fix(deps): update dependency @rainbow-me/rainbowkit to v2.2.10

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
@rainbow-me/rainbowkit (source)	2.0.2 → 2.2.10

---

Release Notes

rainbow-me/rainbowkit (@​rainbow-me/rainbowkit)

v2.2.10

Compare Source

Patch Changes

• e74f604: Improve UI on the mobile connect flow to hint to users that they can horizontally scroll to see additional wallet connectors

• eb72c37: Fix Gemini wallet connector to use icon instead of icons in appMetadata

• e58367e: Fix mobile visibility for Coin98, CLV, SafePal, Frontier, and BeraSig wallets.

• b7b7b43: Rename the Argent wallet connector to readyWallet

• 507f583: Add additional wallet flags to isMetaMask() to detect impersonating providers.

• 16963de: Add ctrlWallet wallet connector to replace xdefiWallet. XDEFI Wallet has been rebranded to CTRL Wallet.

• 6c745a5: Disable third-party connector telemetry by default for user privacy. h/t @​TimDaub

  To opt-in to WalletConnect analytics:

  With getDefaultConfig:

  const config = getDefaultConfig({
    /** ... **/
    walletConnectParameters: {
      telemetryEnabled: true,
    },
  });

  To opt-in to Base Account telemetry:

  baseAccount.preference = {
    telemetry: true,
  };

  To opt-in to MetaMask analytics:

  metaMaskWallet.enableAnalytics = true;

v2.2.9

Compare Source

Patch Changes

• e52ca05: Add baseAccount wallet connector, replacing coinbaseWallet in the default wallet list

• 1e67f0d: Improved detection for nova wallet provider

• d92a6c7: Fixed type compatibility for connect() parameters in Wagmi ^2.17.0

• 0b9052c: Add binance wallet chrome extension download url

• b34d6c1: Added portoWallet.

• 66bcc18: Universal Profiles wallet connector

• fe0496e: Added Gemini Wallet support

  Added Gemini Wallet as a supported wallet connector with proper icon and configuration.

• 5698ade: fix monad logo in rainbowkit package and include monad testnet in the example

• 1520f59: Fixed unintended forwarding of the errorCorrection prop to SVG elements used by the QRCode component to prevent React warning.

v2.2.8

Compare Source

Patch Changes

• f542876: The metaMaskWallet wallet connector now utilizes the MetaMask SDK for more reliable, faster connections on mobile

v2.2.7

Compare Source

Patch Changes

• a147620: Fixed error handling when connect requests are rejected on mobile.
• 10090d2: Mitigated WalletConnect Core is already initialized warnings that began appearing with recent distributions of Wagmi and WalletConnect.
• 50c7f13: Added missing rdns metadata for wallet connectors that now support EIP-6963.
• 15ddd4a: Improved QR Code error correction and rendering with cuer

v2.2.6

Compare Source

Patch Changes

• 624a38a: The coinbaseWallet connector now supports additional SDK configuration options to enable Paymasters and Sub Accounts for your dapp.

  import { coinbaseWallet } from "@​rainbow-me/rainbowkit/wallets";
  
  // Configure Paymaster for gas sponsorship
  coinbaseWallet.paymasterUrls = {
    [base.id]: "...",
  };
  
  // Enable Sub Accounts
  coinbaseWallet.subAccounts = {
    enableAutoSubAccounts: true,
    defaultSpendLimits: {
      // ...
    },
  };

• f6ad6aa: Added support for Superposition chain

v2.2.5

Compare Source

Patch Changes

• 3d73508: Added ZilPay Wallet support with zilPayWallet wallet connector
• c5a9cc1: Fixed SVG encoding in wallet connector icons for Cool Mode
• 8515fd3: Resolved a warning for mismatched dApp url metadata on recent versions of WalletConnect
• 5b54649: MEW Wallet now supports WalletConnect on mobile
• 03ae0d0: Added xPortal Wallet support with xPortalWallet wallet connector

v2.2.4

Compare Source

Patch Changes

• f5a7cec: Added support for Unichain
• a765cfc: Added support for ApeChain, Berachain, Degen, Gravity, Ink, Linea, and Sanko
• 9c9c491: Added Backpack support with backpackWallet wallet connector
• f89eb92: Improved support for the Binance Wallet dApp browser
• a765cfc: Updated icons for Arbitrum, Blast, Gnosis, Scroll, and zkSync
• e4547b8: Added icon for HyperEVM chain

v2.2.3

Compare Source

Patch Changes

• b5a7878: Updated OP Mainnet branding

v2.2.2

Compare Source

Patch Changes

• f533ac2: Support for React 19.

v2.2.1

Compare Source

Patch Changes

• 3469982: Added Wigwam support with wigwamWallet wallet connector
• 0c6af55: Added icon for Flow chain
• 5b8e146: Added de-DE and de locale support for the German language.
• 9dd23d9: Added BeraSig support with berasigWallet wallet connector
• 7fceab8: Added ms-MY and ms locale support for the Malay language.

v2.2.0

Compare Source

Minor Changes

• f02bced: The Authentication API now supports ERC-1271 and ERC-6492 for smart contract signature verification to enable Sign-in with Ethereum for Smart Contract Wallets, including Coinbase Smart Wallet and Argent.

  We have also deprecated the siwe and ethers peer dependencies in favor of viem/siwe to make RainbowKit even more seamless.

  No changes are necessary for dApps that don't rely on the Authentication API.

  Follow the appropriate steps below to migrate.

  NextAuth Authentication

  1. Remove siwe and ethers

  npm uninstall siwe ethers

  2. Upgrade RainbowKit, rainbowkit-siwe-next-auth, and viem

  npm i @​rainbow-me/rainbowkit@^2.2.0 rainbow-me/rainbowkit-siwe-next-auth@^0.5.0 viem@^2.12.0

  3. Create a Public Client

  This allows viem to verify smart contract signatures.

  const config = getDefaultConfig({
    /* your config */
  });
  + const publicClient = config.getClient().extend(publicActions);

  4. Adjust your authorize implementation in /api/auth/[...nextauth].ts

  - import { SiweMessage } from 'siwe';
  + import {
  +   type SiweMessage,
  +   parseSiweMessage,
  +   validateSiweMessage,
  + } from 'viem/siwe';
  
  export function getAuthOptions(req: IncomingMessage): NextAuthOptions {
    const providers = [
      CredentialsProvider({
        async authorize(credentials: any) {
  
  -       const siwe = new SiweMessage(
  -         JSON.parse(credentials?.message || '{}'),
  -       );
  +       const siweMessage = parseSiweMessage(
  +         credentials?.message,
  +       ) as SiweMessage;
  
  +       if (!validateSiweMessage({
  +         address: siweMessage?.address,
  +         message: siweMessage,
  +       })) {
  +         return null;
  +       }
  
          /* ... */
  
  -       await siwe.verify({ signature: credentials?.signature || '' });
  +       const valid = await publicClient.verifyMessage({
  +         address: siweMessage?.address,
  +         message: credentials?.message,
  +         signature: credentials?.signature,
  +       });
  
  +       if (!valid) {
  +         return null;
  +       }
        },
        /* ... */
      })
    ]
  }

  Reference the with-next-siwe-next-auth example for more guidance.

  Custom Authentication

  1. Remove siwe and ethers

  npm uninstall siwe ethers

  2. Upgrade RainbowKit and viem

  npm i @​rainbow-me/rainbowkit@^2.2.0 viem@^2.12.0

  3. Create a Public Client

  This allows viem to verify smart contract signatures.

  const config = getDefaultConfig({
    /* your config */
  });
  
  + const publicClient = config.getClient().extend(publicActions);

  4. Adjust your createAuthenticationAdapter implementation

  - import { SiweMessage } from 'siwe';
  + import { createSiweMessage } from 'viem/siwe';
  
  createAuthenticationAdapter({
    getNonce: async () => {
      const response = await fetch('/api/nonce');
      return await response.text();
    },
  
    createMessage: ({ nonce, address, chainId }) => {
  -   return new SiweMessage({
  +   return createSiweMessage({
        domain: window.location.host,
        address,
        statement: 'Sign in with Ethereum to the app.',
        uri: window.location.origin,
        version: '1',
        chainId,
        nonce,
      });
    },
  
  - getMessageBody: ({ message }) => {
  -   return message.prepareMessage();
  - },
  
    /* ... */
  })

  5. Adopt generateSiweNonce

  - import { generateNonce } from 'siwe';
  + import { generateSiweNonce } from 'viem/siwe';
  
  - req.session.nonce = generateNonce();
  + req.session.nonce = generateSiweNonce();

  6. Adopt parseSiweMessage and verifyMessage if your Verify handler

  - import { SiweMessage } from 'siwe';
  + import { parseSiweMessage, type SiweMessage } from 'viem/siwe';
  
  const { message, signature } = req.body;
  - const siweMessage = new SiweMessage(message);
  - const { success, error, data } = await siweMessage.verify({
  -  signature,
  - });
  + const siweMessage = parseSiweMessage(message) as SiweMessage;
  + const success = await publicClient.verifyMessage({
  +   address: siweMessage.address,
  +   message,
  +   signature,
  + });
  
  - if (!success) throw error;
  + if (!success) throw new Error('Invalid signature.');
  
  - if (data.nonce !== req.session.nonce)
  + if (siweMessage.nonce !== req.session.nonce)
  +   return res.status(422).json({ message: 'Invalid nonce.' });

  Reference the with-next-siwe-iron-session example for more guidance.

v2.1.7

Compare Source

Patch Changes

• 4014d80: Added vi-VN and vi locale support for the Vietnamese language.
• f93cd0e: Added ParaSwap Wallet support with paraSwapWallet wallet connector
• 6393498: Added Best Wallet support with bestWallet wallet connector

v2.1.6

Compare Source

Patch Changes

• 63d8386: Added Valora support with valoraWallet wallet connector
• 8d9a4e6: Fixed an issue where some options in the "Get Wallet" flow would appear as a blank page, or lack a back button to return to the Connect flow.
• d46637a: Added safeWallet wallet connector to getDefaultConfig by default to improve the Safe Wallet app browser connection flow with a Safe button included by default in the wallet list

v2.1.5

Compare Source

Patch Changes

• c08f620: Added zh-HK and zh-TW locales for Traditional Chinese language support. You can also specify zh-Hans and zh-Hant locales to refer to the writing systems directly.

  Reference our guide to learn more about Localization.

• 675f9dd: Add icon for Gnosis Chain

• f65b5c4: Add icon for Celo chain

• 9c36bfd: Added Kaia Wallet support with kaiaWallet wallet connector

v2.1.4

Compare Source

Patch Changes

• b530c80: Added mobile support for zealWallet wallet connector
• 7f6e36e: Added missing rdns property to some wallets. This helps them work with EIP-6963 connectors.
• 2eeb7b9: Improved the Safe Wallet app browser connection flow with a Safe button included by default in the wallet list
• 72fe07d: Added Binance Web3 Wallet support with binanceWallet wallet connector
• d02d73f: Resolved an issue where the Phantom wallet did not appear as an EIP-6963 connector.

v2.1.3

Compare Source

Patch Changes

• 23e33b9: Added mantle and mantleTestnet network support
• 7b00be5: Added Seif Wallet support with seifWallet wallet connector
• 001a0a9: Resolved an issue in development where browser detection would throw an error if navigator.userAgent was unavailable in the browser.

v2.1.2

Compare Source

Patch Changes

• 2180ddd: Added Nest Wallet support with nestWallet wallet connector

• fea278a: The coinbaseWallet wallet connector now has a preference argument to control whether Smart Wallet is enabled and available for users. Preference based behavior is documented here.

  Smart Wallet will be enabled by default with all in early June, without a further upgrade.

  Developers can test Smart Wallet with sepolia and baseSepolia chains today by setting smartWalletOnly like so:

  import { coinbaseWallet } from "@​rainbow-me/rainbowkit/wallets";
  
  // Enable Coinbase Smart Wallet for testing
  coinbaseWallet.preference = "smartWalletOnly";
  
  // You must manually specify your wallet list with `wallets` in
  // `getDefaultConfig` or `connectorsForWallets` to assign the preference
  const config = getDefaultConfig({
    /* ... */
    wallets: [
      {
        groupName: "Popular",
        wallets: [coinbaseWallet],
      },
    ],
    /* ... */
  });

v2.1.1

Compare Source

Patch Changes

• 725a376: Added Magic Eden Wallet support with magicEdenWallet wallet connector
• 9be5452: Resolved an issue with the Enhanced Provider when using RainbowKit in Vite without a process.env polyfill

v2.1.0

Compare Source

Minor Changes

• 82153ed: Upgraded compatible wagmi and @coinbase/wallet-sdk versions to support Coinbase Smart Wallet.

  Smart Wallet enables users to create a new wallet in seconds with Passkeys, without installing an app or extension. Smart Wallet users can use the same account and address across all onchain apps with RainbowKit.

  Smart Wallet and the underlying smart contract is fully compatible with Wagmi, but dApps need to ensure that their offchain signature validation is ERC-6492 compliant to support smart contract wallets. Follow this guide for more information.

  Coinbase Wallet users on desktop and mobile will now interact with a new connection flow in RainbowKit alongside Smart Wallet.

• 90d6931: Introduced the Enhanced Provider to handle fallback resolutions when a Mainnet provider transport is unavailable.

  ENS names for dApps without a Mainnet provider will now properly resolve. Additional conveniences will be soon be rolling out in RainbowKit.

v2.0.8

Compare Source

Patch Changes

• 8841891: Added real-time balance fetching based on the Recent Transaction API. As a transaction is confirmed on-chain, the user's gas balance will be updated to reflect the transaction.

  import { useAddRecentTransaction } from "@​rainbow-me/rainbowkit";
  
  export default () => {
    const addRecentTransaction = useAddRecentTransaction();
  
    return (
      <button
        onClick={() => {
          addRecentTransaction({
            hash: "0x...",
            description: "...",
          });
        }}
      >
        Add recent transaction
      </button>
    );
  };

v2.0.7

Compare Source

Patch Changes

• af4ea4e: Added Kraken Wallet support with krakenWallet wallet connector
• f0b3b25: Mitigated behavior in Coinbase Wallet where the user would be captured in the in-app browser upon redirect.

v2.0.6

Compare Source

Patch Changes

• 7ab6e50: Added Compass Wallet support with compassWallet wallet connector
• 515498f: Locked the dependencies for the coinbaseWallet wallet connector to Coinbase Wallet SDK v3 to temporarily mitigate breaking changes included an upcoming version of Wagmi.

v2.0.5

Compare Source

Patch Changes

• 4dd1e45: Fixed an issue that allowed duplicate wallets to be added to the Connect Modal when using connectorsForWallets
• 1a0f209: Added a small check to throw an error if the wallet list is empty overall or empty within any category.
• ec41346: Amended the getDefaultConfig return type to prevent indirect type annotation errors and better infer type for parameters from Wagmi's createConfig.
• fc4d7e1: Resolved a bug where if multiInjectedProviderDiscovery was set to false the roninWallet would prevent showing Opening Ronin Wallet... UI in the connect modal.
• 81ba812: Added support for zetachain and zetachainAthensTestnet testnet chain
• b11118f: Added Kaikas Wallet support with kaikasWallet wallet connector and added klaytn chain with klaytnBaobab testnet support.

v2.0.4

Compare Source

Patch Changes

• 77dcec3: Added Bybit Wallet support with bybitWallet wallet connector
• 6c240ba: Added Gate Wallet support with gateWallet wallet connector
• 34419b5: Added Bitverse Wallet support with bitverseWallet wallet connector
• 5c60239: Added 1inch Wallet support with oneInchWallet wallet connector

v2.0.3

Compare Source

Patch Changes

• b80e8fa: Improved the synchronous connection flow for the WalletButton and WalletButton.Custom components
• 985b80b: Resolved an issue where ENS resolution would fail and throw an error for ENS names with disallowed characters.
• b25db9a: Added blast and blastSepolia network support

---

Configuration

📅 Schedule: Branch creation - Between 12:00 AM and 03:59 AM, only on Monday ( * 0-3 * * 1 ) (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	@​rainbow-me/​rainbowkit@​2.0.2 ⏵ 2.2.8			+1	-1

View full report

[socket-security]

All alerts resolved. Learn more about Socket for GitHub.

This PR previously contained dependency changes with security issues that have been resolved, removed, or ignored.

View full report