Skip to content

chore: bump Ledger Bridge to 11.2.0 and Keyring API to 21.4.0#25660

Merged
gantunesr merged 8 commits intomainfrom
gar/chore/bump-ledger-keyring/11.2.0
Feb 6, 2026
Merged

chore: bump Ledger Bridge to 11.2.0 and Keyring API to 21.4.0#25660
gantunesr merged 8 commits intomainfrom
gar/chore/bump-ledger-keyring/11.2.0

Conversation

@gantunesr
Copy link
Copy Markdown
Member

@gantunesr gantunesr commented Feb 4, 2026

Description

  • Bump @metamask/eth-ledger-bridge-keyring to 11.2.0
  • Bump @metamask/keyring-api to 21.4.0

Changelog

CHANGELOG entry: null

Related issues

Fixes: https://consensyssoftware.atlassian.net/browse/MUL-1440

Manual testing steps

  1. Using the MetaMask test Dapp, ensure that the following operations are successful,
    • Legacy send
    • 1559 send
    • Personal sign
    • Typed data V4

Screenshots/Recordings

Not applicable

Pre-merge author checklist

Pre-merge reviewer checklist

  • I've manually tested the PR (e.g. pull and build branch, run the app, test code being changed).
  • I confirm that this PR addresses all acceptance criteria described in the ticket it closes and includes the necessary testing evidence such as recordings and or screenshots.

Note

Medium Risk
Dependency-only change, but it touches hardware wallet/keyring packages where regressions could affect Ledger interactions or signing flows.

Overview
Bumps keyring-related dependencies to pick up upstream changes: @metamask/eth-ledger-bridge-keyring 11.1.011.2.0 and @metamask/keyring-api 21.3.021.4.0.

Updates yarn.lock accordingly, including refreshed transitive dependency versions (notably @metamask/keyring-utils 3.1.03.2.0 and new keyring-api dependencies like uuid/async-mutex).

Written by Cursor Bugbot for commit fafda4a. This will update automatically on new commits. Configure here.

@socket-security
Copy link
Copy Markdown

socket-security bot commented Feb 4, 2026

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Updatednpm/​@​metamask/​eth-ledger-bridge-keyring@​11.1.0 ⏵ 11.2.099 +110087 +293 -2100
Updatednpm/​@​metamask/​keyring-api@​21.3.0 ⏵ 21.4.09910010094 +550

View full report

@socket-security
Copy link
Copy Markdown

socket-security bot commented Feb 4, 2026

All alerts resolved. Learn more about Socket for GitHub.

This PR previously contained dependency changes with security issues that have been resolved, removed, or ignored.

Ignoring alerts on:

  • npm/@metamask/eth-ledger-bridge-keyring@11.2.0

View full report

@gantunesr gantunesr marked this pull request as ready for review February 4, 2026 17:30
@gantunesr
Copy link
Copy Markdown
Member Author

@SocketSecurity ignore npm/@metamask/eth-ledger-bridge-keyring@11.2.0

@gantunesr gantunesr changed the title chore: bump @metamask/eth-ledger-bridge-keyring to 11.2.0 chore: bump Ledger Bridge to 11.2.0 and Keyring API to 21.4.0 Feb 6, 2026
@github-actions
Copy link
Copy Markdown
Contributor

github-actions bot commented Feb 6, 2026

🔍 Smart E2E Test Selection

  • Selected E2E tags: SmokeAccounts, SmokeConfirmations, SmokeNetworkExpansion, FlaskBuildTests
  • Selected Performance tags: None (no tests recommended)
  • Risk Level: medium
  • AI Confidence: 75%
click to see 🤖 AI reasoning details

E2E Test Selection:
This PR updates two core keyring-related packages:

  1. @metamask/eth-ledger-bridge-keyring (11.1.0 → 11.2.0): Ledger hardware wallet integration package used in app/core/Ledger/Ledger.ts and app/core/Engine/controllers/keyring-controller-init.ts. The update adds new dependencies for keyring-api and keyring-utils.

  2. @metamask/keyring-api (^21.3.0 → ^21.4.0): Widely used package providing account types (EthAccountType, SolAccountType), scope types (EthScope, SolScope, BtcScope, TrxScope), and utility functions (isEvmAccountType). Used across 50+ files including confirmations, network selection, multi-chain features, and account management.

Selected tags rationale:

  • SmokeAccounts: Directly tests account management, SRP flows, and keyring functionality. The keyring packages are core to account creation and management.
  • SmokeConfirmations: Tests transaction and signature confirmations which rely on keyring for signing operations. The keyring-api update includes new signing-related dependencies.
  • SmokeNetworkExpansion: Tests multi-chain support including Solana which uses SolAccountType and SolScope from keyring-api extensively.
  • FlaskBuildTests: Tests Snaps functionality which uses keyring for snap account management and key derivation (BIP-32/BIP-44).

While these are minor version bumps (typically backward-compatible), the wide usage of keyring-api across the codebase and the addition of new dependencies in the update warrant testing core wallet functionality.

Performance Test Selection:
These dependency updates are for keyring packages which handle account management and signing operations. They don't directly impact UI rendering performance, data loading, or app startup times. The changes are internal to the keyring layer and don't affect the performance-critical paths like account list rendering, login flow, swap execution, or asset loading. No performance tests are needed for these package version bumps.

View GitHub Actions results

@sonarqubecloud
Copy link
Copy Markdown

sonarqubecloud bot commented Feb 6, 2026

@gantunesr gantunesr added this pull request to the merge queue Feb 6, 2026
Merged via the queue into main with commit e2aea58 Feb 6, 2026
105 checks passed
@gantunesr gantunesr deleted the gar/chore/bump-ledger-keyring/11.2.0 branch February 6, 2026 14:24
@github-actions github-actions bot locked and limited conversation to collaborators Feb 6, 2026
@metamaskbot metamaskbot added the release-7.66.0 Issue or pull request that will be included in release 7.66.0 label Feb 6, 2026
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Labels

release-7.66.0 Issue or pull request that will be included in release 7.66.0 size-XS team-accounts-framework Accounts team

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants