chore: bump @metamask dependencies

[cryptodev-2s]

Summary

• Bump @metamask/base-controller from ^9.0.0 to ^9.0.1 (9.0.1)
  Dependency bumps only (messenger, utils)
• Bump @metamask/controller-utils from ^11.3.0 to ^11.19.0 (11.19.0)
  Add new built-in networks (Base, Arbitrum, BSC, Optimism, Polygon, Sei, MegaETH, Monad), ServicePolicy improvements, HttpError class, time constants
• Bump @metamask/messenger from ^0.3.0 to ^1.0.0 (1.0.0)
  Stability promotion, no API changes
• Bump @metamask/network-controller from ^30.0.0 to ^30.0.1 (30.0.1)
  Dependency bumps only
• Bump @metamask/utils from ^11.0.0 to ^11.9.0 (11.9.0)
  Add sha256 utility, areUint8ArraysEqual, CAIP namespace additions (Tron, Stellar), unit conversion utils, perf improvements

Test plan

• Build passes
• Lint passes
• All 51 tests pass
• 100% coverage maintained

---

Note

Medium Risk
Dependency-only update, but it upgrades @metamask/messenger to 1.0.0 and bumps multiple controller-related packages, which could introduce subtle runtime/type behavior changes without code changes in this repo.

Overview
Updates this package’s MetaMask core dependencies to newer versions: @metamask/base-controller ^9.0.0→^9.0.1, @metamask/controller-utils ^11.3.0→^11.19.0, @metamask/messenger ^0.3.0→^1.0.0, @metamask/network-controller ^30.0.0→^30.0.1, and @metamask/utils ^11.0.0→^11.9.0.

Refreshes yarn.lock accordingly and records the bumps under Unreleased in CHANGELOG.md.

^{Written by Cursor Bugbot for commit 37a6882. This will update automatically on new commits. Configure here.}

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	@​metamask/​base-controller@​9.0.0 ⏵ 9.0.1	+1			+6
	@​metamask/​messenger@​0.3.0 ⏵ 1.0.0			+1	+6
	@​metamask/​network-controller@​30.0.0 ⏵ 30.0.1	-4		-22	-4

View full report

[socket-security]

All alerts resolved. Learn more about Socket for GitHub.

This PR previously contained dependency changes with security issues that have been resolved, removed, or ignored.

Ignoring alerts on:

• @metamask/network-controller@30.0.1

View full report

[cryptodev-2s]

@SocketSecurity ignore npm/@metamask/network-controller@30.0.1