[CI Skip] release/stable 13.5.4

skip-checks: true

.yarnrc.yml

@@ -12,4 +12,4 @@ logFilters:
 
 nodeLinker: node-modules
 
-yarnPath: .yarn/releases/yarn-4.6.0.cjs
+yarnPath: .yarn/releases/yarn-4.9.1.cjs

CHANGELOG.md

@@ -1,5 +1,53 @@
 # CHANGELOG
 
+## 13.5.4 July 28, 2025
+
+Changes:
+
+- Add Creditcoin3 support to Generic Ledger App  ([#1985](https://github.com/polkadot-js/common/pull/1985))
+
+## 13.5.3 July 1, 2025
+
+Changes:
+
+- Update polkadot dependencies ([#1995](https://github.com/polkadot-js/common/pull/1995))
+- Add Optional Strict Input Checking to u8aToU8a ([#1994](https://github.com/polkadot-js/common/pull/1994))
+- Update scrypt parameter validation ([#1993](https://github.com/polkadot-js/common/pull/1993))
+
+## 13.5.2 Jun 17, 2025
+
+Changes:
+
+- fix: enhance error handling for secure random number generation in React Native ([#1991](https://github.com/polkadot-js/common/pull/1991))
+- Add input length validation in scryptFromU8a function ([#1990](https://github.com/polkadot-js/common/pull/1990))
+
+Contributed:
+
+- Add Liberland support to Generic Ledger App ([#1989](https://github.com/polkadot-js/common/pull/1989))
+
+## 13.5.1 May 19, 2025
+
+Changes:
+
+- Ledger ECDSA signing support ([#1986](https://github.com/polkadot-js/common/pull/1986))
+- Bump yarn to 4.9.1 ([#1987](https://github.com/polkadot-js/common/pull/1987))
+
+
+## 13.4.4 Apr 14, 2025
+
+Changes:
+
+- Improve objectSpread function property handling ([#1982](https://github.com/polkadot-js/common/pull/1982))
+
+
+## 13.4.3 Feb 17, 2025
+
+Changes:
+
+- Rollback ws change in x-ws ([#1980](https://github.com/polkadot-js/common/pull/1980))
+  NOTE: this rollbacks changes made in ([#1976](https://github.com/polkadot-js/common/pull/1976)) to ensure websocket usage doesnt break in any downstream libs.
+
+
 ## 13.4.2 Feb 17, 2025
 
 Changes:

CONTRIBUTORS

@@ -1,14 +1,16 @@
     1674	Jaco                          	Bump deps (#1912)
-      38	Tarik Gul                     	13.4.2 (#1979)
+      43	Tarik Gul                     	13.5.1 (#1988)
       13	Carlo Sala                    	feat(networks): add zeitgeist Ledger support (#1840)
        9	Antoine Estienne              	Add eth uri keyring test (#1291)
+       7	Valentin Fernandez            	13.5.2 (#1992)
        6	Amaury Martiny                	Add tests from Rust (#283)
        6	Jakub Pánik                   	HydraDX -> Hydration rebrand (#1923)
        5	kwingram25                    	Add BN consts and timeToString (#610)
        4	Adam Dossa                    	Update Polymesh Genesis Hash (#1193)
+       4	Arjun Porwal                  	13.5.4 (#1999)
        4	pan                           	add bifrost kusama (#1626)
-       4	Valentin Fernandez            	Cast ws as global.WebSocket (#1978)
        3	Luke Schoen                   	docs: Fix example in readme since we use default imports (#243)
+       3	rajk93                        	13.5.3 (#1996)
        2	AndreasGassmann               	feat(dependencies): remove moment.js (#530)
        2	Cameron Fairchild             	Add bittensor details (#1783)
        2	Gav Wood                      	Fix stake:unstake (#182)
@@ -52,10 +54,12 @@
        1	Nantian                       	add acala ledger config (#1485)
        1	peetzweg/                     	adds `isRiscV` guard function similar to isWasm (#1878)
        1	qwer951123                    	Add acala genesis (#1161)
+       1	Radek Bochenek                	feat: add Liberland support to Generic Ledger App (#1989)
        1	Raoul Millais                 	Fix yarn add instructions in x-global README (#873)
        1	Raymond Zhong                 	Add Edgeware ledger app (#1006)
        1	Reto Trinkler                 	Adding 4 as address type of ss58 for Katal Chain (#639)
        1	Rocco Musolino                	remove doc broken link (#697)
+       1	Salina                        	Add Creditcoin3 support to Generic Ledger App (#1985)
        1	Shamilkhan                    	Add genesis hash for Cere Network (#1806)
        1	Song Zhou                     	Add in ability to encrypt/decrypt msg with keyring (#1070)
        1	Thibaut Sardan                	add hasLedgerSupport prop to networks (#835)

package.json

@@ -6,7 +6,7 @@
   },
   "homepage": "https://github.com/polkadot-js/common#readme",
   "license": "Apache-2.0",
-  "packageManager": "yarn@4.6.0",
+  "packageManager": "yarn@4.9.1",
   "private": true,
   "repository": {
     "type": "git",
@@ -14,10 +14,10 @@
   },
   "sideEffects": false,
   "type": "module",
-  "version": "13.4.2",
+  "version": "13.5.4",
   "versions": {
-    "git": "13.4.2",
-    "npm": "13.4.2"
+    "git": "13.5.4",
+    "npm": "13.5.4"
   },
   "workspaces": [
     "packages/*"
@@ -37,7 +37,7 @@
     "test:one": "polkadot-dev-run-test --env browser"
   },
   "devDependencies": {
-    "@polkadot/dev": "^0.83.2",
+    "@polkadot/dev": "^0.83.3",
     "@types/node": "^22.7.5"
   },
   "resolutions": {

packages/hw-ledger-transports/package.json

@@ -14,7 +14,7 @@
   },
   "sideEffects": false,
   "type": "module",
-  "version": "13.4.2",
+  "version": "13.5.4",
   "browser": "browser.js",
   "main": "node.js",
   "react-native": "react-native.js",
@@ -22,7 +22,7 @@
     "@ledgerhq/hw-transport": "^6.31.4",
     "@ledgerhq/hw-transport-webhid": "^6.29.4",
     "@ledgerhq/hw-transport-webusb": "^6.29.4",
-    "@polkadot/util": "13.4.2",
+    "@polkadot/util": "13.5.4",
     "tslib": "^2.8.0"
   },
   "optionalDependencies": {

packages/hw-ledger-transports/src/packageInfo.ts

@@ -3,4 +3,4 @@
 
 // Do not edit, auto-generated by @polkadot/dev
 
-export const packageInfo = { name: '@polkadot/hw-ledger-transports', path: 'auto', type: 'auto', version: '13.4.2' };
+export const packageInfo = { name: '@polkadot/hw-ledger-transports', path: 'auto', type: 'auto', version: '13.5.4' };

packages/hw-ledger/package.json

@@ -17,12 +17,12 @@
     "./packageDetect.cjs"
   ],
   "type": "module",
-  "version": "13.4.2",
+  "version": "13.5.4",
   "main": "index.js",
   "dependencies": {
-    "@polkadot/hw-ledger-transports": "13.4.2",
-    "@polkadot/util": "13.4.2",
-    "@zondax/ledger-substrate": "1.0.0",
+    "@polkadot/hw-ledger-transports": "13.5.4",
+    "@polkadot/util": "13.5.4",
+    "@zondax/ledger-substrate": "1.1.1",
     "tslib": "^2.8.0"
   }
 }

packages/hw-ledger/src/LedgerGeneric.ts

@@ -46,8 +46,8 @@ async function wrapError <T extends WrappedResult> (promise: Promise<T>): Promis
   return result;
 }
 
-/** @internal Wraps a sign/signRaw call and returns the associated signature */
-function sign (method: 'sign' | 'signRaw', message: Uint8Array, slip44: number, accountIndex = 0, addressOffset = 0): (app: PolkadotGenericApp) => Promise<LedgerSignature> {
+/** @internal Wraps a signEd25519/signRawEd25519 call and returns the associated signature */
+function sign (method: 'signEd25519' | 'signRawEd25519', message: Uint8Array, slip44: number, accountIndex = 0, addressOffset = 0): (app: PolkadotGenericApp) => Promise<LedgerSignature> {
   const bip42Path = `m/44'/${slip44}'/${accountIndex}'/${0}'/${addressOffset}'`;
 
   return async (app: PolkadotGenericApp): Promise<LedgerSignature> => {
@@ -59,7 +59,22 @@ function sign (method: 'sign' | 'signRaw', message: Uint8Array, slip44: number,
   };
 }
 
-/** @internal Wraps a signWithMetadata call and returns the associated signature */
+/** @internal Wraps a signEcdsa/signRawEcdsa call and returns the associated signature */
+function signEcdsa (method: 'signEcdsa' | 'signRawEcdsa', message: Uint8Array, slip44: number, accountIndex = 0, addressOffset = 0): (app: PolkadotGenericApp) => Promise<LedgerSignature> {
+  const bip42Path = `m/44'/${slip44}'/${accountIndex}'/${0}'/${addressOffset}'`;
+
+  return async (app: PolkadotGenericApp): Promise<LedgerSignature> => {
+    const { r, s, v } = await wrapError(app[method](bip42Path, u8aToBuffer(message)));
+
+    const signature = Buffer.concat([r, s, v]);
+
+    return {
+      signature: hexAddPrefix(signature.toString('hex'))
+    };
+  };
+}
+
+/** @internal Wraps a signWithMetadataEd25519 call and returns the associated signature */
 function signWithMetadata (message: Uint8Array, slip44: number, accountIndex = 0, addressOffset = 0, { metadata }: Partial<AccountOptionsGeneric> = {}): (app: PolkadotGenericApp) => Promise<LedgerSignature> {
   const bip42Path = `m/44'/${slip44}'/${accountIndex}'/${0}'/${addressOffset}'`;
 
@@ -70,7 +85,28 @@ function signWithMetadata (message: Uint8Array, slip44: number, accountIndex = 0
 
     const bufferMsg = Buffer.from(message);
 
-    const { signature } = await wrapError(app.signWithMetadata(bip42Path, bufferMsg, metadata));
+    const { signature } = await wrapError(app.signWithMetadataEd25519(bip42Path, bufferMsg, metadata));
+
+    return {
+      signature: hexAddPrefix(signature.toString('hex'))
+    };
+  };
+}
+
+/** @internal Wraps a signWithMetadataEcdsa call and returns the associated signature */
+function signWithMetadataEcdsa (message: Uint8Array, slip44: number, accountIndex = 0, addressOffset = 0, { metadata }: Partial<AccountOptionsGeneric> = {}): (app: PolkadotGenericApp) => Promise<LedgerSignature> {
+  const bip42Path = `m/44'/${slip44}'/${accountIndex}'/${0}'/${addressOffset}'`;
+
+  return async (app: PolkadotGenericApp): Promise<LedgerSignature> => {
+    if (!metadata) {
+      throw new Error('The metadata option must be present when using signWithMetadata');
+    }
+
+    const bufferMsg = Buffer.from(message);
+
+    const { r, s, v } = await wrapError(app.signWithMetadataEcdsa(bip42Path, bufferMsg, metadata));
+
+    const signature = Buffer.concat([r, s, v]);
 
     return {
       signature: hexAddPrefix(signature.toString('hex'))
@@ -119,14 +155,31 @@ export class LedgerGeneric {
   }
 
   /**
-   * @description Returns the address associated with a specific account & address offset. Optionally
+   * @description Returns the address associated with a specific Ed25519 account & address offset. Optionally
    * asks for on-device confirmation
    */
   public async getAddress (ss58Prefix: number, confirm = false, accountIndex = 0, addressOffset = 0): Promise<LedgerAddress> {
     const bip42Path = `m/44'/${this.#slip44}'/${accountIndex}'/${0}'/${addressOffset}'`;
 
     return this.withApp(async (app: PolkadotGenericApp): Promise<LedgerAddress> => {
-      const { address, pubKey } = await wrapError(app.getAddress(bip42Path, ss58Prefix, confirm));
+      const { address, pubKey } = await wrapError(app.getAddressEd25519(bip42Path, ss58Prefix, confirm));
+
+      return {
+        address,
+        publicKey: hexAddPrefix(pubKey)
+      };
+    });
+  }
+
+  /**
+   * @description Returns the address associated with a specific ecdsa account & address offset. Optionally
+   * asks for on-device confirmation
+   */
+  public async getAddressEcdsa (confirm = false, accountIndex = 0, addressOffset = 0) {
+    const bip42Path = `m/44'/${this.#slip44}'/${accountIndex}'/${0}'/${addressOffset}'`;
+
+    return this.withApp(async (app: PolkadotGenericApp): Promise<LedgerAddress> => {
+      const { address, pubKey } = await wrapError(app.getAddressEcdsa(bip42Path, confirm));
 
       return {
         address,
@@ -154,14 +207,28 @@ export class LedgerGeneric {
    * @description Signs a transaction on the Ledger device. This requires the LedgerGeneric class to be instantiated with `chainId`, and `metaUrl`
    */
   public async sign (message: Uint8Array, accountIndex?: number, addressOffset?: number): Promise<LedgerSignature> {
-    return this.withApp(sign('sign', message, this.#slip44, accountIndex, addressOffset));
+    return this.withApp(sign('signEd25519', message, this.#slip44, accountIndex, addressOffset));
   }
 
   /**
    * @description Signs a message (non-transactional) on the Ledger device
    */
   public async signRaw (message: Uint8Array, accountIndex?: number, addressOffset?: number): Promise<LedgerSignature> {
-    return this.withApp(sign('signRaw', u8aWrapBytes(message), this.#slip44, accountIndex, addressOffset));
+    return this.withApp(sign('signRawEd25519', u8aWrapBytes(message), this.#slip44, accountIndex, addressOffset));
+  }
+
+  /**
+   * @description Signs a transaction on the Ledger device with Ecdsa. This requires the LedgerGeneric class to be instantiated with `chainId`, and `metaUrl`
+   */
+  public async signEcdsa (message: Uint8Array, accountIndex?: number, addressOffset?: number): Promise<LedgerSignature> {
+    return this.withApp(signEcdsa('signEcdsa', u8aWrapBytes(message), this.#slip44, accountIndex, addressOffset));
+  }
+
+  /**
+   * @description Signs a message with Ecdsa (non-transactional) on the Ledger device
+   */
+  public async signRawEcdsa (message: Uint8Array, accountIndex?: number, addressOffset?: number): Promise<LedgerSignature> {
+    return this.withApp(signEcdsa('signRawEcdsa', u8aWrapBytes(message), this.#slip44, accountIndex, addressOffset));
   }
 
   /**
@@ -171,6 +238,13 @@ export class LedgerGeneric {
     return this.withApp(signWithMetadata(message, this.#slip44, accountIndex, addressOffset, options));
   }
 
+  /**
+   * @description Signs a transaction on the ledger device for an ecdsa signature provided some metadata.
+   */
+  public async signWithMetadataEcdsa (message: Uint8Array, accountIndex?: number, addressOffset?: number, options?: Partial<AccountOptionsGeneric>) {
+    return this.withApp(signWithMetadataEcdsa(message, this.#slip44, accountIndex, addressOffset, options));
+  }
+
   /**
    * @internal
    *

packages/hw-ledger/src/defaults.ts

@@ -51,9 +51,11 @@ export const prevLedgerRecord: Record<string, string> = {
 // Any chains moving forward that are supported by the PolkadotGenericApp from ledger will input their names below.
 export const genericLedgerApps = {
   bittensor: 'Bittensor',
+  creditcoin3: 'Creditcoin3',
   encointer: 'Encointer',
   frequency: 'Frequency',
   integritee: 'Integritee',
+  liberland: 'Liberland',
   polimec: 'Polimec',
   vara: 'Vara'
 };

packages/hw-ledger/src/packageInfo.ts

@@ -3,4 +3,4 @@
 
 // Do not edit, auto-generated by @polkadot/dev
 
-export const packageInfo = { name: '@polkadot/hw-ledger', path: 'auto', type: 'auto', version: '13.4.2' };
+export const packageInfo = { name: '@polkadot/hw-ledger', path: 'auto', type: 'auto', version: '13.5.4' };

packages/keyring/package.json

@@ -18,15 +18,15 @@
     "./packageDetect.cjs"
   ],
   "type": "module",
-  "version": "13.4.2",
+  "version": "13.5.4",
   "main": "index.js",
   "dependencies": {
-    "@polkadot/util": "13.4.2",
-    "@polkadot/util-crypto": "13.4.2",
+    "@polkadot/util": "13.5.4",
+    "@polkadot/util-crypto": "13.5.4",
     "tslib": "^2.8.0"
   },
   "peerDependencies": {
-    "@polkadot/util": "13.4.2",
-    "@polkadot/util-crypto": "13.4.2"
+    "@polkadot/util": "13.5.4",
+    "@polkadot/util-crypto": "13.5.4"
   }
 }

packages/keyring/src/packageInfo.ts

@@ -3,4 +3,4 @@
 
 // Do not edit, auto-generated by @polkadot/dev
 
-export const packageInfo = { name: '@polkadot/keyring', path: 'auto', type: 'auto', version: '13.4.2' };
+export const packageInfo = { name: '@polkadot/keyring', path: 'auto', type: 'auto', version: '13.5.4' };

packages/networks/package.json

@@ -15,14 +15,14 @@
   },
   "sideEffects": false,
   "type": "module",
-  "version": "13.4.2",
+  "version": "13.5.4",
   "main": "index.js",
   "dependencies": {
-    "@polkadot/util": "13.4.2",
+    "@polkadot/util": "13.5.4",
     "@substrate/ss58-registry": "^1.51.0",
     "tslib": "^2.8.0"
   },
   "devDependencies": {
-    "@polkadot/hw-ledger": "13.4.2"
+    "@polkadot/hw-ledger": "13.5.4"
   }
 }

packages/networks/src/defaults/genesis.ts

@@ -46,6 +46,11 @@ export const knownGenesis: KnownGenesis = {
   composable: [
     '0xdaab8df776eb52ec604a5df5d388bb62a050a0aaec4556a64265b9d42755552d'
   ],
+  creditcoin3: [
+    '0x4436a7d64e363df85e065a894721002a86643283f9707338bf195d360ba2ee71', // cc3 mainnet
+    '0xfc4ec97a1c1f119c4353aecb4a17c7c0cf7b40d5d660143d8bad9117e9866572', // cc3 testnet/drynet
+    '0xfc9df99a665f964aed6649f275055e54df5e3420489538ed31d7788f53d11ef6' // cc3 devnet
+  ],
   darwinia: [
     '0xe71578b37a7c799b0ab4ee87ffa6f059a6b98f71f06fb8c84a8d88013a548ad6'
   ],
@@ -99,6 +104,9 @@ export const knownGenesis: KnownGenesis = {
     '0xe3777fa922cafbff200cadeaea1a76bd7898ad5b89f7848999058b50e715f636', // Kusama CC2
     '0x3fd7b9eb6a00376e5be61f01abb429ffb0b104be05eaff4d458da48fcd425baf' // Kusama CC1
   ],
+  liberland: [
+    '0x6bd89e052d67a45bb60a9a23e8581053d5e0d619f15cb9865946937e690c42d6'
+  ],
   matrixchain: [
     '0x3af4ff48ec76d2efc8476730f423ac07e25ad48f5f4c9dc39c778b164d808615'
   ],

packages/networks/src/defaults/ledger.ts

@@ -17,6 +17,7 @@ export const knownLedger: KnownLedger = {
   bittensor: 0x00000162,
   centrifuge: 0x000002eb,
   composable: 0x00000162,
+  creditcoin3: 0x00000162,
   darwinia: 0x00000162,
   'dock-mainnet': 0x00000252,
   edgeware: 0x0000020b,
@@ -31,6 +32,7 @@ export const knownLedger: KnownLedger = {
   karura: 0x000002ae,
   khala: 0x000001b2,
   kusama: 0x000001b2,
+  liberland: 0x000002ff,
   matrixchain: 0x00000483,
   nodle: 0x000003eb,
   origintrail: 0x00000162,

packages/networks/src/packageInfo.ts

@@ -3,4 +3,4 @@
 
 // Do not edit, auto-generated by @polkadot/dev
 
-export const packageInfo = { name: '@polkadot/networks', path: 'auto', type: 'auto', version: '13.4.2' };
+export const packageInfo = { name: '@polkadot/networks', path: 'auto', type: 'auto', version: '13.5.4' };

packages/util-crypto/package.json

@@ -20,7 +20,7 @@
     "./packageDetect.cjs"
   ],
   "type": "module",
-  "version": "13.4.2",
+  "version": "13.5.4",
   "browser": {
     "crypto": false,
     "stream": false
@@ -29,16 +29,16 @@
   "dependencies": {
     "@noble/curves": "^1.3.0",
     "@noble/hashes": "^1.3.3",
-    "@polkadot/networks": "13.4.2",
-    "@polkadot/util": "13.4.2",
+    "@polkadot/networks": "13.5.4",
+    "@polkadot/util": "13.5.4",
     "@polkadot/wasm-crypto": "^7.4.1",
     "@polkadot/wasm-util": "^7.4.1",
-    "@polkadot/x-bigint": "13.4.2",
-    "@polkadot/x-randomvalues": "13.4.2",
+    "@polkadot/x-bigint": "13.5.4",
+    "@polkadot/x-randomvalues": "13.5.4",
     "@scure/base": "^1.1.7",
     "tslib": "^2.8.0"
   },
   "peerDependencies": {
-    "@polkadot/util": "13.4.2"
+    "@polkadot/util": "13.5.4"
   }
 }

packages/util-crypto/src/packageInfo.ts

@@ -3,4 +3,4 @@
 
 // Do not edit, auto-generated by @polkadot/dev
 
-export const packageInfo = { name: '@polkadot/util-crypto', path: 'auto', type: 'auto', version: '13.4.2' };
+export const packageInfo = { name: '@polkadot/util-crypto', path: 'auto', type: 'auto', version: '13.5.4' };

packages/util-crypto/src/scrypt/defaults.ts

@@ -3,8 +3,17 @@
 
 import type { ScryptParams } from './types.js';
 
+export const ALLOWED_PARAMS: ScryptParams[] = [
+  { N: 1 << 13, p: 10, r: 8 },
+  { N: 1 << 14, p: 5, r: 8 },
+  { N: 1 << 15, p: 3, r: 8 },
+  { N: 1 << 15, p: 1, r: 8 },
+  { N: 1 << 16, p: 2, r: 8 },
+  { N: 1 << 17, p: 1, r: 8 }
+];
+
 export const DEFAULT_PARAMS: ScryptParams = {
-  N: 1 << 15,
+  N: 1 << 17,
   p: 1,
   r: 8
 };

packages/util-crypto/src/scrypt/encode.spec.ts

@@ -13,7 +13,7 @@ import { scryptEncode } from './index.js';
 export const KNOWN_TEST = 'testing, 123';
 
 // eslint-disable-next-line jest/no-export
-export const KNOWN_PASS = new Uint8Array([223, 185, 241, 135, 125, 17, 195, 27, 64, 64, 154, 69, 47, 82, 123, 38, 255, 230, 199, 200, 101, 115, 21, 116, 119, 59, 67, 43, 58, 220, 112, 70, 124, 139, 240, 206, 42, 148, 140, 132, 64, 226, 164, 25, 104, 80, 49, 92, 144, 132, 109, 178, 76, 225, 171, 116, 151, 181, 34, 243, 177, 235, 134, 76]);
+export const KNOWN_PASS = new Uint8Array([225, 18, 85, 30, 46, 178, 200, 63, 147, 225, 37, 46, 88, 224, 151, 132, 48, 206, 104, 234, 120, 112, 243, 198, 92, 52, 101, 127, 242, 22, 116, 55, 74, 29, 17, 197, 38, 191, 128, 39, 255, 119, 175, 113, 180, 252, 171, 10, 78, 93, 226, 7, 166, 120, 99, 198, 225, 158, 107, 132, 226, 73, 129, 35]);
 
 // eslint-disable-next-line jest/no-export
 export const KNOWN_SALT = new Uint8Array([1, 2, 3, 4, 5, 6, 7, 8, 1, 2, 3, 4, 5, 6, 7, 8, 1, 2, 3, 4, 5, 6, 7, 8, 1, 2, 3, 4, 5, 6, 7, 8]);

packages/util-crypto/src/scrypt/fromU8a.ts

@@ -6,7 +6,7 @@ import type { ScryptParams } from './types.js';
 import { u8aToBn } from '@polkadot/util';
 
 import { BN_LE_OPTS } from '../bn.js';
-import { DEFAULT_PARAMS } from './defaults.js';
+import { ALLOWED_PARAMS } from './defaults.js';
 
 interface Result {
   params: ScryptParams,
@@ -14,17 +14,29 @@ interface Result {
 }
 
 export function scryptFromU8a (data: Uint8Array): Result {
-  const salt = data.subarray(0, 32);
-  const N = u8aToBn(data.subarray(32 + 0, 32 + 4), BN_LE_OPTS).toNumber();
-  const p = u8aToBn(data.subarray(32 + 4, 32 + 8), BN_LE_OPTS).toNumber();
-  const r = u8aToBn(data.subarray(32 + 8, 32 + 12), BN_LE_OPTS).toNumber();
+  if (!(data instanceof Uint8Array)) {
+    throw new Error('Expected input to be a Uint8Array');
+  }
 
-  // FIXME At this moment we assume these to be fixed params, this is not a great idea
-  // since we lose flexibility and updates for greater security. However we need some
-  // protection against carefully-crafted params that can eat up CPU since these are user
-  // inputs. So we need to get very clever here, but atm we only allow the defaults
-  // and if no match, bail out
-  if (N !== DEFAULT_PARAMS.N || p !== DEFAULT_PARAMS.p || r !== DEFAULT_PARAMS.r) {
+  // Ensure the input is exactly 44 bytes: 32 for salt + 3 * 4 for N, p, r
+  if (data.length < 32 + 12) {
+    throw new Error(`Invalid input length: expected 44 bytes, found ${data.length}`);
+  }
+
+  const salt = data.subarray(0, 32);
+  const N = u8aToBn(data.subarray(32, 36), BN_LE_OPTS).toNumber();
+  const p = u8aToBn(data.subarray(36, 40), BN_LE_OPTS).toNumber();
+  const r = u8aToBn(data.subarray(40, 44), BN_LE_OPTS).toNumber();
+
+  if (N > (1 << 20) || p > 4 || r > 16) {
+    throw new Error('Scrypt parameters exceed safe limits');
+  }
+
+  const isAllowed = ALLOWED_PARAMS.some((preset) =>
+    preset.N === N && preset.p === p && preset.r === r
+  );
+
+  if (!isAllowed) {
     throw new Error('Invalid injected scrypt params found');
   }
 

packages/util/package.json

@@ -18,7 +18,7 @@
     "./packageDetect.cjs"
   ],
   "type": "module",
-  "version": "13.4.2",
+  "version": "13.5.4",
   "main": "index.js",
   "exports": {
     "./hex/toU8a": {
@@ -35,15 +35,15 @@
     }
   },
   "dependencies": {
-    "@polkadot/x-bigint": "13.4.2",
-    "@polkadot/x-global": "13.4.2",
-    "@polkadot/x-textdecoder": "13.4.2",
-    "@polkadot/x-textencoder": "13.4.2",
+    "@polkadot/x-bigint": "13.5.4",
+    "@polkadot/x-global": "13.5.4",
+    "@polkadot/x-textdecoder": "13.5.4",
+    "@polkadot/x-textencoder": "13.5.4",
     "@types/bn.js": "^5.1.6",
     "bn.js": "^5.2.1",
     "tslib": "^2.8.0"
   },
   "devDependencies": {
-    "@polkadot/x-randomvalues": "13.4.2"
+    "@polkadot/x-randomvalues": "13.5.4"
   }
 }

packages/util/src/object/spread.ts

@@ -4,18 +4,32 @@
 /**
  * @name objectSpread
  * @summary Concats all sources into the destination
+ * @description Spreads object properties while maintaining object integrity
  */
 export function objectSpread <T extends object> (dest: object, ...sources: (object | undefined | null)[]): T {
+  const filterProps = new Set(['__proto__', 'constructor', 'prototype']);
+
   for (let i = 0, count = sources.length; i < count; i++) {
     const src = sources[i];
 
     if (src) {
       if (typeof (src as Map<string, unknown>).entries === 'function') {
         for (const [key, value] of (src as Map<string, unknown>).entries()) {
-          (dest as Record<string, unknown>)[key] = value;
+          if (!filterProps.has(key)) {
+            (dest as Record<string, unknown>)[key] = value;
+          }
         }
       } else {
-        Object.assign(dest, src);
+        // Create a clean copy of the source object
+        const sanitizedSrc = Object.create(null) as Record<string, unknown>;
+
+        for (const [key, value] of Object.entries(src)) {
+          if (!filterProps.has(key)) {
+            sanitizedSrc[key] = value;
+          }
+        }
+
+        Object.assign(dest, sanitizedSrc);
       }
     }
   }

packages/util/src/packageInfo.ts

@@ -3,4 +3,4 @@
 
 // Do not edit, auto-generated by @polkadot/dev
 
-export const packageInfo = { name: '@polkadot/util', path: 'auto', type: 'auto', version: '13.4.2' };
+export const packageInfo = { name: '@polkadot/util', path: 'auto', type: 'auto', version: '13.5.4' };

packages/util/src/u8a/toU8a.spec.ts

@@ -20,23 +20,29 @@ const TESTS: [input: U8aLike | null | undefined, output: Uint8Array][] = [
 
 describe('u8aToU8a', (): void => {
   it('returns an empty Uint8Array when null/undefined/"" provided', (): void => {
-    expect(
-      u8aToU8a(null)
-    ).toHaveLength(0);
+    expect(u8aToU8a(null)).toHaveLength(0);
     expect(
       u8aToU8a()
     ).toHaveLength(0);
     expect(
       u8aToU8a('')
     ).toHaveLength(0);
+    expect(
+      u8aToU8a('')
+    ).toEqual(new Uint8Array());
+  });
+
+  it('Throw error on null/undefined values on strict checking', () => {
+    expect(() => u8aToU8a(undefined, true)).toThrow('u8aToU8a: Expected non-null, non-undefined value');
+    expect(() => u8aToU8a(null, true)).toThrow('u8aToU8a: Expected non-null, non-undefined value');
   });
 
   it('returns a Uint8Array as-is (u8a input)', (): void => {
     const input = new Uint8Array([128, 0, 10]);
 
     expect(
-      u8aToU8a(input) === input
-    ).toEqual(true);
+      u8aToU8a(input)
+    ).toEqual(input);
   });
 
   describe('conversion tests', (): void => {

packages/util/src/u8a/toU8a.ts

@@ -14,6 +14,8 @@ import { stringToU8a } from '../string/toU8a.js';
  * @summary Creates a Uint8Array value from a Uint8Array, Buffer, string or hex input.
  * @description
  * `null` or `undefined` inputs returns a `[]` result, Uint8Array values returns the value, hex strings returns a Uint8Array representation.
+ * If `strict` is true, `null` or `undefined` will throw an error instead of returning an empty array.
+ * Supports input types: Uint8Array, Buffer, hex string, string, or number array.
  * @example
  * <BR>
  *
@@ -24,7 +26,11 @@ import { stringToU8a } from '../string/toU8a.js';
  * u8aToU8a(0x1234); // => Uint8Array([0x12, 0x34])
  * ```
  */
-export function u8aToU8a (value?: U8aLike | null): Uint8Array {
+export function u8aToU8a (value?: U8aLike | null, strict = false): Uint8Array {
+  if (strict && (value === null || value === undefined)) {
+    throw new Error('u8aToU8a: Expected non-null, non-undefined value');
+  }
+
   return isU8a(value)
     // NOTE isBuffer needs to go here since it actually extends
     // Uint8Array on Node.js environments, so all Buffer are Uint8Array,

packages/x-bigint/package.json

@@ -18,9 +18,9 @@
     "./shim.cjs"
   ],
   "type": "module",
-  "version": "13.4.2",
+  "version": "13.5.4",
   "dependencies": {
-    "@polkadot/x-global": "13.4.2",
+    "@polkadot/x-global": "13.5.4",
     "tslib": "^2.8.0"
   }
 }

packages/x-bigint/src/packageInfo.ts

@@ -3,4 +3,4 @@
 
 // Do not edit, auto-generated by @polkadot/dev
 
-export const packageInfo = { name: '@polkadot/x-bigint', path: 'auto', type: 'auto', version: '13.4.2' };
+export const packageInfo = { name: '@polkadot/x-bigint', path: 'auto', type: 'auto', version: '13.5.4' };

packages/x-bundle/package.json

@@ -15,10 +15,10 @@
   },
   "sideEffects": false,
   "type": "module",
-  "version": "13.4.2",
+  "version": "13.5.4",
   "main": "index.js",
   "dependencies": {
-    "@polkadot/util": "13.4.2",
+    "@polkadot/util": "13.5.4",
     "buffer-es6": "^4.9.3",
     "tslib": "^2.8.0"
   }

packages/x-bundle/src/packageInfo.ts

@@ -3,4 +3,4 @@
 
 // Do not edit, auto-generated by @polkadot/dev
 
-export const packageInfo = { name: '@polkadot/x-bundle', path: 'auto', type: 'auto', version: '13.4.2' };
+export const packageInfo = { name: '@polkadot/x-bundle', path: 'auto', type: 'auto', version: '13.5.4' };

packages/x-fetch/package.json

@@ -15,12 +15,12 @@
   },
   "sideEffects": false,
   "type": "module",
-  "version": "13.4.2",
+  "version": "13.5.4",
   "browser": "browser.js",
   "main": "node.js",
   "react-native": "react-native.js",
   "dependencies": {
-    "@polkadot/x-global": "13.4.2",
+    "@polkadot/x-global": "13.5.4",
     "node-fetch": "^3.3.2",
     "tslib": "^2.8.0"
   }

packages/x-fetch/src/packageInfo.ts

@@ -3,4 +3,4 @@
 
 // Do not edit, auto-generated by @polkadot/dev
 
-export const packageInfo = { name: '@polkadot/x-fetch', path: 'auto', type: 'auto', version: '13.4.2' };
+export const packageInfo = { name: '@polkadot/x-fetch', path: 'auto', type: 'auto', version: '13.5.4' };

packages/x-global/package.json

@@ -15,7 +15,7 @@
   },
   "sideEffects": false,
   "type": "module",
-  "version": "13.4.2",
+  "version": "13.5.4",
   "main": "index.js",
   "dependencies": {
     "tslib": "^2.8.0"

packages/x-global/src/packageInfo.ts

@@ -3,4 +3,4 @@
 
 // Do not edit, auto-generated by @polkadot/dev
 
-export const packageInfo = { name: '@polkadot/x-global', path: 'auto', type: 'auto', version: '13.4.2' };
+export const packageInfo = { name: '@polkadot/x-global', path: 'auto', type: 'auto', version: '13.5.4' };

packages/x-randomvalues/package.json

@@ -15,21 +15,21 @@
   },
   "sideEffects": false,
   "type": "module",
-  "version": "13.4.2",
+  "version": "13.5.4",
   "browser": "browser.js",
   "main": "node.js",
   "react-native": "react-native.js",
   "dependencies": {
-    "@polkadot/x-global": "13.4.2",
+    "@polkadot/x-global": "13.5.4",
     "tslib": "^2.8.0"
   },
   "devDependencies": {
-    "@polkadot/util": "13.4.2",
+    "@polkadot/util": "13.5.4",
     "@polkadot/wasm-util": "^7.4.1",
     "@types/react-native": "^0.73.0"
   },
   "peerDependencies": {
-    "@polkadot/util": "13.4.2",
+    "@polkadot/util": "13.5.4",
     "@polkadot/wasm-util": "*"
   }
 }

packages/x-randomvalues/src/packageInfo.ts

@@ -3,4 +3,4 @@
 
 // Do not edit, auto-generated by @polkadot/dev
 
-export const packageInfo = { name: '@polkadot/x-randomvalues', path: 'auto', type: 'auto', version: '13.4.2' };
+export const packageInfo = { name: '@polkadot/x-randomvalues', path: 'auto', type: 'auto', version: '13.5.4' };

packages/x-randomvalues/src/react-native.ts

@@ -12,7 +12,6 @@ import { base64Decode } from '@polkadot/wasm-util/base64';
 import { xglobal } from '@polkadot/x-global';
 
 import { crypto as cryptoBrowser, getRandomValues as getRandomValuesBrowser } from './browser.js';
-import { insecureRandomValues } from './fallback.js';
 
 export { packageInfo } from './packageInfo.js';
 
@@ -32,6 +31,10 @@ interface RNExt {
  * random utiliy generation functions.
  **/
 function getRandomValuesRn (output: Uint8Array): Uint8Array {
+  if (!NativeModules['ExpoRandom'] && !(NativeModules as RNExt).RNGetRandomValues) {
+    throw new Error('No secure random number generator available. This environment does not support crypto.getRandomValues and no React Native secure RNG module is available.');
+  }
+
   return base64Decode(
     (NativeModules as RNExt).RNGetRandomValues
       ? (NativeModules as RNExt).RNGetRandomValues.getRandomBase64(output.length)
@@ -43,8 +46,10 @@ function getRandomValuesRn (output: Uint8Array): Uint8Array {
 export const getRandomValues = (
   (typeof xglobal.crypto === 'object' && typeof xglobal.crypto.getRandomValues === 'function')
     ? getRandomValuesBrowser
-    : (typeof xglobal['nativeCallSyncHook'] === 'undefined' || !NativeModules['ExpoRandom'])
-      ? insecureRandomValues
+    : (typeof xglobal['nativeCallSyncHook'] === 'undefined')
+      ? () => {
+        throw new Error('No secure random number generator available. This environment does not support crypto.getRandomValues.');
+      }
       : getRandomValuesRn
 );
 

packages/x-textdecoder/package.json

@@ -15,12 +15,12 @@
   },
   "sideEffects": false,
   "type": "module",
-  "version": "13.4.2",
+  "version": "13.5.4",
   "browser": "browser.js",
   "main": "node.js",
   "react-native": "react-native.js",
   "dependencies": {
-    "@polkadot/x-global": "13.4.2",
+    "@polkadot/x-global": "13.5.4",
     "tslib": "^2.8.0"
   }
 }

packages/x-textdecoder/src/packageInfo.ts

@@ -3,4 +3,4 @@
 
 // Do not edit, auto-generated by @polkadot/dev
 
-export const packageInfo = { name: '@polkadot/x-textdecoder', path: 'auto', type: 'auto', version: '13.4.2' };
+export const packageInfo = { name: '@polkadot/x-textdecoder', path: 'auto', type: 'auto', version: '13.5.4' };

packages/x-textencoder/package.json

@@ -15,12 +15,12 @@
   },
   "sideEffects": false,
   "type": "module",
-  "version": "13.4.2",
+  "version": "13.5.4",
   "browser": "browser.js",
   "main": "node.js",
   "react-native": "react-native.js",
   "dependencies": {
-    "@polkadot/x-global": "13.4.2",
+    "@polkadot/x-global": "13.5.4",
     "tslib": "^2.8.0"
   }
 }

packages/x-textencoder/src/packageInfo.ts

@@ -3,4 +3,4 @@
 
 // Do not edit, auto-generated by @polkadot/dev
 
-export const packageInfo = { name: '@polkadot/x-textencoder', path: 'auto', type: 'auto', version: '13.4.2' };
+export const packageInfo = { name: '@polkadot/x-textencoder', path: 'auto', type: 'auto', version: '13.5.4' };

packages/x-ws/package.json

@@ -15,12 +15,12 @@
   },
   "sideEffects": false,
   "type": "module",
-  "version": "13.4.2",
+  "version": "13.5.4",
   "browser": "browser.js",
   "main": "node.js",
   "react-native": "react-native.js",
   "dependencies": {
-    "@polkadot/x-global": "13.4.2",
+    "@polkadot/x-global": "13.5.4",
     "tslib": "^2.8.0",
     "ws": "^8.18.0"
   },

packages/x-ws/src/node.ts

@@ -7,16 +7,4 @@ import { extractGlobal } from '@polkadot/x-global';
 
 export { packageInfo } from './packageInfo.js';
 
-/**
- * The built-in `globalThis.WebSocket` in Node.js 22+ does not provide
- * detailed error messages (e.g., `ECONNREFUSED` or `ETIMEDOUT`), making
- * it difficult to implement proper reconnection logic.
- *
- * To avoid these issues, we explicitly use the `ws` library in Node.js 22+
- * while still preserving support for the browser WebSocket API in browser environments.
- *
- * Related Issue: https://github.com/polkadot-js/common/issues/1975
- */
-const isNode22 = typeof process !== 'undefined' && parseInt(process.versions?.node?.split('.')[0] || '0', 10) >= 22;
-
-export const WebSocket = isNode22 ? (ws as unknown as typeof globalThis.WebSocket) : /*#__PURE__*/ extractGlobal('WebSocket', ws);
+export const WebSocket = /*#__PURE__*/ extractGlobal('WebSocket', ws);

packages/x-ws/src/packageInfo.ts

@@ -3,4 +3,4 @@
 
 // Do not edit, auto-generated by @polkadot/dev
 
-export const packageInfo = { name: '@polkadot/x-ws', path: 'auto', type: 'auto', version: '13.4.2' };
+export const packageInfo = { name: '@polkadot/x-ws', path: 'auto', type: 'auto', version: '13.5.4' };

yarn.lock

@@ -1207,7 +1207,7 @@ __metadata:
   languageName: node
   linkType: hard
 
-"@ledgerhq/devices@npm:^8.3.0, @ledgerhq/devices@npm:^8.4.2, @ledgerhq/devices@npm:^8.4.4":
+"@ledgerhq/devices@npm:^8.4.4":
   version: 8.4.4
   resolution: "@ledgerhq/devices@npm:8.4.4"
   dependencies:
@@ -1219,7 +1219,7 @@ __metadata:
   languageName: node
   linkType: hard
 
-"@ledgerhq/errors@npm:^6.16.4, @ledgerhq/errors@npm:^6.18.0, @ledgerhq/errors@npm:^6.19.1":
+"@ledgerhq/errors@npm:^6.19.1":
   version: 6.19.1
   resolution: "@ledgerhq/errors@npm:6.19.1"
   checksum: 10/8265c6d73c314a4aabbe060ec29e2feebb4e904fe811bf7a9c53cde08e713dcbceded9d927ebb2f0ffc47a7b16524379d4a7e9aa3d61945b8a832be7cd5cf69b
@@ -1278,31 +1278,7 @@ __metadata:
   languageName: node
   linkType: hard
 
-"@ledgerhq/hw-transport@npm:6.30.6":
-  version: 6.30.6
-  resolution: "@ledgerhq/hw-transport@npm:6.30.6"
-  dependencies:
-    "@ledgerhq/devices": "npm:^8.3.0"
-    "@ledgerhq/errors": "npm:^6.16.4"
-    "@ledgerhq/logs": "npm:^6.12.0"
-    events: "npm:^3.3.0"
-  checksum: 10/4fc71409e1ff906e479f2e45c386a9db2d062271908a86d09a59587652d485b80200a5335e7e9dbaf5264c0af4b8e6c36d24e7db921b10f4cc420b51e9ca3c00
-  languageName: node
-  linkType: hard
-
-"@ledgerhq/hw-transport@npm:6.31.2":
-  version: 6.31.2
-  resolution: "@ledgerhq/hw-transport@npm:6.31.2"
-  dependencies:
-    "@ledgerhq/devices": "npm:^8.4.2"
-    "@ledgerhq/errors": "npm:^6.18.0"
-    "@ledgerhq/logs": "npm:^6.12.0"
-    events: "npm:^3.3.0"
-  checksum: 10/b712b0c5a409d8bca254daa16b2867110132d44382dfb758e4ab0d710656d85c6b3fd9e42565ec9959db9a7f57b430d04d9db5556fb64727d7dc0a8e7a92d165
-  languageName: node
-  linkType: hard
-
-"@ledgerhq/hw-transport@npm:^6.31.4":
+"@ledgerhq/hw-transport@npm:6.31.4, @ledgerhq/hw-transport@npm:^6.31.4":
   version: 6.31.4
   resolution: "@ledgerhq/hw-transport@npm:6.31.4"
   dependencies:
@@ -1502,34 +1478,34 @@ __metadata:
   languageName: node
   linkType: hard
 
-"@polkadot/dev-test@npm:^0.83.2":
-  version: 0.83.2
-  resolution: "@polkadot/dev-test@npm:0.83.2"
+"@polkadot/dev-test@npm:^0.83.3":
+  version: 0.83.3
+  resolution: "@polkadot/dev-test@npm:0.83.3"
   dependencies:
     jsdom: "npm:^24.0.0"
     tslib: "npm:^2.7.0"
-  checksum: 10/afe60165272a09d5c9f08e3aec0015621350dc7394ee8ff121d5803c576c7601b176b753716203abba4a81a142b529da066fe4c73f39387b018bdde69fef7a10
+  checksum: 10/c03e0c5c5c5d22394c63948b35157b97f8f734a6a8403c89990c55b2657f2b284996aef8613815b2b576b271a126244d7f0a2c9ddece438c5799f273be2e1c69
   languageName: node
   linkType: hard
 
-"@polkadot/dev-ts@npm:^0.83.2":
-  version: 0.83.2
-  resolution: "@polkadot/dev-ts@npm:0.83.2"
+"@polkadot/dev-ts@npm:^0.83.3":
+  version: 0.83.3
+  resolution: "@polkadot/dev-ts@npm:0.83.3"
   dependencies:
     json5: "npm:^2.2.3"
     tslib: "npm:^2.7.0"
     typescript: "npm:^5.5.4"
-  checksum: 10/abca4df87a0682285bf5e5644ab8522820d53e0dffc124bfe540b7fccc55532057d1912629584bb04648e855e110896b36e55536d53556a166fc3d33bcc27b39
+  checksum: 10/a2ddc4dba934758cc24f02e8acbfa5a5f5295ad874f42c1bea8548a6dfa97c882b127a279001831caedc8d474becb905286847e0f64e8efe7063b6bac4830112
   languageName: node
   linkType: hard
 
-"@polkadot/dev@npm:^0.83.2":
-  version: 0.83.2
-  resolution: "@polkadot/dev@npm:0.83.2"
+"@polkadot/dev@npm:^0.83.3":
+  version: 0.83.3
+  resolution: "@polkadot/dev@npm:0.83.3"
   dependencies:
     "@eslint/js": "npm:^8.56.0"
-    "@polkadot/dev-test": "npm:^0.83.2"
-    "@polkadot/dev-ts": "npm:^0.83.2"
+    "@polkadot/dev-test": "npm:^0.83.3"
+    "@polkadot/dev-ts": "npm:^0.83.3"
     "@rollup/plugin-alias": "npm:^5.1.1"
     "@rollup/plugin-commonjs": "npm:^25.0.8"
     "@rollup/plugin-dynamic-import-vars": "npm:^2.1.5"
@@ -1594,11 +1570,11 @@ __metadata:
     polkadot-exec-rollup: scripts/polkadot-exec-rollup.mjs
     polkadot-exec-tsc: scripts/polkadot-exec-tsc.mjs
     polkadot-exec-webpack: scripts/polkadot-exec-webpack.mjs
-  checksum: 10/42a67e0f2401fc13bdffff86398958e326613461eaa294fb5b435037d636b94cbbbce81b1fadbdf3c0553798d3bc5df43ef6af2250f75e312f01e52b665eddfe
+  checksum: 10/f34171f4776f0ade59e750e6c43db56fccc800e5c5c2e7796299e83072534257fa5e7478b8159a4b265e96d36c9fe380d56326c21cdbdf51dda3221c269601be
   languageName: node
   linkType: hard
 
-"@polkadot/hw-ledger-transports@npm:13.4.2, @polkadot/hw-ledger-transports@workspace:packages/hw-ledger-transports":
+"@polkadot/hw-ledger-transports@npm:13.5.4, @polkadot/hw-ledger-transports@workspace:packages/hw-ledger-transports":
   version: 0.0.0-use.local
   resolution: "@polkadot/hw-ledger-transports@workspace:packages/hw-ledger-transports"
   dependencies:
@@ -1606,7 +1582,7 @@ __metadata:
     "@ledgerhq/hw-transport-node-hid-singleton": "npm:^6.31.5"
     "@ledgerhq/hw-transport-webhid": "npm:^6.29.4"
     "@ledgerhq/hw-transport-webusb": "npm:^6.29.4"
-    "@polkadot/util": "npm:13.4.2"
+    "@polkadot/util": "npm:13.5.4"
     tslib: "npm:^2.8.0"
   dependenciesMeta:
     "@ledgerhq/hw-transport-node-hid-singleton":
@@ -1614,13 +1590,13 @@ __metadata:
   languageName: unknown
   linkType: soft
 
-"@polkadot/hw-ledger@npm:13.4.2, @polkadot/hw-ledger@workspace:packages/hw-ledger":
+"@polkadot/hw-ledger@npm:13.5.4, @polkadot/hw-ledger@workspace:packages/hw-ledger":
   version: 0.0.0-use.local
   resolution: "@polkadot/hw-ledger@workspace:packages/hw-ledger"
   dependencies:
-    "@polkadot/hw-ledger-transports": "npm:13.4.2"
-    "@polkadot/util": "npm:13.4.2"
-    "@zondax/ledger-substrate": "npm:1.0.0"
+    "@polkadot/hw-ledger-transports": "npm:13.5.4"
+    "@polkadot/util": "npm:13.5.4"
+    "@zondax/ledger-substrate": "npm:1.1.1"
     tslib: "npm:^2.8.0"
   languageName: unknown
   linkType: soft
@@ -1629,54 +1605,54 @@ __metadata:
   version: 0.0.0-use.local
   resolution: "@polkadot/keyring@workspace:packages/keyring"
   dependencies:
-    "@polkadot/util": "npm:13.4.2"
-    "@polkadot/util-crypto": "npm:13.4.2"
+    "@polkadot/util": "npm:13.5.4"
+    "@polkadot/util-crypto": "npm:13.5.4"
     tslib: "npm:^2.8.0"
   peerDependencies:
-    "@polkadot/util": 13.4.2
-    "@polkadot/util-crypto": 13.4.2
+    "@polkadot/util": 13.5.4
+    "@polkadot/util-crypto": 13.5.4
   languageName: unknown
   linkType: soft
 
-"@polkadot/networks@npm:13.4.2, @polkadot/networks@workspace:packages/networks":
+"@polkadot/networks@npm:13.5.4, @polkadot/networks@workspace:packages/networks":
   version: 0.0.0-use.local
   resolution: "@polkadot/networks@workspace:packages/networks"
   dependencies:
-    "@polkadot/hw-ledger": "npm:13.4.2"
-    "@polkadot/util": "npm:13.4.2"
+    "@polkadot/hw-ledger": "npm:13.5.4"
+    "@polkadot/util": "npm:13.5.4"
     "@substrate/ss58-registry": "npm:^1.51.0"
     tslib: "npm:^2.8.0"
   languageName: unknown
   linkType: soft
 
-"@polkadot/util-crypto@npm:13.4.2, @polkadot/util-crypto@workspace:packages/util-crypto":
+"@polkadot/util-crypto@npm:13.5.4, @polkadot/util-crypto@workspace:packages/util-crypto":
   version: 0.0.0-use.local
   resolution: "@polkadot/util-crypto@workspace:packages/util-crypto"
   dependencies:
     "@noble/curves": "npm:^1.3.0"
     "@noble/hashes": "npm:^1.3.3"
-    "@polkadot/networks": "npm:13.4.2"
-    "@polkadot/util": "npm:13.4.2"
+    "@polkadot/networks": "npm:13.5.4"
+    "@polkadot/util": "npm:13.5.4"
     "@polkadot/wasm-crypto": "npm:^7.4.1"
     "@polkadot/wasm-util": "npm:^7.4.1"
-    "@polkadot/x-bigint": "npm:13.4.2"
-    "@polkadot/x-randomvalues": "npm:13.4.2"
+    "@polkadot/x-bigint": "npm:13.5.4"
+    "@polkadot/x-randomvalues": "npm:13.5.4"
     "@scure/base": "npm:^1.1.7"
     tslib: "npm:^2.8.0"
   peerDependencies:
-    "@polkadot/util": 13.4.2
+    "@polkadot/util": 13.5.4
   languageName: unknown
   linkType: soft
 
-"@polkadot/util@npm:13.4.2, @polkadot/util@workspace:packages/util":
+"@polkadot/util@npm:13.5.4, @polkadot/util@workspace:packages/util":
   version: 0.0.0-use.local
   resolution: "@polkadot/util@workspace:packages/util"
   dependencies:
-    "@polkadot/x-bigint": "npm:13.4.2"
-    "@polkadot/x-global": "npm:13.4.2"
-    "@polkadot/x-randomvalues": "npm:13.4.2"
-    "@polkadot/x-textdecoder": "npm:13.4.2"
-    "@polkadot/x-textencoder": "npm:13.4.2"
+    "@polkadot/x-bigint": "npm:13.5.4"
+    "@polkadot/x-global": "npm:13.5.4"
+    "@polkadot/x-randomvalues": "npm:13.5.4"
+    "@polkadot/x-textdecoder": "npm:13.5.4"
+    "@polkadot/x-textencoder": "npm:13.5.4"
     "@types/bn.js": "npm:^5.1.6"
     bn.js: "npm:^5.2.1"
     tslib: "npm:^2.8.0"
@@ -1763,11 +1739,11 @@ __metadata:
   languageName: node
   linkType: hard
 
-"@polkadot/x-bigint@npm:13.4.2, @polkadot/x-bigint@workspace:packages/x-bigint":
+"@polkadot/x-bigint@npm:13.5.4, @polkadot/x-bigint@workspace:packages/x-bigint":
   version: 0.0.0-use.local
   resolution: "@polkadot/x-bigint@workspace:packages/x-bigint"
   dependencies:
-    "@polkadot/x-global": "npm:13.4.2"
+    "@polkadot/x-global": "npm:13.5.4"
     tslib: "npm:^2.8.0"
   languageName: unknown
   linkType: soft
@@ -1776,7 +1752,7 @@ __metadata:
   version: 0.0.0-use.local
   resolution: "@polkadot/x-bundle@workspace:packages/x-bundle"
   dependencies:
-    "@polkadot/util": "npm:13.4.2"
+    "@polkadot/util": "npm:13.5.4"
     buffer-es6: "npm:^4.9.3"
     tslib: "npm:^2.8.0"
   languageName: unknown
@@ -1786,13 +1762,13 @@ __metadata:
   version: 0.0.0-use.local
   resolution: "@polkadot/x-fetch@workspace:packages/x-fetch"
   dependencies:
-    "@polkadot/x-global": "npm:13.4.2"
+    "@polkadot/x-global": "npm:13.5.4"
     node-fetch: "npm:^3.3.2"
     tslib: "npm:^2.8.0"
   languageName: unknown
   linkType: soft
 
-"@polkadot/x-global@npm:13.4.2, @polkadot/x-global@workspace:packages/x-global":
+"@polkadot/x-global@npm:13.5.4, @polkadot/x-global@workspace:packages/x-global":
   version: 0.0.0-use.local
   resolution: "@polkadot/x-global@workspace:packages/x-global"
   dependencies:
@@ -1800,35 +1776,35 @@ __metadata:
   languageName: unknown
   linkType: soft
 
-"@polkadot/x-randomvalues@npm:13.4.2, @polkadot/x-randomvalues@workspace:packages/x-randomvalues":
+"@polkadot/x-randomvalues@npm:13.5.4, @polkadot/x-randomvalues@workspace:packages/x-randomvalues":
   version: 0.0.0-use.local
   resolution: "@polkadot/x-randomvalues@workspace:packages/x-randomvalues"
   dependencies:
-    "@polkadot/util": "npm:13.4.2"
+    "@polkadot/util": "npm:13.5.4"
     "@polkadot/wasm-util": "npm:^7.4.1"
-    "@polkadot/x-global": "npm:13.4.2"
+    "@polkadot/x-global": "npm:13.5.4"
     "@types/react-native": "npm:^0.73.0"
     tslib: "npm:^2.8.0"
   peerDependencies:
-    "@polkadot/util": 13.4.2
+    "@polkadot/util": 13.5.4
     "@polkadot/wasm-util": "*"
   languageName: unknown
   linkType: soft
 
-"@polkadot/x-textdecoder@npm:13.4.2, @polkadot/x-textdecoder@workspace:packages/x-textdecoder":
+"@polkadot/x-textdecoder@npm:13.5.4, @polkadot/x-textdecoder@workspace:packages/x-textdecoder":
   version: 0.0.0-use.local
   resolution: "@polkadot/x-textdecoder@workspace:packages/x-textdecoder"
   dependencies:
-    "@polkadot/x-global": "npm:13.4.2"
+    "@polkadot/x-global": "npm:13.5.4"
     tslib: "npm:^2.8.0"
   languageName: unknown
   linkType: soft
 
-"@polkadot/x-textencoder@npm:13.4.2, @polkadot/x-textencoder@workspace:packages/x-textencoder":
+"@polkadot/x-textencoder@npm:13.5.4, @polkadot/x-textencoder@workspace:packages/x-textencoder":
   version: 0.0.0-use.local
   resolution: "@polkadot/x-textencoder@workspace:packages/x-textencoder"
   dependencies:
-    "@polkadot/x-global": "npm:13.4.2"
+    "@polkadot/x-global": "npm:13.5.4"
     tslib: "npm:^2.8.0"
   languageName: unknown
   linkType: soft
@@ -1837,7 +1813,7 @@ __metadata:
   version: 0.0.0-use.local
   resolution: "@polkadot/x-ws@workspace:packages/x-ws"
   dependencies:
-    "@polkadot/x-global": "npm:13.4.2"
+    "@polkadot/x-global": "npm:13.5.4"
     "@types/ws": "npm:^8.5.12"
     tslib: "npm:^2.8.0"
     ws: "npm:^8.18.0"
@@ -3213,23 +3189,23 @@ __metadata:
   languageName: node
   linkType: hard
 
-"@zondax/ledger-js@npm:^0.11.0":
-  version: 0.11.0
-  resolution: "@zondax/ledger-js@npm:0.11.0"
+"@zondax/ledger-js@npm:^1.2.0":
+  version: 1.2.0
+  resolution: "@zondax/ledger-js@npm:1.2.0"
   dependencies:
-    "@ledgerhq/hw-transport": "npm:6.30.6"
-  checksum: 10/52a5e2aa66db1554365d733b3d38f286a0bbb192e1a2911c526f44f058a2e6c1fc6e0ca67a6dc824bb89ce694bd4554c39809d0290141de97675bb48677c3985
+    "@ledgerhq/hw-transport": "npm:6.31.4"
+  checksum: 10/5852b340efd421f96d4e52d0a93d4e8464604c070939dd42fade5a495010a08d730b03e1b7ab3ff0f26f13075d8a0a5226a748a41986f2ed087fca4471f24e4e
   languageName: node
   linkType: hard
 
-"@zondax/ledger-substrate@npm:1.0.0":
-  version: 1.0.0
-  resolution: "@zondax/ledger-substrate@npm:1.0.0"
+"@zondax/ledger-substrate@npm:1.1.1":
+  version: 1.1.1
+  resolution: "@zondax/ledger-substrate@npm:1.1.1"
   dependencies:
-    "@ledgerhq/hw-transport": "npm:6.31.2"
-    "@zondax/ledger-js": "npm:^0.11.0"
-    axios: "npm:^1.7.4"
-  checksum: 10/5324da85746c160dd2400286c38ff0f90fae0147ad7e275b382b20b50acdee99c57941366531dc663931da5cb41144770888e3c6250b3f632b097d8bb7c7182f
+    "@ledgerhq/hw-transport": "npm:6.31.4"
+    "@zondax/ledger-js": "npm:^1.2.0"
+    axios: "npm:^1.8.4"
+  checksum: 10/039ffef55b31870f82c6b0f20b518089ad9ce0295d695f880640cb586256adacd4a326c10157ccaf82e897abde7358f9e4e02c069dac672ec90881e21d250722
   languageName: node
   linkType: hard
 
@@ -3771,14 +3747,14 @@ __metadata:
   languageName: node
   linkType: hard
 
-"axios@npm:^1.7.4":
-  version: 1.7.7
-  resolution: "axios@npm:1.7.7"
+"axios@npm:^1.8.4":
+  version: 1.9.0
+  resolution: "axios@npm:1.9.0"
   dependencies:
     follow-redirects: "npm:^1.15.6"
     form-data: "npm:^4.0.0"
     proxy-from-env: "npm:^1.1.0"
-  checksum: 10/7f875ea13b9298cd7b40fd09985209f7a38d38321f1118c701520939de2f113c4ba137832fe8e3f811f99a38e12c8225481011023209a77b0c0641270e20cde1
+  checksum: 10/a2f90bba56820883879f32a237e2b9ff25c250365dcafd41cec41b3406a3df334a148f90010182dfdadb4b41dc59f6f0b3e8898ff41b666d1157b5f3f4523497
   languageName: node
   linkType: hard
 
@@ -10765,7 +10741,7 @@ __metadata:
   version: 0.0.0-use.local
   resolution: "root-workspace-0b6124@workspace:."
   dependencies:
-    "@polkadot/dev": "npm:^0.83.2"
+    "@polkadot/dev": "npm:^0.83.3"
     "@types/node": "npm:^22.7.5"
   languageName: unknown
   linkType: soft