Merge pull request #404 from near/bump-version-align-branches

chore: Bump Version to 6.0.0
near · Aug 16, 2022 · e06d87a · e06d87a
2 parents cc04a95 + 1eed919
commit e06d87a
Show file tree

Hide file tree

Showing 17 changed files with 53 additions and 17 deletions.
diff --git a/CONTRIBUTING.md b/CONTRIBUTING.md
@@ -63,3 +63,39 @@ After merging only two steps remain:</br>
  - Draft release in Github.
 
 Since `main` is the default branch of this project in case of regular release it will be always equal to the latest release.</br> In case of a `pre-release`  a specific branch will be linked to the `pre-release` version(tag).
+
+# Listing Third Party Wallet on Wallet Selector
+
+Criteria for Including New Wallets for Wallet Selector
+
+# Product Criteria:
+
+A wallet project must have comply the following product criteria to listed on Wallet Selector.
+
+- Non-custodial: The user controls their fund.
+- Conformity to Wallet Standards: The wallet product conforms to NEAR NEP wallet standards. (Injected Wallet https://github.com/near/NEPs/pull/370 and  Bridged Wallet https://github.com/near/NEPs/pull/368)
+- Ease of use: The wallet product provides a usable interface for the end users. Please provide a user guide.
+- Ability to recover accounts: The wallet product allows users to be able to recover accounts.
+- Actively maintained: The wallet is actively maintained by a team and can provide user support. 
+
+# Security Criteria:
+
+A wallet project must have the majority of these security program features in place with self-certification that remaining items will be in place within 6 months of being listed.
+
+Wallets shall checkbox a statement of compliance to be maintained on the wallet’s github account.  When asserting that open items will be in place within six months of being listed, target dates shall be included. The overall statement must be dates and the date shall be commensurate with the commit date.  All wallet projects must maintain compliance. If a wallet is no longer in compliance, or no longer supported, the security statement must reflect that change. The wallet project shall make verification of the following requirements as easy as possible maximizing transparency through the use of relevant links pointing toward program descriptions, audit reports, etc. for the user/researcher.
+
+- Has a security program in place that covers or is dedicated to the wallet
+- Publishes information about its security program in an easily findable place
+- Conducts regular audits of wallet code, at regular intervals of less than a year or based on meaningful code changes
+- Conducts regular penetration tests, both “authenticated” and “non-authenticated” upon significant code changes
+- Conducts penetration tests on related infrastructure, such as databases, virtual machines, web servers, etc.
+- Remediates any critical, high, or medium findings from audits (3, 4, an 5 above) and tests in a rapid fashion, as suggested by auditors and penetration testers–with auditors validating the remediation in their reports.
+- Makes such reports (audits, penetration tests) publicly available, on at least a summary level
+- When making reports (7) available, wallet projects should ensure the equivalent reports appear on the security vendor’s site or simply links to the security vendor’s report. This ensures the authenticity of the audit reports.
+- Conducts operational readiness reviews and testing or an equivalent process before deployment to production to ensure that code changes have not resulted in unanticipated behavior, compatibility issues, or in
+- Maintains a testnet wallet
+- Maintains a bug bounty program
+- Implements minimal privilege and access policies with regard to supporting infrastructure
+- Implements MFA and strong passwords for access to critical related systems, such as domain registration, hosting platforms, cloud platforms, etc.
+- Conducts known vulnerability and vulnerable dependency checks; and remediates critical, medium, and high findings before bringing into testnet or production.
+- If the wallet is a  browser “extension,” it is listed on the official extension marketplace
diff --git a/package.json b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "near-wallet-selector",
-  "version": "5.1.0",
+  "version": "6.0.0",
   "description": "NEAR Wallet Selector makes it easy for users to interact with your dApp by providing an abstraction over various wallets within the NEAR ecosystem",
   "keywords": [
     "near",

diff --git a/packages/core/docs/api/wallet.md b/packages/core/docs/api/wallet.md
@@ -223,7 +223,7 @@ Signs the message and verifies the owner. Message is not sent to blockchain.
 
 **Returns**
 
-- `Promise<void | FinalExecutionOutcome>`: Browser wallets won't return the transaction outcome as they may need to redirect for signing. More details on this can be found [here](https://docs.near.org/docs/api/rpc/transactions#send-transaction-await).
+- `Promise<void | FinalExecutionOutcome>`: Browser wallets won't return the transaction outcome as they may need to redirect for signing. More details on this can be found [here](https://docs.near.org/api/rpc/transactions#send-transaction-await).
 
 **Description**
 
@@ -260,7 +260,7 @@ Signs one or more NEAR Actions before sending to the network. The user must be s
 
 **Returns**
 
-- `Promise<void | Array<FinalExecutionOutcome>>`: Browser wallets won't return the transaction outcomes as they may need to redirect for signing. More details on this can be found [here](https://docs.near.org/docs/api/rpc/transactions#send-transaction-await).
+- `Promise<void | Array<FinalExecutionOutcome>>`: Browser wallets won't return the transaction outcomes as they may need to redirect for signing. More details on this can be found [here](https://docs.near.org/api/rpc/transactions#send-transaction-await).
 
 **Description**
 

diff --git a/packages/core/package.json b/packages/core/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@near-wallet-selector/core",
-  "version": "5.1.0",
+  "version": "6.0.0",
   "peerDependencies": {
     "near-api-js": "^0.44.2"
   }

diff --git a/packages/default-wallets/package.json b/packages/default-wallets/package.json
@@ -1,4 +1,4 @@
 {
   "name": "@near-wallet-selector/default-wallets",
-  "version": "5.1.0"
+  "version": "6.0.0"
 }
diff --git a/packages/ledger/package.json b/packages/ledger/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@near-wallet-selector/ledger",
-  "version": "5.1.0",
+  "version": "6.0.0",
   "peerDependencies": {
     "near-api-js": "^0.44.2"
   }

diff --git a/packages/math-wallet/package.json b/packages/math-wallet/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@near-wallet-selector/math-wallet",
-  "version": "5.1.0",
+  "version": "6.0.0",
   "peerDependencies": {
     "near-api-js": "^0.44.2"
   }

diff --git a/packages/meteor-wallet/package.json b/packages/meteor-wallet/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@near-wallet-selector/meteor-wallet",
-  "version": "5.1.0",
+  "version": "6.0.0",
   "peerDependencies": {
     "near-api-js": "^0.44.2"
   }

diff --git a/packages/modal-ui/package.json b/packages/modal-ui/package.json
@@ -1,4 +1,4 @@
 {
   "name": "@near-wallet-selector/modal-ui",
-  "version": "5.1.0"
+  "version": "6.0.0"
 }
diff --git a/packages/my-near-wallet/package.json b/packages/my-near-wallet/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@near-wallet-selector/my-near-wallet",
-  "version": "5.1.0",
+  "version": "6.0.0",
   "peerDependencies": {
     "near-api-js": "^0.44.2"
   }

diff --git a/packages/near-wallet/package.json b/packages/near-wallet/package.json
@@ -1,4 +1,4 @@
 {
   "name": "@near-wallet-selector/near-wallet",
-  "version": "5.1.0"
+  "version": "6.0.0"
 }
diff --git a/packages/nightly-connect/package.json b/packages/nightly-connect/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@near-wallet-selector/nightly-connect",
-  "version": "5.1.0",
+  "version": "6.0.0",
   "peerDependencies": {
     "near-api-js": "^0.44.2"
   }

diff --git a/packages/nightly/package.json b/packages/nightly/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@near-wallet-selector/nightly",
-  "version": "5.1.0",
+  "version": "6.0.0",
   "peerDependencies": {
     "near-api-js": "^0.44.2"
   }

diff --git a/packages/sender/package.json b/packages/sender/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@near-wallet-selector/sender",
-  "version": "5.1.0",
+  "version": "6.0.0",
   "peerDependencies": {
     "near-api-js": "^0.44.2"
   }

diff --git a/packages/wallet-connect/package.json b/packages/wallet-connect/package.json
@@ -1,4 +1,4 @@
 {
   "name": "@near-wallet-selector/wallet-connect",
-  "version": "5.1.0"
+  "version": "6.0.0"
 }
diff --git a/packages/wallet-utils/package.json b/packages/wallet-utils/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@near-wallet-selector/wallet-utils",
-  "version": "5.1.0",
+  "version": "6.0.0",
   "peerDependencies": {
     "near-api-js": "^0.44.2"
   }

diff --git a/scripts/release-packages.bash b/scripts/release-packages.bash
@@ -14,5 +14,5 @@ npm publish dist/packages/nightly --tag "${TAG}" --otp "${OTP}"
 npm publish dist/packages/ledger --tag "${TAG}" --otp "${OTP}"
 npm publish dist/packages/wallet-connect --tag "${TAG}" --otp "${OTP}"
 npm publish dist/packages/nightly-connect --tag "${TAG}" --otp "${OTP}"
-npm publish dist/packages/wallet-utils --tag "${TAG}" --otp "${OTP}"
 npm publish dist/packages/meteor-wallet --tag "${TAG}" --otp "${OTP}"
+npm publish dist/packages/default-wallets --tag "${TAG}" --otp "${OTP}"