solana-studio 0.5.3 → 0.5.4

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: f23721d4f7078e324181a032346ecde03ec9155fab5b598e08c2d570f66cc3f2
-  data.tar.gz: cb9cb4d1bd2a7dd354d9adc62e0b7c2ef09a099b8151ac5b1c8688f16fc55541
+  metadata.gz: 70e8fb8d6ac999a75bafc72260c08f2bdc4812a10506d2e6c4185c30432dcdda
+  data.tar.gz: 1a679edcf52dfe801d46e9cd2e8009169b54a1546a1eb5052751e3bb17d0aed1
 SHA512:
-  metadata.gz: 984eb74053d0f3bb8e46009bef2ec8092c3f0c425237eaf6adb8c97b295583fa02f8a7dd644f4ee04191bf1e1c3108d21f8a74644f097c28c980c253f816a539
-  data.tar.gz: 69fd31c57ecf75e77a31b6a4deb1e15d45a35ac9dbb98495f23b137cd1beed1b23a947edcc572e4a090f3e388e4a5e158a40b68b2a475b7573b32282a6447df7
+  metadata.gz: 9cb3227a5821ec101fa87e67d2f5953a60fef0362b53e1d3fdb74f555f8acbabe19de68167906dbba84b537e4e1350652b68b19fa0a365eadf6e31bf7fa798bd
+  data.tar.gz: 27873ce2d2d94c22c313d4a587ac7be649fa0dc9b7eb3f468cb80150f8f97b05a5b33ff42a09304afaa125b197e27ad005986d49ec35bccccb630ff3e447318e

data/README.md

@@ -309,10 +309,18 @@ code left over from a shelved tool.
 
 ### The browser lane
 
-The Ruby suite cannot see two things this gem ships: whether
-`network_guard.js` actually **runs** in a browser, and whether
+The Ruby suite cannot see three things this gem ships: whether
+`network_guard.js` actually **runs** in a browser, whether
 `_network_mismatch.html.erb` **renders** (rendering it needs studio-engine's modal
-blocks and a view context, so `test/views_test.rb` only proves it compiles).
+blocks and a view context, so `test/views_test.rb` only proves it compiles), and
+whether the base58 encoder inlined in `_phantom_deeplink.html.erb` produces the
+**right bytes**. That last one is signing-path code: the deep link encodes the
+payload a user signs inside Phantom, so an encoder that mis-encodes yields a
+signature over the wrong bytes. The failure is invisible to a String assertion —
+the source is identical either way — and lands when someone taps Connect on a
+phone. `e2e/phantom_deeplink.spec.js` decodes the emitted payload with its own
+independent implementation and compares bytes, rather than checking the parameter
+merely looks like base58.
 
 ```bash
 npm ci && npx playwright install chromium

data/lib/solana_studio/version.rb

@@ -16,5 +16,5 @@ module SolanaStudio
   # through the normal cycle. Splitting the version out is the same shape
   # studio-engine already uses (lib/studio/version.rb) and hands each file back
   # to its real owner: this one to the release, the gemspec to the PR.
-  VERSION = "0.5.3"
+  VERSION = "0.5.4"
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: solana-studio
 version: !ruby/object:Gem::Version
-  version: 0.5.3
+  version: 0.5.4
 platform: ruby
 authors:
 - Alex McRitchie