Token Metadata Release Change Log

[austbot]

Current Version 1.2.6

JS: 1.2.5 - https://www.npmjs.com/package/@metaplex-foundation/mpl-token-metadata - Deprecated
JS: 2.1.0 -https://www.npmjs.com/package/@metaplex-foundation/mpl-token-metadata - NEW an built from our SHANK IDL system
Rust: 1.2.6 - https://crates.io/crates/mpl-token-metadata

1.2.6

• Various Security fixes.

1.2.5

NOTE: The rust crates 1.2.0-1.2.2, depending on the 1.9.5 release line of solana packages and the 3.3.0 spl_token package. There is currently a known issue with those packages in regards to using solana_client 1.9.5 not being compatible with spl_token 3.3.0.

We have resolved this with 1.2.3

New Instructions:

SetAndVerify - Allow the update Authority of the NFT and Collection to set and verify the collection in one instruction, extends to delegated Authorities as well

FreezeDelegatedAccount - Allows a delegate authority to freeze a token account containing a delegated mint. The pubkey calling freeze must sign and be the same as the delegate pubkey.

ThawDelegatedAccount - Allows the same delegate above to Thaw the token account

RemoveCreatorVerification - Allows a creator to unverify themselves

Potentially Breaking Changes:

We now store the bump seed for validation in the UseAuthority and the CollectionAuthority records. This is a preventative security measure that eliminates the possibility that a malicious wallet could use a noncanonical bump seed and open up unknown and potentially vulnerable code paths.

Action Needed:

When using Utilize the program will automatically fix up the bump seed for you. Or one must revoke and re-approve the Use Authority
CollectionAuthority records must be revoked and re-created.

IMPORTANT NOTE

1.2.4 introduced a change that limited what update authority could do after primary sale happened flag was true.
This update limited changing verified creators and seller fee basis points. Due to community feedback we have decided to revert this change and prior functionality is restored.

[austbot]

We are working on an automated change log system