Skip to content

2.3.7 (#131)#132

Merged
Dargon789 merged 4 commits intomasterfrom
0xsequence/master
Dec 23, 2025
Merged

2.3.7 (#131)#132
Dargon789 merged 4 commits intomasterfrom
0xsequence/master

Conversation

@Dargon789
Copy link
Copy Markdown
Owner

@Dargon789 Dargon789 commented Dec 22, 2025

  • fix broken guard private key

  • Expose access to passkey credential list

  • Dapp client direct txn request (Dapp client direct txn request 0xsequence/sequence.js#856)

  • Signature request refactor

  • WIP

  • Refactor

  • Update dapp-client exports (Update dapp-client exports 0xsequence/sequence.js#858)

  • Add hasPermission method to DappClient (Add hasPermission method to DappClient 0xsequence/sequence.js#859)

  • Save discovered passkey credentials upon login

  • Expose name property in PasskeySignupArgs

  • Fix blacklist sort

  • Add multi server script

  • relayer: /SimulateV3 (relayer: /SimulateV3 0xsequence/sequence.js#857)

  • Add await for handleOpenDB scheduleExpiration

  • Update increment to always include native once used

  • Fix session tests

  • Adding lastLoginAt to PasskeyCredential

  • LoginToPasskeyArgs now accept a credentialId which is used to specify which credential to use

  • Adding onSignatureRequestStatus function to register single use callbacks for when a request reaches a terminal state of completed or cancelled

  • When a login is cancelled we can remove the wallet which is logging-in

  • Add RC3 contracts

  • Sessions space restriction

  • Dedupe signers for encoding

  • Support RC3 sessions

  • Tightly increment call validation

  • CLI defaults to RC3 wallet code

  • Rc3 address test

  • Fix hashing tests

  • Add deprecated encoding test

  • wdk: throw errors from otp respond callback (wdk: throw errors from otp respond callback 0xsequence/sequence.js#864)

  • wdk: throw errors from otp respond callback

  • wdk: otp auth error and handler refactor

  • Handle guard 2FA (Handle guard 2FA 0xsequence/sequence.js#861)

  • guard: return a specific error when auth required

  • core: pass guard token to the service

  • wdk: handle prompting for guard 2FA code

  • dapp-client: handle prompting for guard 2FA code

  • guard 2fa tests

  • wdk: separate wallet and sessions guards

  • dapp-client: remove guard 2fa

  • dapp-client: fix imports

  • fix guard tests

  • wdk: remove unneeded promise resolve

  • Update relayer and api gen.ts, force public packages

  • Add standalone fetch queued payloads

  • Replacing GuardRole enum with string union type, as well as replacing guardAddresses Map with Record<GuardRole, Address>

  • Fallback to chain for non-logged in recovery

  • Add Katana, Sandbox Tesnet, Incentiv Testnet v2 (Add Katana, Sandbox Tesnet, Incentiv Testnet v2 0xsequence/sequence.js#873)

  • Update a few remaining dev1 contract addresses to rc3 (Update a few remaining dev1 contract addresses to rc3 0xsequence/sequence.js#874)

  • Remove unnecessary console.error where we already throw error

  • Improve DappClient hasPermission method

  • Wallet db try checksum and lowercase

  • Update dapp client json utils to include Map reviver and replacer

  • Bump next in the npm_and_yarn group across 1 directory

Bumps the npm_and_yarn group with 1 update in the / directory: next.

Updates next from 15.4.2 to 15.4.7

updated-dependencies:

  • dependency-name: next dependency-version: 15.4.7 dependency-type: direct:production dependency-group: npm_and_yarn ...

  • Update type name, update exports for dapp client

  • Expired explicit sessions can't sign

  • Improve session validity test

  • session isValid returns invalid reason

  • InvalidReason is typed

  • Support multiple identity signers in sessions configuration

  • Device signers can approve implicit sessions

  • Remove invalid test

  • Fix recursion

  • Fix comment

  • Improve test stability by reducing race conditions

  • Do not set passkey signer as identity signer

  • Use length checks

  • Throw on missing identity signer

  • Encoding requires identity signer to encode

  • Fix test

  • Refactor/types namings tsdoc redundant code (Refactor/types namings tsdoc redundant code 0xsequence/sequence.js#880)

  • refactor types, namings, ts doc

  • fix session response payload

  • change parameter name

  • change parameter name

  • change type in tests

  • improve types and dapp client methods

  • fix session test to use new types

  • refactor

  • refactor implicit sessions array in chain session manager

  • remove unused types

  • remove unused types and add ConnectionError

  • update pnpm lock

  • move reusable session types to wallet-core

  • Update some imports and update some response type names

Bumps the npm_and_yarn group with 1 update in the / directory: happy-dom.
Bumps the npm_and_yarn group with 1 update in the /packages/wallet/dapp-client directory: happy-dom.
Bumps the npm_and_yarn group with 1 update in the /packages/wallet/wdk directory: happy-dom.

Updates happy-dom from 17.6.3 to 20.0.0

Updates happy-dom from 17.6.3 to 20.0.0

Updates happy-dom from 17.6.3 to 20.0.0

updated-dependencies:

  • dependency-name: happy-dom dependency-version: 20.0.0 dependency-type: direct:development dependency-group: npm_and_yarn
  • dependency-name: happy-dom dependency-version: 20.0.0 dependency-type: direct:development dependency-group: npm_and_yarn
  • dependency-name: happy-dom dependency-version: 20.0.0 dependency-type: direct:development dependency-group: npm_and_yarn ...

Bumps the npm_and_yarn group with 1 update in the / directory: happy-dom.

Updates happy-dom from 20.0.0 to 20.0.2

updated-dependencies:

  • dependency-name: happy-dom dependency-version: 20.0.2 dependency-type: direct:development dependency-group: npm_and_yarn ...

Add a security policy document outlining supported versions and vulnerability reporting.

  • Update SECURITY.md

  • Update SECURITY.md

Bumps the npm_and_yarn group with 1 update in the / directory: happy-dom.
Bumps the npm_and_yarn group with 1 update in the /packages/wallet/dapp-client directory: happy-dom.
Bumps the npm_and_yarn group with 1 update in the /packages/wallet/wdk directory: happy-dom.

Updates happy-dom from 17.6.3 to 20.0.2

Updates happy-dom from 17.6.3 to 20.0.2

Updates happy-dom from 17.6.3 to 20.0.2

updated-dependencies:

  • dependency-name: happy-dom dependency-version: 20.0.2 dependency-type: direct:development dependency-group: npm_and_yarn
  • dependency-name: happy-dom dependency-version: 20.0.2 dependency-type: direct:development dependency-group: npm_and_yarn
  • dependency-name: happy-dom dependency-version: 20.0.2 dependency-type: direct:development dependency-group: npm_and_yarn ...

  • Add a way to reset 2fa when using a backup code (Add a way to reset 2fa when using a backup code 0xsequence/sequence.js#911)

  • Add a way to reset 2fa when using a backup code

  • use the GuardToken type instead of breaking out the props

  • Update SECURITY.md

  • Update packages/wallet/dapp-client/src/DappTransport.ts

  • Update package.json

  • Update SECURITY.md

  • Update wagmi-project/package.json

  • Update wagmi-project/package.json

  • Update wagmi-project/src/App.tsx

  • Create FUNDING.json (Create FUNDING.json #90)

Enhancements:
Include FUNDING.json to display GitHub sponsorship options in the repository

Add initial CircleCI configuration to enable automated builds using a custom Docker executor and a defined workflow.

Build:

Add .circleci/config.yml with version 2.1 specification and custom Docker executor. CI:

Define web3-defi-game-project job with checkout step. Set up my-custom-workflow to run the job.

  • Add rc4 contracts

  • Set rc4 as default and add it to lists

  • Session enhanced replay protection

  • New sessions replay protection hashes payload

  • Use the 4337 factory wrapper

  • Update keymachine url in dapp-client constants

  • Update keymachine url in Provider constructor

  • SSR safety (SSR safety 0xsequence/sequence.js#915)

  • SSR safety test

  • Fix CI job

  • Guard dapp-client for SSR (lazy transport, browser checks, gated storage)

  • Fix guard topology (Fix guard topology 0xsequence/sequence.js#918)

  • Use proper guard topology

  • Test and fixes

  • login and setup tests

  • Switch prod manager settings (Switch prod manager settings 0xsequence/sequence.js#917)

  • Add prod guard and identity instrument info

  • Remove completed TODOs

  • Small JS tweaks (Small JS tweaks 0xsequence/sequence.js#919)

  • Fix type exports to built declarations

  • Update repository links to current package paths

  • Improve Next app tooling and React typings

  • Expose primitives CLI bin and use base lint config

  • Update relayer.gen.ts and TransactionPrecondition interface

  • Update api.gen.ts

  • Update metadata.gen.ts

  • Update marketplace.gen.ts

  • Update guard.gen.ts

  • Support multiple identity signers in sessions configuration

  • Device signers can approve implicit sessions

  • Remove invalid test

  • Fix recursion

  • Fix comment

  • Improve test stability by reducing race conditions

  • Do not set passkey signer as identity signer

  • Use length checks

  • Throw on missing identity signer

  • Encoding requires identity signer to encode

  • Fix test

  • Refactor/types namings tsdoc redundant code (Refactor/types namings tsdoc redundant code 0xsequence/sequence.js#880)

  • refactor types, namings, ts doc

  • fix session response payload

  • change parameter name

  • change parameter name

  • change type in tests

  • improve types and dapp client methods

  • fix session test to use new types

  • refactor

  • refactor implicit sessions array in chain session manager

  • remove unused types

  • remove unused types and add ConnectionError

  • update pnpm lock

  • move reusable session types to wallet-core

  • Update some imports and update some response type names

Bumps next from 15.5.5 to 15.5.7.

updated-dependencies:

  • dependency-name: next dependency-version: 15.5.7 dependency-type: direct:production ...

The following vulnerabilities are fixed with an upgrade:

The following vulnerabilities are fixed with an upgrade:

The following vulnerabilities are fixed with an upgrade:

  • Revert "Merge remote-tracking branch 'origin/dependabot/npm_and_yarn/npm_and_yarn-318c02e2da'"

This reverts commit fd0fdf9, reversing changes made to cba7894.

The following vulnerabilities are fixed with an upgrade:

The following vulnerabilities are fixed with an upgrade:

Bumps the npm_and_yarn group with 1 update in the / directory: next.

Updates next from 15.5.7 to 15.5.9

updated-dependencies:

  • dependency-name: next dependency-version: 15.5.9 dependency-type: direct:production dependency-group: npm_and_yarn ...

The following vulnerabilities are fixed with an upgrade:

Bumps the npm_and_yarn group with 1 update in the / directory: next.

Updates next from 15.5.5 to 15.5.9

Updates happy-dom from 17.6.3 to 20.0.11

Updates vite from 7.1.10 to 7.2.7

updated-dependencies:

  • dependency-name: next dependency-version: 15.5.9 dependency-type: direct:production dependency-group: npm_and_yarn
  • dependency-name: happy-dom dependency-version: 20.0.11 dependency-type: direct:development dependency-group: npm_and_yarn
  • dependency-name: vite dependency-version: 7.2.7 dependency-type: indirect dependency-group: npm_and_yarn ...

Bumps next from 15.5.7 to 15.5.9.

updated-dependencies:

  • dependency-name: next dependency-version: 15.5.9 dependency-type: direct:production ...

Snyk has created this PR to upgrade @wagmi/cli from 0.1.15 to 2.8.0.

See this package in npm:
@wagmi/cli

See this project in Snyk:
https://app.snyk.io/org/dargon789/project/bb845543-cbee-4e11-8cf9-8bfdf9205bf1?utm_source=github&utm_medium=referral&page=upgrade-pr

  • Potential fix for code scanning alert no. 82: Workflow does not contain permissions

  • Potential fix for code scanning alert no. 62: Information exposure through a stack trace

Loading
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@sourcery-ai sourcery-ai[bot] sourcery-ai[bot] left review comments

+1 more reviewer

@gemini-code-assist gemini-code-assist[bot] gemini-code-assist[bot] left review comments

Reviewers whose approvals may not affect merge requirements

Assignees

@Dargon789 Dargon789

Labels

dependencies Pull requests that update a dependency file documentation Improvements or additions to documentation duplicate This issue or pull request already exists enhancement New feature or request good first issue Good for newcomers invalid This doesn't seem right javascript Pull requests that update javascript code question Further information is requested

Projects

Hardhat
Archived in project
web3-Defi-Gamefi
Status: Done

Milestone

No milestone

2 participants

@Dargon789 @github-advanced-security