chore: Bump @lavamoat/webpack from 1.5.7 to 1.5.8 (#3847)

Bumps
[@lavamoat/webpack](https://github.com/LavaMoat/lavamoat/tree/HEAD/packages/webpack)
from 1.5.7 to 1.5.8.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/LavaMoat/lavamoat/releases"><code>@​lavamoat/webpack</code>'s
releases</a>.</em></p>
<blockquote>
<h2>webpack: v1.5.8</h2>
<h2><a
href="https://github.com/LavaMoat/LavaMoat/compare/webpack-v1.5.7...webpack-v1.5.8">1.5.8</a>
(2026-02-05)</h2>
<h3>Bug Fixes</h3>
<ul>
<li><strong>deps:</strong> update definitelytyped (<a
href="https://github.com/LavaMoat/LavaMoat/commit/2eab34797e14fa0ff2d2b0aa6fd1ec77cc490900">2eab347</a>)</li>
</ul>
<h3>Dependencies</h3>
<ul>
<li>The following workspace dependencies were updated
<ul>
<li>dependencies
<ul>
<li><code>@​lavamoat/aa</code> bumped from ^4.3.5 to ^4.3.6</li>
<li>lavamoat-core bumped from ^17.1.2 to ^17.1.3</li>
</ul>
</li>
</ul>
</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/LavaMoat/LavaMoat/blob/main/packages/webpack/CHANGELOG.md"><code>@​lavamoat/webpack</code>'s
changelog</a>.</em></p>
<blockquote>
<h2><a
href="https://github.com/LavaMoat/LavaMoat/compare/webpack-v1.5.7...webpack-v1.5.8">1.5.8</a>
(2026-02-05)</h2>
<h3>Bug Fixes</h3>
<ul>
<li><strong>deps:</strong> update definitelytyped (<a
href="https://github.com/LavaMoat/LavaMoat/commit/2eab34797e14fa0ff2d2b0aa6fd1ec77cc490900">2eab347</a>)</li>
</ul>
<h3>Dependencies</h3>
<ul>
<li>The following workspace dependencies were updated
<ul>
<li>dependencies
<ul>
<li><code>@​lavamoat/aa</code> bumped from ^4.3.5 to ^4.3.6</li>
<li>lavamoat-core bumped from ^17.1.2 to ^17.1.3</li>
</ul>
</li>
</ul>
</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/LavaMoat/LavaMoat/commit/67ec23cecc0be072b54a6a252cc660c1505a6c3f"><code>67ec23c</code></a>
chore: release main (<a
href="https://github.com/LavaMoat/lavamoat/tree/HEAD/packages/webpack/issues/1881">#1881</a>)</li>
<li><a
href="https://github.com/LavaMoat/LavaMoat/commit/2eab34797e14fa0ff2d2b0aa6fd1ec77cc490900"><code>2eab347</code></a>
fix(deps): update definitelytyped</li>
<li>See full diff in <a
href="https://github.com/LavaMoat/lavamoat/commits/webpack-v1.5.8/packages/webpack">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=@lavamoat/webpack&package-manager=npm_and_yarn&previous-version=1.5.7&new-version=1.5.8)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

<!-- CURSOR_SUMMARY -->
---

> [!NOTE]
> **Low Risk**
> Dependency-only upgrade plus a small LavaMoat policy allowance change;
low functional risk but could affect build/bundling behavior if the new
version changes webpack instrumentation.
> 
> **Overview**
> Bumps the build-time LavaMoat webpack integration to
`@lavamoat/webpack@1.5.8` in `snaps-execution-environments`, pulling in
updated transitive LavaMoat packages (`@lavamoat/aa@4.3.6`,
`lavamoat-core@17.1.3`, `lavamoat-tofu@8.1.1`) via `yarn.lock`.
> 
> Updates the LavaMoat build policy to allow an additional Node builtin
(`node:path.normalize`) used by the upgraded tooling.
> 
> <sup>Written by [Cursor
Bugbot](https://cursor.com/dashboard?tab=bugbot) for commit
29de07f. This will update automatically
on new commits. Configure
[here](https://cursor.com/dashboard?tab=bugbot).</sup>
<!-- /CURSOR_SUMMARY -->

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: MetaMask Bot <metamaskbot@users.noreply.github.com>

Author: dependabot[bot]

packages/snaps-execution-environments/lavamoat/build-system/policy.json

@@ -109,6 +109,7 @@
         "node:fs.realpathSync": true,
         "node:path.dirname": true,
         "node:path.join": true,
+        "node:path.normalize": true,
         "node:path.relative": true,
         "node:path.sep": true
       },

packages/snaps-execution-environments/package.json

@@ -82,7 +82,7 @@
     "@esbuild-plugins/node-modules-polyfill": "^0.2.2",
     "@lavamoat/allow-scripts": "^3.4.2",
     "@lavamoat/lavatube": "^1.0.0",
-    "@lavamoat/webpack": "^1.5.7",
+    "@lavamoat/webpack": "^1.5.8",
     "@metamask/auto-changelog": "^5.0.2",
     "@swc/core": "1.11.31",
     "@swc/jest": "^0.2.38",

yarn.lock

@@ -2758,14 +2758,14 @@ __metadata:
   languageName: node
   linkType: hard
 
-"@lavamoat/aa@npm:^4.3.5":
-  version: 4.3.5
-  resolution: "@lavamoat/aa@npm:4.3.5"
+"@lavamoat/aa@npm:^4.3.5, @lavamoat/aa@npm:^4.3.6":
+  version: 4.3.6
+  resolution: "@lavamoat/aa@npm:4.3.6"
   dependencies:
     resolve: "npm:1.22.10"
   bin:
     lavamoat-ls: src/cli.js
-  checksum: 10/253140c38b25455df8c64f236c8fb97db9406bacc9518f9282ddf593dd9c7ae61aa59ccdeb70bd47e68acb24ed902cf700f215e0acf86b7ac3278490932d5a75
+  checksum: 10/6c6636962527054e5c25f801721c49c6b03c6173e86a7c048a8061f18f9c2c4628413cdfa1c928c8e028ac7128891d54f545fa61751c93e4689891393f0be3ec
   languageName: node
   linkType: hard
 
@@ -2801,20 +2801,20 @@ __metadata:
   languageName: node
   linkType: hard
 
-"@lavamoat/webpack@npm:^1.5.7":
-  version: 1.5.7
-  resolution: "@lavamoat/webpack@npm:1.5.7"
+"@lavamoat/webpack@npm:^1.5.8":
+  version: 1.5.8
+  resolution: "@lavamoat/webpack@npm:1.5.8"
   dependencies:
     "@babel/parser": "npm:7.28.3"
-    "@lavamoat/aa": "npm:^4.3.5"
+    "@lavamoat/aa": "npm:^4.3.6"
     "@lavamoat/types": "npm:^0.1.0"
     browser-resolve: "npm:2.0.0"
     json-stable-stringify: "npm:1.3.0"
-    lavamoat-core: "npm:^17.1.2"
+    lavamoat-core: "npm:^17.1.3"
     ses: "npm:1.14.0"
   peerDependencies:
     webpack: ^5.80.2
-  checksum: 10/1216e44028fd3208a6cb45dfa332521a89f17829dc5dca330bafd9895ac407bcf5569e411857138a38d69ea64113462a9ac82f27e369b82351bc3628266e14c0
+  checksum: 10/c19a6b8a0a5fb15bec74880c108ce6962d5d2615c6549ea28709a41069c6ab6073ef7bf6dd7fdbd103e931a4c215e6dffa84f080c8f521a1ffba4ddcb4474e67
   languageName: node
   linkType: hard
 
@@ -4321,7 +4321,7 @@ __metadata:
     "@esbuild-plugins/node-modules-polyfill": "npm:^0.2.2"
     "@lavamoat/allow-scripts": "npm:^3.4.2"
     "@lavamoat/lavatube": "npm:^1.0.0"
-    "@lavamoat/webpack": "npm:^1.5.7"
+    "@lavamoat/webpack": "npm:^1.5.8"
     "@metamask/auto-changelog": "npm:^5.0.2"
     "@metamask/json-rpc-engine": "npm:^10.2.1"
     "@metamask/object-multiplex": "npm:^2.1.0"
@@ -6011,12 +6011,12 @@ __metadata:
   languageName: node
   linkType: hard
 
-"@types/babel__traverse@npm:*, @types/babel__traverse@npm:7.20.7, @types/babel__traverse@npm:^7.0.6":
-  version: 7.20.7
-  resolution: "@types/babel__traverse@npm:7.20.7"
+"@types/babel__traverse@npm:*, @types/babel__traverse@npm:7.28.0, @types/babel__traverse@npm:^7.0.6":
+  version: 7.28.0
+  resolution: "@types/babel__traverse@npm:7.28.0"
   dependencies:
-    "@babel/types": "npm:^7.20.7"
-  checksum: 10/d005b58e1c26bdafc1ce564f60db0ee938393c7fc586b1197bdb71a02f7f33f72bc10ae4165776b6cafc77c4b6f2e1a164dd20bc36518c471b1131b153b4baa6
+    "@babel/types": "npm:^7.28.2"
+  checksum: 10/371c5e1b40399ef17570e630b2943617b84fafde2860a56f0ebc113d8edb1d0534ade0175af89eda1ae35160903c33057ed42457e165d4aa287fedab2c82abcf
   languageName: node
   linkType: hard
 
@@ -13648,35 +13648,35 @@ __metadata:
   languageName: node
   linkType: hard
 
-"lavamoat-core@npm:^17.1.2":
-  version: 17.1.2
-  resolution: "lavamoat-core@npm:17.1.2"
+"lavamoat-core@npm:^17.1.2, lavamoat-core@npm:^17.1.3":
+  version: 17.1.3
+  resolution: "lavamoat-core@npm:17.1.3"
   dependencies:
     "@babel/types": "npm:7.27.3"
     "@lavamoat/types": "npm:^0.1.0"
     json-stable-stringify: "npm:1.3.0"
-    lavamoat-tofu: "npm:^8.1.0"
+    lavamoat-tofu: "npm:^8.1.1"
     merge-deep: "npm:3.0.3"
     ses: "npm:1.14.0"
   bin:
     lavamoat-sort-policy: src/policy-sort-cli.js
-  checksum: 10/accdedcdabc84b5f4b95b7f9cecf0638be95d1df8068adec0402e5a3177367e442839ca8fc4c20904646f31f75e5dbc0dc9dcde54d26ac16dedd0fe401c75dfb
+  checksum: 10/131af01a9e03bc1bbede765da429fa373f6035bd73c4067bb7df5374b779a02d607947466cb0489a54d7456a66f346fe742aca085b0492503e274de07828b907
   languageName: node
   linkType: hard
 
-"lavamoat-tofu@npm:^8.1.0":
-  version: 8.1.0
-  resolution: "lavamoat-tofu@npm:8.1.0"
+"lavamoat-tofu@npm:^8.1.0, lavamoat-tofu@npm:^8.1.1":
+  version: 8.1.1
+  resolution: "lavamoat-tofu@npm:8.1.1"
   dependencies:
     "@babel/parser": "npm:7.27.3"
     "@babel/traverse": "npm:7.27.3"
     "@babel/types": "npm:7.27.3"
     "@lavamoat/types": "npm:^0.1.0"
-    "@types/babel__traverse": "npm:7.20.7"
+    "@types/babel__traverse": "npm:7.28.0"
     type-fest: "npm:4.41.0"
   peerDependencies:
     lavamoat-core: ">15.4.0"
-  checksum: 10/ed96ddf284af0051179a4f46bc6432fb32d05f5055ae94fe3f469a7d7f17c62e834854bf2ed26fb55ff012a02789b8b0bee3cb760aab24d04d8714dba3d43b3f
+  checksum: 10/3bd26e7cea8a29769e29481f05021fe13365d986ec98a0eead0cd4067e08f3df3b40c9e5633606e46e917355744887647b918a52a49e700078dd2cda5bb564c2
   languageName: node
   linkType: hard