Merge branch 'main' into patch-1

.github/workflows/CI.yml

@@ -18,8 +18,8 @@ jobs:
           - ubuntu-latest
           - macOS-latest
         node_version:
-          - 14
           - 16
+          - 18
 
     steps:
       - uses: actions/checkout@v2
@@ -28,7 +28,8 @@ jobs:
           node-version: ${{ matrix.node_version }}
           cache: 'yarn'
 
-      - run: yarn
+      # ensure the lockfile is in sync with the specified dependencies
+      - run: yarn install --frozen-lockfile
 
       - run: yarn build
 

.github/workflows/snyk_sca_scan.yml

@@ -0,0 +1,35 @@
+name: Snyk Code Security
+
+on:
+  pull_request:
+    branches:
+      - '**'
+  push:
+    branches:
+      - main
+    paths-ignore:
+      - '**/*.md'
+
+jobs:
+  open-source:
+    name: '🔒 Open Source Scan'
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v2
+      - name: Run Snyk test to check for known vulnerabilities in software supply chain
+        uses: snyk/actions/node@0e928f3e9ae859e2b95ac2b89af55d7b6434244d
+        env:
+          SNYK_TOKEN: ${{ secrets.SNYK_API_TOKEN }}
+        with:
+          command: test
+          # include devDependencies to deps list for Snyk dep-graph
+          args: --dev --severity-threshold=medium 
+
+      - name: Run Snyk monitor to upload the latest snapshot 
+        uses: snyk/actions/node@0e928f3e9ae859e2b95ac2b89af55d7b6434244d
+        env:
+          SNYK_TOKEN: ${{ secrets.SNYK_API_TOKEN }}
+        with:
+          command: monitor
+          # include devDependencies to deps list for Snyk dep-graph
+          args: --dev --severity-threshold=medium 

.snyk

@@ -0,0 +1,8 @@
+# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities.
+version: v1.25.0
+ignore: {}
+patch: {}
+exclude:
+  global:
+    - packages/**
+    - examples/**

example/package.json

@@ -1,6 +1,6 @@
 {
   "private": true,
-  "version": "8.2.7",
+  "version": "8.2.9",
   "name": "example",
   "scripts": {
     "start": "next dev"
@@ -14,13 +14,13 @@
     "@web3-react/core": "^8.2.0",
     "@web3-react/eip1193": "^8.2.0",
     "@web3-react/empty": "^8.2.0",
-    "@web3-react/gnosis-safe": "^8.2.0",
+    "@web3-react/gnosis-safe": "^8.2.1",
     "@web3-react/metamask": "^8.2.1",
     "@web3-react/network": "^8.2.0",
     "@web3-react/types": "^8.2.0",
     "@web3-react/url": "^8.2.0",
     "@web3-react/walletconnect": "^8.2.0",
-    "@web3-react/walletconnect-v2": "^8.3.5",
+    "@web3-react/walletconnect-v2": "^8.3.7",
     "next": "^12.1.5",
     "react-dom": "^18.0.0"
   }

package.json

@@ -2,7 +2,7 @@
   "private": true,
   "name": "web3-react",
   "engines": {
-    "node": "^14 || ^16"
+    "node": "^16 || ^18"
   },
   "scripts": {
     "clean": "lerna clean --yes",
@@ -28,9 +28,8 @@
     "@typescript-eslint/parser": "^5.19.0",
     "@uniswap/eslint-config": "^1.1.1",
     "eslint": "^8.13.0",
-    "eth-provider": "^0.9.4",
     "jest": "^27.5.1",
-    "lerna": "^4.0.0",
+    "lerna": "^5",
     "react": "^18.0.0",
     "react-test-renderer": "^18.0.0",
     "ts-jest": "^27.1.4",

packages/gnosis-safe/package.json

@@ -10,7 +10,7 @@
   "publishConfig": {
     "access": "public"
   },
-  "version": "8.2.0",
+  "version": "8.2.1",
   "files": [
     "dist/*"
   ],
@@ -24,8 +24,8 @@
     "start": "tsc --watch"
   },
   "dependencies": {
-    "@safe-global/safe-apps-provider": "^0.16.0",
-    "@safe-global/safe-apps-sdk": "^7.10.0",
+    "@safe-global/safe-apps-provider": "^0.17.1",
+    "@safe-global/safe-apps-sdk": "^8.0.0",
     "@web3-react/types": "^8.2.0"
   }
 }

packages/walletconnect-v2/package.json

@@ -10,7 +10,7 @@
   "publishConfig": {
     "access": "public"
   },
-  "version": "8.3.5",
+  "version": "8.3.7",
   "files": [
     "dist/*"
   ],
@@ -24,8 +24,8 @@
     "start": "tsc --watch"
   },
   "dependencies": {
-    "@walletconnect/ethereum-provider": "^2.8.3",
-    "@walletconnect/modal": "^2.4.5",
+    "@walletconnect/ethereum-provider": "^2.8.6",
+    "@walletconnect/modal": "^2.5.9",
     "@web3-react/types": "^8.2.0",
     "eventemitter3": "^4.0.7"
   },