6.5.0

6.5.0 (diff)

Added

• Add receiver_invitations_disabled organization setting that skips the scheduled receiver wallet invitation job when enabled. #1119

Changed

• Replace the standalone exhaustive CI check with the exhaustive linter in golangci-lint. #1121
• Authenticate the automated release workflow with Anthropic Workload Identity Federation, replacing the long-lived CLAUDE_CODE_OAUTH_TOKEN secret with short-lived OIDC-issued tokens. #1122

Fixed

• Reject payment amounts that exceed Stellar's 7-decimal-place precision in utils.ValidateAmount. #1116
• Add ownership check to SEP-24 GET /transaction endpoint. #1115
• Fix payment amount precision loss in dispatch and transaction builder. #1114
• Fix NULL handling in SEP-24 transaction ownership query. #1117

Security and Dependencies

• Upgrade Go to 1.25.0, bump gotestsum to v1.13.0, bump the Go module minor-and-patch group across 1 directory with 14 updates. #1101
• Bump rand from 0.8.5 to 0.8.6 in /contracts in the cargo group. #1118
• Bump the npm_and_yarn group across 1 directory with 2 updates (lodash, postcss). #1120
• Bump the all-actions group across 1 directory with 3 updates. #1113
• Bump vite from 7.1.12 to 7.3.2 in /internal/serve/sep24frontend/app. #1102