Skip to content

CHANGELOG.md

Latest commit

 

History

History
117 lines (80 loc) · 7.29 KB

CHANGELOG.md

File metadata and controls

117 lines (80 loc) · 7.29 KB
Raw

Changelog

All notable changes to this project will be documented in this file.

The format is based on Keep a Changelog, and this project adheres to Semantic Versioning.

Unreleased

Changed

  • BREAKING: Add strict validation for eth_sendTransaction and eth_signTransaction params (#9482)

    • Reject requests whose params do not match the transaction schema (extraneous top-level keys, ill-typed fields such as non-hex to/data, malformed accessList / authorizationList entries) or exceed MAX_TRANSACTION_PARAMS_SIZE_BYTES when serialized
    • Prevents downstream normalization / PPOM WASM from crashing on deeply-nested junk fields or padded payloads and silently bypassing security scans

  • Bump @metamask/utils from ^11.9.0 to ^11.11.0 (#9074)

  • Bump @metamask/json-rpc-engine from ^10.2.4 to ^10.5.0 (#8661, #8746, #8753)

  • Bump @metamask/message-manager from ^14.1.1 to ^14.1.2 (#8755)

  • Drop pify dependency, which was no longer used in source (#9064)

23.1.3

Fixed

  • Allow Advanced Permissions metadata in signTypedData V4 requests (#8603)

23.1.2

Changed

  • Add more strict validation for signTypedData V4 requests (#8526)

23.1.1

Changed

  • Bump @metamask/eth-json-rpc-provider from ^6.0.0 to ^6.0.1 (#8317)
  • Bump @metamask/message-manager from ^14.1.0 to ^14.1.1 (#8317)
  • Bump @metamask/json-rpc-engine from ^10.2.1 to ^10.2.4 (#7856, #8078, #8317)

23.1.0

Added

  • Add prototype pollution validation for signTypedData methods (V1, V3, V4) to block dangerous properties (__proto__, constructor, prototype, etc.) in message data. (#7732)

Changed

  • Bump @metamask/eth-block-tracker from ^15.0.0 to ^15.0.1 (#7642)
  • Bump @metamask/json-rpc-engine from ^10.2.0 to ^10.2.1 (#7642)

23.0.0

Added

  • Support for wallet_getSupportedExecutionPermissions and wallet_getGrantedExecutionPermissions RPC methods (#7603)

Changed

  • Upgrade @metamask/utils from ^11.8.1 to ^11.9.0 (#7511)
  • BREAKING: Changed wallet_requestExecutionPermissions to comply with 7715 spec revisions.

22.0.1

Fixed

  • Include WalletContext in EIP-7715 requests (#7331)

22.0.0

Added

  • Add new function providerAsMiddlewareV2 for converting an InternalProvider into a JsonRpcEngine v2-compatible middleware (#7138)

Changed

  • BREAKING: Migrate all middleware from JsonRpcEngine to JsonRpcEngineV2 (#7065)
    • To continue using this package with the legacy JsonRpcEngine, use the asLegacyMiddleware backwards compatibility function.
  • BREAKING: Change the signatures of hooks for createWalletMiddleware (#7065)
    • To wit:
      • getAccounts takes an origin argument (string) instead of a JsonRpcRequest
      • processDecryptMessage and processEncryptionPublicKey take a MessageRequest from @metamask/message-manager instead of JsonRpcRequest
      • processPersonalMessage, processTransaction, processSignTransaction, processTypedMessage, processTypedMessageV3 and processTypedMessageV4 take a context as the third argument, before any other arguments
    • Be advised that request objects are now deeply frozen, and cannot be mutated.
  • BREAKING: Use InternalProvider instead of SafeEventEmitterProvider (#6796)
    • Wherever a SafeEventEmitterProvider was expected, an InternalProvider is now expected instead.
  • BREAKING: Stop retrying undefined results for methods that include a block tag parameter (#7001)
    • The retryOnEmpty middleware will now throw an error if it encounters an undefined result when dispatching a request with a later block number than the originally requested block number.
    • In practice, this should happen rarely if ever.
  • BREAKING: Migrate all uses of interface to type (#6885)
  • Bump @metamask/message-manager from ^14.0.0 to ^14.1.0 (#7202)
  • Bump @metamask/json-rpc-engine from ^10.1.1 to ^10.2.0 (#7202)
  • Bump @metamask/eth-json-rpc-provider from ^5.0.1 to ^6.0.0 (#7202)
  • Bump @metamask/eth-block-tracker from ^14.0.0 to ^15.0.0 (#7202)

21.0.0

Changed

  • BREAKING: Increase minimum Node.js version from ^18.16 to ^18.18 (#6866)
  • Bump @metamask/eth-block-tracker from ^12.2.1 to ^14.0.0 (#6866, #6883)
  • Bump @metamask/network-controller from ^24.2.2 to ^24.3.0 (#6883)
  • This package was migrated from MetaMask/eth-json-rpc-middleware to the MetaMask/core monorepo.