[georgeweiler]

Explanation

Scoped release so clients can pick up #10749. Monorepo release 1320.0.0, following merged Release/1319.0.0.

• @metamask/ramps-controller 26.3.0 → 27.0.0 (major). hydrateVbaOnboarding is a read: it no longer signs a wallet, posts a self-hosted address, creates an autoramp, or starts the KYC poll. Callers create an autoramp with createAutoramp(buildMusdAutorampRequest(...)). Messenger now requires KycController:readSessionStatus and KycController:fetchSessionStatusOnce. Also includes the unpublished feat(ramps-controller): create an autoramp only for a chosen fiat #10743 additions (needs_source_currency, buildMusdAutorampRequest) and the profile-sync range bump to ^34.0.2.
• @metamask/kyc-controller 0.6.1 → 0.7.0 (minor, matching earlier 0.x breaking bumps). Publishes readSessionStatus and fetchSessionStatusOnce from feat: make VBA hydrate a read #10749. The same version also ships the unpublished breaking aal2Token requirement on startSession / createUkycSession (add aal2Token to KycController.startSession #10632) and the 72-hour capability token (feat(kyc-controller): update capability token TTL from 4h to 72h #10679).
• @metamask/transaction-pay-controller 30.0.1 → 30.0.2 (patch). Published because ramps-controller is a major and this is its only dependent. The range moves to ^27.0.0. This version also includes the unpublished gas-fee fix from refactor(transaction-pay-controller): consolidate origin gas payment resolution #10404.

Other packages with unreleased changes are deferred. ramps-controller keeps its existing dependency ranges, including @metamask/profile-sync-controller at ^34.0.2 from #10756.

References

• Ships feat: make VBA hydrate a read #10749
• Also publishes unpublished changes already on main: feat(ramps-controller): create an autoramp only for a chosen fiat #10743, add aal2Token to KycController.startSession #10632, feat(kyc-controller): update capability token TTL from 4h to 72h #10679, refactor(transaction-pay-controller): consolidate origin gas payment resolution #10404, Release/1318.0.0 #10752, Release/1319.0.0 #10756

Checklist

• I've updated the test suite for new or updated code as appropriate
• I've updated documentation (JSDoc, Markdown, etc.) for new or updated code as appropriate
• I've communicated my changes to consumers by updating changelogs for packages I've changed
• I've introduced breaking changes in this PR and have prepared draft pull requests for clients and consumer packages to resolve them

---

Note

Medium Risk
The release ships major ramps-controller and breaking KYC/VBA onboarding API changes; this PR only versions and documents them, but client upgrades must adopt new messenger delegations and onboarding call patterns.

Overview
Cuts monorepo release 1320.0.0 by moving unreleased changelog notes into versioned sections and bumping published package versions—no new runtime code in this diff.

@metamask/ramps-controller 27.0.0 (major) documents shipping #10749/#10743: hydrateVbaOnboarding becomes a read-only snapshot (wallet sign, registration POST, autoramp creation, and KYC polling move to callers), new persisted wallet-registration state and needs_wallet_registration / needs_source_currency statuses, and messenger now requires KycController:readSessionStatus and KycController:fetchSessionStatusOnce.

@metamask/kyc-controller 0.7.0 publishes those KYC actions plus breaking aal2Token requirements on UKYC session creation/startSession.

@metamask/transaction-pay-controller 30.0.2 updates its dependency range to @metamask/ramps-controller ^27.0.0 and records the ramps bump in its changelog (along with fixes already on main such as #10404).

^{Reviewed by Cursor Bugbot for commit 6cb8531. Bugbot is set up for automated code reviews on this repo. Configure here.}

[metamask-ci]

✅ No changelog changes needed.

[cryptodev-2s]

Adding DO-NOT-MERGE until previous release is published

[georgeweiler]

hi @cryptodev-2s I think prev release has been published, could we remove the label now?
https://github.com/MetaMask/core/actions/runs/37823969802