Skip to content

Fork sync#36

Open
mateumiralles wants to merge 1018 commits into
dappnode:developfrom
lidofinance:develop
Open

Fork sync#36
mateumiralles wants to merge 1018 commits into
dappnode:developfrom
lidofinance:develop

Conversation

@mateumiralles

Copy link
Copy Markdown

Fork sync

dependabot Bot and others added 30 commits April 7, 2026 20:20
Bumps [lodash](https://github.com/lodash/lodash) from 4.17.23 to 4.18.1.
- [Release notes](https://github.com/lodash/lodash/releases)
- [Commits](lodash/lodash@4.17.23...4.18.1)

---
updated-dependencies:
- dependency-name: lodash
  dependency-version: 4.18.1
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
…sh-4.18.1

chore(deps): bump lodash from 4.17.23 to 4.18.1
…-6.1.6

chore(deps): bump defu from 6.1.4 to 6.1.6
…match-2.3.2

chore(deps): bump picomatch from 2.3.1 to 2.3.2
…et.io-parser-4.2.6

chore(deps): bump socket.io-parser from 4.2.5 to 4.2.6
…ted-3.4.2

chore(deps): bump flatted from 3.3.1 to 3.4.2
…-3.3.3

chore(deps): bump svgo from 3.3.2 to 3.3.3
Bumps [follow-redirects](https://github.com/follow-redirects/follow-redirects) from 1.15.9 to 1.16.0.
- [Release notes](https://github.com/follow-redirects/follow-redirects/releases)
- [Commits](follow-redirects/follow-redirects@v1.15.9...v1.16.0)

---
updated-dependencies:
- dependency-name: follow-redirects
  dependency-version: 1.16.0
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [hono](https://github.com/honojs/hono) from 4.12.3 to 4.12.14.
- [Release notes](https://github.com/honojs/hono/releases)
- [Commits](honojs/hono@v4.12.3...v4.12.14)

---
updated-dependencies:
- dependency-name: hono
  dependency-version: 4.12.14
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
exromany and others added 30 commits July 22, 2026 12:33
Bump csm-sdk to alpha.72, which splits WALLET_RPC into distinct codes
(WALLET_TIMEOUT, RATE_LIMITED, WALLET_UNAUTHORIZED, METHOD_NOT_SUPPORTED,
BATCH_NOT_ATOMIC, DUPLICATE_BUNDLE_ID, NONCE/FEE/GAS, AA validation/paymaster).

Map all 11 new SDK codes into the widget taxonomy: dedicated buckets for the
common, user-actionable faults; shared buckets for wallet-capability and
smart-account edge cases. RATE_LIMITED now owns the genuine 'Too many requests'
case, so WALLET_RPC copy no longer claims it. WALLET_TIMEOUT logs at debug.
Add a dedicated DISABLE_DEPOSIT_DATA_SIGNATURE_VALIDATION feature flag (URL param disable-deposit-signature-validation) that skips only BLS signature verification via the skipSignature option added in lido-csm-sdk alpha-73, while keeping structure, withdrawal-credentials, duplicate and keys-limit checks.

The existing DISABLE_DEPOSIT_DATA_VALIDATION flag is unchanged and still skips the entire validation.

Bumps @lidofinance/lido-csm-sdk 2.0.0-alpha.70 -> 2.0.0-alpha.73.
- @lidofinance/* family 0.59.0 -> 0.61.0
- reef-knot 8.1.1 -> 8.2.0
# Conflicts:
#	config/feature-flags/types.ts
#	config/feature-flags/utils.ts
#	features/qa-config/qa-feature-flags.tsx
#	package.json
#	providers/modify-provider.tsx
#	yarn.lock
chore: bump matomo/analytics and reef-knot packages
Mirror the per-module manifest pattern for favicons: track explicit
favicon-csm.* and favicon-cm.* source sets, generate the canonical
favicon.* files at build time in build-dynamics.mjs based on MODULE,
and gitignore the generated outputs.
* feat: add flag to skip deposit data signature validation

Add a dedicated DISABLE_DEPOSIT_DATA_SIGNATURE_VALIDATION feature flag (URL param disable-deposit-signature-validation) that skips only BLS signature verification via the skipSignature option added in lido-csm-sdk alpha-73, while keeping structure, withdrawal-credentials, duplicate and keys-limit checks.

The existing DISABLE_DEPOSIT_DATA_VALIDATION flag is unchanged and still skips the entire validation.

Bumps @lidofinance/lido-csm-sdk 2.0.0-alpha.70 -> 2.0.0-alpha.73.

* fix: update help text for 'Keys limit' parameter in headerBadge.spec.ts

* fix: update duplicatedKeys tests to disable deposit data signature validation

---------

Co-authored-by: exromany <exromany@lido.fi>
Key limit reached message compared targetLimit with uploaded keys
(totalAddedKeys - totalWithdrawnKeys) instead of deposited validators,
producing false positives while depositable slots remained.
enabled did not check isActive, so stale cached filled data kept the
banner visible after the window closed. In that state isDismissed
(isBefore(now, end)) is always false, so the close button could never
hide it. Gate enabled on isActive to align with the filled query and
dismiss window.
buildDynamics() runs at next.config.mjs module-load, so it reruns at
next start (as user node) and rewrites public/favicon.* and manifest.json.
Only manifest.json was chowned to node; the CM favicons stayed root-owned,
so next start crashed with EACCES on copyFileSync. Chown all of public/.
(cherry picked from commit 9739c75)
DKG upload and members auto-init failures render custom failed tx-stages
that bypass getErrorCode, so they were never tracked. Add trackMatomoRawError
at those catch sites (tags dkg_upload_page/_create/_add_keys, members_init)
and a trackMatomoSurveySigninDenied event fired on DENIED_SIG during
create-IDVTC / claim-IDVTC sign-in.
feat(idvtc): DKG + members/rotation on generated SDK
feat: track IDVTC survey-API failures and sign-in denials in Matomo
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

7 participants