1288.0.0

@metamask/account-tree-controller 11.0.0

Added

• BREAKING: Add AccountTreeController:removeAccountWallet (#10253)
  • It removes all accounts in a non-primary wallet.
  • It rejects removal of the primary HD wallet.
  • We now need those new actions on the messenger MultichainAccountService:removeMultichainAccountWallet, KeyringController:removeAccount and AccountsController:getAccounts.
  • Also reports errors for non-entropy account wallet removal failures, matching the pattern used by MultichainAccountService:removeMultichainAccountWallet.

Changed

• Bump @metamask/profile-sync-controller from ^32.0.0 to ^33.0.0 (#10184, #10220, #10348, #10409, #10418, #10459)
• Bump @metamask/utils from ^11.12.0 to ^12.0.0 (#10192)
• Bump @metamask/keyring-controller from ^28.0.0 to ^28.1.0 (#10418)
• Bump @metamask/multichain-account-service from ^14.0.0 to ^14.1.0 (#10459)

@metamask/assets-controller 16.1.2

Changed

• Bump @metamask/account-tree-controller from ^10.0.1 to ^11.0.0 (#10459)
• Bump @metamask/assets-controllers from ^112.0.3 to ^112.0.4 (#10459)

@metamask/assets-controllers 112.0.4

Changed

• Bump @metamask/account-tree-controller from ^10.0.1 to ^11.0.0 (#10459)
• Bump @metamask/multichain-account-service from ^14.0.0 to ^14.1.0 (#10459)
• Bump @metamask/profile-sync-controller from ^32.3.1 to ^33.0.0 (#10459)

@metamask/bridge-controller 81.3.2

Changed

• Bump @metamask/assets-controller from ^16.1.1 to ^16.1.2 (#10459)
• Bump @metamask/assets-controllers from ^112.0.3 to ^112.0.4 (#10459)
• Bump @metamask/profile-sync-controller from ^32.3.1 to ^33.0.0 (#10459)

@metamask/bridge-status-controller 76.3.2

Changed

• Bump @metamask/bridge-controller from ^81.3.1 to ^81.3.2 (#10459)
• Bump @metamask/profile-sync-controller from ^32.3.1 to ^33.0.0 (#10459)

@metamask/claims-controller 1.0.2

Changed

• Bump @metamask/profile-sync-controller from ^32.0.0 to ^33.0.0 (#10184, #10220, #10348, #10409, #10418, #10459)
• Bump @metamask/utils from ^11.12.0 to ^12.0.0 (#10192)
• Bump @tanstack/query-core from ^5.62.16 to ^5.89.0 (#9324)
• Bump @metamask/keyring-controller from ^28.0.0 to ^28.1.0 (#10418)

@metamask/earn-controller 13.0.2

Changed

• Bump @metamask/account-tree-controller from ^10.0.1 to ^11.0.0 (#10459)

@metamask/kyc-controller 0.5.0

Changed

• KycService GET endpoints now call fetch directly instead of fetchQuery, so read responses are no longer cached in the service QueryClient (#10375)
• Bump @metamask/profile-sync-controller from ^32.1.1 to ^33.0.0 (#10348, #10409, #10418, #10459)
• Bump @tanstack/query-core from ^5.62.16 to ^5.89.0 (#9324)

@metamask/multichain-account-service 14.1.0

Added

• Add Bip44AccountProvider.deleteAccounts (#10263)
  • Default implementation deletes sequentially via deleteAccount and is best-effort: one failure does not skip the rest.
  • Failures are returned as { ok: false, failures } rather than thrown.
• Add MultichainAccountWallet.deleteAllMultichainAccountGroups (#10263)
  • Deletes every account the wallet owns. EVM failure IDs identify retained groups without re-querying providers; groups whose EVM deletion succeeded are pruned after best-effort non-EVM cleanup.
• Add an optional provider filter to MultichainAccountGroup.getAccountIds (#10263)

Changed

• Bump @metamask/utils from ^11.12.0 to ^12.0.0 (#10192)
• Bump @metamask/account-api from ^2.0.0 to ^2.1.0 (#10263)
• Bump @metamask/keyring-controller from ^28.0.0 to ^28.1.0 (#10418)
• Bump @metamask/snap-account-service from ^3.0.0 to ^4.0.0 (#10459)

Fixed

• Fix removeMultichainAccountWallet for EvmAccountProvider (#10263)
  • EvmAccountProvider.deleteAccounts deletes from the highest group index down under one keyring lock per entropy source, which the HD keyring requires.
  • Also, now deletes through deleteAccounts per provider.
  • EVM deletion failures now cause wallet removal to throw and retain the wallet: after a partial EVM deletion, only non-EVM accounts without a remaining EVM account in the same group are deleted.
  • Wallet removal now delegates account deletion to MultichainAccountWallet.deleteAllMultichainAccountGroups and only drops the wallet from the service map when that call succeeds.

@metamask/notification-services-controller 29.0.2

Changed

• Bump semver from ^7.6.3 to ^7.8.5 (#10443)
• Bump @metamask/profile-sync-controller from ^32.3.1 to ^33.0.0 (#10459)

@metamask/profile-metrics-controller 5.1.2

Changed

• Bump @metamask/profile-sync-controller from ^32.3.1 to ^33.0.0 (#10459)

@metamask/profile-sync-controller 33.0.0

Changed

• BREAKING: Rename MFA "step-up" to "credential verification", matching the authentication API's verify endpoints (#10432, #10460)
  • Methods and messenger actions: beginStepUp → beginCredentialVerification, completeStepUp → completeCredentialVerification, getElevatedProfileToken → getVerificationToken, clearStepUpSession → clearVerificationSession
  • Constant: STEP_UP_SESSION_TTL_MS → VERIFICATION_SESSION_TTL_MS
  • State: stepUpSessionExpiresAt is removed; call getVerificationToken() to check for a live verification session
  • Types: ElevatedProfileToken → VerificationToken, GetElevatedTokenRequest → GetVerificationTokenRequest, and StepUp becomes Verification in BeginStepUpRequest, CompleteStepUpRequest, StepUpChallenge, StepUpProof and MfaStepUpAssertion
  • Error: ElevatedTokenInvalidError (elevated_token_invalid) → VerificationTokenInvalidError (verification_token_invalid)
  • Trace spans: MFA Step-Up Begin / Complete → MFA Verification Begin / Complete
• BREAKING: Accept MFA data as the server sends it (#10432)
  • email_otp credentials without an address are kept: EnrolledCredential.email is now optional
  • Verification tokens are accepted with any amr method name and any aal: claims.amr is widened and claims.aal is removed, since the server enforces assurance levels
• Let one verification cover a whole setup flow (#10432)
  • The verification session lasts as long as its token, up to 15 minutes instead of 1
  • Enrolling a credential no longer ends the session
  • beginCredentialEnrollment only uses a session younger than 2 minutes (ENROLLMENT_MAX_SESSION_AGE_MS), or than its new maxSessionAgeMs option
• Bump @metamask/seedless-onboarding-controller from ^11.0.0 to ^11.0.1. (#10433)

@metamask/ramps-controller 25.1.1

Changed

• Bump @metamask/profile-sync-controller from ^32.2.0 to ^33.0.0 (#10409, #10418, #10459)

@metamask/shield-controller 7.0.3

Changed

• Bump cockatiel from ^3.1.2 to ^3.2.1 (#10436)
• Bump @metamask/profile-sync-controller from ^32.3.1 to ^33.0.0 (#10459)

@metamask/smart-transactions-controller 27.0.3

Changed

• Bump @metamask/profile-sync-controller from ^32.3.1 to ^33.0.0 (#10459)

@metamask/snap-account-service 4.0.0

Changed

• BREAKING: SnapAccountService now reads AccountsController state to filter account data update events by Snap ownership (#10057).
  • Filter account data update events (notify:accountTransactionsUpdated, notify:accountBalancesUpdated, and notify:accountAssetListUpdated) to the accounts that the originating Snap actually owns before republishing them.
• Bump @metamask/utils from ^11.12.0 to ^12.0.0 (#10192)
• Bump @metamask/account-api from ^2.0.0 to ^2.1.0 (#10263)
• Bump @metamask/keyring-controller from ^28.0.0 to ^28.1.0 (#10418)

@metamask/social-controllers 3.2.0

Added

• Add fetchTraderFeed method to SocialService (and the SocialService:fetchTraderFeed messenger action) for one trader's activity as feed items. Calls GET /traders/:addressOrId/feed with optional commentedOnly, limit, and cursor pagination (olderThan/newerThan). Reuses existing FeedResponse / FeedItem validation (#10408)
• Add optional volumeUsd30d on TraderStats and required copytradedAllTime (count, volumeUSD, distinctActors) on TraderProfileResponse for the trader stats sheet (#10389)

Changed

• Bump @metamask/profile-sync-controller from ^32.2.0 to ^33.0.0 (#10409, #10418, #10459)

@metamask/subscription-controller 10.0.1

Changed

• Bump @metamask/profile-sync-controller from ^32.3.1 to ^33.0.0 (#10459)