release: 7.61.5 (#24224)

# 🚀 v7.61.5 Testing & Release Quality Process

Hi Team,  
As part of our new **MetaMask Release Quality Process**, here’s a quick
overview of the key processes, testing strategies, and milestones to
ensure a smooth and high-quality deployment.

---

## 📋 Key Processes

### Testing Strategy
- **Developer Teams:**  
Conduct regression and exploratory testing for your functional areas,
including automated and manual tests for critical workflows.
- **QA Team:**  
Focus on exploratory testing across the wallet, prioritize high-impact
areas, and triage any Sentry errors found during testing.
- **Customer Success Team:**  
Validate new functionalities and provide feedback to support release
monitoring.

### GitHub Signoff
- Each team must **sign off on the Release Candidate (RC)** via GitHub
by the end of the validation timeline (**Tuesday EOD PT**).
- Ensure all tests outlined in the Testing Plan are executed, and any
identified issues are addressed.

### Issue Resolution
- **Resolve all Release Blockers** (Sev0 and Sev1) by **Tuesday EOD
PT**.
- For unresolved blockers, PRs may be reverted, or feature flags
disabled to maintain release quality and timelines.

### Cherry-Picking Criteria
- Only **critical fixes** meeting outlined criteria will be
cherry-picked.
- Developers must ensure these fixes are thoroughly reviewed, tested,
and merged by **Tuesday EOD PT**.

---

## 🗓️ Timeline and Milestones

1. **Today (Friday):** Begin Release Candidate validation.  
2. **Tuesday EOD PT:** Finalize RC with all fixes and cherry-picks.  
3. **Wednesday:** Buffer day for final checks.  
4. **Thursday:** Submit release to app stores and begin rollout to 1% of
users.
5. **Monday:** Scale deployment to 10%.  
6. **Tuesday:** Full rollout to 100%.

---

## ✅ Signoff Checklist

Each team is responsible for signing off via GitHub. Use the checkbox
below to track signoff completion:

# Team sign-off checklist
- [ ] Mobile Platform

This process is a major step forward in ensuring release stability and
quality. Let’s stay aligned and make this release a success! 🚀

Feel free to reach out if you have questions or need clarification. 

Many thanks in advance

# Reference
- Testing plan sheet -
https://docs.google.com/spreadsheets/d/1tsoodlAlyvEUpkkcNcbZ4PM9HuC9cEM80RZeoVv5OCQ/edit?gid=404070372#gid=404070372

<!-- CURSOR_SUMMARY -->
---

> [!NOTE]
> **Release bump to `7.61.5`**
> 
> - Updates `versionName`/`versionCode` in Android,
`MARKETING_VERSION`/`CURRENT_PROJECT_VERSION` in iOS, Bitrise env vars,
`package.json`, and `CHANGELOG.md`
> 
> **Deeplink robustness and security**
> 
> - Enforces that external transactions cannot use `INTERNAL_ORIGINS` in
`handleMetaMaskDeeplink.ts` and `connectWithWC.ts`
> - Minor refactor to consistently use `channelId` local variable in
deeplink handling
> 
> **Transaction auto-sign flow**
> 
> - In `RootRPCMethodsUI`, only auto-signs for hardware accounts
(`ledger` or `qr`); early return for others; maintains Ledger handoff to
confirmation flow
> 
> <sup>Written by [Cursor
Bugbot](https://cursor.com/dashboard?tab=bugbot) for commit
8eec71f. This will update automatically
on new commits. Configure
[here](https://cursor.com/dashboard?tab=bugbot).</sup>
<!-- /CURSOR_SUMMARY -->

Author: weitingsun

CHANGELOG.md

@@ -7,6 +7,13 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [7.61.5]
+
+### Fixed
+
+- fix: robustness deeplinking ([#24227](https://github.com/MetaMask/metamask-mobile/pull/24227))
+- chore: refine hardware signing flow ([#24228](https://github.com/MetaMask/metamask-mobile/pull/24228))
+
 ## [7.61.4]
 
 ### Fixed
@@ -26,6 +33,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 - chore: adds the Tron staking details preview ([#24198](https://github.com/MetaMask/metamask-mobile/pull/24198))
 - fix(ramp): use ScrollView from react-native-gesture-handler in PaymentMethodSelectorModal ([#24197](https://github.com/MetaMask/metamask-mobile/pull/24197))
 - chore: broadcast staking TRX transaction cp-7.61.3 ([#24196](https://github.com/MetaMask/metamask-mobile/pull/24196))
+- chore: connection updates and improvements ([#24215](https://github.com/MetaMask/metamask-mobile/pull/24215))
 
 ## [7.61.2]
 
@@ -9667,7 +9675,8 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 - [#957](https://github.com/MetaMask/metamask-mobile/pull/957): fix timeouts (#957)
 - [#954](https://github.com/MetaMask/metamask-mobile/pull/954): Bugfix: onboarding navigation (#954)
 
-[Unreleased]: https://github.com/MetaMask/metamask-mobile/compare/v7.61.4...HEAD
+[Unreleased]: https://github.com/MetaMask/metamask-mobile/compare/v7.61.5...HEAD
+[7.61.5]: https://github.com/MetaMask/metamask-mobile/compare/v7.61.4...v7.61.5
 [7.61.4]: https://github.com/MetaMask/metamask-mobile/compare/v7.61.3...v7.61.4
 [7.61.3]: https://github.com/MetaMask/metamask-mobile/compare/v7.61.2...v7.61.3
 [7.61.2]: https://github.com/MetaMask/metamask-mobile/compare/v7.61.1...v7.61.2

android/app/build.gradle

@@ -187,8 +187,8 @@ android {
         applicationId "io.metamask"
         minSdkVersion rootProject.ext.minSdkVersion
         targetSdkVersion rootProject.ext.targetSdkVersion
-        versionName "7.61.4"
-        versionCode 3335
+        versionName "7.61.5"
+        versionCode 3341
         testBuildType System.getProperty('testBuildType', 'debug')
         testInstrumentationRunner "androidx.test.runner.AndroidJUnitRunner"
         manifestPlaceholders.MM_BRANCH_KEY_TEST = "$System.env.MM_BRANCH_KEY_TEST"

app/components/Nav/Main/RootRPCMethodsUI.js

@@ -297,6 +297,22 @@ const RootRPCMethodsUI = (props) => {
       const { id: transactionId } = transactionMeta;
 
       try {
+        // unified swaps and bridge no longer goes through this path.
+        // TODO: to remove this in the near future
+        const isLedgerAccount = isHardwareAccount(
+          transactionMeta.txParams.from,
+          [ExtendedKeyringTypes.ledger],
+        );
+
+        const isQRAccount = isHardwareAccount(transactionMeta.txParams.from, [
+          ExtendedKeyringTypes.qr,
+        ]);
+
+        // Only auto-sign for Ledger or QR accounts
+        if (!isLedgerAccount && !isQRAccount) {
+          return;
+        }
+
         Engine.controllerMessenger.subscribeOnceIf(
           'TransactionController:transactionFinished',
           (transactionMeta) => {
@@ -326,11 +342,6 @@ const RootRPCMethodsUI = (props) => {
         // Queue txMetaId to listen for confirmation event
         addTransactionMetaIdForListening(transactionMeta.id);
 
-        const isLedgerAccount = isHardwareAccount(
-          transactionMeta.txParams.from,
-          [ExtendedKeyringTypes.ledger],
-        );
-
         // As the `TransactionController:unapprovedTransactionAdded` event is emitted
         // before the approval request is added to `ApprovalController`, we need to wait
         // for the next tick to make sure the approval request is present when auto-approve it

app/core/DeeplinkManager/handlers/legacy/connectWithWC.ts

@@ -1,3 +1,4 @@
+import { INTERNAL_ORIGINS } from '../../../../constants/transaction';
 import WC2Manager from '../../../WalletConnect/WalletConnectV2';
 import extractURLParams from '../../utils/extractURLParams';
 
@@ -13,6 +14,9 @@ export function connectWithWC({
   params: ReturnType<typeof extractURLParams>['params'];
 }) {
   handled();
+  if (params.channelId && INTERNAL_ORIGINS.includes(params.channelId)) {
+    throw new Error('External transactions cannot use internal origins');
+  }
 
   WC2Manager.getInstance()
     .then((instance) =>

app/core/DeeplinkManager/handlers/legacy/handleMetaMaskDeeplink.ts

@@ -13,6 +13,7 @@ import extractURLParams from '../../utils/extractURLParams';
 import handleRampUrl from './handleRampUrl';
 import handleDepositCashUrl from './handleDepositCashUrl';
 import { RampType } from '../../../../reducers/fiatOrders/types';
+import { INTERNAL_ORIGINS } from '../../../../constants/transaction';
 
 export function handleMetaMaskDeeplink({
   instance,
@@ -31,6 +32,11 @@ export function handleMetaMaskDeeplink({
 }) {
   handled();
 
+  const channelId = params?.channelId;
+  if (channelId && INTERNAL_ORIGINS.includes(channelId)) {
+    throw new Error('External transactions cannot use internal origins');
+  }
+
   if (url.startsWith(`${PREFIXES.METAMASK}${ACTIONS.ANDROID_SDK}`)) {
     DevLogger.log(
       `DeeplinkManager:: metamask launched via android sdk deeplink`,
@@ -52,15 +58,15 @@ export function handleMetaMaskDeeplink({
           hideReturnToApp: !!params.hr,
         },
       );
-    } else if (params.channelId) {
+    } else if (channelId) {
       // differentiate between  deeplink callback and socket connection
       if (params.comm === 'deeplinking') {
         if (!params.scheme) {
           throw new Error(`DeepLinkManager failed to connect - Invalid scheme`);
         }
 
         SDKConnect.getInstance().state.deeplinkingService?.handleConnection({
-          channelId: params.channelId,
+          channelId,
           url,
           scheme: params.scheme ?? '',
           dappPublicKey: params.pubkey,
@@ -83,7 +89,7 @@ export function handleMetaMaskDeeplink({
           });
         }
         handleDeeplink({
-          channelId: params.channelId,
+          channelId,
           origin,
           url,
           protocolVersion,
@@ -113,7 +119,7 @@ export function handleMetaMaskDeeplink({
     }
 
     SDKConnect.getInstance().state.deeplinkingService?.handleMessage({
-      channelId: params.channelId,
+      channelId,
       url,
       message: params.message,
       dappPublicKey: params.pubkey,

bitrise.yml

@@ -3574,16 +3574,16 @@ app:
       PROJECT_LOCATION_IOS: ios
     - opts:
         is_expand: false
-      VERSION_NAME: 7.61.4
+      VERSION_NAME: 7.61.5
     - opts:
         is_expand: false
-      VERSION_NUMBER: 3335
+      VERSION_NUMBER: 3341
     - opts:
         is_expand: false
-      FLASK_VERSION_NAME: 7.61.4
+      FLASK_VERSION_NAME: 7.61.5
     - opts:
         is_expand: false
-      FLASK_VERSION_NUMBER: 3335
+      FLASK_VERSION_NUMBER: 3341
     - opts:
         is_expand: false
       ANDROID_APK_LINK: ''

ios/MetaMask.xcodeproj/project.pbxproj

@@ -1281,7 +1281,7 @@
 				CODE_SIGN_IDENTITY = "Apple Development";
 				"CODE_SIGN_IDENTITY[sdk=iphoneos*]" = "iPhone Developer";
 				CODE_SIGN_STYLE = Manual;
-				CURRENT_PROJECT_VERSION = 3335;
+				CURRENT_PROJECT_VERSION = 3341;
 				DEAD_CODE_STRIPPING = YES;
 				DEBUG_INFORMATION_FORMAT = dwarf;
 				DEVELOPMENT_TEAM = 48XVW22RCG;
@@ -1319,7 +1319,7 @@
 					"${inherited}",
 				);
 				LLVM_LTO = YES;
-				MARKETING_VERSION = 7.61.4;
+				MARKETING_VERSION = 7.61.5;
 				ONLY_ACTIVE_ARCH = YES;
 				OTHER_CFLAGS = "$(inherited)";
 				OTHER_LDFLAGS = (
@@ -1350,7 +1350,7 @@
 				CODE_SIGN_ENTITLEMENTS = MetaMask/MetaMask.entitlements;
 				CODE_SIGN_IDENTITY = "iPhone Distribution";
 				CODE_SIGN_STYLE = Manual;
-				CURRENT_PROJECT_VERSION = 3335;
+				CURRENT_PROJECT_VERSION = 3341;
 				DEBUG_INFORMATION_FORMAT = "dwarf-with-dsym";
 				DEVELOPMENT_TEAM = 48XVW22RCG;
 				"DEVELOPMENT_TEAM[sdk=iphoneos*]" = 48XVW22RCG;
@@ -1385,7 +1385,7 @@
 					"${inherited}",
 				);
 				LLVM_LTO = YES;
-				MARKETING_VERSION = 7.61.4;
+				MARKETING_VERSION = 7.61.5;
 				ONLY_ACTIVE_ARCH = NO;
 				OTHER_CFLAGS = "$(inherited)";
 				OTHER_LDFLAGS = (
@@ -1416,7 +1416,7 @@
 				CODE_SIGN_IDENTITY = "Apple Development";
 				"CODE_SIGN_IDENTITY[sdk=iphoneos*]" = "iPhone Developer";
 				CODE_SIGN_STYLE = Manual;
-				CURRENT_PROJECT_VERSION = 3335;
+				CURRENT_PROJECT_VERSION = 3341;
 				DEAD_CODE_STRIPPING = YES;
 				DEBUG_INFORMATION_FORMAT = dwarf;
 				DEVELOPMENT_TEAM = 48XVW22RCG;
@@ -1454,7 +1454,7 @@
 					"\"$(SRCROOT)/MetaMask/System/Library/Frameworks\"",
 				);
 				LLVM_LTO = YES;
-				MARKETING_VERSION = 7.61.4;
+				MARKETING_VERSION = 7.61.5;
 				ONLY_ACTIVE_ARCH = YES;
 				OTHER_CFLAGS = "$(inherited)";
 				OTHER_LDFLAGS = (
@@ -1483,7 +1483,7 @@
 				CODE_SIGN_ENTITLEMENTS = MetaMask/MetaMask.entitlements;
 				CODE_SIGN_IDENTITY = "iPhone Distribution";
 				CODE_SIGN_STYLE = Manual;
-				CURRENT_PROJECT_VERSION = 3335;
+				CURRENT_PROJECT_VERSION = 3341;
 				DEBUG_INFORMATION_FORMAT = "dwarf-with-dsym";
 				DEVELOPMENT_TEAM = 48XVW22RCG;
 				"DEVELOPMENT_TEAM[sdk=iphoneos*]" = 48XVW22RCG;
@@ -1518,7 +1518,7 @@
 					"\"$(SRCROOT)/MetaMask/System/Library/Frameworks\"",
 				);
 				LLVM_LTO = YES;
-				MARKETING_VERSION = 7.61.4;
+				MARKETING_VERSION = 7.61.5;
 				ONLY_ACTIVE_ARCH = NO;
 				OTHER_CFLAGS = "$(inherited)";
 				OTHER_LDFLAGS = (
@@ -1646,7 +1646,7 @@
 				CODE_SIGN_IDENTITY = "Apple Development";
 				"CODE_SIGN_IDENTITY[sdk=iphoneos*]" = "iPhone Developer";
 				CODE_SIGN_STYLE = Manual;
-				CURRENT_PROJECT_VERSION = 3335;
+				CURRENT_PROJECT_VERSION = 3341;
 				DEAD_CODE_STRIPPING = YES;
 				DEBUG_INFORMATION_FORMAT = dwarf;
 				DEVELOPMENT_TEAM = 48XVW22RCG;
@@ -1684,7 +1684,7 @@
 					"\"$(SRCROOT)/MetaMask/System/Library/Frameworks\"",
 				);
 				LLVM_LTO = YES;
-				MARKETING_VERSION = 7.61.4;
+				MARKETING_VERSION = 7.61.5;
 				ONLY_ACTIVE_ARCH = YES;
 				OTHER_CFLAGS = (
 					"$(inherited)",
@@ -1716,7 +1716,7 @@
 				CODE_SIGN_ENTITLEMENTS = MetaMask/MetaMask.entitlements;
 				CODE_SIGN_IDENTITY = "iPhone Distribution";
 				CODE_SIGN_STYLE = Manual;
-				CURRENT_PROJECT_VERSION = 3335;
+				CURRENT_PROJECT_VERSION = 3341;
 				DEBUG_INFORMATION_FORMAT = "dwarf-with-dsym";
 				DEVELOPMENT_TEAM = 48XVW22RCG;
 				"DEVELOPMENT_TEAM[sdk=iphoneos*]" = 48XVW22RCG;
@@ -1751,7 +1751,7 @@
 					"\"$(SRCROOT)/MetaMask/System/Library/Frameworks\"",
 				);
 				LLVM_LTO = YES;
-				MARKETING_VERSION = 7.61.4;
+				MARKETING_VERSION = 7.61.5;
 				ONLY_ACTIVE_ARCH = NO;
 				OTHER_CFLAGS = (
 					"$(inherited)",

package.json

@@ -1,6 +1,6 @@
 {
   "name": "metamask",
-  "version": "7.61.4",
+  "version": "7.61.5",
   "private": true,
   "scripts": {
     "install:foundryup": "yarn mm-foundryup",