Wallet v0.4.0

What's Changed

• tests: raise wallet coverage from 77.7% to 84.4% by @TeoSlayer in #1
• tests: tighten coverage by retiring unreachable defensive code (wave 2) by @TeoSlayer in #2
• fix: close TOCTOU in LoadLocalSigner and LoadEVMSigner (PILOT-86) by @matthew-pilot in #3
• fix: add Dependabot config for gomod + github-actions weekly updates (PILOT-382) by @matthew-pilot in #5
• build(deps): bump codecov/codecov-action from 4 to 6 by @dependabot[bot] in #8
• build(deps): bump actions/setup-go from 5 to 6 by @dependabot[bot] in #9
• build(deps): bump actions/upload-artifact from 4 to 7 by @dependabot[bot] in #7
• build(deps): bump modernc.org/sqlite from 1.50.1 to 1.51.0 by @dependabot[bot] in #12
• build(deps): bump actions/checkout from 4 to 6 by @dependabot[bot] in #6
• fix: close IPC socket TOCTOU with umask before Listen (PILOT-279) by @matthew-pilot in #4
• build(deps): bump github.com/pilot-protocol/app-store from 1.0.0-rc1 to 1.0.1-beta.1 by @dependabot[bot] in #11
• build(deps): bump golang.org/x/crypto from 0.51.0 to 0.52.0 by @dependabot[bot] in #10
• build(deps): bump modernc.org/sqlite from 1.51.0 to 1.52.0 by @dependabot[bot] in #13
• docs: OSS hygiene files (PILOT-50) by @TeoSlayer in #14
• feat: wire EVM (Base USDC) methods into the wallet binary by @TeoSlayer in #15
• feat: multichain EVM (Base + Ethereum + Polygon) in one wallet by @TeoSlayer in #16
• feat: default to multichain so daemon-spawned wallets get all three USDC chains by @TeoSlayer in #17
• build(deps): bump golang.org/x/crypto from 0.52.0 to 0.53.0 by @dependabot[bot] in #19
• build(deps): bump codecov/codecov-action from 6 to 7 by @dependabot[bot] in #18
• build(deps): bump actions/checkout from 6 to 7 by @dependabot[bot] in #20
• Add tamper-evident integrity to spend-cap state by @TeoSlayer in #22
• build(deps): bump modernc.org/sqlite from 1.52.0 to 1.53.0 by @dependabot[bot] in #23
• chore(deps): bump all first-party deps to latest by @TeoSlayer in #21
• build(deps): bump github.com/pilot-protocol/app-store from 1.0.1-beta.1 to 1.0.2 by @dependabot[bot] in #24
• build(deps): bump golang.org/x/crypto from 0.53.0 to 0.54.0 by @dependabot[bot] in #25
• build(deps): bump actions/setup-go from 6 to 7 by @dependabot[bot] in #26
• build(deps): bump modernc.org/sqlite from 1.53.0 to 1.54.0 by @dependabot[bot] in #27
• wallet: settler client with CAPPED settler.transfer by @TeoSlayer in #28
• fix(wallet): H2 empty-asset cap bypass; M16 capMu held across settler round-trip by @TeoSlayer in #29
• fix(evm): Base Sepolia USDC EIP-712 domain name is "USDC", not "USD Coin" by @patelnav in #30
• build(deps): bump golang.org/x/crypto from 0.54.0 to 0.55.0 by @dependabot[bot] in #34
• build(deps): bump modernc.org/sqlite from 1.54.0 to 1.57.0 by @dependabot[bot] in #35
• build(deps): bump modernc.org/sqlite from 1.57.0 to 1.59.0 by @dependabot[bot] in #39
• build(deps): bump github.com/pilot-protocol/app-store from 1.0.2 to 1.0.4 by @dependabot[bot] in #43
• fix(wallet): exit when the daemon dies, stop per-call logging, never unlink a successor's socket by @TeoSlayer in #40
• ci(release): build, sign and publish wallet bundles for linux/darwin × amd64/arm64 by @TeoSlayer in #41
• wallet.help discovery method by @Alexgodoroja in #42
• wallet: never lose the key: keep a copy outside the install dir, restore before creating by @TeoSlayer in #47

New Contributors

• @matthew-pilot made their first contribution in #3
• @dependabot[bot] made their first contribution in #8
• @patelnav made their first contribution in #30
• @Alexgodoroja made their first contribution in #42

Full Changelog: https://github.com/pilot-protocol/wallet/commits/v0.4.0