🔒 Update example lockfiles - #1908
Conversation
PR SummaryUpdates example lockfiles to reflect newly published package versions.
Written by Cursor Bugbot for commit 63ce60a. This will update automatically on new commits. Configure here. |
![github-actions[bot]](https://avatars.githubusercontent.com/in/15368?s=60&v=4){kind=small}
|
Auto-approved: This PR from layerzero-bot only contains package.json, lockfile, changeset, or CHANGELOG updates. |
![cursor[bot]](https://avatars.githubusercontent.com/in/1210556?s=60&v=4){kind=small}
| '@layerzerolabs/lz-definitions': ^3.0.75 | ||
| '@layerzerolabs/devtools': ~2.0.4 | ||
| '@layerzerolabs/io-devtools': ~0.3.2 | ||
| '@layerzerolabs/lz-definitions': ^3.0.148 |
There was a problem hiding this comment.
Peer dependency mismatch in oft-solana lockfile update
Medium Severity
The lockfile update for @layerzerolabs/devtools-solana@3.0.6 introduces peer dependency mismatches. The package requires @layerzerolabs/devtools ~2.0.4, @layerzerolabs/io-devtools ~0.3.2, and @layerzerolabs/lz-definitions ^3.0.148, but the resolved dependencies provide versions 2.0.3, 0.3.1, and 3.0.142 respectively—none of which satisfy the declared requirements. This could cause runtime errors if the new package version relies on APIs only available in the newer peer dependency versions.
Additional Locations (1)
| /@layerzerolabs/devtools-solana@3.0.5(@layerzerolabs/devtools@2.0.4)(@layerzerolabs/io-devtools@0.3.2)(@layerzerolabs/lz-definitions@3.0.145)(@solana/web3.js@1.95.8)(bn.js@5.2.2)(fastestsmallesttextencoderdecoder@1.0.22)(fp-ts@2.16.11)(typescript@5.9.3)(zod@3.25.76): | ||
| resolution: {integrity: sha512-O+6F668yAL7pD8y+Z9F6XSW2oTBpOnrn/kqpU9XSEA7dkvv6MxvJI9GZkZbM2nJ7Tu0xRHa5R2u7bFbXVL0VRw==} | ||
| /@layerzerolabs/devtools-solana@3.0.6(@layerzerolabs/devtools@2.0.4)(@layerzerolabs/io-devtools@0.3.2)(@layerzerolabs/lz-definitions@3.0.145)(@solana/web3.js@1.95.8)(bn.js@5.2.2)(fastestsmallesttextencoderdecoder@1.0.22)(fp-ts@2.16.11)(typescript@5.9.3)(zod@3.25.76): | ||
| resolution: {integrity: sha512-QOcEIkof5BfAsRM3HiBlqieELA7rbQg5K+wDQJp6uk0OBkJtxWMBNDBYh58fwVMxILjKT1gKf49ElZYI7Sty8A==} |
There was a problem hiding this comment.
Peer dependency version mismatch in oapp-solana lockfile
Low Severity
The @layerzerolabs/devtools-solana@3.0.6 package in the oapp-solana lockfile declares a peer dependency of @layerzerolabs/lz-definitions ^3.0.148, but the resolved version is 3.0.145 which doesn't satisfy this requirement (3.0.145 < 3.0.148). This could cause runtime issues if the new devtools-solana version relies on features or fixes only present in lz-definitions@3.0.148 or later.
🧪 E2E Test StatusE2E tests are non-blocking and validate real blockchain interactions. Failures may occur due to network issues, RPC rate limits, or external service downtime. Test Runs (Newest First):
|
2 participants
Automated update of example lockfiles after package publishing.