2.7.1 (2026-11-05)
Bug Fixes
- harden signing requests against malformed and spoofed payloads (d1b4676), closes polkadot-js/extension#1624
- make global password change and JSON import all-or-nothing (bd22ac4)
- open Ledger import in a full tab from a fresh wallet (55b82c4)
- refuse to sign a transaction whose method has extra or missing bytes (c9a1eaa)
- roll back the account a failed password change threw on (4aa150d)