unstale

npm / @metamask/mobile-wallet-protocol-core

@metamask/mobile-wallet-protocol-core

What changed in @metamask/mobile-wallet-protocol-core 13 to 14, from its official release notes, upgrade guides and advisories. Also covers @metamask/mobile-wallet-protocol-dapp-client. Sources checked 2026-10-19.

3 breaking1 security5 new APIs and options1 fixes and other

See which of these apply to your code, ranked, in your agent:

npx @unstale/cli init

@unstale/cli on npm

@metamask/mobile-wallet-protocol-core 148 changes

Breaking changes 3

  • Inbound messages on expired sessions are rejected instead of processed.

    14.0.0release notes

  • Node 18 support is dropped; Node 20 or later is required.

    14.0.0release notes

  • The SessionStore constructor is private; create instances with await SessionStore.create(kvstore) instead.

    14.0.0release notes

Security 1

  • Uses timing-safe comparison for OTP verification.

    14.0.0release notes

New APIs and options 3

  • Adds connection mode values for runtime validation.

    14.0.0release notes

  • Adds a method for validating peer public keys at handshake and resume time.

    14.0.0release notes

  • Adds runtime validation of connection mode values.

    14.0.0release notes

Fixes and other changes 1

  • Guards against NaN values in session expiry timestamps.

    14.0.0release notes

@metamask/mobile-wallet-protocol-core 132 changes

New APIs and options 2

  • ESM paths are now exported, allowing developers to use the package's ESM entry points.

    13.0.0release notes

  • ESM paths are now exported, allowing developers to use the package's ESM entry points.

    13.0.0release notes