chore(deps): update wallet dependencies - autoclosed by renovate[bot] · Pull Request #443 · TxnLab/use-wallet

renovate · 2026-08-10T05:47:59Z

This PR contains the following updates:

Package	Change	Age	Confidence
@walletconnect/sign-client (source)	`^2.23.4` → `^2.23.10`
@walletconnect/sign-client (source)	`2.23.4` → `2.23.10`
@walletconnect/types (source)	`2.23.4` → `2.23.10`
lute-connect	`^1.6.3` → `^1.7.0`
lute-connect	`1.6.3` → `1.7.0`

WalletConnect/walletconnect-monorepo (@walletconnect/sign-client)

#7252 cd32ff1 Thanks @ganchoradkov! - Add TVF extraction for Canton's canton_prepareSignExecute.
#7253 63ff999 Thanks @ganchoradkov! - Deprecate the authenticate method on Sign Client. It is marked @deprecated in the type definitions and logs a runtime warning when called. Use connect()'s authentication parameter instead to establish an authenticated session.
#7255 3233b47 Thanks @ganchoradkov! - Reject plaintext TYPE_2 envelopes delivered over the relay transport. TYPE_2 payloads are now only handled in link mode in the sign engine (onRelayMessage) and pairing (registerRelayerEvents) relay handlers.
#7254 4af4524 Thanks @ganchoradkov! - Enforce controller authorization on session update. Incoming wc_sessionUpdate requests are now rejected (UNAUTHORIZED_UPDATE_REQUEST) unless the sending peer is the session controller, and the public update() method now throws when called by a non-controller. This prevents a non-controller peer (e.g. a dApp using a custom SDK) from mutating a session's namespaces.
Updated dependencies [cd32ff1, 63ff999, 3233b47, 3ea740e, da98172]:
- @walletconnect/utils@2.23.10
- @walletconnect/types@2.23.10
- @walletconnect/core@2.23.10

#7201 6e4a34d Thanks @ganchoradkov! - fix: clean up orphaned subscriber topics to prevent indefinite persistence
- Fix onSessionSettleResponse error path to fully clean up session topic (unsubscribe, delete keys, remove expiry)
- Fix proposalExpireHandler to unsubscribe session topic when proposal expires after wallet approval
- Fix authenticate() to unsubscribe previous auth response topic before subscribing to a new one
- Add heartbeat-based reconciliation that removes subscriber topics not associated with any active session, pairing, or pending session
Updated dependencies [431e43b, bb4869f, ed0fa42]:
- @walletconnect/core@2.23.9
- @walletconnect/utils@2.23.9
- @walletconnect/types@2.23.9

#7172 a09c7fe Thanks @ganchoradkov! - Updated the default session request expiry to 15 minutes
Updated dependencies [0b699db]:
- @walletconnect/utils@2.23.7
- @walletconnect/core@2.23.7
- @walletconnect/types@2.23.7

WalletConnect/walletconnect-monorepo (@walletconnect/types)

#7253 63ff999 Thanks @ganchoradkov! - Deprecate the authenticate method on Sign Client. It is marked @deprecated in the type definitions and logs a runtime warning when called. Use connect()'s authentication parameter instead to establish an authenticated session.