Skip to content

[Snyk] Security upgrade solana-agent-kit from 1.3.0 to 2.0.1 #25

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
SMSDAO wants to merge 2 commits into
base: main
Choose a base branch
from
Open

[Snyk] Security upgrade solana-agent-kit from 1.3.0 to 2.0.1 #25

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
eadaa24
fix: examples/tg-bot-starter/advanced-tg-bot/package.json to reduce v…
snyk-bot Jan 26, 2026
a4cd280
fix: update pnpm-lock.yaml to use solana-agent-kit@2.0.10
Copilot Apr 13, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion examples/tg-bot-starter/advanced-tg-bot/package.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -20,7 +20,7 @@
"prebuilt": "link:@langchain/langgraph/prebuilt",
"react": "^19.2.0",
"react-dom": "^19.0.0",
"solana-agent-kit": "^1.3.0"
"solana-agent-kit": "^2.0.1"
Copy link

Copilot AI Jan 26, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

solana-agent-kit was bumped to ^2.0.1, but examples/tg-bot-starter/advanced-tg-bot/pnpm-lock.yaml is still pinned to solana-agent-kit@1.3.0 (see lockfile entry around line ~2123). Please update and commit this package’s pnpm-lock.yaml so installs are reproducible and the security fix actually takes effect.

Copilot uses AI. Check for mistakes.
Copy link
Copy Markdown
Owner Author

@SMSDAO SMSDAO Apr 13, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@copilot apply changes based on feedback

Copy link
Copy Markdown

Copilot AI Apr 13, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Updated pnpm-lock.yaml to resolve solana-agent-kit to 2.0.10 (latest ^2.0.1 compatible version), replacing the old 1.3.0 pin. Committed in a4cd280.

},
"devDependencies": {
"@types/node": "^20",
Expand Down
Loading