Skip to content

fix(mobile): retire expired Metro audit hold - #686

Merged
FutureEnterprises merged 1 commit into
mainfrom
fix/secure-app-expired-audit-exceptions
Aug 30, 2026
Merged

fix(mobile): retire expired Metro audit hold#686
FutureEnterprises merged 1 commit into
mainfrom
fix/secure-app-expired-audit-exceptions

Conversation

@FutureEnterprises

Copy link
Copy Markdown
Member

Summary

  • advance the Secure App to the supported Expo 57.0.15 / Expo Asset 57.0.13 graph
  • pin @expo/metro 56.0.2 and Metro 0.84.5 so the vulnerable image-size edge is absent
  • remove the two expired dependency-audit exceptions and retain the empty fail-closed exception ledger
  • refresh the live seven-day Expo quarantine entries against current registry publication times

Verification

  • npm audit: zero known vulnerabilities
  • Secure App audit gate: clean
  • Secure App tests: 33/33
  • Secure App typecheck: pass
  • Expo install check: pass
  • Expo Doctor: 21/21
  • deterministic iOS exports: byte-identical
  • deterministic Android exports: byte-identical
  • machine-verifiable security case: 35 claims / 259 hashed files / passed

This is intentionally separate from AIC crossing PR #685. It repairs the unrelated Mobile Apps CI failure that surfaced when the dated audit hold expired.

Signed-off-by: FutureEnterprises <team@emiliaprotocol.ai>
@strix-security

Copy link
Copy Markdown

Strix is installed on this repository, but we couldn't run this PR security review because this workspace's trial has ended. Add a card to resume code reviews here.

So far, Strix has reviewed 68 pull requests, surfaced 13 security issues (8 critical/high) and blocked 8 risky merges across this workspace.

@vercel

vercel Bot commented Aug 30, 2026

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated (UTC)
emilia-protocol Ready Ready Preview Aug 30, 2026 6:11am

Request Review

@FutureEnterprises
FutureEnterprises merged commit 06d9efb into main Aug 30, 2026
54 checks passed
@FutureEnterprises
FutureEnterprises deleted the fix/secure-app-expired-audit-exceptions branch August 30, 2026 16:18
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant