@walletconnect/pos-client@1.0.12
Patch Changes Updated dependencies [44395d0, f5ac876, 896c6b0]: @walletconnect/sign-client@2.25.0 @walletconnect/utils@2.25.0 @walletconnect/types@2.25.0
Patch Changes Updated dependencies [44395d0, f5ac876, 896c6b0]: @walletconnect/sign-client@2.25.0 @walletconnect/utils@2.25.0 @walletconnect/types@2.25.0
Minor Changes #7344 579b882 Thanks @jakubuid! - WalletConnect Pay: confirmPayment now takes data, whose elements may be plain signature strings or JSON objects/arrays (e.g. TRON's {raw_data_hex, signature} confirm payload), forwarded to the gateway as JSON. signatures is deprecated and used as a fallback when data is omitted. Bumps yttrium to 0.10.59 (WASM blob + iOS YttriumWrapper) and 0.10.60 (A…
Patch Changes Updated dependencies [44395d0, 896c6b0]: @walletconnect/utils@2.25.0 @walletconnect/types@2.25.0
Patch Changes #7341 44395d0 Thanks @ganchoradkov! - Fail closed when CACAO signature verification throws, and stop those throws escaping the authenticate response handler. verifySignature throws rather than returning false on several attacker-controlled inputs: an unknown s.t hits its default: branch, a malformed eip191 signature throws out of Signature.fromHex/recoverAddress, and a non-CAIP-2 cha…
Patch Changes #7341 44395d0 Thanks @ganchoradkov! - Fail closed when CACAO signature verification throws, and stop those throws escaping the authenticate response handler. verifySignature throws rather than returning false on several attacker-controlled inputs: an unknown s.t hits its default: branch, a malformed eip191 signature throws out of Signature.fromHex/recoverAddress, and a non-CAIP-2 cha…
Patch Changes Updated dependencies [44395d0, f5ac876, 896c6b0]: @walletconnect/sign-client@2.25.0 @walletconnect/utils@2.25.0 @walletconnect/types@2.25.0
Minor Changes #7344 579b882 Thanks @jakubuid! - WalletConnect Pay: confirmPayment now takes data, whose elements may be plain signature strings or JSON objects/arrays (e.g. TRON's {raw_data_hex, signature} confirm payload), forwarded to the gateway as JSON. signatures is deprecated and used as a fallback when data is omitted. Bumps yttrium to 0.10.59 (WASM blob + iOS YttriumWrapper) and 0.10.60 (A…
Patch Changes Updated dependencies [44395d0, f5ac876, 896c6b0]: @walletconnect/sign-client@2.25.0 @walletconnect/utils@2.25.0 @walletconnect/types@2.25.0
Patch Changes #7341 44395d0 Thanks @ganchoradkov! - Fail closed when CACAO signature verification throws, and stop those throws escaping the authenticate response handler. verifySignature throws rather than returning false on several attacker-controlled inputs: an unknown s.t hits its default: branch, a malformed eip191 signature throws out of Signature.fromHex/recoverAddress, and a non-CAIP-2 cha…
Patch Changes Updated dependencies [44395d0, 896c6b0]: @walletconnect/utils@2.25.0 @walletconnect/types@2.25.0 @walletconnect/universal-provider@2.25.0
Patch Changes #7302 499fb78 Thanks @nishant-uxs! - Fix generated EventEmitter declarations so @walletconnect/core can be consumed with skipLibCheck: false. Updated dependencies [83ba7d4, a610bfe, fa9227f, f8bfc24]: @walletconnect/utils@2.24.0 @walletconnect/types@2.24.0
Patch Changes Updated dependencies [83ba7d4, a610bfe, fa9227f, f8bfc24]: @walletconnect/utils@2.24.0 @walletconnect/sign-client@2.24.0 @walletconnect/types@2.24.0
Patch Changes #7304 83ba7d4 Thanks @ganchoradkov! - Remove unused declared dependencies (@walletconnect/safe-json from utils, @walletconnect/types from pay, @walletconnect/core and @walletconnect/jsonrpc-provider from pos-client, events from react-native-compat, uint8arrays from signer-connection, @walletconnect/jsonrpc-provider, @walletconnect/jsonrpc-utils and @walletconnect/sign-client from eth…
Patch Changes #7304 83ba7d4 Thanks @ganchoradkov! - Remove unused declared dependencies (@walletconnect/safe-json from utils, @walletconnect/types from pay, @walletconnect/core and @walletconnect/jsonrpc-provider from pos-client, events from react-native-compat, uint8arrays from signer-connection, @walletconnect/jsonrpc-provider, @walletconnect/jsonrpc-utils and @walletconnect/sign-client from eth…
Patch Changes #7304 83ba7d4 Thanks @ganchoradkov! - Remove unused declared dependencies (@walletconnect/safe-json from utils, @walletconnect/types from pay, @walletconnect/core and @walletconnect/jsonrpc-provider from pos-client, events from react-native-compat, uint8arrays from signer-connection, @walletconnect/jsonrpc-provider, @walletconnect/jsonrpc-utils and @walletconnect/sign-client from eth…
Patch Changes #7304 83ba7d4 Thanks @ganchoradkov! - Remove unused declared dependencies (@walletconnect/safe-json from utils, @walletconnect/types from pay, @walletconnect/core and @walletconnect/jsonrpc-provider from pos-client, events from react-native-compat, uint8arrays from signer-connection, @walletconnect/jsonrpc-provider, @walletconnect/jsonrpc-utils and @walletconnect/sign-client from eth…
Minor Changes #7329 fa9227f Thanks @jakubuid! - Collect TVF transaction hashes for Stellar: compute the canonical transaction hash from signed stellar_signXDR envelopes (V0, V1 and fee-bump — with the signature-array scan hardened against signatures ending in zero bytes) and extract tx_hash from stellar_signAndSubmitXDR responses. Patch Changes Updated dependencies [499fb78, 83ba7d4, a610bfe, fa92…
No content.
Patch Changes #7304 83ba7d4 Thanks @ganchoradkov! - Remove unused declared dependencies (@walletconnect/safe-json from utils, @walletconnect/types from pay, @walletconnect/core and @walletconnect/jsonrpc-provider from pos-client, events from react-native-compat, uint8arrays from signer-connection, @walletconnect/jsonrpc-provider, @walletconnect/jsonrpc-utils and @walletconnect/sign-client from eth…
Minor Changes #7329 fa9227f Thanks @jakubuid! - Collect TVF transaction hashes for Stellar: compute the canonical transaction hash from signed stellar_signXDR envelopes (V0, V1 and fee-bump — with the signature-array scan hardened against signatures ending in zero bytes) and extract tx_hash from stellar_signAndSubmitXDR responses. Patch Changes #7304 83ba7d4 Thanks @ganchoradkov! - Remove unused d…
Patch Changes Updated dependencies [cd32ff1, 63ff999, 3233b47, 3ea740e, 4af4524, da98172]: @walletconnect/utils@2.23.10 @walletconnect/sign-client@2.23.10 @walletconnect/types@2.23.10 @walletconnect/core@2.23.10
Patch Changes Updated dependencies [cd32ff1, 63ff999, 3233b47, 3ea740e, 4af4524]: @walletconnect/utils@2.23.10 @walletconnect/sign-client@2.23.10 @walletconnect/types@2.23.10 @walletconnect/universal-provider@2.23.10
Patch Changes #7252 cd32ff1 Thanks @ganchoradkov! - Add TVF extraction for Canton's canton_prepareSignExecute. #7247 3ea740e Thanks @ganchoradkov! - Reject SIWE/CAIP-122 statements containing line breaks in formatMessage. Per EIP-4361 the statement is a single line, and embedded \r/\n (from a caller-supplied statement or untrusted recap-derived text) could forge other fields (URI, Nonce, etc.) in…
Patch Changes Updated dependencies [cd32ff1, 63ff999, 3233b47, 3ea740e, 4af4524]: @walletconnect/utils@2.23.10 @walletconnect/sign-client@2.23.10 @walletconnect/types@2.23.10
Patch Changes #7252 cd32ff1 Thanks @ganchoradkov! - Add TVF extraction for Canton's canton_prepareSignExecute. #7253 63ff999 Thanks @ganchoradkov! - Deprecate the authenticate method on Sign Client. It is marked @deprecated in the type definitions and logs a runtime warning when called. Use connect()'s authentication parameter instead to establish an authenticated session. #7255 3233b47 Thanks @ga…
Patch Changes #7255 3233b47 Thanks @ganchoradkov! - Reject plaintext TYPE_2 envelopes delivered over the relay transport. TYPE_2 payloads are now only handled in link mode in the sign engine (onRelayMessage) and pairing (registerRelayerEvents) relay handlers. #7218 da98172 Thanks @ganchoradkov! - Strip bare new TextEncoder,new TextDecoder; side-effect from UMD bundles that crashed React Native / H…
Patch Changes #7253 63ff999 Thanks @ganchoradkov! - Deprecate the authenticate method on Sign Client. It is marked @deprecated in the type definitions and logs a runtime warning when called. Use connect()'s authentication parameter instead to establish an authenticated session.
Patch Changes #7250 fcaaf3f Thanks @github-actions! - chore: update Pay WASM to 0.10.57 Updated dependencies [cd32ff1, 63ff999, 3ea740e]: @walletconnect/utils@2.23.10 @walletconnect/types@2.23.10
Patch Changes Updated dependencies [cd32ff1, 63ff999, 3233b47, 3ea740e, 4af4524]: @walletconnect/utils@2.23.10 @walletconnect/sign-client@2.23.10 @walletconnect/types@2.23.10
Patch Changes #7250 fcaaf3f Thanks @github-actions! - chore: update yttrium native dependencies Update yttrium-wcpay (Android) to 0.10.58