@metamask/transaction-controller 62.19.0

Changed

• Rename remote feature flag useWebsockets to useBackendWebSocketService (#8028)

@metamask/assets-controllers 100.0.3

Changed

• Bump @metamask/transaction-controller from ^62.17.1 to ^62.18.0 (#8005)

Fixed

• Fix token search API parameter to use first instead of limit for pagination (#8019)
  • Clamp limit to a maximum of 50 results for regular queries
  • Allow up to 500 results for Ondo token queries; limits exceeding 500 are clamped to 50

@metamask/bridge-controller 67.2.0

Changed

• Bump @metamask/transaction-controller from ^62.17.1 to ^62.18.0 (#8005)
• Bump @metamask/assets-controllers from ^100.0.1 to ^100.0.2 (#8004)
• Replace PERCENT_90 with PERCENT_75 in InputAmountPreset enum (#7997)
• Add PERCENT_90 in InputAmountPreset enum (#8008)

@metamask/ramps-controller 10.0.0

Changed

• BREAKING: Remove state.quotes and state.widgetUrl from RampsController state. Quote and widget URL data are now managed by consuming components (#8013)
• BREAKING: Remove fetchQuotesForSelection() and setSelectedQuote(). Components call getQuotes() directly and manage selection locally (#8013)
• Simplify getWidgetUrl() to a pure fetch-and-return API; it no longer reads or writes controller state (#8013)
• Improve TransakService error handling (#8010)
• BREAKING: Replace startQuotePolling()/stopQuotePolling() with fetchQuotesForSelection() — quotes are now fetched once per call instead of polling on a 15-second interval (#7999)

Removed

• Remove stopQuotePolling() method (no interval to stop) (#7999)
• Remove internal polling restart logic (#restartPollingIfActive) from setSelectedProvider, setSelectedToken, and setSelectedPaymentMethod (#7999)

Fixed

• Fix RampsController flaky test (#8018)

@metamask/compliance-controller 1.0.1

@metamask/seedless-onboarding-controller 8.1.0

Changed

• refreshAuthTokens now coalesces concurrent calls — if a refresh is already in-flight, subsequent callers share the same promise rather than issuing duplicate HTTP requests with the same token (#7989)
• refreshAuthTokens now uses the live state.refreshToken value when calling authenticate after a successful HTTP refresh, preventing a stale-capture bug that could overwrite a concurrently-renewed token with an older one (#7989)
• renewRefreshToken now queues the old token for revocation only after #createNewVaultWithAuthData succeeds, ensuring tokens are not queued if vault creation fails (#7989)

Fixed

• Fixed refreshAuthTokens throwing the generic FailedToRefreshJWTTokens error for all HTTP failures — a 401 response (permanently revoked token) now throws InvalidRefreshToken instead, giving callers a distinct signal to distinguish permanent from transient failures (#7989)

@metamask/transaction-controller 62.18.0

Added

• Add predictRelayDeposit and perpsRelayDeposit to TransactionType enum (#7947)

@metamask/transaction-pay-controller 16.0.0

Added

• BREAKING: Add live on-chain balance validation for pay transactions (#7935)
  • Refresh payment token balance via chain before each quote update.
  • Validate source token balance via chain before submitting Relay deposits.
  • Requires NetworkController:getNetworkClientById messenger action permission in TransactionController publish hook.

Changed

• Bump @metamask/transaction-controller from ^62.17.1 to ^62.18.0 (#8005)
• Replace relayDeposit transaction type with predictRelayDeposit or perpsRelayDeposit based on the parent transaction type (#7947)
• Bump @metamask/assets-controllers from ^100.0.1 to ^100.0.2 (#8004)

@metamask/assets-controllers 100.0.2

Changed

• Blockaid token filtering in MultichainAssetsController now only removes tokens flagged as Malicious (#8003)
  • Spam, Warning, and Benign tokens are no longer filtered out

@metamask/compliance-controller 1.0.0

Added

• Initial release (#7945)
  • Add ComplianceController for managing OFAC compliance state for wallet addresses.
  • Add ComplianceService for fetching compliance data from the Compliance API.

Changed

• Bump @metamask/controller-utils from ^11.18.0 to ^11.19.0 (#7995)

@metamask/ramps-controller 9.0.0

Added

• Add getOrder and getOrderFromCallback methods to RampsService and RampsController for V2 unified order polling, along with new RampsOrder, RampsOrderFiatCurrency, RampsOrderCryptoCurrency, RampsOrderPaymentMethod, and RampsOrderStatus types (#7934)

Changed

• BREAKING: Use concrete types in RampsOrder instead of string | Object unions for provider, cryptoCurrency, fiatCurrency, paymentMethod, and network fields (#8000)
• Bump @metamask/controller-utils from ^11.18.0 to ^11.19.0 (#7995)

@metamask/accounts-controller 36.0.1

Changed

• Bump @metamask/network-controller from ^29.0.0 to ^30.0.0 (#7996)

@metamask/assets-controller 2.0.2

Changed

• Bump @metamask/assets-controllers from ^100.0.0 to ^100.0.1 (#7996)
• Bump @metamask/network-controller from ^29.0.0 to ^30.0.0 (#7996)
• Bump @metamask/network-enablement-controller from ^4.1.1 to ^4.1.2 (#7996)
• Bump @metamask/polling-controller from ^16.0.2 to ^16.0.3 (#7996)
• Bump @metamask/transaction-controller from ^62.17.0 to ^62.17.1 (#7996)

@metamask/assets-controllers 100.0.1

Changed

• Bump @metamask/accounts-controller from ^36.0.0 to ^36.0.1 (#7996)
• Bump @metamask/network-controller from ^29.0.0 to ^30.0.0 (#7996)
• Bump @metamask/network-enablement-controller from ^4.1.1 to ^4.1.2 (#7996)
• Bump @metamask/polling-controller from ^16.0.2 to ^16.0.3 (#7996)
• Bump @metamask/transaction-controller from ^62.17.0 to ^62.17.1 (#7996)

@metamask/bridge-controller 67.1.1

Changed

• Bump @metamask/accounts-controller from ^36.0.0 to ^36.0.1 (#7996)
• Bump @metamask/assets-controllers from ^100.0.0 to ^100.0.1 (#7996)
• Bump @metamask/gas-fee-controller from ^26.0.2 to ^26.0.3 (#7996)
• Bump @metamask/multichain-network-controller from ^3.0.3 to ^3.0.4 (#7996)
• Bump @metamask/network-controller from ^29.0.0 to ^30.0.0 (#7996)
• Bump @metamask/polling-controller from ^16.0.2 to ^16.0.3 (#7996)
• Bump @metamask/transaction-controller from ^62.17.0 to ^62.17.1 (#7996)

@metamask/bridge-status-controller 67.0.1

Changed

• Bump @metamask/accounts-controller from ^36.0.0 to ^36.0.1 (#7996)
• Bump @metamask/gas-fee-controller from ^26.0.2 to ^26.0.3 (#7996)
• Bump @metamask/network-controller from ^29.0.0 to ^30.0.0 (#7996)
• Bump @metamask/polling-controller from ^16.0.2 to ^16.0.3 (#7996)
• Bump @metamask/transaction-controller from ^62.17.0 to ^62.17.1 (#7996)
• Bump @metamask/controller-utils from ^11.18.0 to ^11.19.0 (#7995)
• Bump @metamask/bridge-controller from ^67.0.0 to ^67.1.1 (#7995, #7996)

@metamask/earn-controller 11.1.1

Changed

• Bump @metamask/network-controller from ^29.0.0 to ^30.0.0 (#7996)
• Bump @metamask/keyring-api from ^21.0.0 to ^21.5.0 (#7857)
• Bump @metamask/account-tree-controller from ^4.0.0 to ^4.1.1 (#7869), (#7897)
• Bump @metamask/controller-utils from ^11.18.0 to ^11.19.0 (#7995)

@metamask/ens-controller 19.0.3

Changed

• Bump @metamask/network-controller from ^29.0.0 to ^30.0.0 (#7996)
• Bump @metamask/controller-utils from ^11.18.0 to ^11.19.0 (#7995)

@metamask/gas-fee-controller 26.0.3

Changed

• Bump @metamask/network-controller from ^29.0.0 to ^30.0.0 (#7996)
• Bump @metamask/polling-controller from ^16.0.2 to ^16.0.3 (#7996)
• Bump @metamask/controller-utils from ^11.18.0 to ^11.19.0 (#7995)

@metamask/multichain-api-middleware 1.2.7

Changed

• Bump @metamask/network-controller from ^29.0.0 to ^30.0.0 (#7996)
• Bump @metamask/json-rpc-engine from ^10.2.1 to ^10.2.2 (#7856)
• Bump @metamask/multichain-transactions-controller from 7.0.0 to 7.0.1 (#7897)
• Bump @metamask/controller-utils from ^11.18.0 to ^11.19.0 (#7995)

@metamask/multichain-network-controller 3.0.4

Changed

• Bump @metamask/accounts-controller from ^36.0.0 to ^36.0.1 (#7996)
• Bump @metamask/network-controller from ^29.0.0 to ^30.0.0 (#7996)
• Bump @metamask/controller-utils from ^11.18.0 to ^11.19.0 (#7995)

@metamask/network-controller 30.0.0

Added

• Add rpcMethodName to NetworkController:rpcEndpointDegraded and NetworkController:rpcEndpointChainDegraded event payloads (#7954)
  • This field contains the JSON-RPC method name (e.g. eth_blockNumber) that was being processed when the event fired, enabling identification of which methods produce the most slow requests or retry exhaustions.
• Add type and retryReason to NetworkController:rpcEndpointDegraded and NetworkController:rpcEndpointChainDegraded event payloads (#7988)
  • type (DegradedEventType) is 'slow_success' when the request succeeded but was slow, or 'retries_exhausted' when retries ran out.
  • retryReason (RetryReason, only present when type is 'retries_exhausted') classifies the error that was retried (e.g. 'non_successful_http_status', 'timed_out', 'connection_failed').

Changed

• BREAKING: The RpcServiceRequestable type's onDegraded listener now receives rpcMethodName: string in its data parameter (#7954)
  • Implementors of this interface will need to accept the new field in their onDegraded callback signature.
• Bump @metamask/eth-json-rpc-middleware from ^23.0.0 to ^23.1.0 (#7810)
• Bump @metamask/json-rpc-engine from ^10.2.1 to ^10.2.2 (#7856)
• Bump @metamask/controller-utils from ^11.18.0 to ^11.19.0 (#7995)

@metamask/network-enablement-controller 4.1.2

Changed

• Bump @metamask/multichain-network-controller from ^3.0.3 to ^3.0.4 (#7996)
• Bump @metamask/network-controller from ^29.0.0 to ^30.0.0 (#7996)
• Bump @metamask/transaction-controller from ^62.17.0 to ^62.17.1 (#7996)
• Bump @metamask/controller-utils from ^11.18.0 to ^11.19.0 (#7995)

@metamask/polling-controller 16.0.3

Changed

• Bump @metamask/network-controller from ^29.0.0 to ^30.0.0 (#7996)
• Bump @metamask/controller-utils from ^11.18.0 to ^11.19.0 (#7995)

@metamask/sample-controllers 4.0.3

Changed

• Bump @metamask/network-controller from ^29.0.0 to ^30.0.0 (#7996)
• Bump @metamask/controller-utils from ^11.18.0 to ^11.19.0 (#7995)

@metamask/selected-network-controller 26.0.3

Changed

• Bump @metamask/network-controller from ^29.0.0 to ^30.0.0 (#7996)
• Bump @metamask/json-rpc-engine from ^10.2.1 to ^10.2.2 (#7856)

@metamask/signature-controller 39.0.4

Changed

• Bump @metamask/accounts-controller from ^36.0.0 to ^36.0.1 (#7996)
• Bump @metamask/network-controller from ^29.0.0 to ^30.0.0 (#7996)
• Bump @metamask/controller-utils from ^11.18.0 to ^11.19.0 (#7995)

@metamask/transaction-controller 62.17.1

Changed

• Bump @metamask/accounts-controller from ^36.0.0 to ^36.0.1 (#7996)
• Bump @metamask/gas-fee-controller from ^26.0.2 to ^26.0.3 (#7996)
• Bump @metamask/network-controller from ^29.0.0 to ^30.0.0 (#7996)
• Bump @metamask/core-backend from 5.0.0 to ^6.0.0 (#7993)
• Bump @metamask/controller-utils from ^11.18.0 to ^11.19.0 (#7995)

@metamask/transaction-pay-controller 15.1.2

Changed

• Bump @metamask/assets-controllers from ^100.0.0 to ^100.0.1 (#7996)
• Bump `@metamask/...

@metamask/assets-controller 2.0.1

Changed

• Refactor data source tests to use shared MockAssetControllerMessenger fixture (#7958)
  • Export STAKING_INTERFACE from the staked balance fetcher for use with the staking contract ABI.
  • StakedBalanceDataSource teardown now uses the messenger's clearEventSubscriptions; custom messenger implementations must support it for correct cleanup.
• Bump @metamask/network-enablement-controller from ^4.1.0 to ^4.1.1 (#7984)
• Bump @metamask/core-backend from ^5.1.1 to ^6.0.0 (#7993)
• Bump @metamask/assets-controllers from ^99.4.0 to ^100.0.0 (#7995)
• Bump @metamask/controller-utils from ^11.18.0 to ^11.19.0 (#7995)

@metamask/assets-controllers 100.0.0

Added

• BREAKING: MultichainAssetsControllerMessenger now requires the PhishingController:bulkScanTokens action to be allowed (#7923)
  • Consumers constructing the messenger must include this action in the allowed actions list
• Add Blockaid token security scanning to MultichainAssetsController to filter out spam, malicious, and warning tokens during automatic asset detection (#7923)
  • Tokens with assetNamespace of "token" (e.g. SPL tokens) are scanned via the PhishingController:bulkScanTokens messenger action
  • Only tokens with a Benign result are kept; native assets (e.g. slip44) are not scanned
  • The filter fails open: if the scan is unreachable or returns an error, all tokens are kept
  • Filtering applies to account-added and asset-list-updated events; addAssets (curated list) is not filtered
  • Token addresses are batched into groups of 100 to stay within the bulkScanTokens per-request limit

Changed

• Bump @metamask/phishing-controller from ^16.2.0 to ^16.3.0 (#7979)
• Bump @metamask/network-enablement-controller from ^4.1.0 to ^4.1.1 (#7984)
• Bump @metamask/core-backend from ^5.0.0 to ^6.0.0 (#7993)
• Change MegaETH mainnet occurences filtering for getTokensURL (#7994)
• Bump @metamask/controller-utils from ^11.18.0 to ^11.19.0 (#7995)

@metamask/bridge-controller 67.1.0

Added

• Added optional input_amount_preset property to the InputChanged event in RequiredEventContextFromClient (#7987)

Changed

• Bump @metamask/assets-controllers from ^99.4.0 to ^100.0.0 (#7995)
• Bump @metamask/controller-utils from ^11.18.0 to ^11.19.0 (#7995)

@metamask/controller-utils 11.19.0

Added

• Add megaeth-mainnet to BUILT_IN_NETWORKS (#7994)

@metamask/transaction-pay-controller 15.1.1

Changed

• Bump @metamask/assets-controllers from ^99.4.0 to ^100.0.0 (#7995)
• Bump @metamask/controller-utils from ^11.18.0 to ^11.19.0 (#7995)
• Bump @metamask/bridge-controller from ^67.0.0 to ^67.1.0 (#7995)