build: declare @quantus/crypto as a ui-keyring dev dependency

The ML-DSA restore spec imports contextForSpec from it, and polkadot-dev's
build refuses a package whose sources import something undeclared.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_012uDUodEcRbBwNRi3UCmw8f

.prettierrc.cjs

@@ -1,4 +1,4 @@
-// Copyright 2017-2024 @polkadot/ui-shared authors & contributors
+// Copyright 2017-2026 @polkadot/ui-shared authors & contributors
 // SPDX-License-Identifier: Apache-2.0
 
 module.exports = require('@polkadot/dev/config/prettier.cjs');

.yarnrc.yml

@@ -12,4 +12,12 @@ logFilters:
 
 nodeLinker: node-modules
 
-yarnPath: .yarn/releases/yarn-4.3.1.cjs
+yarnPath: .yarn/releases/yarn-4.5.1.cjs
+
+# @quantus packages come from the Gitea registry — safe as a whole-scope route
+# because we own every name in it. The forked @polkadot packages cannot be routed
+# the same way (most of that scope is unforked and lives on npm), so they are
+# pinned to tarball URLs in package.json resolutions instead.
+npmScopes:
+  quantus:
+    npmRegistryServer: "https://git.lair.cafe/api/packages/quantus/npm/"

CHANGELOG.md

@@ -1,5 +1,159 @@
 # CHANGELOG
 
+## 3.16.7 Mar 25, 2026
+
+Changes:
+
+- Bump common to 14.0.3 ([#860](https://github.com/polkadot-js/ui/pull/860))
+- Set headers for 2026 ([#859](https://github.com/polkadot-js/ui/pull/859))
+
+
+## 3.16.6 Dec 10, 2025
+
+Changes:
+
+- Upgraded polkadot-js dependencies ([#855](https://github.com/polkadot-js/ui/pull/855))
+
+
+## 3.16.5 Dec 10, 2025
+
+Changes:
+
+- Upgraded polkadot-js dependencies ([#855](https://github.com/polkadot-js/ui/pull/855))
+
+
+## 3.16.4 Nov 25, 2025
+
+Changes:
+
+- Upgraded polkadot-js dependencies ([#853](https://github.com/polkadot-js/ui/pull/853))
+
+
+## 3.16.3 Nov 12, 2025
+
+Changes:
+
+- Upgraded polkadot-js dependencies ([#850](https://github.com/polkadot-js/ui/pull/850))
+
+
+## 3.16.2 Oct 22, 2025
+
+Changes:
+
+- Upgraded polkadot-js dependencies ([#848](https://github.com/polkadot-js/ui/pull/848))
+
+
+## 3.16.1 Aug 27, 2025
+
+Changes:
+
+- 3.15.5 ([#846](https://github.com/polkadot-js/ui/pull/846))
+- Upgraded polkadot deps ([#845](https://github.com/polkadot-js/ui/pull/845))
+
+
+## 3.15.4 Aug 13, 2025
+
+Changes:
+
+- Upgraded polkadot deps ([#843](https://github.com/polkadot-js/ui/pull/843))
+
+
+## 3.15.3 July 30, 2025
+
+Changes:
+
+- Update Beachball.tsx to remove duplication in strict mode ([#840](https://github.com/polkadot-js/ui/pull/840))
+- Bump polkadot deps ([#841](https://github.com/polkadot-js/ui/pull/841))
+
+
+## 3.15.2 July 2, 2025
+
+Changes:
+
+- Upgraded polkadot deps ([#838](https://github.com/polkadot-js/ui/pull/838))
+
+
+## 3.15.1 Jun 18, 2025
+
+Changes:
+
+- Upgraded polkadot deps ([#831](https://github.com/polkadot-js/ui/pull/831))
+
+
+## 3.14.1 May 23, 2025
+
+Changes:
+
+- Add the type field to external keypair accounts ([#833](https://github.com/polkadot-js/ui/pull/833))
+- Upgrade polkadot-js/common to 13.5.1 ([#834](https://github.com/polkadot-js/ui/pull/834))
+
+
+## 3.13.1 Apr 16, 2025
+
+Changes:
+
+- Add key validation for FileStore ([#830](https://github.com/polkadot-js/ui/pull/830))
+- Upgraded polkadot deps ([#831](https://github.com/polkadot-js/ui/pull/831))
+
+
+## 3.12.2 Feb 18, 2025
+
+Changes:
+
+- Bump dev to v0.83.2 ([#827](https://github.com/polkadot-js/ui/pull/827))
+- Bump common to v13.4.3 ([#828](https://github.com/polkadot-js/ui/pull/828))
+
+
+## 3.12.1 Jan 8, 2025
+
+Changes:
+
+- Upgrade common to 13.3.1 ([#824](https://github.com/polkadot-js/ui/pull/824))
+- Bump dev w/ ts ([#823](https://github.com/polkadot-js/ui/pull/823))
+- Update headers to 2025 ([#822](https://github.com/polkadot-js/ui/pull/822))
+
+
+## 3.11.3 Nov 12, 2024
+
+Changes:
+
+- Upgrade polkadot/common to 13.2.3 ([817](https://github.com/polkadot-js/ui/pull/#))
+- Bump dev to 0.82.1 w/ tslib ([#816](https://github.com/polkadot-js/ui/pull/816))
+
+
+## 3.11.2 Oct 30, 2024
+
+Changes:
+
+- Upgrade polkadot/common to 13.2.2 ([#814](https://github.com/polkadot-js/ui/pull/814))
+
+
+## 3.11.1 Oct 23, 2024
+
+Changes:
+
+- Upgrade polkadot/common to 13.2.1 ([#811](https://github.com/polkadot-js/ui/pull/811))
+- Bump yarn to 4.5.1 ([#812](https://github.com/polkadot-js/ui/pull/812))
+- Bump dev 0.81.2 ([#810](https://github.com/polkadot-js/ui/pull/810))
+  - Correctly exports CJS and ESM
+
+
+## 3.10.1 Sep 20, 2024
+
+Changes:
+
+- Upgrade polkadot/common to 13.1.1 ([#808](https://github.com/polkadot-js/ui/pull/808))
+- Bump yarn to 4.4.0 ([#806](https://github.com/polkadot-js/ui/pull/806))
+
+
+## 3.9.1 Aug 13, 2024
+
+Changes:
+
+- Upgrade @polkadot/dev to 0.79.3 ([#803](https://github.com/polkadot-js/ui/pull/803))
+- Add chainSpecific option for ledger ([#804](https://github.com/polkadot-js/ui/pull/804))
+
+
 ## 3.8.3 July 31, 2024
 
 Changes:

CONTRIBUTORS

@@ -1,5 +1,6 @@
      735	Jaco                          	Adjust Vue peerDependency, >= 2.7 for defineComponent (#782)
-      14	Tarik Gul                     	3.8.3 (#802)
+      41	Tarik Gul                     	3.16.7 (#861)
+      22	Arjun Porwal                  	3.16.6 (#857)
        7	YJ                            	fix #224: decrease frame size to 1024, set multipart bool (#225)
        4	Antoine Estienne              	Refactor logic to better use prefix (#491)
        4	kwingram25                    	fix ff api url issue (#289)
@@ -9,6 +10,7 @@
        2	Drew Stone                    	Add Edgeware testnet and mainnet updated endpoints (#274)
        2	Hanwen Cheng                  	allow qr to scan seed qr (#330)
        2	Nikos Kontakis                	Fix undefined process error that may appear when using ui (#524)
+       2	Valentin Fernandez            	3.12.2
        2	Viki Val                      	Add compatibility layer for H160 addresses (#789)
        2	Vlad Proshchavaiev            	Add Subsocial to ss58 defaults (#358)
        2	Xiliang Chen                  	Update UNfrastructure node label (#160)
@@ -29,6 +31,7 @@
        1	Luke Schoen                   	Fix typo in heading (#114)
        1	Nantian                       	fix bigint type (#510)
        1	Nikhil Ranjan                 	Updated to valid javascript (#271)
+       1	Niklas P                      	Update Beachball.tsx to remove duplication in strict mode (#840)
        1	omahs                         	Fix: typos (#709)
        1	Ryan Lee                      	fix: qr-code (#801)
        1	Shawn Tabrizi                 	Add a new `notification` setting (#498)

eslint.config.js

@@ -1,4 +1,4 @@
-// Copyright 2017-2024 @polkadot/ui-shared authors & contributors
+// Copyright 2017-2026 @polkadot/ui-shared authors & contributors
 // SPDX-License-Identifier: Apache-2.0
 
 import baseConfig from '@polkadot/dev/config/eslint';

package.json

@@ -6,7 +6,7 @@
   },
   "homepage": "https://github.com/polkadot-js/ui#readme",
   "license": "Apache-2.0",
-  "packageManager": "yarn@4.3.1",
+  "packageManager": "yarn@4.5.1",
   "private": true,
   "repository": {
     "type": "git",
@@ -14,10 +14,10 @@
   },
   "sideEffects": false,
   "type": "module",
-  "version": "3.8.3",
+  "version": "3.16.7",
   "versions": {
-    "git": "3.8.3",
-    "npm": "3.8.3"
+    "git": "3.16.7",
+    "npm": "3.16.7"
   },
   "workspaces": [
     "packages/*"
@@ -33,15 +33,18 @@
     "test:one": "polkadot-dev-run-test --env browser"
   },
   "devDependencies": {
-    "@polkadot/dev": "^0.78.3",
-    "@polkadot/x-bundle": "^13.0.2",
-    "@types/node": "^20.10.5",
+    "@polkadot/dev": "^0.83.3",
+    "@polkadot/x-bundle": "^14.0.3",
+    "@types/node": "^22.10.5",
     "react": "^18.2.0",
     "react-dom": "^18.2.0",
     "react-is": "^18.2.0",
     "react-native": "^0.73.1"
   },
   "resolutions": {
-    "typescript": "^5.3.3"
+    "@polkadot/keyring": "https://git.lair.cafe/api/packages/quantus/npm/%40polkadot%2Fkeyring/-/14.0.3-quantus.3/keyring-14.0.3-quantus.3.tgz",
+    "@polkadot/networks": "https://git.lair.cafe/api/packages/quantus/npm/%40polkadot%2Fnetworks/-/14.0.3-quantus.3/networks-14.0.3-quantus.3.tgz",
+    "@polkadot/util-crypto": "https://git.lair.cafe/api/packages/quantus/npm/%40polkadot%2Futil-crypto/-/14.0.3-quantus.3/util-crypto-14.0.3-quantus.3.tgz",
+    "typescript": "5.5.4"
   }
 }

packages/react-identicon/package.json

@@ -18,19 +18,19 @@
     "./packageDetect.cjs"
   ],
   "type": "module",
-  "version": "3.8.3",
+  "version": "3.16.7",
   "main": "index.js",
   "dependencies": {
-    "@polkadot/keyring": "^13.0.2",
-    "@polkadot/ui-settings": "3.8.3",
-    "@polkadot/ui-shared": "3.8.3",
-    "@polkadot/util": "^13.0.2",
-    "@polkadot/util-crypto": "^13.0.2",
+    "@polkadot/keyring": "^14.0.3",
+    "@polkadot/ui-settings": "3.16.7",
+    "@polkadot/ui-shared": "3.16.7",
+    "@polkadot/util": "^14.0.3",
+    "@polkadot/util-crypto": "^14.0.3",
     "ethereum-blockies-base64": "^1.0.2",
     "jdenticon": "3.2.0",
     "react-copy-to-clipboard": "^5.1.0",
     "styled-components": "^6.1.1",
-    "tslib": "^2.6.2"
+    "tslib": "^2.8.1"
   },
   "devDependencies": {
     "@types/react-copy-to-clipboard": "^5.0.7",

packages/react-identicon/src/Identicon.tsx

@@ -1,4 +1,4 @@
-// Copyright 2017-2024 @polkadot/react-identicon authors & contributors
+// Copyright 2017-2026 @polkadot/react-identicon authors & contributors
 // SPDX-License-Identifier: Apache-2.0
 
 import type { Prefix } from '@polkadot/util-crypto/address/types';

packages/react-identicon/src/bundle.ts

@@ -1,4 +1,4 @@
-// Copyright 2017-2024 @polkadot/react-identicon authors & contributors
+// Copyright 2017-2026 @polkadot/react-identicon authors & contributors
 // SPDX-License-Identifier: Apache-2.0
 
 export * from './icons/index.js';

packages/react-identicon/src/icons/Beachball.tsx

@@ -1,4 +1,4 @@
-// Copyright 2017-2024 @polkadot/react-identicon authors & contributors
+// Copyright 2017-2026 @polkadot/react-identicon authors & contributors
 // SPDX-License-Identifier: Apache-2.0
 
 import type { Props } from '../types.js';
@@ -10,9 +10,12 @@ import { beachballIcon } from '@polkadot/ui-shared';
 function Identicon ({ address, className = '', size, style = {} }: Props): React.ReactElement<Props> {
   const updateElem = useCallback(
     (node: HTMLDivElement): void => {
-      node?.appendChild(
-        beachballIcon(address, { isAlternative: false, size })
-      );
+      if (node) {
+        node.innerHTML = '';
+        node.appendChild(
+          beachballIcon(address, { isAlternative: false, size })
+        );
+      }
     },
     [address, size]
   );

packages/react-identicon/src/icons/Empty.tsx

@@ -1,4 +1,4 @@
-// Copyright 2017-2024 @polkadot/react-identicon authors & contributors
+// Copyright 2017-2026 @polkadot/react-identicon authors & contributors
 // SPDX-License-Identifier: Apache-2.0
 
 import type { Props } from '../types.js';

packages/react-identicon/src/icons/Ethereum.tsx

@@ -1,4 +1,4 @@
-// Copyright 2017-2024 @polkadot/react-identicon authors & contributors
+// Copyright 2017-2026 @polkadot/react-identicon authors & contributors
 // SPDX-License-Identifier: Apache-2.0
 
 import type { Props } from '../types.js';

packages/react-identicon/src/icons/Jdenticon.tsx

@@ -1,4 +1,4 @@
-// Copyright 2017-2024 @polkadot/react-identicon authors & contributors
+// Copyright 2017-2026 @polkadot/react-identicon authors & contributors
 // SPDX-License-Identifier: Apache-2.0
 
 import type { Props } from '../types.js';

packages/react-identicon/src/icons/Polkadot.tsx

@@ -1,4 +1,4 @@
-// Copyright 2018-2024 @polkadot/react-identicon authors & contributors
+// Copyright 2018-2026 @polkadot/react-identicon authors & contributors
 // SPDX-License-Identifier: Apache-2.0
 
 // Copyright 2018 Paritytech via paritytech/oo7/polkadot-identicon

packages/react-identicon/src/icons/index.ts

@@ -1,4 +1,4 @@
-// Copyright 2017-2024 @polkadot/react-identicon authors & contributors
+// Copyright 2017-2026 @polkadot/react-identicon authors & contributors
 // SPDX-License-Identifier: Apache-2.0
 
 export { Beachball } from './Beachball.js';

packages/react-identicon/src/index.ts

@@ -1,4 +1,4 @@
-// Copyright 2017-2024 @polkadot/react-identicon authors & contributors
+// Copyright 2017-2026 @polkadot/react-identicon authors & contributors
 // SPDX-License-Identifier: Apache-2.0
 
 import './packageDetect.js';

packages/react-identicon/src/packageDetect.ts

@@ -1,4 +1,4 @@
-// Copyright 2017-2024 @polkadot/react-identicon authors & contributors
+// Copyright 2017-2026 @polkadot/react-identicon authors & contributors
 // SPDX-License-Identifier: Apache-2.0
 
 // Do not edit, auto-generated by @polkadot/dev

packages/react-identicon/src/packageInfo.ts

@@ -1,6 +1,6 @@
-// Copyright 2017-2024 @polkadot/react-identicon authors & contributors
+// Copyright 2017-2026 @polkadot/react-identicon authors & contributors
 // SPDX-License-Identifier: Apache-2.0
 
 // Do not edit, auto-generated by @polkadot/dev
 
-export const packageInfo = { name: '@polkadot/react-identicon', path: 'auto', type: 'auto', version: '3.8.3' };
+export const packageInfo = { name: '@polkadot/react-identicon', path: 'auto', type: 'auto', version: '3.16.7' };

packages/react-identicon/src/styled.ts

@@ -1,4 +1,4 @@
-// Copyright 2017-2024 @polkadot/react-identicon authors & contributors
+// Copyright 2017-2026 @polkadot/react-identicon authors & contributors
 // SPDX-License-Identifier: Apache-2.0
 
 export { styled } from 'styled-components';

packages/react-identicon/src/types.ts

@@ -1,4 +1,4 @@
-// Copyright 2018-2024 @polkadot/react-identicon authors & contributors
+// Copyright 2018-2026 @polkadot/react-identicon authors & contributors
 // SPDX-License-Identifier: Apache-2.0
 
 import type React from 'react';

packages/react-qr/package.json

@@ -18,17 +18,17 @@
     "./packageDetect.cjs"
   ],
   "type": "module",
-  "version": "3.8.3",
+  "version": "3.16.7",
   "main": "index.js",
   "dependencies": {
-    "@polkadot/ui-settings": "3.8.3",
-    "@polkadot/util": "^13.0.2",
-    "@polkadot/util-crypto": "^13.0.2",
+    "@polkadot/ui-settings": "3.16.7",
+    "@polkadot/util": "^14.0.3",
+    "@polkadot/util-crypto": "^14.0.3",
     "@zxing/browser": "^0.1.5",
     "@zxing/library": "^0.21.2",
     "qrcode-generator": "^1.4.4",
     "styled-components": "^6.1.1",
-    "tslib": "^2.6.2"
+    "tslib": "^2.8.1"
   },
   "peerDependencies": {
     "@polkadot/util": "*",

packages/react-qr/src/Display.tsx

@@ -1,4 +1,4 @@
-// Copyright 2017-2024 @polkadot/react-qr authors & contributors
+// Copyright 2017-2026 @polkadot/react-qr authors & contributors
 // SPDX-License-Identifier: Apache-2.0
 
 import React, { useEffect, useMemo, useRef, useState } from 'react';

packages/react-qr/src/DisplayAddress.tsx

@@ -1,4 +1,4 @@
-// Copyright 2017-2024 @polkadot/react-qr authors & contributors
+// Copyright 2017-2026 @polkadot/react-qr authors & contributors
 // SPDX-License-Identifier: Apache-2.0
 
 import React, { useMemo } from 'react';

packages/react-qr/src/DisplayPayload.tsx

@@ -1,4 +1,4 @@
-// Copyright 2017-2024 @polkadot/react-qr authors & contributors
+// Copyright 2017-2026 @polkadot/react-qr authors & contributors
 // SPDX-License-Identifier: Apache-2.0
 
 import React, { useMemo } from 'react';

packages/react-qr/src/NetworkSpecs.tsx

@@ -1,4 +1,4 @@
-// Copyright 2017-2024 @polkadot/react-qr authors & contributors
+// Copyright 2017-2026 @polkadot/react-qr authors & contributors
 // SPDX-License-Identifier: Apache-2.0
 
 import type { NetworkSpecsStruct } from '@polkadot/ui-settings/types';

packages/react-qr/src/Scan.tsx

@@ -1,4 +1,4 @@
-// Copyright 2017-2024 @polkadot/react-qr authors & contributors
+// Copyright 2017-2026 @polkadot/react-qr authors & contributors
 // SPDX-License-Identifier: Apache-2.0
 
 import { BrowserQRCodeReader, type IScannerControls } from '@zxing/browser';

packages/react-qr/src/ScanAddress.tsx

@@ -1,4 +1,4 @@
-// Copyright 2017-2024 @polkadot/react-qr authors & contributors
+// Copyright 2017-2026 @polkadot/react-qr authors & contributors
 // SPDX-License-Identifier: Apache-2.0
 
 import type { HexString } from '@polkadot/util/types';

packages/react-qr/src/ScanSignature.tsx

@@ -1,4 +1,4 @@
-// Copyright 2017-2024 @polkadot/react-qr authors & contributors
+// Copyright 2017-2026 @polkadot/react-qr authors & contributors
 // SPDX-License-Identifier: Apache-2.0
 
 import type { HexString } from '@polkadot/util/types';

packages/react-qr/src/bundle.ts

@@ -1,4 +1,4 @@
-// Copyright 2017-2024 @polkadot/react-qr authors & contributors
+// Copyright 2017-2026 @polkadot/react-qr authors & contributors
 // SPDX-License-Identifier: Apache-2.0
 
 export { QrDisplayAddress } from './DisplayAddress.js';

packages/react-qr/src/constants.ts

@@ -1,4 +1,4 @@
-// Copyright 2017-2024 @polkadot/react-qr authors & contributors
+// Copyright 2017-2026 @polkadot/react-qr authors & contributors
 // SPDX-License-Identifier: Apache-2.0
 
 export const ADDRESS_PREFIX = 'substrate';

packages/react-qr/src/index.ts

@@ -1,4 +1,4 @@
-// Copyright 2017-2024 @polkadot/react-qr authors & contributors
+// Copyright 2017-2026 @polkadot/react-qr authors & contributors
 // SPDX-License-Identifier: Apache-2.0
 
 import './packageDetect.js';

packages/react-qr/src/packageDetect.ts

@@ -1,4 +1,4 @@
-// Copyright 2017-2024 @polkadot/react-qr authors & contributors
+// Copyright 2017-2026 @polkadot/react-qr authors & contributors
 // SPDX-License-Identifier: Apache-2.0
 
 // Do not edit, auto-generated by @polkadot/dev

packages/react-qr/src/packageInfo.ts

@@ -1,6 +1,6 @@
-// Copyright 2017-2024 @polkadot/react-qr authors & contributors
+// Copyright 2017-2026 @polkadot/react-qr authors & contributors
 // SPDX-License-Identifier: Apache-2.0
 
 // Do not edit, auto-generated by @polkadot/dev
 
-export const packageInfo = { name: '@polkadot/react-qr', path: 'auto', type: 'auto', version: '3.8.3' };
+export const packageInfo = { name: '@polkadot/react-qr', path: 'auto', type: 'auto', version: '3.16.7' };

packages/react-qr/src/qrcode.ts

@@ -1,4 +1,4 @@
-// Copyright 2017-2024 @polkadot/react-qr authors & contributors
+// Copyright 2017-2026 @polkadot/react-qr authors & contributors
 // SPDX-License-Identifier: Apache-2.0
 
 import _qrcode from 'qrcode-generator';

packages/react-qr/src/styled.ts

@@ -1,4 +1,4 @@
-// Copyright 2017-2024 @polkadot/react-qr authors & contributors
+// Copyright 2017-2026 @polkadot/react-qr authors & contributors
 // SPDX-License-Identifier: Apache-2.0
 
 export { styled } from 'styled-components';

packages/react-qr/src/util.spec.ts

@@ -1,4 +1,4 @@
-// Copyright 2017-2024 @polkadot/react-qr authors & contributors
+// Copyright 2017-2026 @polkadot/react-qr authors & contributors
 // SPDX-License-Identifier: Apache-2.0
 
 /// <reference types="@polkadot/dev-test/globals.d.ts" />

packages/react-qr/src/util.ts

@@ -1,4 +1,4 @@
-// Copyright 2017-2024 @polkadot/react-qr authors & contributors
+// Copyright 2017-2026 @polkadot/react-qr authors & contributors
 // SPDX-License-Identifier: Apache-2.0
 
 import { isString, u8aConcat, u8aToU8a } from '@polkadot/util';

packages/reactnative-identicon/package.json

@@ -18,14 +18,14 @@
     "./packageDetect.cjs"
   ],
   "type": "module",
-  "version": "3.8.3",
+  "version": "3.16.7",
   "main": "index.js",
   "dependencies": {
-    "@polkadot/ui-shared": "3.8.3",
-    "@polkadot/util": "^13.0.2",
-    "@polkadot/util-crypto": "^13.0.2",
+    "@polkadot/ui-shared": "3.16.7",
+    "@polkadot/util": "^14.0.3",
+    "@polkadot/util-crypto": "^14.0.3",
     "react-native-svg": "^14.1.0",
-    "tslib": "^2.6.2"
+    "tslib": "^2.8.1"
   },
   "devDependencies": {
     "@types/react-native": "^0.72.8"

packages/reactnative-identicon/src/Identicon.tsx

@@ -1,4 +1,4 @@
-// Copyright 2017-2024 @polkadot/reactnative-identicon authors & contributors
+// Copyright 2017-2026 @polkadot/reactnative-identicon authors & contributors
 // SPDX-License-Identifier: Apache-2.0
 
 import type { Prefix } from '@polkadot/util-crypto/address/types';

packages/reactnative-identicon/src/bundle.ts

@@ -1,4 +1,4 @@
-// Copyright 2017-2024 @polkadot/reactnative-identicon authors & contributors
+// Copyright 2017-2026 @polkadot/reactnative-identicon authors & contributors
 // SPDX-License-Identifier: Apache-2.0
 
 export * from './icons/index.js';

packages/reactnative-identicon/src/icons/Empty.tsx

@@ -1,4 +1,4 @@
-// Copyright 2017-2024 @polkadot/reactnative-identicon authors & contributors
+// Copyright 2017-2026 @polkadot/reactnative-identicon authors & contributors
 // SPDX-License-Identifier: Apache-2.0
 
 import type { Props } from '../types.js';

packages/reactnative-identicon/src/icons/Polkadot.tsx

@@ -1,4 +1,4 @@
-// Copyright 2018-2024 @polkadot/reactnative-identicon authors & contributors
+// Copyright 2018-2026 @polkadot/reactnative-identicon authors & contributors
 // SPDX-License-Identifier: Apache-2.0
 
 import type { Circle as CircleType } from '@polkadot/ui-shared/icons/types';

packages/reactnative-identicon/src/icons/index.ts

@@ -1,4 +1,4 @@
-// Copyright 2017-2024 @polkadot/reactnative-identicon authors & contributors
+// Copyright 2017-2026 @polkadot/reactnative-identicon authors & contributors
 // SPDX-License-Identifier: Apache-2.0
 
 export { default as Empty } from './Empty.js';

packages/reactnative-identicon/src/index.ts

@@ -1,4 +1,4 @@
-// Copyright 2017-2024 @polkadot/reactnative-identicon authors & contributors
+// Copyright 2017-2026 @polkadot/reactnative-identicon authors & contributors
 // SPDX-License-Identifier: Apache-2.0
 
 import './packageDetect.js';

packages/reactnative-identicon/src/packageDetect.ts

@@ -1,4 +1,4 @@
-// Copyright 2017-2024 @polkadot/reactnative-identicon authors & contributors
+// Copyright 2017-2026 @polkadot/reactnative-identicon authors & contributors
 // SPDX-License-Identifier: Apache-2.0
 
 // Do not edit, auto-generated by @polkadot/dev

packages/reactnative-identicon/src/packageInfo.ts

@@ -1,6 +1,6 @@
-// Copyright 2017-2024 @polkadot/reactnative-identicon authors & contributors
+// Copyright 2017-2026 @polkadot/reactnative-identicon authors & contributors
 // SPDX-License-Identifier: Apache-2.0
 
 // Do not edit, auto-generated by @polkadot/dev
 
-export const packageInfo = { name: '@polkadot/reactnative-identicon', path: 'auto', type: 'auto', version: '3.8.3' };
+export const packageInfo = { name: '@polkadot/reactnative-identicon', path: 'auto', type: 'auto', version: '3.16.7' };

packages/reactnative-identicon/src/types.ts

@@ -1,4 +1,4 @@
-// Copyright 2018-2024 @polkadot/reactnative-identicon authors & contributors
+// Copyright 2018-2026 @polkadot/reactnative-identicon authors & contributors
 // SPDX-License-Identifier: Apache-2.0
 
 export interface Props {

packages/ui-keyring/package.json

@@ -17,19 +17,20 @@
     "./packageDetect.cjs"
   ],
   "type": "module",
-  "version": "3.8.3",
+  "version": "3.16.7-quantus.3",
   "main": "index.js",
   "dependencies": {
-    "@polkadot/keyring": "^13.0.2",
-    "@polkadot/ui-settings": "3.8.3",
-    "@polkadot/util": "^13.0.2",
-    "@polkadot/util-crypto": "^13.0.2",
+    "@polkadot/keyring": "14.0.3-quantus.3",
+    "@polkadot/ui-settings": "3.16.7",
+    "@polkadot/util": "^14.0.3",
+    "@polkadot/util-crypto": "14.0.3-quantus.3",
     "mkdirp": "^3.0.1",
     "rxjs": "^7.8.1",
     "store": "^2.0.12",
-    "tslib": "^2.6.2"
+    "tslib": "^2.8.1"
   },
   "devDependencies": {
+    "@quantus/crypto": "^0.3.0",
     "@types/mkdirp": "^2.0.0",
     "@types/store": "^2.0.5"
   },

packages/ui-keyring/src/Base.ts

@@ -1,4 +1,4 @@
-// Copyright 2017-2024 @polkadot/ui-keyring authors & contributors
+// Copyright 2017-2026 @polkadot/ui-keyring authors & contributors
 // SPDX-License-Identifier: Apache-2.0
 
 import type { KeyringInstance, KeyringPair } from '@polkadot/keyring/types';
@@ -125,8 +125,9 @@ export class Base {
       this.setDevMode(options.isDevelopment);
     }
 
-    // set Ethereum state
-    this.#isEthereum = keyring.type === 'ethereum';
+    // Never Ethereum: the keyring holds only ML-DSA keys (quantus/common#6). Kept
+    // as a property so callers written against upstream still read a boolean.
+    this.#isEthereum = false;
 
     this.#keyring = keyring;
     this._genesisHash = options.genesisHash && (

packages/ui-keyring/src/Keyring.dilithium.spec.ts

@@ -0,0 +1,94 @@
+// Copyright 2017-2026 @polkadot/ui-keyring authors & contributors
+// SPDX-License-Identifier: Apache-2.0
+
+/// <reference types="@polkadot/dev-test/globals.d.ts" />
+
+import type { KeyringPair$Json } from '@polkadot/keyring/types';
+
+import { contextForSpec } from '@quantus/crypto';
+
+import { Keyring as BaseKeyring } from '@polkadot/keyring';
+import { dilithiumVerify } from '@polkadot/util-crypto';
+
+import { Keyring } from './Keyring.js';
+
+// crystal_alice, from the chain's dev genesis — a raw 32-byte seed straight into
+// ML-DSA-87 keygen. The address is what `quantus developer create-test-wallets`
+// prints, i.e. an independent implementation.
+const ALICE = 'qzk1Nxai3dZD9Cn5kwGcgL6mKxsfxwqdis7kDQJ52aJS2vSn7';
+const PASSWORD = 'not a good password';
+const MESSAGE = new Uint8Array([0x75, 0x69]);
+
+function backup (): KeyringPair$Json {
+  const base = new BaseKeyring({ ss58Format: 189, type: 'dilithium87' });
+
+  return base
+    .addFromSeed(new Uint8Array(32), { name: 'crystal_alice' }, 'dilithium87')
+    .toJson(PASSWORD);
+}
+
+// `loadAll` initialises `@polkadot/ui-settings`, which is a module singleton, so
+// it may be called once per *process* — not per instance. One keyring for the
+// whole file, loaded once.
+const uiKeyring = new Keyring();
+
+uiKeyring.loadAll({ ss58Format: 189, store: undefined, type: 'dilithium87' });
+
+describe('ui-keyring restoreAccount', (): void => {
+  // Before the fix this constructed a pair whose "public key" was
+  // decodeAddress(json.address) — i.e. a Poseidon2 hash of the public key, passed
+  // off as the key itself. It did not throw; it produced a pair that was simply
+  // wrong.
+  it('restores an ML-DSA account to the right address', (): void => {
+    const pair = uiKeyring.restoreAccount(backup(), PASSWORD);
+
+    expect(pair.address).toEqual(ALICE);
+    expect(pair.publicKey.length).toEqual(2592);
+    expect(pair.addressRaw.length).toEqual(32);
+  });
+
+  it('restores an account that can sign for its own address', (): void => {
+    const pair = uiKeyring.restoreAccount(backup(), PASSWORD);
+
+    pair.decodePkcs8(PASSWORD);
+
+    const context = contextForSpec(148);
+    const signature = pair.sign(MESSAGE, { context });
+
+    expect(dilithiumVerify(MESSAGE, signature, pair.addressRaw, 'dilithium87', context)).toEqual(true);
+  });
+
+  it('fails on a wrong password without half-restoring', (): void => {
+    expect(() => uiKeyring.restoreAccount(backup(), 'wrong')).toThrow();
+  });
+
+  // The address field sits outside the encrypted blob. For the curve schemes a
+  // tampered one cannot decode at all; here it decodes cleanly and would yield an
+  // account displaying an address its key does not control.
+  it('rejects JSON whose address does not match its key', (): void => {
+    const base = new BaseKeyring({ ss58Format: 189, type: 'dilithium87' });
+    const other = base.addFromSeed(new Uint8Array(32).fill(3), {}, 'dilithium87');
+
+    expect(() => uiKeyring.restoreAccount({ ...backup(), address: other.address }, PASSWORD)).toThrow(/does not match the address/);
+  });
+
+  // quantus/common#6: a backup of a quantum-unsafe key is refused with the
+  // reason, not decoded. This is the JSON a polkadot{.js} export of an ed25519
+  // account carries.
+  it('refuses a polkadot{.js} backup of a quantum-unsafe key, saying why', (): void => {
+    const json = {
+      address: '5GrwvaEF5zXb26Fz9rcQpDWS57CtERHpNehXCPcNoHGKutQY',
+      encoded: '0x00',
+      encoding: { content: ['pkcs8', 'sr25519'], type: ['scrypt', 'xsalsa20-poly1305'], version: '3' },
+      meta: { name: 'polkadot account' }
+    } as unknown as KeyringPair$Json;
+
+    expect(() => uiKeyring.restoreAccount(json, PASSWORD)).toThrow(/sr25519 keys are not quantum-safe and cannot be held here/);
+  });
+
+  it('refuses a file that does not record its key type', (): void => {
+    const json = { ...backup(), encoding: { content: 'pkcs8', type: 'none', version: '0' } } as unknown as KeyringPair$Json;
+
+    expect(() => uiKeyring.restoreAccount(json, PASSWORD)).toThrow(/does not record its key type/);
+  });
+});

packages/ui-keyring/src/Keyring.ts

@@ -1,4 +1,4 @@
-// Copyright 2017-2024 @polkadot/ui-keyring authors & contributors
+// Copyright 2017-2026 @polkadot/ui-keyring authors & contributors
 // SPDX-License-Identifier: Apache-2.0
 
 import type { KeyringPair, KeyringPair$Json, KeyringPair$Meta } from '@polkadot/keyring/types';
@@ -8,10 +8,9 @@ import type { KeypairType } from '@polkadot/util-crypto/types';
 import type { AddressSubject, SingleAddress } from './observable/types.js';
 import type { CreateResult, KeyringAddress, KeyringAddressType, KeyringItemType, KeyringJson, KeyringJson$Meta, KeyringOptions, KeyringPairs$Json, KeyringStruct } from './types.js';
 
-import { createPair } from '@polkadot/keyring';
 import { chains } from '@polkadot/ui-settings';
 import { bnToBn, hexToU8a, isFunction, isHex, isString, objectSpread, stringify, stringToU8a, u8aSorted, u8aToString } from '@polkadot/util';
-import { base64Decode, createKeyMulti, jsonDecrypt, jsonEncrypt } from '@polkadot/util-crypto';
+import { createKeyMulti, jsonDecrypt, jsonEncrypt } from '@polkadot/util-crypto';
 
 import { env } from './observable/env.js';
 import { KeyringOption } from './options/index.js';
@@ -21,7 +20,7 @@ import { accountKey, accountRegex, addressKey, addressRegex, contractKey, contra
 const RECENT_EXPIRY = 24 * 60 * 60;
 
 // No accounts (or test accounts) should be loaded until after the chain determination.
-// Chain determination occurs outside of Keyring. Loading `keyring.loadAll({ type: 'ed25519' | 'sr25519' })` is triggered
+// Chain determination occurs outside of Keyring. Loading `keyring.loadAll({ type: 'dilithium65' | 'dilithium87' })` is triggered
 // from the API after the chain is received
 export class Keyring extends Base implements KeyringStruct {
   public readonly keyringOption = new KeyringOption();
@@ -33,7 +32,7 @@ export class Keyring extends Base implements KeyringStruct {
   };
 
   public addExternal (address: string | Uint8Array, meta: KeyringPair$Meta = {}): CreateResult {
-    const pair = this.keyring.addFromAddress(address, objectSpread<KeyringJson$Meta>({}, meta, { isExternal: true }), null);
+    const pair = this.keyring.addFromAddress(address, objectSpread<KeyringJson$Meta>({}, meta, { isExternal: true }), null, meta?.type);
 
     return {
       json: this.saveAccount(pair),
@@ -327,15 +326,18 @@ export class Keyring extends Base implements KeyringStruct {
   }
 
   public restoreAccount (json: KeyringPair$Json, password: string): KeyringPair {
-    const cryptoType = Array.isArray(json.encoding.content) ? json.encoding.content[1] : 'ed25519';
-    const encType = Array.isArray(json.encoding.type) ? json.encoding.type : [json.encoding.type];
-    const pair = createPair(
-      { toSS58: this.encodeAddress, type: cryptoType as KeypairType },
-      { publicKey: this.decodeAddress(json.address, true) },
-      json.meta,
-      isHex(json.encoded) ? hexToU8a(json.encoded) : base64Decode(json.encoded),
-      encType
-    );
+    // Version-0 JSON predates recording the key type, so it cannot be an ML-DSA
+    // account. Upstream guessed ed25519; this keyring cannot hold one.
+    if (!Array.isArray(json.encoding.content)) {
+      throw new Error('This account file does not record its key type, so it is not an ML-DSA account and cannot be restored here');
+    }
+
+    // Through the keyring rather than createPair directly, so a restore gets the
+    // same refusal as every other entry point: a polkadot{.js} backup of an
+    // sr25519 or ed25519 account is told it is not quantum-safe, not decoded.
+    // createFromJson also carries the address as an account id until the real
+    // public key is decrypted, and checks the two agree when it is.
+    const pair = this.keyring.createFromJson(json, true);
 
     // unlock, save account and then lock (locking cleans secretKey, so needs to be last)
     pair.decodePkcs8(password);

packages/ui-keyring/src/bundle.ts

@@ -1,4 +1,4 @@
-// Copyright 2017-2024 @polkadot/ui-keyring authors & contributors
+// Copyright 2017-2026 @polkadot/ui-keyring authors & contributors
 // SPDX-License-Identifier: Apache-2.0
 
 import { Keyring } from './Keyring.js';

packages/ui-keyring/src/defaults.ts

@@ -1,4 +1,4 @@
-// Copyright 2017-2024 @polkadot/ui-keyring authors & contributors
+// Copyright 2017-2026 @polkadot/ui-keyring authors & contributors
 // SPDX-License-Identifier: Apache-2.0
 
 import { decodeAddress } from '@polkadot/keyring';

packages/ui-keyring/src/index.ts

@@ -1,4 +1,4 @@
-// Copyright 2017-2024 @polkadot/ui-keyring authors & contributors
+// Copyright 2017-2026 @polkadot/ui-keyring authors & contributors
 // SPDX-License-Identifier: Apache-2.0
 
 import './packageDetect.js';

packages/ui-keyring/src/json.d.ts

@@ -1,4 +1,4 @@
-// Copyright 2017-2024 @polkadot/ui-keyring authors & contributors
+// Copyright 2017-2026 @polkadot/ui-keyring authors & contributors
 // SPDX-License-Identifier: Apache-2.0
 
 // Be able to import json in TS

packages/ui-keyring/src/observable/accounts.ts

@@ -1,4 +1,4 @@
-// Copyright 2017-2024 @polkadot/ui-keyring authors & contributors
+// Copyright 2017-2026 @polkadot/ui-keyring authors & contributors
 // SPDX-License-Identifier: Apache-2.0
 
 import { accountKey } from '../defaults.js';

packages/ui-keyring/src/observable/addresses.ts

@@ -1,4 +1,4 @@
-// Copyright 2017-2024 @polkadot/ui-keyring authors & contributors
+// Copyright 2017-2026 @polkadot/ui-keyring authors & contributors
 // SPDX-License-Identifier: Apache-2.0
 
 import { addressKey } from '../defaults.js';

packages/ui-keyring/src/observable/contracts.ts

@@ -1,4 +1,4 @@
-// Copyright 2017-2024 @polkadot/ui-keyring authors & contributors
+// Copyright 2017-2026 @polkadot/ui-keyring authors & contributors
 // SPDX-License-Identifier: Apache-2.0
 
 import { contractKey } from '../defaults.js';

packages/ui-keyring/src/observable/env.ts

@@ -1,4 +1,4 @@
-// Copyright 2017-2024 @polkadot/ui-keyring authors & contributors
+// Copyright 2017-2026 @polkadot/ui-keyring authors & contributors
 // SPDX-License-Identifier: Apache-2.0
 
 import { BehaviorSubject } from 'rxjs';

packages/ui-keyring/src/observable/genericSubject.ts

@@ -1,4 +1,4 @@
-// Copyright 2017-2024 @polkadot/ui-keyring authors & contributors
+// Copyright 2017-2026 @polkadot/ui-keyring authors & contributors
 // SPDX-License-Identifier: Apache-2.0
 
 import type { KeypairType } from '@polkadot/util-crypto/types';

packages/ui-keyring/src/observable/index.ts

@@ -1,4 +1,4 @@
-// Copyright 2017-2024 @polkadot/ui-keyring authors & contributors
+// Copyright 2017-2026 @polkadot/ui-keyring authors & contributors
 // SPDX-License-Identifier: Apache-2.0
 
 import type { SubjectInfo } from './types.js';

packages/ui-keyring/src/observable/types.ts

@@ -1,4 +1,4 @@
-// Copyright 2017-2024 @polkadot/ui-keyring authors & contributors
+// Copyright 2017-2026 @polkadot/ui-keyring authors & contributors
 // SPDX-License-Identifier: Apache-2.0
 
 import type { BehaviorSubject } from 'rxjs';

packages/ui-keyring/src/options/index.ts

@@ -1,4 +1,4 @@
-// Copyright 2017-2024 @polkadot/ui-keyring authors & contributors
+// Copyright 2017-2026 @polkadot/ui-keyring authors & contributors
 // SPDX-License-Identifier: Apache-2.0
 
 import type { Subscription } from 'rxjs';

packages/ui-keyring/src/options/item.ts

@@ -1,4 +1,4 @@
-// Copyright 2017-2024 @polkadot/ui-keyring authors & contributors
+// Copyright 2017-2026 @polkadot/ui-keyring authors & contributors
 // SPDX-License-Identifier: Apache-2.0
 
 import type { KeyringSectionOption } from './types.js';

packages/ui-keyring/src/options/types.ts

@@ -1,4 +1,4 @@
-// Copyright 2017-2024 @polkadot/ui-keyring authors & contributors
+// Copyright 2017-2026 @polkadot/ui-keyring authors & contributors
 // SPDX-License-Identifier: Apache-2.0
 
 import type { KeyringItemType, KeyringStruct } from '../types.js';

packages/ui-keyring/src/packageDetect.ts

@@ -1,4 +1,4 @@
-// Copyright 2017-2024 @polkadot/ui-keyring authors & contributors
+// Copyright 2017-2026 @polkadot/ui-keyring authors & contributors
 // SPDX-License-Identifier: Apache-2.0
 
 // Do not edit, auto-generated by @polkadot/dev

packages/ui-keyring/src/packageInfo.ts

@@ -1,6 +1,6 @@
-// Copyright 2017-2024 @polkadot/ui-keyring authors & contributors
+// Copyright 2017-2026 @polkadot/ui-keyring authors & contributors
 // SPDX-License-Identifier: Apache-2.0
 
 // Do not edit, auto-generated by @polkadot/dev
 
-export const packageInfo = { name: '@polkadot/ui-keyring', path: 'auto', type: 'auto', version: '3.8.3' };
+export const packageInfo = { name: '@polkadot/ui-keyring', path: 'auto', type: 'auto', version: '3.16.7-quantus.3' };

packages/ui-keyring/src/stores/Browser.ts

@@ -1,4 +1,4 @@
-// Copyright 2017-2024 @polkadot/ui-keyring authors & contributors
+// Copyright 2017-2026 @polkadot/ui-keyring authors & contributors
 // SPDX-License-Identifier: Apache-2.0
 
 import type { KeyringJson, KeyringStore } from '../types.js';

packages/ui-keyring/src/stores/File.ts

@@ -1,4 +1,4 @@
-// Copyright 2017-2024 @polkadot/ui-keyring authors & contributors
+// Copyright 2017-2026 @polkadot/ui-keyring authors & contributors
 // SPDX-License-Identifier: Apache-2.0
 
 import type { KeyringJson, KeyringStore } from '../types.js';
@@ -19,6 +19,28 @@ export class FileStore implements KeyringStore {
     this.#path = path;
   }
 
+  private validateKey (key: string): boolean {
+    // Make sure the key has a .json extension
+    if (!key.endsWith('.json')) {
+      console.error('Non-JSON file requested: ', key);
+
+      return false;
+    }
+
+    // Remove '.json'
+    const keyWithoutExtension = key.slice(0, -5);
+    // Only allow alphanumeric characters, hyphens, and underscores in the base filename
+    const safeKeyRegex = /^[a-zA-Z0-9_-]+$/;
+
+    if (!safeKeyRegex.test(keyWithoutExtension)) {
+      console.error('Invalid key format detected: ', key);
+
+      return false;
+    }
+
+    return true;
+  }
+
   public all (fn: (key: string, value: KeyringJson) => void): void {
     fs
       .readdirSync(this.#path)
@@ -51,6 +73,10 @@ export class FileStore implements KeyringStore {
   }
 
   private _getPath (key: string): string {
+    if (!this.validateKey(key)) {
+      throw new Error('Invalid key format');
+    }
+
     return path.join(this.#path, key);
   }
 

packages/ui-keyring/src/stores/index.ts

@@ -1,4 +1,4 @@
-// Copyright 2017-2024 @polkadot/ui-keyring authors & contributors
+// Copyright 2017-2026 @polkadot/ui-keyring authors & contributors
 // SPDX-License-Identifier: Apache-2.0
 
 export { BrowserStore } from './Browser.js';

packages/ui-keyring/src/types.ts

@@ -1,4 +1,4 @@
-// Copyright 2017-2024 @polkadot/ui-keyring authors & contributors
+// Copyright 2017-2026 @polkadot/ui-keyring authors & contributors
 // SPDX-License-Identifier: Apache-2.0
 
 import type { KeyringInstance as BaseKeyringInstance, KeyringOptions as KeyringOptionsBase, KeyringPair, KeyringPair$Json, KeyringPair$Meta } from '@polkadot/keyring/types';

packages/ui-settings/package.json

@@ -18,14 +18,14 @@
     "./packageDetect.cjs"
   ],
   "type": "module",
-  "version": "3.8.3",
+  "version": "3.16.7",
   "main": "index.js",
   "dependencies": {
-    "@polkadot/networks": "^13.0.2",
-    "@polkadot/util": "^13.0.2",
+    "@polkadot/networks": "^14.0.3",
+    "@polkadot/util": "^14.0.3",
     "eventemitter3": "^5.0.1",
     "store": "^2.0.12",
-    "tslib": "^2.6.2"
+    "tslib": "^2.8.1"
   },
   "devDependencies": {
     "@types/store": "^2.0.5"

packages/ui-settings/src/Settings.ts

@@ -1,4 +1,4 @@
-// Copyright 2017-2024 @polkadot/ui-settings authors & contributors
+// Copyright 2017-2026 @polkadot/ui-settings authors & contributors
 // SPDX-License-Identifier: Apache-2.0
 
 import type { Endpoint, EndpointType, Option, SettingsStruct } from './types.js';

packages/ui-settings/src/bundle.ts

@@ -1,4 +1,4 @@
-// Copyright 2017-2024 @polkadot/ui-settings authors & contributors
+// Copyright 2017-2026 @polkadot/ui-settings authors & contributors
 // SPDX-License-Identifier: Apache-2.0
 
 import { Settings, settings } from './Settings.js';

packages/ui-settings/src/defaults/chains.ts

@@ -1,4 +1,4 @@
-// Copyright 2017-2024 @polkadot/ui-settings authors & contributors
+// Copyright 2017-2026 @polkadot/ui-settings authors & contributors
 // SPDX-License-Identifier: Apache-2.0
 
 import { selectableNetworks } from '@polkadot/networks';

packages/ui-settings/src/defaults/crypto.ts

@@ -1,4 +1,4 @@
-// Copyright 2017-2024 @polkadot/ui-settings authors & contributors
+// Copyright 2017-2026 @polkadot/ui-settings authors & contributors
 // SPDX-License-Identifier: Apache-2.0
 
 import type { Option } from '../types.js';

packages/ui-settings/src/defaults/endpoints.ts

@@ -1,4 +1,4 @@
-// Copyright 2017-2024 @polkadot/ui-settings authors & contributors
+// Copyright 2017-2026 @polkadot/ui-settings authors & contributors
 // SPDX-License-Identifier: Apache-2.0
 
 import type { Option } from '../types.js';

packages/ui-settings/src/defaults/index.ts

@@ -1,4 +1,4 @@
-// Copyright 2017-2024 @polkadot/ui-settings authors & contributors
+// Copyright 2017-2026 @polkadot/ui-settings authors & contributors
 // SPDX-License-Identifier: Apache-2.0
 
 import type { Option } from '../types.js';

packages/ui-settings/src/defaults/ledger.ts

@@ -1,4 +1,4 @@
-// Copyright 2017-2024 @polkadot/ui-settings authors & contributors
+// Copyright 2017-2026 @polkadot/ui-settings authors & contributors
 // SPDX-License-Identifier: Apache-2.0
 
 import type { Option } from '../types.js';
@@ -41,5 +41,10 @@ export const LEDGER_APP: Option[] = [
     info: 'migration',
     text: 'Use the Ledger Migration App',
     value: 'migration'
+  },
+  {
+    info: 'chainSpecific',
+    text: 'Use the Chain Specific Ledger App',
+    value: 'chainSpecific'
   }
 ];

packages/ui-settings/src/defaults/ss58.ts

@@ -1,4 +1,4 @@
-// Copyright 2017-2024 @polkadot/ui-settings authors & contributors
+// Copyright 2017-2026 @polkadot/ui-settings authors & contributors
 // SPDX-License-Identifier: Apache-2.0
 
 import type { Option } from '../types.js';

packages/ui-settings/src/defaults/type.ts

@@ -1,4 +1,4 @@
-// Copyright 2017-2024 @polkadot/ui-settings authors & contributors
+// Copyright 2017-2026 @polkadot/ui-settings authors & contributors
 // SPDX-License-Identifier: Apache-2.0
 
 // matches https://polkadot.js.org & https://*.polkadot.io

packages/ui-settings/src/defaults/ui.ts

@@ -1,4 +1,4 @@
-// Copyright 2017-2024 @polkadot/ui-settings authors & contributors
+// Copyright 2017-2026 @polkadot/ui-settings authors & contributors
 // SPDX-License-Identifier: Apache-2.0
 
 import type { Option } from '../types.js';

packages/ui-settings/src/index.ts

@@ -1,4 +1,4 @@
-// Copyright 2017-2024 @polkadot/ui-settings authors & contributors
+// Copyright 2017-2026 @polkadot/ui-settings authors & contributors
 // SPDX-License-Identifier: Apache-2.0
 
 import { settings } from './bundle.js';

packages/ui-settings/src/packageDetect.ts

@@ -1,4 +1,4 @@
-// Copyright 2017-2024 @polkadot/ui-settings authors & contributors
+// Copyright 2017-2026 @polkadot/ui-settings authors & contributors
 // SPDX-License-Identifier: Apache-2.0
 
 // Do not edit, auto-generated by @polkadot/dev

packages/ui-settings/src/packageInfo.ts

@@ -1,6 +1,6 @@
-// Copyright 2017-2024 @polkadot/ui-settings authors & contributors
+// Copyright 2017-2026 @polkadot/ui-settings authors & contributors
 // SPDX-License-Identifier: Apache-2.0
 
 // Do not edit, auto-generated by @polkadot/dev
 
-export const packageInfo = { name: '@polkadot/ui-settings', path: 'auto', type: 'auto', version: '3.8.3' };
+export const packageInfo = { name: '@polkadot/ui-settings', path: 'auto', type: 'auto', version: '3.16.7' };

packages/ui-settings/src/types.ts

@@ -1,4 +1,4 @@
-// Copyright 2017-2024 @polkadot/ui-settings authors & contributors
+// Copyright 2017-2026 @polkadot/ui-settings authors & contributors
 // SPDX-License-Identifier: Apache-2.0
 
 export interface Option {

packages/ui-shared/package.json

@@ -18,15 +18,15 @@
     "./packageDetect.cjs"
   ],
   "type": "module",
-  "version": "3.8.3",
+  "version": "3.16.7",
   "main": "index.js",
   "dependencies": {
     "colord": "^2.9.3",
-    "tslib": "^2.6.2"
+    "tslib": "^2.8.1"
   },
   "devDependencies": {
-    "@polkadot/util": "^13.0.2",
-    "@polkadot/util-crypto": "^13.0.2",
+    "@polkadot/util": "^14.0.3",
+    "@polkadot/util-crypto": "^14.0.3",
     "@types/xmlserializer": "^0.6.6",
     "xmlserializer": "^0.6.1"
   },

packages/ui-shared/src/bundle.ts

@@ -1,4 +1,4 @@
-// Copyright 2018-2024 @polkadot/ui-shared authors & contributors
+// Copyright 2018-2026 @polkadot/ui-shared authors & contributors
 // SPDX-License-Identifier: Apache-2.0
 
 export * from './icons/index.js';

packages/ui-shared/src/icons/beachball/LICENSE

@@ -1,7 +1,7 @@
 Apache-2.0 License (Apache-2.0)
 
 Copyright 2016 Dan Finlay
-Copyright 2017-2024 @polkadot/ui-shared authors & contributors
+Copyright 2017-2025 @polkadot/ui-shared authors & contributors
 
 Permission to use, copy, modify, and/or distribute this software for any
 purpose with or without fee is hereby granted, provided that the above

packages/ui-shared/src/icons/beachball/colors.spec.ts

@@ -1,4 +1,4 @@
-// Copyright 2017-2024 @polkadot/ui-shared authors & contributors
+// Copyright 2017-2026 @polkadot/ui-shared authors & contributors
 // SPDX-License-Identifier: Apache-2.0
 
 /// <reference types="@polkadot/dev-test/globals.d.ts" />

packages/ui-shared/src/icons/beachball/colors.ts

@@ -1,4 +1,4 @@
-// Copyright 2017-2024 @polkadot/ui-shared authors & contributors
+// Copyright 2017-2026 @polkadot/ui-shared authors & contributors
 // SPDX-License-Identifier: Apache-2.0
 
 // Copyright 2016 Dan Finlay

packages/ui-shared/src/icons/beachball/container.spec.ts

@@ -1,4 +1,4 @@
-// Copyright 2017-2024 @polkadot/ui-shared authors & contributors
+// Copyright 2017-2026 @polkadot/ui-shared authors & contributors
 // SPDX-License-Identifier: Apache-2.0
 
 /// <reference types="@polkadot/dev-test/globals.d.ts" />

packages/ui-shared/src/icons/beachball/container.ts

@@ -1,4 +1,4 @@
-// Copyright 2017-2024 @polkadot/ui-shared authors & contributors
+// Copyright 2017-2026 @polkadot/ui-shared authors & contributors
 // SPDX-License-Identifier: Apache-2.0
 
 // Copyright 2016 Dan Finlay

packages/ui-shared/src/icons/beachball/defaults.ts

@@ -1,4 +1,4 @@
-// Copyright 2017-2024 @polkadot/ui-shared authors & contributors
+// Copyright 2017-2026 @polkadot/ui-shared authors & contributors
 // SPDX-License-Identifier: Apache-2.0
 
 // Copyright 2016 Dan Finlay

packages/ui-shared/src/icons/beachball/demo.ts

@@ -1,4 +1,4 @@
-// Copyright 2017-2024 @polkadot/ui-shared authors & contributors
+// Copyright 2017-2026 @polkadot/ui-shared authors & contributors
 // SPDX-License-Identifier: Apache-2.0
 
 // Copyright 2016 Dan Finlay

packages/ui-shared/src/icons/beachball/index.spec.ts

@@ -1,4 +1,4 @@
-// Copyright 2017-2024 @polkadot/ui-shared authors & contributors
+// Copyright 2017-2026 @polkadot/ui-shared authors & contributors
 // SPDX-License-Identifier: Apache-2.0
 
 /// <reference types="@polkadot/dev-test/globals.d.ts" />
@@ -17,7 +17,7 @@ describe('identicon', (): void => {
     ).toEqual(
       // with original color ...
       // '<div xmlns="http://www.w3.org/1999/xhtml" class="" style="background: white; border-radius: 128px; display: inline-block; height: 256px; margin: 0px; overflow: hidden; padding: 0px; width: 256px;"><div class="" style="background: rgb(20, 20, 20); border-radius: 128px; display: inline-block; height: 256px; margin: 0px; overflow: hidden; padding: 0px; width: 256px;"><svg xmlns="http://www.w3.org/2000/svg" x="0" y="0" width="256" height="256"><circle cx="128" cy="140.8" r="128" fill="hsl(212.10000000000002, 65.6%, 55.5%)"/><circle cx="128" cy="153.6" r="102.4" fill="hsl(9.800000000000011, 90.7%, 57.6%)"/><circle cx="128" cy="166.4" r="76.8" fill="hsl(345, 85.7%, 86.3%)"/><circle cx="128" cy="179.2" r="51.2" fill="hsl(261.9, 100%, 87.3%)"/><circle cx="128" cy="192" r="25.6" fill="hsl(345, 100%, 25.1%)"/></svg></div></div>'
-      '<div xmlns="http://www.w3.org/1999/xhtml" class="" style="background: white; border-radius: 128px; display: inline-block; height: 256px; margin: 0px; overflow: hidden; padding: 0px; width: 256px;"><div class="" style="background: rgb(26, 26, 26); border-radius: 128px; display: inline-block; height: 256px; margin: 0px; overflow: hidden; padding: 0px; width: 256px;"><svg xmlns="http://www.w3.org/2000/svg" x="0" y="0" width="256" height="256"><circle cx="128" cy="140.8" r="128" fill="hsl(212, 66%, 55%)"/><circle cx="128" cy="153.6" r="102.4" fill="hsl(10, 91%, 58%)"/><circle cx="128" cy="166.4" r="76.8" fill="hsl(345, 86%, 86%)"/><circle cx="128" cy="179.2" r="51.2" fill="hsl(262, 100%, 87%)"/><circle cx="128" cy="192" r="25.6" fill="hsl(345, 100%, 25%)"/></svg></div></div>'
+      '<div xmlns="http://www.w3.org/1999/xhtml" class="" style="background: white; border-radius: 128px; display: inline-block; height: 256px; margin: 0px; overflow: hidden; padding: 0px; width: 256px;"><div class="" style="background: rgb(255, 167, 26); border-radius: 128px; display: inline-block; height: 256px; margin: 0px; overflow: hidden; padding: 0px; width: 256px;"><svg xmlns="http://www.w3.org/2000/svg" x="0" y="0" width="256" height="256"><circle cx="128" cy="140.8" r="128" fill="hsl(212, 66%, 55%)"/><circle cx="128" cy="153.6" r="102.4" fill="hsl(10, 91%, 58%)"/><circle cx="128" cy="166.4" r="76.8" fill="hsl(345, 86%, 86%)"/><circle cx="128" cy="179.2" r="51.2" fill="hsl(262, 100%, 87%)"/><circle cx="128" cy="192" r="25.6" fill="hsl(345, 100%, 25%)"/></svg></div></div>'
     );
   });
 
@@ -30,7 +30,7 @@ describe('identicon', (): void => {
     ).toEqual(
       // with original color ...
       // '<div xmlns="http://www.w3.org/1999/xhtml" class="testClass" style="background: white; border-radius: 50px; display: block; height: 100px; margin: 0px; overflow: hidden; padding: 0px; width: 100px;"><div class="" style="background: rgb(20, 20, 20); border-radius: 50px; display: inline-block; height: 100px; margin: 0px; overflow: hidden; padding: 0px; width: 100px;"><svg xmlns="http://www.w3.org/2000/svg" x="0" y="0" width="100" height="100"><circle cx="50" cy="55" r="50" fill="hsl(212.10000000000002, 65.6%, 55.5%)"/><circle cx="50" cy="60" r="40" fill="hsl(9.800000000000011, 90.7%, 57.6%)"/><circle cx="50" cy="65" r="30" fill="hsl(345, 85.7%, 86.3%)"/><circle cx="50" cy="70" r="20" fill="hsl(261.9, 100%, 87.3%)"/><circle cx="50" cy="75" r="10" fill="hsl(345, 100%, 25.1%)"/></svg></div></div>'
-      '<div xmlns="http://www.w3.org/1999/xhtml" class="testClass" style="background: white; border-radius: 50px; display: block; height: 100px; margin: 0px; overflow: hidden; padding: 0px; width: 100px;"><div class="" style="background: rgb(26, 26, 26); border-radius: 50px; display: inline-block; height: 100px; margin: 0px; overflow: hidden; padding: 0px; width: 100px;"><svg xmlns="http://www.w3.org/2000/svg" x="0" y="0" width="100" height="100"><circle cx="50" cy="55" r="50" fill="hsl(212, 66%, 55%)"/><circle cx="50" cy="60" r="40" fill="hsl(10, 91%, 58%)"/><circle cx="50" cy="65" r="30" fill="hsl(345, 86%, 86%)"/><circle cx="50" cy="70" r="20" fill="hsl(262, 100%, 87%)"/><circle cx="50" cy="75" r="10" fill="hsl(345, 100%, 25%)"/></svg></div></div>'
+      '<div xmlns="http://www.w3.org/1999/xhtml" class="testClass" style="background: white; border-radius: 50px; display: block; height: 100px; margin: 0px; overflow: hidden; padding: 0px; width: 100px;"><div class="" style="background: rgb(255, 167, 26); border-radius: 50px; display: inline-block; height: 100px; margin: 0px; overflow: hidden; padding: 0px; width: 100px;"><svg xmlns="http://www.w3.org/2000/svg" x="0" y="0" width="100" height="100"><circle cx="50" cy="55" r="50" fill="hsl(212, 66%, 55%)"/><circle cx="50" cy="60" r="40" fill="hsl(10, 91%, 58%)"/><circle cx="50" cy="65" r="30" fill="hsl(345, 86%, 86%)"/><circle cx="50" cy="70" r="20" fill="hsl(262, 100%, 87%)"/><circle cx="50" cy="75" r="10" fill="hsl(345, 100%, 25%)"/></svg></div></div>'
     );
   });
 });

packages/ui-shared/src/icons/beachball/index.ts

@@ -1,4 +1,4 @@
-// Copyright 2017-2024 @polkadot/ui-shared authors & contributors
+// Copyright 2017-2026 @polkadot/ui-shared authors & contributors
 // SPDX-License-Identifier: Apache-2.0
 
 // Copyright 2016 Dan Finlay

packages/ui-shared/src/icons/beachball/seeder.spec.ts

@@ -1,4 +1,4 @@
-// Copyright 2017-2024 @polkadot/ui-shared authors & contributors
+// Copyright 2017-2026 @polkadot/ui-shared authors & contributors
 // SPDX-License-Identifier: Apache-2.0
 
 /// <reference types="@polkadot/dev-test/globals.d.ts" />