1241.0.0

@metamask/core-backend 9.1.0

Added

• Add authTokenTimeout to ApiPlatformClientOptions and export DEFAULT_AUTH_TOKEN_TIMEOUT (#10104)
  • Requests wait at most this long (default 500ms) for getBearerToken. If the token is not ready, the request is sent unauthenticated while the in-flight fetchQuery continues so later requests can attach the token. Set authTokenTimeout to 0 to wait indefinitely.
  • Bearer-token fetchQuery uses staleTime: 0 so concurrent requests are de-duplicated without a second JWT cache; token lifetime stays with AuthenticationController.
• Add bypassServerCache option to FetchOptions (#10068)
  • When true, the v5/v6 multi-account balances requests skip the client-side query cache (stale time defaults to 0) and append a random bypassServerCache query param so the Accounts API's server-side cache (keyed on the full URL) misses. Intended for hard refreshes only, e.g. right after a transaction confirms.

Changed

• Bearer-token fetchQuery no longer uses a 5-minute STALE_TIMES.AUTH_TOKEN; STALE_TIMES.AUTH_TOKEN is removed (#10104)
• Bump @metamask/remote-feature-flag-controller from ^6.0.0 to ^6.1.1 (#9980, #10129)
• Bump @metamask/utils from ^11.11.0 to ^11.12.0 (#10076)
• Bump @metamask/account-tree-controller from ^8.0.0 to ^8.1.0 (#10088)