap/main to main April 17, 2026 18:08
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants