Skip to content

smart-account-kit v0.9.0

Choose a tag to compare

View all tags
@kalepail kalepail released this 25 Oct 20:24
v0.9.0
67a584c
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Changes

  • Support the stellar-accounts v0.7.3 and v0.8.0 account builds, including the v0.8.0 preimage-v1 auth digest. Refuse delegated contract signers (GHSA-jpg9-m7w4-c7wc).
  • Add signAuthEntryWithSigners for sign-only Ed25519, delegated, and passkey signing without submission (#13).
  • Require caller-supplied context rule IDs. Never take them from a supplied auth payload.
  • Gate raw upgrade calls on the admin signing path to accepted WASM hashes, with the wallet as operator.
  • Restrict direct relayer transfers to Stellar Asset Contracts or listed custom tokens (relayer proxy).
  • Default the demos and the relayer proxy to the v0.8.0 account build and the v0.8.0 policies. See docs/deployments-stellar-accounts-0.8-2026-10-25.md for testnet and mainnet IDs.
  • Dependency audit fixes.

This release includes breaking security changes. It requires smart-account-kit-bindings@0.5.0. Read CHANGELOG.md before updating.

Assets 2
Loading