v1.3.2

1.3.2 (2026-07-28)

Bug Fixes

• contract: close open-proxy hole in burn (#1021) (#1059) (895a621)

v1.3.1

1.3.1 (2026-07-27)

Bug Fixes

• frontend: handle every sendTransaction status explicitly (#1020) (#1058) (70ebab6), closes #1056 #1057

v1.3.0

1.3.0 (2026-07-27)

Bug Fixes

• #1024,#1023: fee-split edge cases and metadata URI validation (#1036) (e3174cb), closes #1024 #1023 #1024 #1023
• #1024,#1023: fee-split edge cases and metadata URI validation (#1037) (116d025), closes #1024 #1023 #1024 #1023
• align adm_upd topic and add CI drift detection (#1032) (872baa9)
• contracts: add distribute_fee test coverage at realistic split sizes (#918) (#1025) (f9ec953), closes #919
• contracts: charge exactly the required fee, not fee_payment (#1035) (8654767), closes #1007 #1007 #1008 #1008
• contracts: make token-factory initialize atomic with deployment (#1029) (3e12de2), closes #1005
• contracts: move per-token bookkeeping to persistent storage (#1034) (51c52bd), closes #1007 #1007
• contracts: prove multi-step migrate pattern with synthetic v2 tests (#919) (#1026) (f9ef384), closes #918 #918
• contracts: repair broken merge artifacts on main (#1041) (6524e58), closes 1034/#1035 #1033 #1034 #1025
• contracts: seed max-supply counter with initial_supply (#1006) (#1031) (4a3e90d)
• frontend: resolve token identity from contract, not events (#1018) (#1030) (66bcb19)
• security: validate uploaded image content, not client-declared M… (#1055) (ab1f253), closes #1002 #1002 #1056 #1057
• token-factory: bound fee-split recipient count to prevent resource-exhaustion griefing (#1027) (becd28f)

Features

• frontend: implement paginated global token listing (getAllTokens) (#1028) (0e1b51e), closes #1017

v1.2.0

1.2.0 (2026-07-21)

Bug Fixes

• deps: add Dependabot fuzz coverage and auto-merge policy (#985) (2247b9f), closes #941

Features

• frontend: verify deployed token WASM hash against factory state (#986) (6d1566a), closes #925 hi#severity #982 #984 #984 #984 #982

v1.1.0

1.1.0 (2026-07-20)

Features

• security: add triage and waiver workflow for audit findings (#981) (aa0ceab), closes hi#or-above #939

v1.0.0

1.0.0 (2026-07-20)

Bug Fixes

• #741 AdminPanel restricted to admin address only (7b2b8c2)
• #854: format useTransactionHistory.ts to match project Prettier style (remove semicolons) (8e7b12b), closes #854
• #855: eliminate CSP duplication by generating index.html meta tag from policy.ts (1dc325a), closes #855
• #932: consolidate useTransactionPolling into useTransaction.ts (#956) (28a84b6), closes #932 #932
• #944: add txHash, network, contractId Sentry tagging on transaction failures (#952) (9c213d0), closes #944 #944
• #945: document batch resource limits and add frontend size cap (#953) (8555f65), closes #945 #945
• #947: add incident response runbook and break-glass recovery docs (#954) (0546342), closes #947 #9 #947
• accept decimals=0 in validateTokenParams (56cb8d9)
• add bounds validation to token metadata type guard (CWE-1236) (#964) (ab4cb5c)
• add BurnAmountExceedsBalance check in burn function (1113068)
• add CI drift check for contract ABI documentation - Closes #946 (#949) (8e67454)
• add env var validation and misconfiguration screen (f66f1d5)
• add esbuild as a direct devDependency for Storybook CI build (512b11e)
• add formula-injection guard to CSV export (CWE-1236) (#963) (bff7012)
• add missing build step to E2E job, fix sitemap script crash (535955c)
• add missing imports for mobile responsive components (0b89740)
• add standalone network support and fix E2E test mocks (a78f8de)
• analytics: add opt-out tests, CI bypass check, and compliance ADR (#965) (180f672), closes #948
• audit follow-ups — restore tx polling backoff, fix wasm target, drop orphan form (05409eb), closes #852 #732 813/#814
• ci: remove continue-on-error from fuzz steps, add PR smoke job (#937) (#966) (000458f)
• clear cargo clippy -D warnings findings in token-factory (2a27a8f)
• complete contract test suite with all error variants covered (5f8320d)
• contract: front-load batch validation and document Soroban transaction atomicity (#915) (#974) (b60868f)
• contracts: add crash-to-regression-test process with fuzz corpus infrastructure (#951) (9428b7d), closes #938
• contracts: add integer overflow protection in fee arithmetic (18622f1), closes #513
• correct useLocalStorage syntax error and variable reference (232fc52)
• dedupe token-validation rules in validation.ts (d3012c2), closes #845
• downgrade vite to v6 for Storybook compatibility (c2f071b)
• e2e: add token-list-container class and show 6 trailing address chars (9fcfff3)
• e2e: prevent watcher auto-connect by not responding to REQUEST_NETWORK_DETAILS (9649702)
• exclude fuzz crate from workspace to prevent wasm32 compilation errors (b3f09f2)
• expand .gitignore to prevent accidental commits of local artifacts (1da56fe), closes #835
• frontend: clear typecheck errors and prettier drift masked by red CI (82994b9)
• frontend: close network-mismatch signing window with a fresh pre-sign check (#961) (7619e99), closes #927
• frontend: close unclosed PR wrapper in App.tsx and remove duplicate route entries (4f9442b)
• frontend: establish transaction reconciliation policy and add phantom-entry guards (#955) (1372af1), closes #933
• frontend: filter-aware cache key, stable useCallback deps, re-fetch on filter change (62d2c8c)
• frontend: implement the CSV formula-injection guard its tests expected (59839b6), closes #963
• frontend: make token-detail routes public for deep links (#880) (971e14b)
• frontend: only mount OnboardingModal on Help click, not first-visit (87d3ce4)
• frontend: paginate factory event fetch instead of silently capping "all tokens" (#962) (b480f56), closes #35
• frontend: pay real base_fee, surface FeeDisplay in mint, bloc...