v3.0.0

3.0.0 (v2.1.1...v3.0.0) (2026-05-20)

chore

* bump version to 3.0.0 to reflect breaking change (a6ea296 (https://github.com/BitGo/advanced-wallets/commit/a6ea29653f8f3e6fd770770dd4a2ab3555fe314d)), closes #195 (https://github.com/BitGo/advanced-wallets/issues/195)

BREAKING CHANGES

* All KMS_* environment variables were renamed to

v2.1.1

3.0.0 (v2.1.0...v3.0.0) (2026-05-20)

Bug Fixes

* fix 500s due to assertion logic error with utxo (4682109 (https://github.com/BitGo/advanced-wallets/commit/4682109a12d57975fded0f1e815b15d7edfd053d))
* mbe: forward walletPubs in consolidateUnspents and accelerate (4028d79 (https://github.com/BitGo/advanced-wallets/commit/4028d793b014342e93ad352e9eb53dea58e4290e))

Code Refactoring

* rename KMS to Key Provider across codebase (544374f (https://github.com/BitGo/advanced-wallets/commit/544374fd1f6972a33cebf1a0ab5176091e888ddc))

Features

* awm: backup awm client configurations (20071b7 (https://github.com/BitGo/advanced-wallets/commit/20071b7189945d312e61eb7317b6140b1c93dce5))
* awm: backup key provider in recoveries (decefd1 (https://github.com/BitGo/advanced-wallets/commit/decefd1cdb388ccdfb0fd628cf326c25efd95b79))
* implement external signing - phase 1 (dcee4fc (https://github.com/BitGo/advanced-wallets/commit/dcee4fccddcba2a65553359c5253a16ed97a4737))

BREAKING CHANGES

* All KMS-related environment variables have been renamed.
  Update your deployment configuration (Helm values, docker-compose,
  .env files, CI pipelines) before upgrading:
  KMS_URL                        -> KEY_PROVIDER_URL
  KMS_SERVER_CA_CERT_PATH        -> KEY_PROVIDER_SERVER_CA_CERT_PATH
  KMS_CLIENT_TLS_KEY_PATH        -> KEY_PROVIDER_CLIENT_TLS_KEY_PATH
  KMS_CLIENT_TLS_CERT_PATH       -> KEY_PROVIDER_CLIENT_TLS_CERT_PATH
  KMS_CLIENT_TLS_KEY             -> KEY_PROVIDER_CLIENT_TLS_KEY
  KMS_CLIENT_TLS_CERT            -> KEY_PROVIDER_CLIENT_TLS_CERT
  KMS_SERVER_CERT_ALLOW_SELF_SIGNED -> KEY_PROVIDER_SERVER_CERT_ALLOW_SELF_SIGNED

The KMS API specification file has been renamed from
kms-api-spec.yaml to key-provider-api-spec.yaml. The API contract
itself is unchanged -- only the naming has been updated to accurately
reflect the vendor-agnostic nature of the key management interface.

v2.1.0

3.0.0 (v2.0.1...v3.0.0) (2026-04-27)

Bug Fixes

* bump BitGo SDK and fix UTXO multisig sendMany (c25b99b (https://github.com/BitGo/advanced-wallets/commit/c25b99bc8060f99e450390d1c302adf77b82a45d))
* default type to 'transfer' for TSS sendMany requests (edbfb4c (https://github.com/BitGo/advanced-wallets/commit/edbfb4c8489e559908c28b05cd36b8316deb7a59))
* mbe: fix return type of certain MBE routes (3f11d0f (https://github.com/BitGo/advanced-wallets/commit/3f11d0f6bb5395d2a24708603cc0db02491f563f))
* patch vuln's in node_forge and validator (fc80522 (https://github.com/BitGo/advanced-wallets/commit/fc80522a6d4b0458392b5eb38cc0385c907aa065))
* remove stack trace leakage for errors (71276ca (https://github.com/BitGo/advanced-wallets/commit/71276cabb5e42ee7ae83b668f595bedd9858e479))
* scope keychain validation to wallet type (WCN-84) (7133bdf (https://github.com/BitGo/advanced-wallets/commit/7133bdffd954ff0687e766103a2cb8b8b5527043))

Features

* add OpenAPI spec for KMS API integration (ecdf11a (https://github.com/BitGo/advanced-wallets/commit/ecdf11a42145dc1085cb67065c9f9313544a4b16))
* Add support for EVM keyring wallets in generateWallet API (1ef6e5f (https://github.com/BitGo/advanced-wallets/commit/1ef6e5f966dbc7c534525e191e069bffc3af5041))
* rename MBE API paths to /api/v1/{coin}/advancedwallet/* (7d3f5cf (https://github.com/BitGo/advanced-wallets/commit/7d3f5cf93ec56b362c4c2973c6bb40d2d767f7bf))

BREAKING CHANGES

* abstract-utxo@1941 added assert(params.pubs) in the
  BitGoPsbt signing path. sendMany for UTXO wallets now fetches all 3
  keychains and passes walletPubs=[userPub,backupPub,bitgoPub] through
  the signing stack to satisfy this assertion.

* Bump all @bitgo-beta packages to latest
* Fix UTXO recovery test: replace legacy txHex fixture with valid PSBT
* Fix sendMany for UTXO coins: wire walletPubs through handleSendMany
  to signAndSendMultisig to advancedWalletManagerClient to signMultisigTransaction
* Add tests covering walletPubs behaviour and BitGoPsbt signing path

Ticket: WAL-762

* All Master Express API endpoints have been renamed from
  /api/{coin}/wallet/* to /api/v1/{coin}/advancedwallet/* to differentiate
  from BitGoJS Express APIs and add versioning support.

Ticket: WP-7175

v2.0.0

2.0.0 (v1.1.3...v2.0.0) (2025-11-13)

Bug Fixes

* awm: remove unintended changes to package-lock (c298443 (https://github.com/BitGo/advanced-wallets/commit/c29844384144b707bd5371d12ae9a3cf25c9a9fd))
* mbe: enforce an input check for send many pub keys (eb46327 (https://github.com/BitGo/advanced-wallets/commit/eb463274124fbcc98302c1fc2324e2c7f4a9bb95))
* mbe: fix issue with acceleration tx formatting (a8522a2 (https://github.com/BitGo/advanced-wallets/commit/a8522a2f33ac33f0ac71a81b5ca24978dbfba2b8))
* mbe: remove txformat as input params to handle consolidation (60cf79a (https://github.com/BitGo/advanced-wallets/commit/60cf79a7a5659bac379be4c58aee78bbb932a373))
* patch elliptic vulnerability (703369b (https://github.com/BitGo/advanced-wallets/commit/703369b9cb59b8a2ad66425c8e9929fc9d4eacc3))
* patch OpenSSL CVE-2024-6119 by updating to node:22-alpine (d91103f (https://github.com/BitGo/advanced-wallets/commit/d91103f9bf9f6eae9f4b769b545ce3ea09ff577a))
* pin docker image to sha2 digest (7ca44c8 (https://github.com/BitGo/advanced-wallets/commit/7ca44c8a3e2da5b972c40c81c10aa1a53475ec37))
* require allowed fingerprints list for mtls (43985a8 (https://github.com/BitGo/advanced-wallets/commit/43985a836b111798d3c39f0d523d657a5945bd5f))
* resolve all critical and high npm vuln's (b855204 (https://github.com/BitGo/advanced-wallets/commit/b8552041b002e1c2b29f7ca551074fe9f534e4e4))
* use correct sha digest for base image (356cbb4 (https://github.com/BitGo/advanced-wallets/commit/356cbb492c870a956fe2f01de12c9546078de89c))

Features

* add docker build job (3a30b78 (https://github.com/BitGo/advanced-wallets/commit/3a30b7851e888495da5a52565ca4c8bc45918c16))
* add npm audit and trivy CI checks on PRs (dad7c31 (https://github.com/BitGo/advanced-wallets/commit/dad7c3180250942b45017fb440339b883137d79a))
* mbe, awm: uses advanced wallet type instead of onPrem subtype (7360dde (https://github.com/BitGo/advanced-wallets/commit/7360dde4ad52a04c5a1cf8247415fa34cfbb9871))
* run fossa scans (6ed9b01 (https://github.com/BitGo/advanced-wallets/commit/6ed9b01a74e206977ed2701665d226530bc71489))

BREAKING CHANGES

* mbe, awm: no longer creates onPrem subtype wallets

Ticket: WP-5983

v1.0.0

1.1.1 (v1.1.0...v1.1.1) (2025-09-17)

Bug Fixes

* gha: fix bug on generating semantic release notes (53b830e (https://github.com/BitGo/advanced-wallets/commit/53b830e03312dc3f13a51c692b7e15e61650a5ed))

v0.0.1

Automated release created by GitHub Actions

What's Changed

• feat: setup enclaved bitgo express with mTLS support by @pranavjain97 in #1
• feat: package master bitgo express with enclaved express by @pranavjain97 in #3
• feat(mbe): add bitgo integration and generate wallet api by @pranavjain97 in #4
• feat(ebe): KMS client and post independent key API by @alextse-bg in #6
• feat: use winston logger for app level logs by @pranavjain97 in #7
• fix(ebe): fixed incorrect kms response schema for post key by @alextse-bg in #8
• feat(wp): consolidate all mtls settings by @pranavjain97 in #9
• fix: update /key/independent route by @pranavjain97 in #10
• fix: both tls modes working with http/https by @pranavjain97 in #11
• fix(mbe, ebe): fixed the E2E flow for wallet generation by @alextse-bg in #13
• chore(mbe, ebe): refactor routes into their own files by @pranavjain97 in #12
• chore(mbe,ebe): apply nodemon by @mohammadalfaiyazbitgo in #17
• chore: upgrade node to v22 by @pranavjain97 in #16
• Wp 4622/api ts mbe by @mohammadalfaiyazbitgo in #18
• feat(mbe): add typing for typed request handlers by @mohammadalfaiyazbitgo in #20
• feat(ebe): added multisig signing API to EBE by @alextse-bg in #19
• feat: integration test setup and move to mocha by @pranavjain97 in #22
• feat(ebe): api-tsify ebe by @mohammadalfaiyazbitgo in #21
• feat(mbe): add sendMany api signing with ebe by @pranavjain97 in #15
• fix(mbe): fix backup key signing by @pranavjain97 in #24
• chore: fix loading the certs repetetively by @pranavjain97 in #27
• fix(mbe,ebe): nodemon restart on file changes by @mohammadalfaiyazbitgo in #26
• fix(mbe): fix response handlers for errors by @pranavjain97 in #31
• feat(mbe): add unified api spec for mbe by @mohammadalfaiyazbitgo in #30
• feat(mbe, ebe): dockerize mbe/ebe by @mohammadalfaiyazbitgo in #25
• test(mbe): add sendMany integration tests by @pranavjain97 in #29
• recovery multisig for eve and mbe by @mtexeira-simtlix in #23
• feat(mbe): use generated client for type safety by @mohammadalfaiyazbitgo in #32
• feat(ebe): added integrated test for ebe api by @alextse-bg in #28
• feat: improved typing for recovery musig by @mtexeira-simtlix in #36
• feat(ebe): support mpc signing for eddsa by @pranavjain97 in #34
• feat(mbe): consolidate account by @cpatino-intive in #39
• chore: address follow up comments by @pranavjain97 in #44
• Wp eddsa keygen by @alextse-bg in #35
• feat(mbe): add support for mpc eddsa sendmany + signing by @pranavjain97 in #41
• fix: missing params broadcast fail on musig eth rec by @mtexeira-simtlix in #45
• musig recovery tests for heth on-prem by @mtexeira-simtlix in #46
• fix(nodemon): rebuild and restart app on changes by @mohammadalfaiyazbitgo in #50
• feat(mbe,ebe): utxo recoveries by @mohammadalfaiyazbitgo in #47
• test: removed api key field from ebe calls by @mtexeira-simtlix in #53
• feat: raise error on no recipients eth musig rec and some refactors by @mtexeira-simtlix in #51
• feat(mbe): accelerate utxo by @cpatino-intive in #55
• feat(ebe): mpcv2 signing for all rounds by @pranavjain97 in #48
• feat(mbe): add MPCv2 signing support to master/sendMany by @pranavjain97 in #57
• [MBE]: Consolidate unspents for btc by @cpatino-intive in #43
• Mohammad/mbe ecdsa by @mohammadalfaiyazbitgo in #54
• fix(mbe): make multisigType required for generate wallet by @pranavjain97 in #59
• test(mbe): add integration tests for MPC sendMany by @pranavjain97 in #58
• chore: refactor file names for mpc creation by @mohammadalfaiyazbitgo in #60
• feat(mbe): use custom signing fns for mpcv2 signing/sendmany by @pranavjain97 in #61
• feat(mbe): use customSigning fns for MPC eddsa by @pranavjain97 in #66
• feat(mbe): api to sign and send a txrequest by @pranavjain97 in #63
• feat: sign eddsa recovery transaction by @mohammadalfaiyazbitgo in #65
• MPC consolidation by @cpatino-intive in #64
• feat: add claude context by @mohammadalfaiyazbitgo in #68
• feat(mbp): recovery consolidate from wallet address by @cpatino-intive in #52
• Wp 5257/create durable nonce solana recovery by @mohammadalfaiyazbitgo in #70
• feat(mbe): allow fillNonce sendmany tx's by @pranavjain97 in #74
• ci: enable commit lint for future commits by @mohammadalfaiyazbitgo in #73
• chore(mbe): handle bitgo api error responses by @pranavjain97 in #75
• ci: enable bitgo semantic release flow by @mohammadalfaiyazbitgo in #76
• chore(ebe): remove unreachable if conditions by @pranavjain97 in #78
• fix(mbe): remove eth legacy gasPrice field for sendMany by @pranavjain97 in #79
• chore(aw): add better error logging to file by @pranavjain97 in #80
• feat(mbe,ebe)!: migrate to beta packages and deprecate bitgo package by @mohammadalfaiyazbitgo in #81
• chore(mbe): hide winston/http logs in test runs by @pranavjain97 in #86
• chore(mbe): clean up / consolidate configs for mbe/ebe by @pranavjain97 in #82
• feat(mbe): add failure tests for consolidations, unspents, acceleration by @cpatino-intive in #83
• feat!: migrate to npm for better tooling by @mohammadalfaiyazbitgo in #87
• fix: using etherscan api key from params for eth recovery by @mohammadalfaiyazbitgo in #88
• feat(mbe): Hide recovery APIs for mbe by @cpatino-intive in #85
• feat(ebe): hide recovery api under non recovery mode by @cpatino-intive in #91
• docs: update README by @mohammadalfaiyazbitgo in #90
• fix(mbe,ebe): remove console logs by @cpatino-intive in #92
• feat(ebe): require kmsTlsCert if mtls enabled by @pranavjain97 in #89
• feat(ebe, mbe): added recovery to MPCv2 by @alextse-bg in #71
• doc(mbe): add documentation for recoveries and accelerations by @mohammadalfaiyazbitgo in #84
• fix(mbe): fix validation params for recovery by @pranavjain97 in #95
• fix(aw): fix non-sol eddsa recovery validation by @pranavjain97 in #98
• fix (ebe, mbe): added better error messages and test cases for keygen… by @alextse-bg in #94
• feat(mbe, awm): switch to advanced wallet manager naming by @pranavjain97 in #100
• docs(mbe): add api descriptions for recoveries and accelerations by @mohammadalfaiyazbitgo in #101
• feat(ebe, mbe): added error handling between expresses and kms by @alextse-bg in #96
• feat(mbe): use local encipherm...