1128.0.0

@metamask/react-data-query 0.2.2

Changed

• Bump @metamask/utils from ^11.9.0 to ^11.11.0 (#9074)
• Make react-dom and react-native peer dependencies optional (#9295)

Fixed

• Retain queries in cache until GC (#9502)

1127.0.0

@metamask/phishing-controller 17.3.0

Added

• Extend DEFAULT_CHAIN_ID_TO_NAME with 19 additional chains: xlayer, megaeth, tempo, tempo-testnet, kaia, robinhood, arc, plasma, mantle, katana, plume, kite-ai, monad-testnet, starknet, starknet-sepolia, stellar, bitcoin, sui, tron (#9506)
• Add TOKEN_SCAN_SUPPORTED_CHAINS constant, TokenScanSupportedChain type, and isTokenScanSupportedChain type guard to gate bulkScanTokens per chain (#9506)
• Add ADDRESS_SCAN_SUPPORTED_CHAINS constant, AddressScanSupportedChain type, and isAddressScanSupportedChain type guard to gate scanAddress per chain (#9506)

Changed

• bulkScanTokens now returns {} without calling the security-alerts API when the resolved chain is not in TOKEN_SCAN_SUPPORTED_CHAINS (#9506)
• scanAddress now returns { result_type: 'ErrorResult', label: '' } without calling the security-alerts API when the resolved chain is not in ADDRESS_SCAN_SUPPORTED_CHAINS (#9506)

1126.0.0

@metamask/bridge-status-controller 74.3.0

Added

• Support batch sell (EIP-7702/nested batch) transactions in the quote-status flow, so every quote submitted under a single batch transaction is reported to the backend. All quotes sharing one batch source transaction are reported as SUBMITTED under the shared source transaction hash and txMetaId, and are finalized together when that transaction confirms or fails. (#9514)

Changed

• Ensure refs in tsconfig files are synced with internal deps (#8384)

1125.0.0

@metamask/sentinel-api-service 1.0.0

Added

• Initial commit (#9466)
  • Supports getNetworks, simulateTransactions, submitRelayTransaction, and getSmartTransaction

1124.0.0

@metamask/network-enablement-controller 5.6.0

Added

• Add restoreEnabledNetworkMap on NetworkEnablementController to restore a previously snapshotted enabledNetworkMap when adding a network without switching the active network filter. Not exposed as a messenger action (#9480)

1123.0.0

@metamask/passkey-controller 2.1.0

Added

• Expose public PasskeyController methods through its messenger (#9515)
  • The following actions are now available:
    • PasskeyController:isPasskeyEnrolled
    • PasskeyController:generateRegistrationOptions
    • PasskeyController:verifyRegistrationResponse
    • PasskeyController:generatePostRegistrationAuthenticationOptions
    • PasskeyController:generateAuthenticationOptions
    • PasskeyController:verifyAuthenticationResponse
    • PasskeyController:protectVaultKeyWithPasskey
    • PasskeyController:retrieveVaultKeyWithPasskey
    • PasskeyController:verifyPasskeyAuthentication
    • PasskeyController:renewVaultKeyProtection
    • PasskeyController:removePasskey
    • PasskeyController:clearState
    • PasskeyController:destroy
  • Corresponding action types (e.g. PasskeyControllerIsPasskeyEnrolledAction) are available as well.

Changed

• Bump @metamask/utils from ^11.9.0 to ^11.11.0 (#9074)
• Bump @metamask/messenger from ^1.2.0 to ^2.0.0 (#9392)

1122.0.0

@metamask/bridge-controller 77.5.0

Added

• Add the optional transaction_internal_id property to Unified SwapBridge Completed events. (#9494)

Changed

• Bump @metamask/assets-controller from ^10.2.1 to ^11.0.0 (#9485)

Fixed

• chore: MIT license text update (#9472)

@metamask/bridge-status-controller 74.2.0

Added

• Include transaction_internal_id in Unified SwapBridge Completed events for EVM source transactions. (#9494)

Changed

• Bump @metamask/bridge-controller from ^77.4.1 to ^77.5.0 (#9508)

Fixed

• chore: MIT license text update (#9472)

1121.0.0

@metamask/transaction-pay-controller 25.0.0

Added

• Store a no-op quote (TransactionPayStrategy.None) when a payment token is selected but the route needs no conversion, so clients can tell "no conversion needed" apart from "quote missing" (#9484)
• Add None value to TransactionPayStrategy enum (#9484)

Changed

• BREAKING: Quotes stored in transactionData can now contain a single no-op quote with the none strategy; clients that read quotes for display, metrics, or publish validation must ignore or handle no-op quotes (#9484)

1120.0.0

@metamask/transaction-pay-controller 24.1.0

Added

• Add getStablecoins feature flag reader that resolves the stablecoin list from the stable-tokens LaunchDarkly flag, falling back to the hardcoded constant when absent (#9495)
• Add generic signature steps to the server pay strategy, supporting EIP-712 sign-then-POST flows (#9051)
  • Trigger quote refresh when txParams.to or requiredAssets changes on a transaction, in addition to the existing txParams.data trigger

Changed

• Replace hardcoded STABLECOINS usage in token.ts and relay-quotes.ts with the remotely configurable getStablecoins(messenger) lookup (#9495)
• Bump @metamask/assets-controller from ^10.2.1 to ^11.0.0 (#9485)
• Bump @metamask/ramps-controller from ^16.0.0 to ^17.0.0 (#9491)

1119.0.0

@metamask/ramps-controller 17.0.0

Added

• Add the MONEY_HEADLESS_ALL_PROVIDERS_FLAG_KEY constant (moneyHeadlessAllProviders) and the pure isHeadlessAllProvidersEnabled(remoteFeatureFlagState) helper (with a HeadlessFeatureFlagsLookup type) that own the flag key lookup, localOverrides-over-remoteFeatureFlags merging, and boolean coercion (only the literal true enables), so UI consumers resolve the flag exactly like the controller does (#9409)
• Add pure provider-availability helpers providerServesAsset, getProvidersServingAsset, regionHasProviderForAsset, and isFiatDepositAvailable so headless-buy consumers can share the controller's case-insensitive CAIP-19 asset matching and flag-aware region/availability gating instead of re-deriving it, keeping the two from disagreeing; regionHasProviderForAsset and isFiatDepositAvailable take an allProvidersEnabled boolean (#9409)
• Add pure quote-classification helpers isExternalBrowserQuote, isCustomActionQuote, and isInAppOnlyQuote so consumers can share the in-app-vs-external browser-mode classification without owning host redirect/deeplink concerns (#9409)
• Add pure error-normalization helpers getErrorMessage, extractExplicitTypedError, and normalizeToTypedError (with a TypedError<Code> type) so consumers can share error-shape extraction while keeping their own error-code taxonomy (#9409)
• Add @metamask/remote-feature-flag-controller ^4.2.2 as a runtime dependency (#9409)

Changed

• BREAKING: Replace the getProviderScope constructor option and the exported ProviderScope type ('off' | 'in-app' | 'all') with a controller-side read of the moneyHeadlessAllProviders boolean remote feature flag (#9409)
  • RampsController.getQuotes resolves the flag through the RemoteFeatureFlagController:getState messenger action on each auto-selection call, so a remote fetch or a local dev override takes effect at runtime; consumers should delegate that action to the controller's messenger (when it is missing, the flag read fails closed and quoting stays native-only)
  • When the flag is true, the auto-selection path (autoSelectProvider / restrictToKnownOrNativeProviders) widens to every supporting provider class (native, in-app WebView aggregator, and external-browser / custom-action) and returns the best quote at success[0], enforcing per-provider fiat limits; when the flag is false, missing, or any non-boolean value, the path stays native-only
  • The intermediate in-app scope (which excluded external-browser and custom-action quotes from selection) is removed
• RampsController now derives its internal region provider-asset matching from the shared providerAvailability helpers, so the exposed helpers stay behaviourally identical to the controller's own selection (#9409)