Merge branch 'master' into WCN-187-passkey-types

Author: derranW26

.github/workflows/npmjs-release.yml

@@ -31,10 +31,6 @@ jobs:
       last-release-sha: ${{ steps.get-release-info.outputs.last-release-sha }}
       current-master-sha: ${{ steps.get-release-info.outputs.current-master-sha }}
       commits-since-release: ${{ steps.get-release-info.outputs.commits-since-release }}
-      express-version: ${{ steps.compute-express-git-tag.outputs.version }}
-      express-git-tag: ${{ steps.compute-express-git-tag.outputs.git-tag }}
-      express-git-sha: ${{ steps.compute-express-git-sha.outputs.git-sha }}
-      express-docker-exists: ${{ steps.check-docker-image.outputs.express-docker-exists }}
     steps:
       - name: Checkout repository
         uses: actions/checkout@v6
@@ -113,95 +109,6 @@ jobs:
 
           echo "" >> "$GITHUB_STEP_SUMMARY"
 
-      - name: Checkout rel/latest branch
-        if: inputs.dry-run == false
-        uses: actions/checkout@v6
-        with:
-          ref: rel/latest
-
-      - name: Compute express target version and tag
-        if: inputs.dry-run == false
-        id: compute-express-git-tag
-        run: |
-          VERSION=$(jq -r '.version' ./modules/express/package.json)
-          TAG="@bitgo/express@$VERSION"
-          echo "Current latest express version: $VERSION"
-          echo "Expected latest express git tag: $TAG"
-          echo "version=$VERSION" >> "$GITHUB_OUTPUT"
-          echo "git-tag=$TAG" >> "$GITHUB_OUTPUT"
-
-      - name: Checkout express target git tag
-        if: inputs.dry-run == false
-        uses: actions/checkout@v6
-        with:
-          ref: ${{ steps.compute-express-git-tag.outputs.git-tag }}
-          fetch-depth: 2
-
-      - name: Parse express release information
-        if: inputs.dry-run == false
-        id: compute-express-git-sha
-        run: |
-          GIT_SHA=$(git rev-parse HEAD)
-          echo "Git SHA: $GIT_SHA"
-          echo "git-sha=$GIT_SHA" >> "$GITHUB_OUTPUT"
-
-      - name: Sanity Check Express Git Tag
-        if: inputs.dry-run == false
-        run: |
-          # Since git tags can be moved, we need to ensure the tag we're releasing
-          # actually corresponds to a version bump in package.json
-          CURRENT_VERSION="${{ steps.compute-express-git-tag.outputs.version }}"
-          PREVIOUS_VERSION=$(git show HEAD~1:./modules/express/package.json | jq -r '.version')
-
-          echo "Current version: $CURRENT_VERSION"
-          echo "Previous version: $PREVIOUS_VERSION"
-
-          if [ "$CURRENT_VERSION" == "$PREVIOUS_VERSION" ]; then
-            echo "::error::Express version bump does not line up with git tag location."
-            echo "::error::This suggests the git tag may have been moved."
-            exit 1
-          fi
-
-          echo "✅ Express version bump lines up with git tag"
-
-      - name: Check if Docker image already exists in Docker Hub
-        if: inputs.dry-run == false
-        id: check-docker-image
-        run: |
-          VERSION="${{ steps.compute-express-git-tag.outputs.version }}"
-          if curl -s -f "https://hub.docker.com/v2/repositories/bitgo/express/tags/$VERSION" > /dev/null; then
-            echo "⚠️ Docker image bitgo/express:$VERSION already exists in Docker Hub — Docker publish will be skipped"
-            echo "express-docker-exists=true" >> "$GITHUB_OUTPUT"
-          else
-            echo "✅ Docker image bitgo/express:$VERSION does not exist in Docker Hub"
-            echo "express-docker-exists=false" >> "$GITHUB_OUTPUT"
-          fi
-
-      - name: Summarise Docker image status
-        if: inputs.dry-run == false
-        run: |
-          if [ "${{ steps.check-docker-image.outputs.express-docker-exists }}" == "true" ]; then
-            echo "### ⚠️ Docker publish skipped" >> "$GITHUB_STEP_SUMMARY"
-            echo "Image \`bitgo/express:${{ steps.compute-express-git-tag.outputs.version }}\` already exists in Docker Hub." >> "$GITHUB_STEP_SUMMARY"
-            echo "The npm release will proceed normally." >> "$GITHUB_STEP_SUMMARY"
-          fi
-
-      - name: Update Express GitHub summary
-        if: inputs.dry-run == false
-        run: |
-          {
-            echo "## BitGo Express Release Information"
-            echo ""
-            echo "Express Version: ${{ steps.compute-express-git-tag.outputs.version }}"
-            echo "Git Tag: ${{ steps.compute-express-git-tag.outputs.git-tag }}"
-            echo "Commit SHA: ${{ steps.compute-express-git-sha.outputs.git-sha }}"
-            echo ""
-            echo "### Docker Images to be deployed:"
-            echo "- \`bitgo/express:latest\`"
-            echo "- \`bitgo/express:${{ steps.compute-express-git-tag.outputs.version }}\`"
-            echo ""
-          } >> "$GITHUB_STEP_SUMMARY"
-
   release-bitgojs:
     name: Release BitGoJS
     needs:
@@ -295,20 +202,112 @@ jobs:
             --title "v${{ steps.extract-version.outputs.new-version }}" \
             --notes-file "${{ steps.version-bump-summary.outputs.text-file }}"
 
+  get-express-release-context:
+    name: Get Express release context
+    if: inputs.dry-run == false
+    needs:
+      - release-bitgojs
+    runs-on: ${{ vars.BASE_RUNNER_TYPE || 'ubuntu-latest' }}
+    timeout-minutes: 10
+    outputs:
+      version: ${{ steps.compute-express-git-tag.outputs.version }}
+      git-tag: ${{ steps.compute-express-git-tag.outputs.git-tag }}
+      git-sha: ${{ steps.compute-express-git-sha.outputs.git-sha }}
+      docker-exists: ${{ steps.check-docker-image.outputs.docker-exists }}
+    steps:
+      - name: Checkout rel/latest branch
+        uses: actions/checkout@v6
+        with:
+          ref: rel/latest
+          fetch-depth: 0
+          fetch-tags: true
+
+      - name: Compute express target version and tag
+        id: compute-express-git-tag
+        run: |
+          VERSION=$(jq -r '.version' ./modules/express/package.json)
+          TAG="@bitgo/express@$VERSION"
+          echo "Current latest express version: $VERSION"
+          echo "Expected latest express git tag: $TAG"
+          echo "version=$VERSION" >> "$GITHUB_OUTPUT"
+          echo "git-tag=$TAG" >> "$GITHUB_OUTPUT"
+
+      - name: Checkout express target git tag
+        uses: actions/checkout@v6
+        with:
+          ref: ${{ steps.compute-express-git-tag.outputs.git-tag }}
+          fetch-depth: 2
+
+      - name: Parse express git SHA
+        id: compute-express-git-sha
+        run: |
+          GIT_SHA=$(git rev-parse HEAD)
+          echo "Git SHA: $GIT_SHA"
+          echo "git-sha=$GIT_SHA" >> "$GITHUB_OUTPUT"
+
+      - name: Sanity Check Express Git Tag
+        run: |
+          CURRENT_VERSION="${{ steps.compute-express-git-tag.outputs.version }}"
+          PREVIOUS_VERSION=$(git show HEAD~1:./modules/express/package.json | jq -r '.version')
+
+          echo "Current version: $CURRENT_VERSION"
+          echo "Previous version: $PREVIOUS_VERSION"
+
+          if [ "$CURRENT_VERSION" == "$PREVIOUS_VERSION" ]; then
+            echo "::error::Express version bump does not line up with git tag location."
+            echo "::error::This suggests the git tag may have been moved."
+            exit 1
+          fi
+
+          echo "✅ Express version bump lines up with git tag"
+
+      - name: Check if Docker image already exists in Docker Hub
+        id: check-docker-image
+        run: |
+          VERSION="${{ steps.compute-express-git-tag.outputs.version }}"
+          if curl -s -f "https://hub.docker.com/v2/repositories/bitgo/express/tags/$VERSION" > /dev/null; then
+            echo "⚠️ Docker image bitgo/express:$VERSION already exists — skipping publish"
+            echo "docker-exists=true" >> "$GITHUB_OUTPUT"
+          else
+            echo "✅ Docker image bitgo/express:$VERSION does not exist — will publish"
+            echo "docker-exists=false" >> "$GITHUB_OUTPUT"
+          fi
+
+      - name: Update Express GitHub summary
+        run: |
+          if [ "${{ steps.check-docker-image.outputs.docker-exists }}" == "true" ]; then
+            {
+              echo "### ⚠️ Docker publish skipped"
+              echo "Image \`bitgo/express:${{ steps.compute-express-git-tag.outputs.version }}\` already exists in Docker Hub."
+            } >> "$GITHUB_STEP_SUMMARY"
+          else
+            {
+              echo "## BitGo Express Release Information"
+              echo ""
+              echo "Express Version: ${{ steps.compute-express-git-tag.outputs.version }}"
+              echo "Git Tag: ${{ steps.compute-express-git-tag.outputs.git-tag }}"
+              echo "Commit SHA: ${{ steps.compute-express-git-sha.outputs.git-sha }}"
+              echo ""
+              echo "### Docker Images to be deployed:"
+              echo "- \`bitgo/express:latest\`"
+              echo "- \`bitgo/express:${{ steps.compute-express-git-tag.outputs.version }}\`"
+              echo ""
+            } >> "$GITHUB_STEP_SUMMARY"
+          fi
+
   publish-express-to-docker-hub:
     name: Publish Express To Docker Hub
-    if: inputs.dry-run == false && needs.get-release-context.outputs.express-docker-exists != 'true'
+    if: needs.get-express-release-context.outputs.docker-exists != 'true'
     needs:
-      - get-release-context
-      - release-bitgojs
+      - get-express-release-context
     runs-on: ${{ vars.BASE_RUNNER_TYPE || 'ubuntu-latest' }}
     timeout-minutes: 40
     environment: bitgo-express
     steps:
       - name: Checkout BitGoJS repository
         uses: actions/checkout@v6
         with:
-          ref: ${{ needs.get-release-context.outputs.express-git-sha }}
+          ref: ${{ needs.get-express-release-context.outputs.git-sha }}
 
       - name: Set up Docker Buildx
         uses: docker/setup-buildx-action@4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd # v4.0.0
@@ -334,8 +333,8 @@ jobs:
           push: true
           tags: |
             bitgo/express:latest
-            bitgo/express:${{ needs.get-release-context.outputs.express-version }}
+            bitgo/express:${{ needs.get-express-release-context.outputs.version }}
           build-args: |
-            VERSION=${{ needs.get-release-context.outputs.express-version }}
+            VERSION=${{ needs.get-express-release-context.outputs.version }}
             BUILD_DATE=${{ steps.build-date.outputs.build-date }}
-            GIT_HASH=${{ needs.get-release-context.outputs.express-git-sha }}
+            GIT_HASH=${{ needs.get-express-release-context.outputs.git-sha }}

CODEOWNERS

@@ -76,6 +76,7 @@
 /modules/sdk-coin-icp/ @BitGo/ethalt-team
 /modules/sdk-coin-initia/ @BitGo/ethalt-team
 /modules/sdk-coin-iota/ @BitGo/ethalt-team
+/modules/sdk-coin-kaspa/ @BitGo/ethalt-team
 /modules/sdk-coin-mon/ @BitGo/ethalt-team
 /modules/sdk-coin-mantra/ @BitGo/ethalt-team
 /modules/sdk-coin-near/ @BitGo/ethalt-team

Dockerfile

@@ -96,6 +96,7 @@ COPY --from=builder /tmp/bitgo/modules/sdk-coin-icp /var/modules/sdk-coin-icp/
 COPY --from=builder /tmp/bitgo/modules/sdk-coin-initia /var/modules/sdk-coin-initia/
 COPY --from=builder /tmp/bitgo/modules/sdk-coin-injective /var/modules/sdk-coin-injective/
 COPY --from=builder /tmp/bitgo/modules/sdk-coin-islm /var/modules/sdk-coin-islm/
+COPY --from=builder /tmp/bitgo/modules/sdk-coin-kaspa /var/modules/sdk-coin-kaspa/
 COPY --from=builder /tmp/bitgo/modules/sdk-coin-mon /var/modules/sdk-coin-mon/
 COPY --from=builder /tmp/bitgo/modules/sdk-coin-near /var/modules/sdk-coin-near/
 COPY --from=builder /tmp/bitgo/modules/sdk-coin-oas /var/modules/sdk-coin-oas/
@@ -197,6 +198,7 @@ cd /var/modules/sdk-coin-icp && yarn link && \
 cd /var/modules/sdk-coin-initia && yarn link && \
 cd /var/modules/sdk-coin-injective && yarn link && \
 cd /var/modules/sdk-coin-islm && yarn link && \
+cd /var/modules/sdk-coin-kaspa && yarn link && \
 cd /var/modules/sdk-coin-mon && yarn link && \
 cd /var/modules/sdk-coin-near && yarn link && \
 cd /var/modules/sdk-coin-oas && yarn link && \
@@ -301,6 +303,7 @@ RUN cd /var/bitgo-express && \
     yarn link @bitgo/sdk-coin-initia && \
     yarn link @bitgo/sdk-coin-injective && \
     yarn link @bitgo/sdk-coin-islm && \
+    yarn link @bitgo/sdk-coin-kaspa && \
     yarn link @bitgo/sdk-coin-mon && \
     yarn link @bitgo/sdk-coin-near && \
     yarn link @bitgo/sdk-coin-oas && \

modules/abstract-cosmos/CHANGELOG.md

@@ -3,6 +3,14 @@
 All notable changes to this project will be documented in this file.
 See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.
 
+## [11.18.4](https://github.com/BitGo/BitGoJS/compare/@bitgo/abstract-cosmos@11.18.3...@bitgo/abstract-cosmos@11.18.4) (2026-04-22)
+
+**Note:** Version bump only for package @bitgo/abstract-cosmos
+
+
+
+
+
 ## [11.18.3](https://github.com/BitGo/BitGoJS/compare/@bitgo/abstract-cosmos@11.18.2...@bitgo/abstract-cosmos@11.18.3) (2026-04-14)
 
 **Note:** Version bump only for package @bitgo/abstract-cosmos

modules/abstract-cosmos/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bitgo/abstract-cosmos",
-  "version": "11.18.3",
+  "version": "11.18.4",
   "description": "BitGo SDK coin library for COSMOS base implementation",
   "main": "./dist/src/index.js",
   "types": "./dist/src/index.d.ts",
@@ -38,10 +38,10 @@
     ]
   },
   "dependencies": {
-    "@bitgo/sdk-core": "^36.40.0",
-    "@bitgo/sdk-lib-mpc": "^10.10.2",
+    "@bitgo/sdk-core": "^36.41.0",
+    "@bitgo/sdk-lib-mpc": "^10.11.0",
     "@bitgo/secp256k1": "^1.11.0",
-    "@bitgo/statics": "^58.35.0",
+    "@bitgo/statics": "^58.36.0",
     "@cosmjs/amino": "^0.29.5",
     "@cosmjs/crypto": "^0.30.1",
     "@cosmjs/encoding": "^0.29.5",

modules/abstract-eth/CHANGELOG.md

@@ -3,6 +3,17 @@
 All notable changes to this project will be documented in this file.
 See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.
 
+# [24.24.0](https://github.com/BitGo/BitGoJS/compare/@bitgo/abstract-eth@24.23.1...@bitgo/abstract-eth@24.24.0) (2026-04-22)
+
+
+### Features
+
+* hts nft transfer support ([2c21e3e](https://github.com/BitGo/BitGoJS/commit/2c21e3e27149c469fb73e6e40cecf1992e665b71))
+
+
+
+
+
 ## [24.23.1](https://github.com/BitGo/BitGoJS/compare/@bitgo/abstract-eth@24.23.0...@bitgo/abstract-eth@24.23.1) (2026-04-14)
 
 

modules/abstract-eth/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bitgo/abstract-eth",
-  "version": "24.23.1",
+  "version": "24.24.0",
   "description": "BitGo SDK coin library for ETH base implementation",
   "main": "./dist/src/index.js",
   "types": "./dist/src/index.d.ts",
@@ -40,10 +40,10 @@
     ]
   },
   "dependencies": {
-    "@bitgo/sdk-core": "^36.40.0",
-    "@bitgo/sdk-lib-mpc": "^10.10.2",
+    "@bitgo/sdk-core": "^36.41.0",
+    "@bitgo/sdk-lib-mpc": "^10.11.0",
     "@bitgo/secp256k1": "^1.11.0",
-    "@bitgo/statics": "^58.35.0",
+    "@bitgo/statics": "^58.36.0",
     "@ethereumjs/common": "^2.6.5",
     "@ethereumjs/rlp": "^4.0.0",
     "@ethereumjs/tx": "^3.3.0",
@@ -60,8 +60,8 @@
     "superagent": "^9.0.1"
   },
   "devDependencies": {
-    "@bitgo/sdk-api": "^1.77.0",
-    "@bitgo/sdk-test": "^9.1.38",
+    "@bitgo/sdk-api": "^1.78.0",
+    "@bitgo/sdk-test": "^9.1.39",
     "@types/keccak": "^3.0.5"
   },
   "gitHead": "18e460ddf02de2dbf13c2aa243478188fb539f0c",

modules/abstract-eth/src/abstractEthLikeNewCoins.ts

@@ -3109,9 +3109,16 @@ export abstract class AbstractEthLikeNewCoins extends AbstractEthLikeCoin {
         txParams.prebuildTx?.consolidateId ||
         txPrebuild?.consolidateId ||
         (txParams.type &&
-          ['acceleration', 'fillNonce', 'transferToken', 'tokenApproval', 'consolidate', 'bridgeFunds'].includes(
-            txParams.type
-          ))
+          [
+            'acceleration',
+            'fillNonce',
+            'transferToken',
+            'tokenApproval',
+            'consolidate',
+            'bridgeFunds',
+            'enableToken',
+            'customTx',
+          ].includes(txParams.type))
       )
     ) {
       throw new Error('missing txParams');

modules/abstract-lightning/CHANGELOG.md

@@ -3,6 +3,17 @@
 All notable changes to this project will be documented in this file.
 See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.
 
+## [7.10.2](https://github.com/BitGo/BitGoJS/compare/@bitgo/abstract-lightning@7.10.1...@bitgo/abstract-lightning@7.10.2) (2026-04-22)
+
+
+### Bug Fixes
+
+* **sdk-lib-mpc:** authenticate signatureR in DKLS DSG round 4 messages ([16392ca](https://github.com/BitGo/BitGoJS/commit/16392ca9e5d1fe73b927fba96a21e885a3abeff3))
+
+
+
+
+
 ## [7.10.1](https://github.com/BitGo/BitGoJS/compare/@bitgo/abstract-lightning@7.10.0...@bitgo/abstract-lightning@7.10.1) (2026-04-14)
 
 **Note:** Version bump only for package @bitgo/abstract-lightning