Release/1169.0.0

[OGPoyraz]

Explanation

Release 1169.0.0 with version bumps for:

• @metamask/eth-json-rpc-middleware 23.1.3 → 24.0.0 (major)
• @metamask/network-controller 35.0.0 → 35.0.1 (patch)

@metamask/eth-json-rpc-middleware@24.0.0

Breaking: Add strict validation for eth_sendTransaction and eth_signTransaction params (#9482)

• Reject requests whose params do not match the transaction schema (extraneous top-level keys, ill-typed fields such as non-hex to/data, malformed accessList / authorizationList entries) or exceed MAX_TRANSACTION_PARAMS_SIZE_BYTES when serialized
• Prevents downstream normalization / PPOM WASM from crashing on deeply-nested junk fields or padded payloads and silently bypassing security scans

Other changes:

• Bump @metamask/utils from ^11.9.0 to ^11.11.0 (#9074)
• Bump @metamask/json-rpc-engine from ^10.2.4 to ^10.5.0 (#8661, #8746, #8753)
• Bump @metamask/message-manager from ^14.1.1 to ^14.1.2 (#8755)
• Drop pify dependency, which was no longer used in source (#9064)

@metamask/network-controller@35.0.1

• Bump @metamask/eth-json-rpc-middleware from ^23.1.3 to ^24.0.0 (#9758)

References

• #9482 — feat: validate eth_sendTransaction / eth_signTransaction params

Checklist

• I've updated the test suite for new or updated code as appropriate
• I've updated documentation (JSDoc, Markdown, etc.) for new or updated code as appropriate
• I've communicated my changes to consumers by updating changelogs for packages I've changed
• I've introduced breaking changes in this PR and have prepared draft pull requests for clients and consumer packages to resolve them

---

Note

Medium Risk
The release propagates a major middleware bump that rejects previously accepted malformed transaction RPC params; integrators on strict validation paths should expect possible breakage for non-conformant dapps, though this PR itself only changes versions and docs.

Overview
This PR cuts monorepo release 1169.0.0 by versioning packages and aligning dependents—no application source changes beyond manifests and changelogs.

@metamask/eth-json-rpc-middleware@24.0.0 is published with changelog release notes for the existing breaking strict validation on eth_sendTransaction / eth_signTransaction (schema, size limits, rejection of malformed or oversized params).

@metamask/network-controller@35.0.1 bumps its dependency on that middleware from ^23.1.3 to ^24.0.0. Root and many workspace packages update @metamask/network-controller to ^35.0.1, with matching Unreleased changelog lines and yarn.lock resolution updates.

^{Reviewed by Cursor Bugbot for commit 455c03b. Bugbot is set up for automated code reviews on this repo. Configure here.}

[cursor]

Cursor Bugbot has reviewed your changes and found 1 potential issue.

^{❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, have a team admin enable autofix in the Cursor dashboard.}

^{Reviewed by Cursor Bugbot for commit 3117973. Configure here.}

[OGPoyraz]

@metamaskbot update-changelogs

[metamask-ci]

✅ Changelogs updated and pushed.

[cryptodev-2s]

Sorry some last suggestions