Skip to content

Release/808.0.0#7912

Merged
lwin-kyaw merged 6 commits intomainfrom
release/808.0.0
Feb 12, 2026
Merged

Release/808.0.0#7912
lwin-kyaw merged 6 commits intomainfrom
release/808.0.0

Conversation

@lwin-kyaw
Copy link
Contributor

@lwin-kyaw lwin-kyaw commented Feb 12, 2026

Explanation

@metamask/seedless-onboarding-controller v8.0.0

This release adds vault encryption with a cached encryption key, a new getAccessToken public method with built-in token refresh, state log exclusions for sensitive token values, dependency bumps, and a fix for access token persistence after refresh.

Breaking Changes

  • The encryptor constructor param now requires an encryptWithKey method (#7800)
    • This method is used to encrypt the vault with a cached encryption key while the wallet is unlocked.
    • Consumers must ensure the encryptor object passed to the constructor implements encryptWithKey.

New Features

  • Added new public method getAccessToken (#7800)
    • Clients can use this method to retrieve the accessToken from the controller instead of directly accessing it from state.
    • This method includes a built-in refresh token mechanism when the accessToken is expired, preventing expired token usage in clients.

Changes

  • Updated StateMetadata's includeInStateLogs property to explicitly exclude all token values from state logs (#7750)

References

Fixes #7805

Checklist

  • I've updated the test suite for new or updated code as appropriate
  • I've updated documentation (JSDoc, Markdown, etc.) for new or updated code as appropriate
  • I've communicated my changes to consumers by updating changelogs for packages I've changed
  • I've introduced breaking changes in this PR and have prepared draft pull requests for clients and consumer packages to resolve them

Note

Low Risk
Version/changelog-only updates with no runtime code changes.

Overview
Bumps the monorepo version to 808.0.0 and releases @metamask/seedless-onboarding-controller 8.0.0.

Updates the seedless onboarding controller changelog to include the 8.0.0 release entry and adjusts compare links accordingly.

Written by Cursor Bugbot for commit b67d0d6. This will update automatically on new commits. Configure here.

@lwin-kyaw lwin-kyaw requested review from a team as code owners February 12, 2026 04:37
@lwin-kyaw lwin-kyaw enabled auto-merge February 12, 2026 11:00
@lwin-kyaw lwin-kyaw added this pull request to the merge queue Feb 12, 2026
Merged via the queue into main with commit ca80578 Feb 12, 2026
302 checks passed
@lwin-kyaw lwin-kyaw deleted the release/808.0.0 branch February 12, 2026 11:12
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

New accessToken from refreshAuthTokens() not persisted to vault

3 participants