@exodus/hw-ledger 3.6.0 → 3.7.0

package/CHANGELOG.md

@@ -3,6 +3,18 @@
 All notable changes to this project will be documented in this file.
 See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.
 
+## [3.7.0](https://github.com/ExodusMovement/exodus-hydra/compare/@exodus/hw-ledger@3.6.1...@exodus/hw-ledger@3.7.0) (2025-09-16)
+
+### Features
+
+- feat: update bip322-js and bitcoinjs (#13812)
+
+## [3.6.1](https://github.com/ExodusMovement/exodus-hydra/compare/@exodus/hw-ledger@3.6.0...@exodus/hw-ledger@3.6.1) (2025-09-01)
+
+### Bug Fixes
+
+- fix: only sign for required wallet policies (#13720)
+
 ## [3.6.0](https://github.com/ExodusMovement/exodus-hydra/compare/@exodus/hw-ledger@3.5.0...@exodus/hw-ledger@3.6.0) (2025-07-18)
 
 ### Features

package/lib/module/assets/bitcoin.js

@@ -52,11 +52,11 @@ async function createHandler(transport, walletPolicyAtom) {
             });
             derivationPathToPublicKeyMap[derivationPath] = publicKey;
         }
-        tagPsbtWithDerivationPaths(psbt, fpr, derivationPathToPublicKeyMap, addressToDerivationPathMap);
+        const derivationPathsToSignFor = tagPsbtWithDerivationPaths(psbt, fpr, derivationPathToPublicKeyMap, addressToDerivationPathMap);
         addDummyInputs(psbt);
         assertPsbtOnlyHasAllowedDerivationPaths(psbt, fpr, params.derivationPaths);
+        const walletPolicies = await derivationPathsToWalletPolicy(fpr, app, derivationPathsToSignFor, params.multisigData);
         const signatures = [];
-        const walletPolicies = await derivationPathsToWalletPolicy(fpr, app, params.derivationPaths, params.multisigData);
         for (const walletPolicy of walletPolicies) {
             const hmac = params.multisigData ? await registerWalletPolicy(walletPolicy) : null;
             const _signatures = await app.signPsbt(psbt.serialize(), walletPolicy, hmac);

package/lib/module/assets/utils/psbt.d.ts

@@ -2,7 +2,7 @@ import type { PsbtV2 } from '@exodus/ledger-bitcoin';
 import { DefaultWalletPolicy, WalletPolicy } from '@exodus/ledger-bitcoin';
 import type { MultisigData } from 'libraries/hw-common/lib';
 export declare function assertPsbtOnlyHasAllowedDerivationPaths(psbt: PsbtV2, masterFingerprint: string, derivationPaths: string[]): void;
-export declare function tagPsbtWithDerivationPaths(psbt: PsbtV2, masterFingerprint: string, derivationPathToPublicKeyMap: Record<string, Buffer>, addressToDerivationPathMap?: Record<string, string>): void;
+export declare function tagPsbtWithDerivationPaths(psbt: PsbtV2, masterFingerprint: string, derivationPathToPublicKeyMap: Record<string, Buffer>, addressToDerivationPathMap?: Record<string, string>): string[];
 export declare const getWalletPolicy: (fpr: string, xpub: string, purpose: string, coin: string, account: string) => DefaultWalletPolicy;
 export declare const getMultisigWalletPolicy: (fpr: string, xpub: string, purpose: string, coin: string, account: string, multisigData: MultisigData) => WalletPolicy;
 export declare function derivationPathsToWalletPolicy(fpr: string, app: any, derivationPaths: string[], multisigData?: MultisigData): Promise<WalletPolicy[]>;

package/lib/module/assets/utils/psbt.js

@@ -34,6 +34,7 @@ function assertAllowedDerivation(bip32Derivation, masterFingerprint, derivationP
 export function tagPsbtWithDerivationPaths(psbt, masterFingerprint, derivationPathToPublicKeyMap, addressToDerivationPathMap) {
     const masterFingerprintBuffer = Buffer.from(masterFingerprint, 'hex');
     const scriptPubKeyToDerivationPathMap = computeScriptPubKeyToDerivationPathMap(derivationPathToPublicKeyMap);
+    const derivationPathsToSignFor = [];
     for (let inputIndex = 0; inputIndex < psbt.getGlobalInputCount(); inputIndex++) {
         const witnessUtxo = psbt.getInputWitnessUtxo(inputIndex);
         const nonWitnessUtxo = psbt.getInputNonWitnessUtxo(inputIndex);
@@ -67,6 +68,7 @@ export function tagPsbtWithDerivationPaths(psbt, masterFingerprint, derivationPa
             else {
                 psbt.setInputBip32Derivation(inputIndex, publicKey, masterFingerprintBuffer, derivationPathNumerical);
             }
+            derivationPathsToSignFor.push(derivationPath);
         }
     }
     for (let outputIndex = 0; outputIndex < psbt.getGlobalOutputCount(); outputIndex++) {
@@ -91,6 +93,7 @@ export function tagPsbtWithDerivationPaths(psbt, masterFingerprint, derivationPa
             }
         }
     }
+    return derivationPathsToSignFor;
 }
 function computeScriptPubKeyToDerivationPathMap(derivationPathToPublicKeyMap) {
     return Object.entries(derivationPathToPublicKeyMap).reduce((acc, [derivationPath, publicKey]) => {

package/lib/module/discovery.js

@@ -23,8 +23,9 @@ export class LedgerDiscovery {
             Object.entries(transportsFactories).every(([transportName, transportFactory]) => ['usb', 'bluetooth', 'tcp'].includes(transportName) &&
                 transportFactory !== undefined &&
                 typeof transportFactory.list === 'function' &&
-                typeof transportFactory.open === 'function')))
+                typeof transportFactory.open === 'function'))) {
             throw new UnknownTransportError();
+        }
         if (!Number.isInteger(config.bluetoothScannerTimeout)) {
             throw new TypeError(`Invalid bluetoothScannerTimeout passed through config`);
         }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@exodus/hw-ledger",
-  "version": "3.6.0",
+  "version": "3.7.0",
   "description": "The ledger module",
   "author": "Exodus Movement, Inc.",
   "repository": {
@@ -31,8 +31,8 @@
   },
   "dependencies": {
     "@exodus/atoms": "^9.0.0",
-    "@exodus/bip322-js": "^2.0.0",
-    "@exodus/bitcoinjs": "^1.1.0",
+    "@exodus/bip322-js": "^3.1.0",
+    "@exodus/bitcoinjs": "^2.0.0",
     "@exodus/crypto": "^1.0.0-rc.14",
     "@exodus/ethereumjs": "^1.5.0",
     "@exodus/ethersproject-transactions": "^5.4.2-exodus.0",
@@ -66,5 +66,5 @@
   "publishConfig": {
     "access": "public"
   },
-  "gitHead": "d633626e2234250851c7935c8790b64280c5d682"
+  "gitHead": "514fc4377ffdbde51aecf2e622d312d6f87e6fb6"
 }