Skip to content

feat(awm): bump SDK betas and pin CVE fixes - #262

Closed
zahin-mohammad wants to merge 1 commit into
masterfrom
release/sdk-bump-2026-08-07
Closed

feat(awm): bump SDK betas and pin CVE fixes#262
zahin-mohammad wants to merge 1 commit into
masterfrom
release/sdk-bump-2026-08-07

Conversation

@zahin-mohammad

Copy link
Copy Markdown
Contributor

Summary

  • bump all 74 @bitgo-beta/* dependencies to their current beta versions
  • keep the sdk-core and statics npm overrides aligned with the direct dependencies
  • raise transitive dependency floors for newly fixed HIGH vulnerabilities reported by Trivy
  • regenerate package-lock.json under Node 22.1.0

Verification

  • npm run build
  • npm run lint
  • full test suite: 416 passing on clean rerun
  • refreshed Trivy database: 0 HIGH/CRITICAL findings in package-lock.json

Release process

This is the required SDK-bump PR from the Advanced Wallets release guide. The Release to GHCR workflow must not be triggered until this PR is merged into master.

@zahin-mohammad
zahin-mohammad marked this pull request as ready for review August 7, 2026 15:55
@zahin-mohammad
zahin-mohammad requested review from a team as code owners August 7, 2026 15:55
@zahin-mohammad
zahin-mohammad force-pushed the release/sdk-bump-2026-08-07 branch from 39e76bb to e6e1876 Compare August 7, 2026 15:57
@zahin-mohammad

Copy link
Copy Markdown
Contributor Author

Closed in place of #263

@zahin-mohammad
zahin-mohammad deleted the release/sdk-bump-2026-08-07 branch August 7, 2026 16:05
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants