2.7.1

2.7.1 (2026-11-05)

Bug Fixes

• harden signing requests against malformed and spoofed payloads (d1b4676), closes polkadot-js/extension#1624
• make global password change and JSON import all-or-nothing (bd22ac4)
• open Ledger import in a full tab from a fresh wallet (55b82c4)
• refuse to sign a transaction whose method has extra or missing bytes (c9a1eaa)
• roll back the account a failed password change threw on (4aa150d)