@dynamic-labs/ethereum 4.91.6 → 4.92.1

package/CHANGELOG.md

@@ -1,4 +1,31 @@
 
+### [4.92.1](https://github.com/dynamic-labs/dynamic-auth/compare/v4.92.0...v4.92.1) (2026-07-09)
+
+
+### Bug Fixes
+
+* **ethereum:** fire in-app-browser redirect on sign for injected EVM wallets that use in-app-browser experience ([#11888](https://github.com/dynamic-labs/dynamic-auth/issues/11888)) ([5116d91](https://github.com/dynamic-labs/dynamic-auth/commit/5116d91ab2c71000a490d72c5d278549d4d8ae9a))
+* **sdk-react-core:** show clear message for Phantom redirect signing failures (v4 backport) ([#11886](https://github.com/dynamic-labs/dynamic-auth/issues/11886)) ([60ac897](https://github.com/dynamic-labs/dynamic-auth/commit/60ac897ba81f7758ccd7a05f97b619785e1f50a7))
+* **social:** use redirect strategy for step-up OAuth on mobile [V4 backport] ([#11881](https://github.com/dynamic-labs/dynamic-auth/issues/11881)) ([42a202e](https://github.com/dynamic-labs/dynamic-auth/commit/42a202e6255de8db73df02eff37c0b10b24fef1a))
+* **solana:** fire in-app-browser redirect on sign and wallet switch ([#11871](https://github.com/dynamic-labs/dynamic-auth/issues/11871)) ([4e2d6b7](https://github.com/dynamic-labs/dynamic-auth/commit/4e2d6b7ac8fdef5bf7c62b8a726ecaef1c6210ec))
+* **solana:** resolve Phantom/Backpack provider collision and Backpack >=0.10.x connect hangs ([#11856](https://github.com/dynamic-labs/dynamic-auth/issues/11856)) ([#11882](https://github.com/dynamic-labs/dynamic-auth/issues/11882)) ([5784aff](https://github.com/dynamic-labs/dynamic-auth/commit/5784aff9641bbc85445fb466f3ab1d6a14331e73))
+
+## [4.92.0](https://github.com/dynamic-labs/dynamic-auth/compare/v4.91.6...v4.92.0) (2026-07-08)
+
+
+### Features
+
+* **captcha:** add Cloudflare Turnstile provider support alongside hCaptcha (v4) ([#11798](https://github.com/dynamic-labs/dynamic-auth/issues/11798)) ([114c770](https://github.com/dynamic-labs/dynamic-auth/commit/114c7702e900d8dedeebe7be867de35d11a93f31))
+
+
+### Bug Fixes
+
+* **ethereum-aa:** resolve kernel client config per wallet (v4) ([#11870](https://github.com/dynamic-labs/dynamic-auth/issues/11870)) ([1b66d79](https://github.com/dynamic-labs/dynamic-auth/commit/1b66d79b4a32b4b6de433b7536bc46e6719224c6))
+* **iframe-setup:** block dangerous URL schemes and verify sender in OPEN_URL ([#11819](https://github.com/dynamic-labs/dynamic-auth/issues/11819)) ([329b27e](https://github.com/dynamic-labs/dynamic-auth/commit/329b27e9fac825916ab227ec8cf93dc343898923))
+* improve social OAuth error messages ([#11837](https://github.com/dynamic-labs/dynamic-auth/issues/11837)) ([8e57c06](https://github.com/dynamic-labs/dynamic-auth/commit/8e57c067c5a89111a32a12fb82e190cf6c46ad67))
+* **react-native-extension:** reject path traversal in downloadFile fileName ([#11816](https://github.com/dynamic-labs/dynamic-auth/issues/11816)) ([9367a56](https://github.com/dynamic-labs/dynamic-auth/commit/9367a56b6daa853d7f7e7f5534261bc68825b239))
+* **sdk-react-core:** display exactly the bytes signed in personal_sign preview ([#11818](https://github.com/dynamic-labs/dynamic-auth/issues/11818)) ([30b9382](https://github.com/dynamic-labs/dynamic-auth/commit/30b93829122f00060cb484aef09a03294c03f651))
+
 ### [4.91.6](https://github.com/dynamic-labs/dynamic-auth/compare/v4.91.5...v4.91.6) (2026-07-03)
 
 

package/package.cjs

@@ -3,6 +3,6 @@
 
 Object.defineProperty(exports, '__esModule', { value: true });
 
-var version = "4.91.6";
+var version = "4.92.1";
 
 exports.version = version;

package/package.js

@@ -1,4 +1,4 @@
 'use client'
-var version = "4.91.6";
+var version = "4.92.1";
 
 export { version };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@dynamic-labs/ethereum",
-  "version": "4.91.6",
+  "version": "4.92.1",
   "description": "A React SDK for implementing wallet web3 authentication and authorization to your website.",
   "author": "Dynamic Labs, Inc.",
   "license": "MIT",
@@ -19,21 +19,21 @@
   "homepage": "https://www.dynamic.xyz/",
   "dependencies": {
     "@coinbase/wallet-sdk": "4.3.7",
-    "@dynamic-labs-connectors/base-account-evm": "4.6.9",
-    "@dynamic-labs-connectors/metamask-evm": "4.6.9",
+    "@dynamic-labs-connectors/base-account-evm": "4.6.10",
+    "@dynamic-labs-connectors/metamask-evm": "4.6.10",
     "@walletconnect/ethereum-provider": "2.23.2",
     "eventemitter3": "5.0.1",
     "buffer": "6.0.3",
-    "@dynamic-labs/assert-package-version": "4.91.6",
-    "@dynamic-labs/embedded-wallet-evm": "4.91.6",
-    "@dynamic-labs/ethereum-core": "4.91.6",
-    "@dynamic-labs/logger": "4.91.6",
-    "@dynamic-labs/rpc-providers": "4.91.6",
-    "@dynamic-labs/types": "4.91.6",
-    "@dynamic-labs/utils": "4.91.6",
-    "@dynamic-labs/waas-evm": "4.91.6",
-    "@dynamic-labs/wallet-book": "4.91.6",
-    "@dynamic-labs/wallet-connector-core": "4.91.6"
+    "@dynamic-labs/assert-package-version": "4.92.1",
+    "@dynamic-labs/embedded-wallet-evm": "4.92.1",
+    "@dynamic-labs/ethereum-core": "4.92.1",
+    "@dynamic-labs/logger": "4.92.1",
+    "@dynamic-labs/rpc-providers": "4.92.1",
+    "@dynamic-labs/types": "4.92.1",
+    "@dynamic-labs/utils": "4.92.1",
+    "@dynamic-labs/waas-evm": "4.92.1",
+    "@dynamic-labs/wallet-book": "4.92.1",
+    "@dynamic-labs/wallet-connector-core": "4.92.1"
   },
   "peerDependencies": {
     "viem": "^2.45.3"

package/src/EthereumWalletConnectors.cjs

@@ -7,8 +7,8 @@ var baseAccountEvm = require('@dynamic-labs-connectors/base-account-evm');
 var metamaskEvm = require('@dynamic-labs-connectors/metamask-evm');
 var embeddedWalletEvm = require('@dynamic-labs/embedded-wallet-evm');
 var waasEvm = require('@dynamic-labs/waas-evm');
-require('../_virtual/_tslib.cjs');
 require('@dynamic-labs/utils');
+require('../_virtual/_tslib.cjs');
 require('@dynamic-labs/ethereum-core');
 require('viem');
 require('@dynamic-labs/wallet-book');

package/src/EthereumWalletConnectors.js

@@ -3,8 +3,8 @@ import { createBaseAccountConnector } from '@dynamic-labs-connectors/base-accoun
 import { MetaMaskEvmWalletConnectors } from '@dynamic-labs-connectors/metamask-evm';
 import { TurnkeyEVMWalletConnectors } from '@dynamic-labs/embedded-wallet-evm';
 import { DynamicWaasEVMConnectors } from '@dynamic-labs/waas-evm';
-import '../_virtual/_tslib.js';
 import '@dynamic-labs/utils';
+import '../_virtual/_tslib.js';
 import '@dynamic-labs/ethereum-core';
 import 'viem';
 import '@dynamic-labs/wallet-book';

package/src/injected/InjectedWalletBase.cjs

@@ -5,6 +5,7 @@ Object.defineProperty(exports, '__esModule', { value: true });
 
 var _tslib = require('../../_virtual/_tslib.cjs');
 var ethereumCore = require('@dynamic-labs/ethereum-core');
+var utils = require('@dynamic-labs/utils');
 var ethProviderHelper = require('../ethProviderHelper.cjs');
 var logger = require('../utils/logger.cjs');
 var WalletConnectConnector = require('../walletConnect/WalletConnectConnector/WalletConnectConnector.cjs');
@@ -72,9 +73,40 @@ class InjectedWalletBase extends ethereumCore.EthereumWalletConnector {
             yield this.getAddress();
         });
     }
+    getSigner() {
+        const _super = Object.create(null, {
+            getSigner: { get: () => super.getSigner }
+        });
+        return _tslib.__awaiter(this, void 0, void 0, function* () {
+            const signer = yield _super.getSigner.call(this);
+            if (signer) {
+                return signer;
+            }
+            // On mobile web (outside the wallet's in-app browser) there is no injected
+            // provider for these wallets, so signing silently returns nothing. Redirect
+            // into the wallet's in-app browser so signing can continue there, or throw a
+            // clear error when neither a provider nor a redirect is possible.
+            if (utils.isMobile() && !this.isInstalledOnBrowser()) {
+                const didOpenInAppBrowser = this.openInAppBrowserIfRequired();
+                if (!didOpenInAppBrowser) {
+                    throw new utils.WalletRequiresInAppBrowserError(this.name);
+                }
+            }
+            return undefined;
+        });
+    }
     signMessage(messageToSign) {
         return _tslib.__awaiter(this, void 0, void 0, function* () {
             var _a;
+            // Trigger the in-app-browser redirect up front (mirroring getAddress) so
+            // that on mobile web an in-app-browser wallet redirects into its in-app
+            // browser instead of silently signing nothing. Delegating to the helper
+            // afterwards keeps signing to a single address request (no duplicate wallet
+            // prompt), since the helper resolves the address itself.
+            const didOpenInAppBrowser = this.openInAppBrowserIfRequired();
+            if (didOpenInAppBrowser) {
+                return undefined;
+            }
             return (_a = this.ethProviderHelper) === null || _a === void 0 ? void 0 : _a.signMessage(messageToSign);
         });
     }