@dynamic-labs/waas 4.100.3 → 4.100.5

package/CHANGELOG.md

@@ -1,4 +1,21 @@
 
+### [4.100.5](https://github.com/dynamic-labs/dynamic-auth/compare/v4.100.4...v4.100.5) (2026-10-14)
+
+
+### Bug Fixes
+
+* **react-native:** fall back to a TEE-backed key when StrongBox key generation fails on Android [v4] ([#12485](https://github.com/dynamic-labs/dynamic-auth/issues/12485)) ([54dcc96](https://github.com/dynamic-labs/dynamic-auth/commit/54dcc9651cdce9b8e5bb509087ffddb627fd9d83))
+
+### [4.100.4](https://github.com/dynamic-labs/dynamic-auth/compare/v4.100.3...v4.100.4) (2026-10-08)
+
+
+### Bug Fixes
+
+* **embedded-webview:** connect Coinbase Wallet via a real popup window [V4 backport] ([#12429](https://github.com/dynamic-labs/dynamic-auth/issues/12429)) ([82368fd](https://github.com/dynamic-labs/dynamic-auth/commit/82368fd41791e3a6e2ffec4dc6a0b401a7bec82f))
+* **rpc-providers:** skip networks without an RPC URL instead of throwing [v4 backport] ([#12431](https://github.com/dynamic-labs/dynamic-auth/issues/12431)) ([95f05c5](https://github.com/dynamic-labs/dynamic-auth/commit/95f05c5c0c5195cc02f4dbc9969e90fc2e41eae0))
+* unblock v4 CI (Playwright password/sign-message tests, shell-quote critical advisory) [V4 backport] ([#12475](https://github.com/dynamic-labs/dynamic-auth/issues/12475)) ([c4ad2ba](https://github.com/dynamic-labs/dynamic-auth/commit/c4ad2ba52a5d329a6b324b27c4ccfb3b48970223)), closes [#12468](https://github.com/dynamic-labs/dynamic-auth/issues/12468) [#1936](https://github.com/dynamic-labs/dynamic-auth/issues/1936) [#12476](https://github.com/dynamic-labs/dynamic-auth/issues/12476)
+* **waas:** fall back when crypto.randomUUID is unavailable (v4 backport) ([#12436](https://github.com/dynamic-labs/dynamic-auth/issues/12436)) ([c72781e](https://github.com/dynamic-labs/dynamic-auth/commit/c72781ebf4269b356a98f3fc167bbd643a601bfd))
+
 ### [4.100.3](https://github.com/dynamic-labs/dynamic-auth/compare/v4.100.2...v4.100.3) (2026-09-18)
 
 

package/package.cjs

@@ -3,6 +3,6 @@
 
 Object.defineProperty(exports, '__esModule', { value: true });
 
-var version = "4.100.3";
+var version = "4.100.5";
 
 exports.version = version;

package/package.js

@@ -1,4 +1,4 @@
 'use client'
-var version = "4.100.3";
+var version = "4.100.5";
 
 export { version };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@dynamic-labs/waas",
-  "version": "4.100.3",
+  "version": "4.100.5",
   "type": "module",
   "author": "Dynamic Labs, Inc.",
   "license": "MIT",
@@ -16,19 +16,19 @@
     "./package.json": "./package.json"
   },
   "dependencies": {
-    "@dynamic-labs-sdk/client": "1.33.3",
-    "@dynamic-labs/assert-package-version": "4.100.3",
-    "@dynamic-labs/sdk-api-core": "0.40.0",
-    "@dynamic-labs-wallet/browser-wallet-client": "1.1.10",
-    "@dynamic-labs-wallet/core": "1.1.10",
+    "@dynamic-labs-sdk/client": "1.39.1",
+    "@dynamic-labs/assert-package-version": "4.100.5",
+    "@dynamic-labs/sdk-api-core": "0.92.0",
+    "@dynamic-labs-wallet/browser-wallet-client": "1.1.33",
+    "@dynamic-labs-wallet/core": "1.1.33",
     "@dynamic-labs-wallet/forward-mpc-client": "2.0.2",
-    "@dynamic-labs/ethereum-core": "4.100.3",
-    "@dynamic-labs/logger": "4.100.3",
-    "@dynamic-labs/solana-core": "4.100.3",
-    "@dynamic-labs/sui-core": "4.100.3",
-    "@dynamic-labs/utils": "4.100.3",
-    "@dynamic-labs/wallet-book": "4.100.3",
-    "@dynamic-labs/wallet-connector-core": "4.100.3"
+    "@dynamic-labs/ethereum-core": "4.100.5",
+    "@dynamic-labs/logger": "4.100.5",
+    "@dynamic-labs/solana-core": "4.100.5",
+    "@dynamic-labs/sui-core": "4.100.5",
+    "@dynamic-labs/utils": "4.100.5",
+    "@dynamic-labs/wallet-book": "4.100.5",
+    "@dynamic-labs/wallet-connector-core": "4.100.5"
   },
   "peerDependencies": {}
 }

package/src/DynamicWaasMixin.cjs

@@ -11,6 +11,7 @@ var _package = require('../package.cjs');
 var constants = require('../utils/constants.cjs');
 var createWaasClientSecureStorage = require('../utils/createWaasClientSecureStorage.cjs');
 var instrumentation = require('../utils/instrumentation.cjs');
+var generateUUID = require('../utils/generateUUID.cjs');
 var tokenHasPendingAuthScope = require('../utils/tokenHasPendingAuthScope.cjs');
 
 // Fallback error code used when a thrown value carries no code, or when
@@ -643,7 +644,7 @@ const withDynamicWaas = (BaseClass) => {
                 }
                 const wallets = yield walletClient.getAllWallets();
                 const encryptedWallets = wallets.filter((w) => { var _a; return (_a = w.clientKeySharesBackupInfo) === null || _a === void 0 ? void 0 : _a.passwordEncrypted; });
-                const passwordUpdateBatchId = crypto.randomUUID();
+                const passwordUpdateBatchId = generateUUID.generateUUID();
                 yield Promise.all(encryptedWallets.map((wallet) => _tslib.__awaiter(this, void 0, void 0, function* () {
                     var _b, _c;
                     const signedSessionId = yield this.getSignedSessionId();
@@ -669,7 +670,7 @@ const withDynamicWaas = (BaseClass) => {
                     throw new utils.DynamicError('Signed session ID is required', 'signed_session_id_is_required');
                 }
                 const wallets = yield walletClient.getAllWallets();
-                const passwordUpdateBatchId = crypto.randomUUID();
+                const passwordUpdateBatchId = generateUUID.generateUUID();
                 yield Promise.all(wallets.map((wallet) => _tslib.__awaiter(this, void 0, void 0, function* () {
                     var _b, _c;
                     const signedSessionId = yield this.getSignedSessionId();

package/src/DynamicWaasMixin.js

@@ -7,6 +7,7 @@ import { version } from '../package.js';
 import { DEFAULT_BASE_API_URL, DEFAULT_BASE_MPC_RELAY_API_URL } from '../utils/constants.js';
 import { createWaasClientSecureStorage } from '../utils/createWaasClientSecureStorage.js';
 import { InstrumentationTimer } from '../utils/instrumentation.js';
+import { generateUUID } from '../utils/generateUUID.js';
 import { tokenHasPendingAuthScope } from '../utils/tokenHasPendingAuthScope.js';
 
 // Fallback error code used when a thrown value carries no code, or when
@@ -639,7 +640,7 @@ const withDynamicWaas = (BaseClass) => {
                 }
                 const wallets = yield walletClient.getAllWallets();
                 const encryptedWallets = wallets.filter((w) => { var _a; return (_a = w.clientKeySharesBackupInfo) === null || _a === void 0 ? void 0 : _a.passwordEncrypted; });
-                const passwordUpdateBatchId = crypto.randomUUID();
+                const passwordUpdateBatchId = generateUUID();
                 yield Promise.all(encryptedWallets.map((wallet) => __awaiter(this, void 0, void 0, function* () {
                     var _b, _c;
                     const signedSessionId = yield this.getSignedSessionId();
@@ -665,7 +666,7 @@ const withDynamicWaas = (BaseClass) => {
                     throw new DynamicError('Signed session ID is required', 'signed_session_id_is_required');
                 }
                 const wallets = yield walletClient.getAllWallets();
-                const passwordUpdateBatchId = crypto.randomUUID();
+                const passwordUpdateBatchId = generateUUID();
                 yield Promise.all(wallets.map((wallet) => __awaiter(this, void 0, void 0, function* () {
                     var _b, _c;
                     const signedSessionId = yield this.getSignedSessionId();

package/utils/generateUUID.cjs

@@ -0,0 +1,23 @@
+'use client'
+'use strict';
+
+Object.defineProperty(exports, '__esModule', { value: true });
+
+// crypto.randomUUID is unavailable on older webviews (< Chrome 92) and in
+// non-secure contexts; fall back to a getRandomValues-based v4 UUID there.
+const generateUUID = () => {
+    const cryptoProvider = globalThis.crypto;
+    if (typeof (cryptoProvider === null || cryptoProvider === void 0 ? void 0 : cryptoProvider.randomUUID) === 'function') {
+        return cryptoProvider.randomUUID();
+    }
+    if (typeof (cryptoProvider === null || cryptoProvider === void 0 ? void 0 : cryptoProvider.getRandomValues) !== 'function') {
+        throw new TypeError('Secure UUID generation is unavailable');
+    }
+    const bytes = cryptoProvider.getRandomValues(new Uint8Array(16));
+    bytes[6] = (bytes[6] & 0x0f) | 0x40;
+    bytes[8] = (bytes[8] & 0x3f) | 0x80;
+    const hex = Array.from(bytes, (b) => b.toString(16).padStart(2, '0')).join('');
+    return `${hex.slice(0, 8)}-${hex.slice(8, 12)}-${hex.slice(12, 16)}-${hex.slice(16, 20)}-${hex.slice(20)}`;
+};
+
+exports.generateUUID = generateUUID;

package/utils/generateUUID.d.ts

@@ -0,0 +1 @@
+export declare const generateUUID: () => string;

package/utils/generateUUID.js

@@ -0,0 +1,19 @@
+'use client'
+// crypto.randomUUID is unavailable on older webviews (< Chrome 92) and in
+// non-secure contexts; fall back to a getRandomValues-based v4 UUID there.
+const generateUUID = () => {
+    const cryptoProvider = globalThis.crypto;
+    if (typeof (cryptoProvider === null || cryptoProvider === void 0 ? void 0 : cryptoProvider.randomUUID) === 'function') {
+        return cryptoProvider.randomUUID();
+    }
+    if (typeof (cryptoProvider === null || cryptoProvider === void 0 ? void 0 : cryptoProvider.getRandomValues) !== 'function') {
+        throw new TypeError('Secure UUID generation is unavailable');
+    }
+    const bytes = cryptoProvider.getRandomValues(new Uint8Array(16));
+    bytes[6] = (bytes[6] & 0x0f) | 0x40;
+    bytes[8] = (bytes[8] & 0x3f) | 0x80;
+    const hex = Array.from(bytes, (b) => b.toString(16).padStart(2, '0')).join('');
+    return `${hex.slice(0, 8)}-${hex.slice(8, 12)}-${hex.slice(12, 16)}-${hex.slice(16, 20)}-${hex.slice(20)}`;
+};
+
+export { generateUUID };