Skip to content

fix(payments): depend on squid-evm-funding from npm - #667

Closed
SgtPooki wants to merge 21 commits into
masterfrom
integration-squid-npm
Closed

fix(payments): depend on squid-evm-funding from npm#667
SgtPooki wants to merge 21 commits into
masterfrom
integration-squid-npm

Conversation

@SgtPooki

Copy link
Copy Markdown
Collaborator

What changed

Builds on #637 (its commits are included unchanged) and adds one commit switching the Squid dependency from github:FilOzone/squid-evm-funding#v0.1.0 to @filecoin-project/squid-evm-funding@^0.1.7 from npm. The git dependency was pinned to v0.1.0, which predates the browser fetch fix (FilOzone/squid-evm-funding#19) and the status-polling fix (FilOzone/squid-evm-funding#20); 0.1.7 is the current release, published with provenance through the repo's release workflow.

The swap also removes the onlyBuiltDependencies entry for the package (the npm tarball ships prebuilt dist/, so no install-time build is needed) and adds the package to minimumReleaseAgeExclude, since the workspace's 7-day cooldown would otherwise reject fresh releases of this first-party dependency. Imports and the test mock move to the scoped name.

If #637 lands first, this reduces to the single swap commit; alternatively that commit (18752d3) can be cherry-picked into #637 directly.

@FilOzzy FilOzzy added team/filecoin-pin "Filecoin Pin" project is a stakeholder for this work. team/fs-wg FOC working group is a stakeholder for this work, and thus wants to track it on their project board. labels Aug 19, 2026
@FilOzzy FilOzzy added this to FOC Aug 19, 2026
@github-project-automation github-project-automation Bot moved this to 📌 Triage in FOC Aug 19, 2026
@SgtPooki SgtPooki closed this Aug 19, 2026
@SgtPooki
SgtPooki deleted the integration-squid-npm branch August 19, 2026 16:59
@github-project-automation github-project-automation Bot moved this from 📌 Triage to 🎉 Done in FOC Aug 19, 2026
@SgtPooki
SgtPooki restored the integration-squid-npm branch August 19, 2026 18:03
@SgtPooki SgtPooki reopened this Aug 19, 2026
@github-project-automation github-project-automation Bot moved this from 🎉 Done to ⌨️ In Progress in FOC Aug 19, 2026
@socket-security

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Added@​filecoin-project/​squid-evm-funding@​0.1.77410010087100

View full report

@SgtPooki SgtPooki closed this Aug 20, 2026
@github-project-automation github-project-automation Bot moved this from ⌨️ In Progress to 🎉 Done in FOC Aug 20, 2026
@SgtPooki
SgtPooki deleted the integration-squid-npm branch August 20, 2026 15:35
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

team/filecoin-pin "Filecoin Pin" project is a stakeholder for this work. team/fs-wg FOC working group is a stakeholder for this work, and thus wants to track it on their project board.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants