Merge branch 'master' into DX-1549-bigint-buffer-advisory

Author: tanjeemh

.github/workflows/ci.yml

@@ -270,5 +270,44 @@ jobs:
       - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683  # v4.2.2
         with:
           ref: ${{ github.event.pull_request.head.sha }}
+
+      - name: Setup Docker compatibility with Podman
+        run: sudo ln -sf /usr/bin/podman /usr/local/bin/docker
+
       - name: Build BitGoJS Express Docker Image
-        run: podman build .
+        run: ./scripts/build-docker-express.sh
+
+  dockerfile-check:
+    runs-on: ubuntu-latest
+
+    steps:
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683  # v4.2.2
+        with:
+          ref: ${{ github.event.pull_request.head.sha }}
+
+      - name: Setup node 22
+        uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
+        with:
+          node-version: 22
+
+      - name: restore lerna dependencies
+        id: lerna-cache
+        uses: actions/cache@5a3ec84eff668545956fd18022155c47e93e2684 #v4.2.3
+        with:
+          path: |
+            node_modules
+            modules/*/node_modules
+          key: ${{ runner.os }}-node22-${{ hashFiles('yarn.lock') }}-${{ hashFiles('tsconfig.packages.json') }}-${{ hashFiles('package.json') }}
+
+      - name: Install Packages
+        if: steps.lerna-cache.outputs.cache-hit != 'true' || contains( github.event.pull_request.labels.*.name, 'SKIP_CACHE')
+        run: yarn install --with-frozen-lockfile --ignore-scripts
+
+      - name: Check Dockerfile is up to date
+        run: |
+          yarn update-dockerfile
+          if ! git diff --quiet; then
+            echo "Dockerfile is not up to date. Please run 'yarn update-dockerfile' and commit the changes."
+            git diff
+            exit 1
+          fi

.npmrc

@@ -0,0 +1 @@
+engine-strict=true

CODEOWNERS

@@ -109,10 +109,6 @@
 /modules/sdk-core/src/bitgo/address-book/ @BitGo/prime
 /modules/sdk-core/src/bitgo/trading/ @BitGo/prime
 
-# Asset Metadata Service
-/modules/statics/src/coins/botTokens.ts @BitGo/ams
-/modules/statics/src/coins/botOfcTokens.ts @BitGo/ams
-
 # Core Modules
 /modules/bitgo/ @BitGo/coins @BitGo/web-experience @BitGo/wallet-platform
 /modules/bitgo/test/v2/unit/lightning/ @BitGo/btc-team
@@ -141,6 +137,10 @@
 /types/ @BitGo/coins @BitGo/web-experience @BitGo/wallet-platform
 /webpack/ @BitGo/coins @BitGo/web-experience @BitGo/wallet-platform
 
+# Asset Metadata Service
+/modules/statics/src/coins/botTokens.ts @BitGo/ams
+/modules/statics/src/coins/botOfcTokens.ts @BitGo/ams
+
 /.eslintrc.json @BitGo/coins @BitGo/web-experience @BitGo/wallet-platform @BitGo/developer-experience
 /.prettierrc.yml @BitGo/coins @BitGo/web-experience @BitGo/wallet-platform @BitGo/developer-experience
 /check-package-versions.js @BitGo/coins @BitGo/web-experience @BitGo/wallet-platform @BitGo/developer-experience

Dockerfile

@@ -88,7 +88,6 @@ COPY --from=builder /tmp/bitgo/modules/sdk-coin-icp /var/modules/sdk-coin-icp/
 COPY --from=builder /tmp/bitgo/modules/sdk-coin-initia /var/modules/sdk-coin-initia/
 COPY --from=builder /tmp/bitgo/modules/sdk-coin-injective /var/modules/sdk-coin-injective/
 COPY --from=builder /tmp/bitgo/modules/sdk-coin-islm /var/modules/sdk-coin-islm/
-COPY --from=builder /tmp/bitgo/modules/sdk-coin-mantra /var/modules/sdk-coin-mantra/
 COPY --from=builder /tmp/bitgo/modules/sdk-coin-mon /var/modules/sdk-coin-mon/
 COPY --from=builder /tmp/bitgo/modules/sdk-coin-near /var/modules/sdk-coin-near/
 COPY --from=builder /tmp/bitgo/modules/sdk-coin-oas /var/modules/sdk-coin-oas/
@@ -185,7 +184,6 @@ cd /var/modules/sdk-coin-icp && yarn link && \
 cd /var/modules/sdk-coin-initia && yarn link && \
 cd /var/modules/sdk-coin-injective && yarn link && \
 cd /var/modules/sdk-coin-islm && yarn link && \
-cd /var/modules/sdk-coin-mantra && yarn link && \
 cd /var/modules/sdk-coin-mon && yarn link && \
 cd /var/modules/sdk-coin-near && yarn link && \
 cd /var/modules/sdk-coin-oas && yarn link && \
@@ -285,7 +283,6 @@ RUN cd /var/bitgo-express && \
     yarn link @bitgo/sdk-coin-initia && \
     yarn link @bitgo/sdk-coin-injective && \
     yarn link @bitgo/sdk-coin-islm && \
-    yarn link @bitgo/sdk-coin-mantra && \
     yarn link @bitgo/sdk-coin-mon && \
     yarn link @bitgo/sdk-coin-near && \
     yarn link @bitgo/sdk-coin-oas && \
@@ -333,14 +330,16 @@ RUN cd /var/bitgo-express && \
     yarn link @bitgo/sdk-coin-zec
 #LINK_END
 
-#LABEL_START
-LABEL created="Thu, 04 Sep 2025 18:59:30 GMT"
-LABEL version=15.0.0
-LABEL git_hash=bbdf6e60b720b25e3212f3a4c5bdc81732a505e8
-#LABEL_END
+ARG BUILD_DATE
+ARG VERSION
+ARG GIT_HASH
+
+LABEL created=${BUILD_DATE}
+LABEL version=${VERSION}
+LABEL git_hash=${GIT_HASH}
 
 USER node
-ENV NODE_ENV production
-ENV BITGO_BIND 0.0.0.0
+ENV NODE_ENV=production
+ENV BITGO_BIND=0.0.0.0
 EXPOSE 3080
 ENTRYPOINT ["/usr/bin/tini", "--", "/usr/local/bin/node", "/var/bitgo-express/bin/bitgo-express"]

modules/abstract-cosmos/CHANGELOG.md

@@ -3,6 +3,12 @@
 All notable changes to this project will be documented in this file.
 See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.
 
+# [11.15.0](https://github.com/BitGo/BitGoJS/compare/@bitgo/[email protected]...@bitgo/[email protected]) (2025-09-25)
+
+### Features
+
+- configure learn to skip git operations ([ee3a622](https://github.com/BitGo/BitGoJS/commit/ee3a6220496476aa7f4545b5f4a9a3bf97d9bdb9))
+
 ## [11.14.2](https://github.com/BitGo/BitGoJS/compare/@bitgo/[email protected]...@bitgo/[email protected]) (2025-09-03)
 
 ### Bug Fixes

modules/abstract-cosmos/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bitgo/abstract-cosmos",
-  "version": "11.14.2",
+  "version": "11.15.0",
   "description": "BitGo SDK coin library for COSMOS base implementation",
   "main": "./dist/src/index.js",
   "types": "./dist/src/index.d.ts",
@@ -38,10 +38,10 @@
     ]
   },
   "dependencies": {
-    "@bitgo/sdk-core": "^36.8.0",
+    "@bitgo/sdk-core": "^36.9.0",
     "@bitgo/sdk-lib-mpc": "^10.7.0",
     "@bitgo/secp256k1": "^1.5.0",
-    "@bitgo/statics": "^57.8.0",
+    "@bitgo/statics": "^58.0.0",
     "@cosmjs/amino": "^0.29.5",
     "@cosmjs/crypto": "^0.30.1",
     "@cosmjs/encoding": "^0.29.5",

modules/abstract-eth/CHANGELOG.md

@@ -3,6 +3,17 @@
 All notable changes to this project will be documented in this file.
 See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.
 
+# [24.13.0](https://github.com/BitGo/BitGoJS/compare/@bitgo/[email protected]...@bitgo/[email protected]) (2025-09-25)
+
+### Bug Fixes
+
+- **abstract-eth:** follow up updates from PR 6882 ([36a87de](https://github.com/BitGo/BitGoJS/commit/36a87de002c6b6ab8c72429b186c0660ccc88e92))
+
+### Features
+
+- **abstract-eth:** add flush token support for ERC721 and ERC1155 ([5d4fa35](https://github.com/BitGo/BitGoJS/commit/5d4fa353088b2bd99ed5e6423bf17d3e1c300e35))
+- configure learn to skip git operations ([ee3a622](https://github.com/BitGo/BitGoJS/commit/ee3a6220496476aa7f4545b5f4a9a3bf97d9bdb9))
+
 # [24.12.0](https://github.com/BitGo/BitGoJS/compare/@bitgo/[email protected]...@bitgo/[email protected]) (2025-09-03)
 
 ### Bug Fixes

modules/abstract-eth/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bitgo/abstract-eth",
-  "version": "24.12.0",
+  "version": "24.13.0",
   "description": "BitGo SDK coin library for ETH base implementation",
   "main": "./dist/src/index.js",
   "types": "./dist/src/index.d.ts",
@@ -40,10 +40,10 @@
     ]
   },
   "dependencies": {
-    "@bitgo/sdk-core": "^36.8.0",
+    "@bitgo/sdk-core": "^36.9.0",
     "@bitgo/sdk-lib-mpc": "^10.7.0",
     "@bitgo/secp256k1": "^1.5.0",
-    "@bitgo/statics": "^57.8.0",
+    "@bitgo/statics": "^58.0.0",
     "@ethereumjs/common": "^2.6.5",
     "@ethereumjs/rlp": "^4.0.0",
     "@ethereumjs/tx": "^3.3.0",
@@ -60,8 +60,8 @@
     "superagent": "^9.0.1"
   },
   "devDependencies": {
-    "@bitgo/sdk-api": "^1.68.3",
-    "@bitgo/sdk-test": "^9.0.9",
+    "@bitgo/sdk-api": "^1.69.0",
+    "@bitgo/sdk-test": "^9.1.0",
     "@types/keccak": "^3.0.5"
   },
   "gitHead": "18e460ddf02de2dbf13c2aa243478188fb539f0c"

modules/abstract-eth/src/ethLikeToken.ts

@@ -43,8 +43,8 @@ export class EthLikeToken extends AbstractEthLikeNewCoins {
   static createTokenConstructors(
     coinNames: CoinNames,
     tokenConfigs: EthLikeTokenConfig[] = [
-      ...tokens.bitcoin[coinNames.Mainnet].tokens,
-      ...tokens.testnet[coinNames.Mainnet].tokens,
+      ...(tokens.bitcoin[coinNames.Mainnet]?.tokens || []),
+      ...(tokens.testnet[coinNames.Mainnet]?.tokens || []),
     ]
   ): NamedCoinConstructor[] {
     const tokensCtors: NamedCoinConstructor[] = [];

modules/abstract-eth/src/lib/transactionBuilder.ts

@@ -49,6 +49,7 @@ import { Transaction } from './transaction';
 import { TransferBuilder } from './transferBuilder';
 
 const DEFAULT_M = 3;
+const RAW_TX_HEX_REGEX = /^(0x)?[0-9a-f]{1,}$/;
 
 /**
  * EthereumLike transaction builder.
@@ -165,7 +166,7 @@ export abstract class TransactionBuilder extends BaseTransactionBuilder {
   /** @inheritdoc */
   protected fromImplementation(rawTransaction: string, isFirstSigner?: boolean): Transaction {
     let tx: Transaction;
-    if (/^0x?[0-9a-f]{1,}$/.test(rawTransaction.toLowerCase())) {
+    if (RAW_TX_HEX_REGEX.test(rawTransaction.toLowerCase())) {
       tx = Transaction.fromSerialized(this._coinConfig, this._common, rawTransaction, isFirstSigner);
       this.loadBuilderInput(tx.toJson(), isFirstSigner);
     } else {
@@ -343,7 +344,7 @@ export abstract class TransactionBuilder extends BaseTransactionBuilder {
       throw new InvalidTransactionError('Raw transaction is empty');
     }
     if (typeof rawTransaction === 'string') {
-      if (/^0x?[0-9a-f]{1,}$/.test(rawTransaction.toLowerCase())) {
+      if (RAW_TX_HEX_REGEX.test(rawTransaction.toLowerCase())) {
         const txBytes = ethUtil.toBuffer(ethUtil.addHexPrefix(rawTransaction.toLowerCase()));
         if (!this.isEip1559Txn(txBytes) && !this.isRLPDecodable(txBytes)) {
           throw new ParseTransactionError('There was error in decoding the hex string');