fix: resolve zizmor GitHub Actions security findings

.eslintrc.json

@@ -20,7 +20,7 @@
   "plugins": ["typescript-sort-keys", "unused-imports"],
   "rules": {
     "react/prop-types": "off",
-        "prefer-rest-params": "off",
+    "prefer-rest-params": "off",
     "typescript-sort-keys/string-enum": [
       "error",
       "asc",

.github/workflows/check-and-deploy.yml

@@ -5,6 +5,8 @@ env:
 on:
   push:
 
+permissions: {}
+
 jobs:
   check-uniswap-benchmarks:
     name: Check uniswap Benchmarks
@@ -14,10 +16,12 @@ jobs:
         working-directory: ./
     steps:
       - uses: actions/checkout@v3
+        with:
+          persist-credentials: false
 
       - uses: actions/setup-node@v3
         with:
-          node-version: 18.20.4
+          node-version: 20
           cache: 'yarn'
           cache-dependency-path: yarn.lock
 
@@ -69,6 +73,8 @@ jobs:
           poll-interval: 15
 
       - uses: actions/checkout@v3
+        with:
+          persist-credentials: false
       - name: Audit preview URL with Lighthouse (mobile)
         id: lighthouse_audit_mobile
         uses: treosh/lighthouse-ci-action@v9

.github/workflows/lint.yaml

@@ -2,6 +2,8 @@ name: Lint
 
 on: push
 
+permissions: {}
+
 jobs:
   lint:
     name: Run linters
@@ -10,11 +12,13 @@ jobs:
     steps:
       - name: Check out Git repository
         uses: actions/checkout@v3
+        with:
+          persist-credentials: false
 
       - name: Set up node
         uses: actions/setup-node@v3
         with:
-          node-version: 18.20.4
+          node-version: 20
 
       - name: Install dependencies
         run: yarn --frozen-lockfile

.github/workflows/search.yaml

@@ -4,11 +4,15 @@ on:
   schedule:
     - cron: '0 10 * * *'
 
+permissions: {}
+
 jobs:
   build:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v4
+        with:
+          persist-credentials: false
       - name: Set up Homebrew
         uses: Homebrew/actions/setup-homebrew@master
       - name: Run Scraper

api/feedback.ts

@@ -25,7 +25,6 @@ export default async function handler(req: any, res: any) {
     return res.status(405).json({ success: false, error: 'Method not allowed' })
   }
 
-
   try {
     const body = typeof req.body === 'string' ? JSON.parse(req.body) : req.body || {}
 
@@ -40,7 +39,6 @@ export default async function handler(req: any, res: any) {
     const pageUrl = sanitizeText(body.pageUrl, MAX_PAGE_URL_LENGTH)
     const followUp = body.followUp
 
-
     if (!email || !isValidEmail(email)) {
       return res.status(400).json({ success: false, error: 'Invalid email' })
     }
@@ -62,7 +60,14 @@ export default async function handler(req: any, res: any) {
       { name: 'type_of_feedback', value: feedbackType },
       { name: 'whats_the_issue_idea_or_question', value: issue },
       { name: 'can_we_follow_up_with_you_about_your_feedback', value: followUp ? 'Yes' : 'No' },
-      ...(challenges ? [{ name: 'what_has_been_the_most_challenging_part_of_building_on_or_integrating_with_uniswap', value: challenges }] : []),
+      ...(challenges
+        ? [
+            {
+              name: 'what_has_been_the_most_challenging_part_of_building_on_or_integrating_with_uniswap',
+              value: challenges,
+            },
+          ]
+        : []),
       ...(docsUsefulness ? [{ name: 'have_you_found_uniswap_docs_to_be_useful', value: docsUsefulness }] : []),
     ]
 
@@ -95,4 +100,4 @@ export default async function handler(req: any, res: any) {
   } catch {
     return res.status(500).json({ success: false, error: 'Internal server error' })
   }
-}
+}

docs/contracts/protocol-fee/technical-reference/_category_.json

@@ -2,4 +2,4 @@
   "label": "Technical Reference",
   "position": 9,
   "collapsed": true
-}
+}

docs/contracts/smart-wallet/advanced-usage/_category_.json

@@ -1,5 +1,5 @@
 {
-    "label": "Advanced Usage",
-    "position": 4,
-    "collapsed": true
-  }
+  "label": "Advanced Usage",
+  "position": 4,
+  "collapsed": true
+}

docs/contracts/smart-wallet/concepts/_category_.json

@@ -1,5 +1,5 @@
 {
-    "label": "Concepts",
-    "position": 3,
-    "collapsed": true
-  }
+  "label": "Concepts",
+  "position": 3,
+  "collapsed": true
+}

docs/contracts/uniswapx/fillers/arbitrum/_category_.json

@@ -1,6 +1,5 @@
 {
-    "label": "Arbitrum",
-    "position": 3,
-    "collapsed": true
-  }
-
+  "label": "Arbitrum",
+  "position": 3,
+  "collapsed": true
+}

docs/contracts/uniswapx/fillers/mainnet/_category_.json

@@ -1,6 +1,5 @@
 {
-    "label": "Mainnet",
-    "position": 2,
-    "collapsed": true
-  }
-
+  "label": "Mainnet",
+  "position": 2,
+  "collapsed": true
+}

docs/contracts/uniswapx/fillers/priority/_category_.json

@@ -1,6 +1,5 @@
 {
-    "label": "Unichain, Base",
-    "position": 4,
-    "collapsed": true
-  }
-
+  "label": "Unichain, Base",
+  "position": 4,
+  "collapsed": true
+}

docs/contracts/v3/reference/deployments/_category_.json

@@ -1,6 +1,5 @@
 {
-    "label": "Deployments",
-    "position": 5,
-    "collapsed": true
-  }
-
+  "label": "Deployments",
+  "position": 5,
+  "collapsed": true
+}