3.10.5

Restricts the Comlink wallet bridge to the Mesh iframe, closing a cross-window message-validation issue. Drop-in upgrade — no breaking changes.

🔒 Security

• link: bumped @meshconnect/uwc-bridge-parent to 1.4.2 — inbound bridge RPC is now restricted to the Mesh iframe (origin allowlist + event.source guard), so other windows on the host page can no longer reach the bridge or trigger wallet prompts. (#202)

What's Changed

• fix(link): upgrade uwc-bridge-parent to 1.4.2 for bridge origin/source hardening [ONC-134] by @luis-goncalves-mesh in #202

Full Changelog: 3.10.4...3.10.5