Changes:

• fix: signing extrinsics on ledger device
• Update polkadot-api and polkadot-js

Changes:

Revert #1560 (#1573)

Changes:

• Implement rate limiting for sign requests
• Prevent phishing validation bypass via credentialed URLs using tldts
• feat: add password strength validation
• Fixed missing checkmark for connected accounts (website access)

Changes:

• Ensure text is filtered so it doesnt cause white screens
• Fix .name error with whitescreen
• Upgrade polkadot-js deps

Contributed:

- Add support for canceling authorization requests without authorizing sites

Changes:

- Upgrade polkadot-js deps
@polkadot/api -> 15.2.1
@polkadot/common -> 13.3.1
@polkadot/phishing -> 0.25.1
@polkadot/ui -> 3.12.1
- Bump dev w/ @polkadot-api/merkelize-metadata
- Bump @fortawesome/* deps
- Bump yarn to 4.6.0
- Update headers to 2025

Changes:

- Bump all polkadot deps
- polkadot/api -> 14.2.1
- polkadot/common -> 13.2.2
- Gives support for Frequency, and Polimec
- polkadot/ui -> 3.11.2
- polkadot/phishing -> 0.24.2

Contributed:

- Ability to Reject an authentication request instead of ignoring it

Changes:

Upgrade polkadot-js deps (#1462)
- This contains breaking changes in the API that was released in 13.0.1. The release changed the way AssetId is returned from toPayload in the Signer interface. Option<TAssetConversion> is now returned as a SCALE encoded hex.

Changes:

- Remove Alarm permissions

Contributed:

- Update XCM Analyser to v1.3.1
- Fix: ensure the service worker is awake before every port message
- NOTE: The extension-base now exposes a set of functions for port connection stability.
- `setupPort`
- `wakeUpServiceWorker`
- `ensurePortConnection`
Changes:

- Bump yarn to 4.3.1
- Add CI script to check for diffs in src vs build for store release
- Change Connected to Connect Accounts
- Upgrade Polkadot-js deps
- polkadot/api 12.3.1
- polkadot/phishing 0.23.3
- polkadot/ui 3.8.3

Contributed:

- Update subscribed accounts when connected site authorizations are modified
- Deprecates public udateCurrentTabsUrl in class State in favor of public updateCurrentTabsUrl.

Changes:

- Add support for the Ledger Generic App
- Add support for the Ledger Migration App
- Note: In order to use the ledger migration app, you must toggle the setting inside of settings. That will enable the migration app for use.
- Fix extension stuck in ... loading ... screen after service_worker got terminated

Breaking Changes:

Update from Manifest v2 to v3 for Chrome
Update from Manifest v2 to v3 for Firefox
Note: These are very large breaking changes. Please review the following PR's to see exactly what has changed and for any additional information that can assist you in your migration.

Changes:

Update xcm analyzer to 1.3.0
Upgrade Polkadot.js Deps
@polkadot/common -> 13.0.2 (Introduces the interface for the new ledger app. This will be implemented in the next release)
@polkadot/api -> 12.2.1
@polkadot/phishing -> 0.23.1
@polkadot/ui -> 3.7.1
Update module resolution to bundler
Clean the manifest build process
Fix ID used in manifest_firefox.json by adding brackets

Changes:
- Adjust ui imports for deterministic bundling

Contributed:

- Add search functionality (Thanks to https://github.com/Tbaut)
- Add Urdu translation (Thanks to https://github.com/itsonal)

Changes:

- Detect Ascii bytes (& display) when signing
- Correctly detect and create Ethereum-compatible chain accounts
- Ensure site authorization toggle is saved
- Optimize metadata conversion process
- Bump `@polkadot/util` to 7.8.2
- Bump `@polkadot/api` to 6.7.1

Contributed:

- Support signing of raw data via Qr (Thanks to https://github.com/Tbaut, prior 0.38.4)
- Add Polish language support (Thanks to https://github.com/ccris02, prior 0.38.8)
- Add Thai language support (Thanks to https://github.com/Chakrarin)
- Display Ethereum formatted addressed for compatible chains (Thanks to https://github.com/joelamouche)
- Allow import of Metamask addresses for compatible chains (Thanks to https://github.com/joelamouche)
- Add configurable popup location (Thanks to https://github.com/shawntabrizi)

Changes:

- Adjust raw signing outputs with data wrapper
- Adjust settings menu layouts
- Cater for v14 metadata formats
- Cater for `#` in phishing Urls as part of the checks
- Bump `@polkadot/api` & `@polkadot/util` to latest versions

Contributed:

- Support IPFS/IPNS uls (Thanks to https://github.com/carumusan)
- Batch export of all accounts (Thanks to https://github.com/BubbleBear)
- Turkish i18n (Thanks to https://github.com/zinderud)
- Support for custom signed extensions (Thanks to https://github.com/KarishmaBothara)
- Adjust background handler port mapping (Thanks to https://github.com/hlminh2000)
- Prevent 3rd party authorize abuse (Thanks to https://github.com/remon-nashid)
- Use file-saver for account export (Thanks to https://github.com/Tbaut)
- Language fixes (Thanks to https://github.com/n3wborn)

Changes:

- Support for Metadata v13 from Substrate
- Bump `@polkadot/api` & `@polkadot/util` to latest released versions
- Swap to use of ESM modules all in published packages

Contributed:

- Ensure accounts check against raw public keys (Thanks to https://github.com/yuzhiyou1990)
- Add support for Ledger devices (Thanks to https://github.com/Tbaut)
- Add network selectors on the creation of all accounts (Thanks to https://github.com/Tbaut)
- Add explicit derivation field on seed imports (Thanks to https://github.com/Tbaut)
- Adjust slider color for dark theme (Thanks to https://github.com/Tbaut)
- Expand and cleanup tests (Thanks to https://github.com/Tbaut)
- Allow custom chains to be selected as tie-to chains (Thanks to https://github.com/Tbaut)
- Various UI adjustments for consistency (Thanks to https://github.com/Tbaut)
- Update i18n fr (Thanks to https://github.com/Tbaut)

Changes:

- Support for latest JS APIs
- Adjust phishing detection to check newly opened tabs

Contributed:

- Allow for the management of per-site approvals (Thanks to https://github.com/Tbaut)
- Add support for Ethereum account imports (Thanks to https://github.com/Tbaut)
- Split account derivation and from-seed creation flows (Thanks to https://github.com/Tbaut)
- Fix overlapping error labels (Thanks to https://github.com/Tbaut)
- Rework JSON restoration for consistency (Thanks to https://github.com/Tbaut)
- Leverage cache for phishing detection (Thanks to https://github.com/Tbaut)
- Allow ecdsa accounts to be injected (Thanks to https://github.com/Tbaut)
- Adjust display for overly long names (Thanks to https://github.com/Tbaut)
- Ensure that attached chain/prefix is always used on accounts (Thanks to https://github.com/Tbaut)
- Show account name (as entered) in creation screens (Thanks to https://github.com/Tbaut)
- show wrong password error on export screen (Thanks to https://github.com/Tbaut)
- Add new UI tests and fix skipped tests (Thanks to https://github.com/Tbaut)
- Additional fr translations (Thanks to https://github.com/Tbaut)

Changes:

- Swap to using Webpack 5 for reproducible builds
- Swap to using TypeScript type imports
- Hide parent/derivation-path when account is not derived

Contributed:

- Add i18n French
- Add a caps-lock warning for passwords
- Unify warning/error messages between components
- Adjust notification window for cross-platform consistency
- Set account visibility directly from icon click
- Don't indicate name errors before any value is entered
- Swap icons to the Font Awesome (instead of built-in)
- Use `@polkadot/networks` for known ss58 formats/genesis
- Add phishing site detection and redirection
- Add indicator icon for external accounts
- Add error boundaries across all UI components
- Group accounts by network, sort by name & path
- Fix derive suggestions to update when switching root
- Adjust window opening logic to be generic
- Add i18n language selection dropdown
- Adjust password expiry to extend timeperiod
- Rework password caching for security & robustness
- Share password expiry length between back/front-ends
- Cleanup all global styles and usage

Changes:

- Adjust web3Enable for better on-load detection
- Support for all latest Substrate/Polkadot types

- Added support for the upcoming Metadata v12 formats

Contributed:

- Include Subsocial ss58 (Thanks to https://github.com/F3Joule)
- Add Crab network (Thanks to https://github.com/WoeOm)
- README updates (Thanks to https://github.com/Noc2)
- Runtime checks for web3Enable params (Thanks to https://github.com/Tbaut)

Changes:

- Add option to not ask password for 15 minutes (when signing transactions)
- Derived accounts uses the parent genesisHash by default (attaches to same chain)
- Make import from seed, QR & JSON options available on first-start
- Adjust popup width, allowing full display of e.g. addresses
- Always display network selection on all accounts
- Handling signing rejections (any order) transparently
- Small overall UI and use adjustments
- Latest upstream polkadot-js dependencies
- Prepare for i18n translations with initial i18next setup
- Rendering optimizations for Extrinsic displays

- Indicate password error when account cannot be unlocked on signing
- Support for new Polkadot/Kusama/Substrate signing payloads

- Add the ability to import JSON keystore files (Thanks to https://github.com/shawntabrizi)
- Updated to derivation documentation (Thanks to https://github.com/EthWorks)
- Rework account creation with top-level menu
- Allow accounts to be hidden, i.e. not injected (per account setting)
- Adjust allowed mnemonic seed strengths, 12, 15, 18, 21 & 24 all allowed
- Allow accounts to be tied to a specific network genesis (along with display)
- Allow accounts to be made hidden, i.e. not injected into dapps
- Remove duplication with Default/Substrate prefixes in dropdown (equivalent, only generic displayed)
- Display child accounts when no parent has been found (orphans)
- Display derived suri alongside parent account names
- Remove all bundled metadata, update is available for dapps to keep current
- Sorting of injected accounts based on created timestamp

- New account creation with default derivation (Thanks to https://github.com/EthWorks)
- Adjust `web3Enable` promise to only resolve after the document has been loaded (is interactive)
- Update `signedExtensions` to cater for new chains
- Update metadata for latest Kusama

- Allow for per root-account derivation & indicators (Thanks to https://github.com/EthWorks)
- Add consistent validation to all text inputs (Thanks to https://github.com/EthWorks)
- Make address copy interfaces easily accessible (Thanks to https://github.com/EthWorks)
- Latest dependency updates, base types for all latest Polkadot/Substrate chains
- Rework base storage access & cross-browser interfaces for consistency
- UI consistency adjustments & code maintainability cleanups