github LedgerHQ/ledger-live @ledgerhq/live-desktop@4.17.0

latest release: live-mobile@4.17.0
3 hours ago

4.17.0

Minor Changes

  • #20611 5a87153 Thanks @mcayuelas-ledger! - Mount the first-time Pay tab FeatureTour on the PayTab screen in both apps. Visibility is self-gated by the payCard slice (shown on first visit, hidden after dismissal), copy is injected from app-owned i18n keys (payTab.featureTour.*), and analytics are wired through the view-model. Adds unit and integration coverage for the conditional rendering.

  • #20655 ec8baad Thanks @mcayuelas-ledger! - Add the desktop Pay hero for the aggregated stablecoin balance. Introduces the @features/flow-pay-card-balance package with props-only empty and funded states, wired into the desktop Pay tab and tracking Page Pay with the active balance_filter (LIVE-34896).

  • #20713 a3164d8 Thanks @mcayuelas-ledger! - Add the mobile Pay hero for the aggregated stablecoin balance. The @features/flow-pay-card-balance package gains props-only native empty and funded states, and both apps now share the portfolio aggregation through aggregatePayCardBalance (LIVE-34898). The hero is mounted at the top of the mobile Pay tab, which tracks Page Pay with the active balance_filter on view.

  • #20844 5ff320a Thanks @mcayuelas-ledger! - Wire the desktop Pay tab "Add stablecoin" tile to the shared Deposit options dialog: pressing it opens the dialog and each option routes to its desktop flow (bank transfer, swap, buy) or the receive asset flow filtered to stablecoins.

    Render the deposit options as Lumen ListItem rows.

  • #20644 936abf0 Thanks @LucasWerey! - chore(deps): bump Lumen design system to latest and migrate CSS to tailwind v4 style

  • #20815 54fcd49 Thanks @cted-ledger! - Exclude immature Ironwood notes from the spendable pool. A shielded note is only spendable once its transaction is buried deep enough to have a witness at the builder's anchor, so a freshly scanned change note is no longer selected while a second send is prepared within the same confirmation window. The rule is applied wherever the spendable pool is derived — note selection, max-spendable and amount validation — and the send flow now reports insufficient spendable funds instead of failing when the transaction is built. Funds held by maturing notes stay part of the account's total balance.

  • #20735 c3b8717 Thanks @mcayuelas-ledger! - Add a stablecoin balance filter picker to the Pay card hero.

  • #20833 2ab3cb8 Thanks @tonykhaov! - Require utmContent on buildLargeScreenUpsellCtaLink (breaking) and personalise the Backup Hub Recovery Key row for Nano S / SP / X with a warning and large-screen upsell CTA (LIVE-35484).

  • #20683 74de0e5 Thanks @RobinVncnt! - Show only one portfolio Braze banner when the placement area is too narrow for two readable columns, using CSS container queries instead of JS width measurement.

  • #20702 e07e0ba Thanks @mcayuelas-ledger! - Scaffold the Card API on a single endpoint-less cardApi service (DDD, CMC/DADA pattern): add the services/card transport in @shared/api-services with Bearer + x-client-key (CARD_BAANX_CLIENT_KEY) + one 401-refresh, the @domain/api-card-management endpoint injector, the @features/platform-card in-memory session and getCardSessionToken/refreshCardSession accessors, the CARD_API_URL / CARD_BAANX_CLIENT_KEY envs, and register cardApi in both apps. The legacy payCardApi Card Auth holdout is left untouched pending its migration onto cardApi (LIVE-33829).

  • #20684 ead65e0 Thanks @sarneijim! - Update LNS upsell banner opt-in/opt-out copy and per-placement images to match mobile.

  • #20571 7c8d5df Thanks @live-github-bot! - Thread the coin-module Context (ADR-019) explicitly through the coin-evm, coin-vechain and coin-near api and logic layers instead of resolving configuration from the module-level getCoinConfig singleton. Exported logic functions now take the context as their first argument, resolve config from it (await context.config(currencyId)), and pass an explicit, required config down to the network layer — no config? optionals and no singleton reads on the data path. getCoinConfig/setCoinConfig remain only as the compatibility surface for the classic account bridge. Ledger Live consumers (live-common, desktop, mobile and coin-celo) are updated to resolve and pass config/context explicitly. Also fixes a coin-polkadot type-inference issue where getTransactionMaterialWithMetadata's cache-key extractor narrowed the cached signature and dropped the config argument.

  • #20759 526ca7b Thanks @claudiiafg! - Extract shared Contacts tracking hooks and move currency analytics resolution to platform-contacts.

  • #20420 494963b Thanks @jiyuzhuang! - Fix apps not being restored after a firmware update during Early Security Checks (ESC) in sync onboarding

  • #20856 d0ac51c Thanks @mcayuelas-ledger! - Wire the Pay tab "Add stablecoin" tile to the shared Deposit options overlay on both platforms: pressing it opens the dialog (desktop) or bottom sheet (mobile), and each option routes to its platform flow (bank transfer, swap, buy) or the receive flow filtered to stablecoins.

    Extract a shared useDepositOptionsAdapter hook in @features/flow-pay-card-deposit so desktop and mobile no longer duplicate the deposit options open/close state and props shape.

  • #20907 da0a5ce Thanks @fAnselmi-Ledger! - Add Solana TXC flag

  • #20784 19e578a Thanks @mcayuelas-ledger! - Move the Pay Card UI Redux state out of the removed @domain/entity-pay-card package into the owning feature flows: the balance filter goes to @features/flow-pay-card-balance and the feature-tour seen flag to @features/flow-pay-card-feature-tour. The apps keep persisting it under the existing payCard key (no data migration). Both flows expose a UI-free ./state entry so store, persistence and test setup can use the slice without pulling in the flow UI.

  • #20778 eecf99a Thanks @francois-guerin-ledger! - chore(coin-evm): replace CryptoCurrency with currencyId

  • #20670 6165c9d Thanks @dilaouid! - feat(lwd): show recipient action only when no bridge error

  • #20929 dcb3340 Thanks @jiyuzhuang! - Skip installed-app listing before the ESC firmware update drawer on unseeded devices (LIVE-36215)

  • #20906 dbb2ee0 Thanks @LL782! - Fix Ledger Sync being wiped on every launch when Password Lock is enabled. app.trustchain is an encrypted db path, so before unlock it reads back as a ciphertext string; importing it regenerated member credentials, nulled the trustchain, and persisted that fresh state over the encrypted blob in plaintext. The import is now skipped while the value is still a string, and trustchain writes are suppressed while the app is locked.

  • #20662 a736d28 Thanks @RobinVncnt! - Add the Braze category content cards data layer on desktop, with single and bulk dismiss

  • #20703 c8d9b15 Thanks @amaslakov! - Surface ICP neuron staking on the account page: a stake banner for accounts that can afford a neuron
    but hold none, a balance summary footer showing total staked and total maturity, and Stake / Manage
    Neurons actions in the account header. The send flow now explains that the memo is protocol-derived
    for create_neuron and increase_stake instead of offering an editable field. The two neuron flow
    modals are registered but their bodies land separately.

  • #20789 fe57525 Thanks @sarneijim! - Fix Large Screen Upsell competing-modal handling on desktop: do not consume retriesModal when blocked/preempted, rename persisted retries to retriesModal (legacy reset on LWD only), and track modal_blocked.

  • #20803 13d6db5 Thanks @sarneijim! - Extend desktop always-on upsell banners to Nano SP and Nano X using the shared largeScreenUpsell audience and cooldown (LIVE-35397).

  • #20719 5b39a67 Thanks @sarneijim! - Drive desktop LNS upsell banners from largeScreenUpsell and remove the legacy lldNanoSUpsellBanners flag (LIVE-35487).

  • #20794 29347c9 Thanks @LL782! - Replace the useTrack hook with the module-level track function

    Internal refactor ahead of the analytics package migration. Every event keeps the properties it emits today: desktop reads the drawer name from the drawer context (or passes the custom-lock-screen constant directly) at each call site, and mobile's swap entry point rebuilds its router-derived page with usePageNameFromRoute.

  • #20731 69a5644 Thanks @claudiiafg! - Wire Contacts feature analytics to the shared platform tracking contract.

  • #20795 b8370ec Thanks @lewisd5! - Add 1024 icon for the mac app store

  • #19581 6a437fd Thanks @Moustafa-Koterba! - feat(lwdm): improve error context on datadog

  • #20740 542737c Thanks @ishaba! - fix(drawer): don't restore focus to a detached webview on close

  • #20806 eb4d29e Thanks @mcayuelas-ledger! - Drop the redundant PayCard prefix from the public API of @features/flow-pay-card-balance. The package path already scopes the feature, matching sibling flows (FeatureTour, CardLogin). The hero is now exported as Balance, with useBalanceData, aggregateBalance, buildBalanceData and Balance* types.

  • #20642 a61f702 Thanks @mcayuelas-ledger! - Persist the pay card hero balance filter across app restarts

  • #20755 e291645 Thanks @mcayuelas-ledger! - Add the mobile stable balance filter (native select under the hero + queued bottom-sheet picker) and share the filter option and stablecoin logic between desktop and mobile

  • #20096 e54d98b Thanks @liviuciulinaru! - Integrate the Card API and give its endpoints a domain owner

    @domain/api-card-management gains the Card Auth contract: authorize initiation, authorization-code
    exchange, session refresh, logout and the user read, with their zod wire schemas and inferred types.
    They inject into the shared cardApi service, so one reducer, one middleware and one cache serve the
    Card backend, and the base query supplies the base URL, x-client-key and the Authorization: Bearer
    header from the @features/platform-card session.

    @features/flow-pay-card-auth owns no network contract any more. It keeps the auth-only payCardAuth
    slice and the CardLogin component; useCardLoginViewModel imports its hook from
    @domain/api-card-management, and that import is what triggers the injection. @domain/api-pay-card
    and its in-process mock transport are removed, along with the Pay Card mocks.

    Pay Card UI Redux state is owned by the feature flows that use it: the balance filter by
    @features/flow-pay-card-balance and the feature-tour flag by @features/flow-pay-card-feature-tour.

    Only the login step ships here. The callback code exchange and the card status read stay behind until
    the session has an owner that can store and refresh it.

  • #20433 481bc40 Thanks @ooke-ledger! - Hand a perps deposit requested by the live app over to the wallet, and let the asset and account pickers word themselves after the role the selection plays: the account funds land in, the account they are taken from, or the perps pick that predates both

  • #20723 ab35763 Thanks @YazhuEth! - Fix the receive flow reporting a verification error (visible on Polkadot) while the address confirmation succeeded on the device: re-renders no longer start a concurrent confirmAddress call, and a late result can no longer overwrite a successful verification.

  • #20742 2d1bded Thanks @mcayuelas-ledger! - Refactor PayTab integration tests: merge describe blocks and use scoped within queries

  • #20668 0076ce3 Thanks @dilaouid! - feat(lwd): no contact screen in recipient screen

  • #20681 6543cfd Thanks @YazhuEth! - Add an "add contact" step to the send flow, opened from the recipient card, offering to create a new contact or to add the address to an existing one

  • #20645 dd3baf3 Thanks @claudiiafg! - Add shared edit contact signer validation state with mocked signer mismatch handling and wire Desktop and Mobile contact edit flows.

  • #20788 7c20f72 Thanks @mcayuelas-ledger! - Add the Pay action tiles to the LWD Card screen: mount the shared ActionTiles view-model under the balance hero (Add stablecoin / Request / New payment), add per-tile appearance support to the ActionTiles component, and extract the PayTab action-tiles and balance labels into dedicated hooks.

  • #20945 e63995d Thanks @benruseau! - LWD 4.17.0 release notes

  • #20796 320b488 Thanks @dilaouid! - fix(lwd): new send flow keeping the previous recipient after skip memo and edit

  • #20761 80fb6ae Thanks @mcayuelas-ledger! - Stabilize the PayTab balance integration test by asserting a settled funded state

  • #20732 0952b2e Thanks @jiyuzhuang! - Simplify Welcome analytics opt-in V2 gating to lwdAnalyticsOptInScreenV2 only

  • #20658 a79b9aa Thanks @semeano! - Zcash: add self transfer option on send modal

  • #20798 1de6156 Thanks @cted-ledger! - Name the Ironwood shielded operations and stop listing Zcash self-transfers.

    The Ironwood operation types were declared and given icons but never labelled, so a received or sent Ironwood transaction rendered its raw key in the history. They now carry the same labels, address cells and "Private (Ironwood)" transaction-type detail as the Sapling and Orchard ones.

    A shielded transaction that moved no value across the wallet boundary — every note landing on the account's own internal address — was also emitted as a history row of its own: no counterparty, a value of 0, and, when it was the shielded leg of a transparent-funded sweep, a duplicate of the transparent operation already listing that transaction. Such a transaction now produces an operation typed NONE, which keeps it in the account data while leaving it out of the lists. Its classification is unchanged, so the fee and balance logic that reads it is unaffected.

  • #20714 93406e8 Thanks @semeano! - Show a warning in the send flow when the Zcash private balance is selected as source and funds were shielded in the last 15 minutes, explaining that recently shielded funds need confirmations and scanning before they are spendable

Patch Changes

Don't miss a new ledger-live release

NewReleases is sending notifications on new releases.