Repository navigation
Release 1314.0.0 - #10662
Merged
Merged
Release 1314.0.0#10662
Conversation
mathieuartu
had a problem deploying
to
default-branch
October 1, 2026 15:23 — with
GitHub Actions
Failure
Contributor
Author
|
@metamaskbot update-changelogs |
Contributor
@mathieuartu token-exchange service is down so do bot will likely fail run locally. |
mathieuartu
enabled auto-merge
October 1, 2026 15:34
cryptodev-2s
approved these changes
Oct 1, 2026
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Explanation
References
Checklist
Note
Medium Risk
Medium risk from rolling out profile-sync 34.0.0’s breaking MFA/session constant removal and crypto/auth behavior changes across many consumers, even though this PR only bumps versions and lockfile entries.
Overview
This PR cuts Release 1314.0.0 by bumping the root monorepo version and publishing new package versions across the workspace—mostly dependency alignment and changelog updates, with
yarn.lockrefreshed to match.The driver is
@metamask/profile-sync-controller@34.0.0, which many packages now depend on (^34.0.0). That release (already documented in its changelog) changes MFA enrollment to open a server-scoped verification session, swaps client AES for@metamask/cryptography, and removesVERIFICATION_SESSION_TTL_MSas a breaking change. Downstream packages (account-tree-controller,assets-controllers,core-backend, bridge/claims/kyc/shield/subscription/wallet, etc.) get patch or minor version bumps that record those dependency updates.A few other packages ship their own pending changelog entries in the same train (e.g.
social-controllers@3.6.0,smart-transactions-controller@27.1.0,ramps-controller@26.2.0), but the diff here is almost entirely version,package.json, andCHANGELOG.md—no new runtime code in this PR.Reviewed by Cursor Bugbot for commit aed273e. Bugbot is set up for automated code reviews on this repo. Configure here.