• Add a System theme option that follows the OS light or dark setting, and make it the default for new installs (View menu > Theme > System)
• Allow BitBox02 xpub export and multisig signing at the m/45h keypath on firmware v9.19.0 and later
• Refuse BitBox02 keystore import and discovery for legacy P2SH and P2PKH wallets it cannot sign for, and hide those script types from the device import menus
• Recover the Trezor Safe 7 session when the device retransmits an unacknowledged message, and skip packets that are not v1 framed when probing for the Trezor protocol version
• Keep the Trezor pairing credential and v1 message payloads out of the debug logs
• Send the remaining Ledger merkle proof hashes when a proof does not fit a single response (@hashbender)
• Include the non-witness UTXO in PSBTs for Krux keystores, including in the QR display when the PSBT has more than one input
• Add file import of the xpub descriptor Jade writes to USB storage
• Require the policy line and check the declared cosigner count when importing Coldcard format multisig wallets
• Name the sortedmulti reinterpretation in the message for a BSMS record whose first address does not match
• Reject taproot output descriptors containing a script tree
• Do not offer copy and QR export actions for an extended private key pasted into the keystore xpub field
• Cap BBQr display and PDF encodings at the 1295 parts the header can number, using larger parts for data that needs more
• Verify the signatures of a finalized PSBT before copying its fields into an open transaction
• Determine the signed keystores using the sighash type each signature carries, and show the signatures for a signed transaction opened offline or when the server cannot return every input
• Verify silent payment output scripts before device signing, combining and export, and explicitly reject a PSBT signed over silent payment outputs that have not been computed
• Prefer the silent payment address of a BIP321 URI or DNS payment instruction where the sending wallet can pay to it, treating the address in the body as a fallback
• Take the silent payments tweak of an input from the wallet node when adding key path information, and write the output descriptor of a silent payments address as rawtr()
• Do not advance the stored block height of a silent payments wallet until a scan has covered it, and fetch all nodes on a refresh when a reorg has invalidated any of them
• Hold silent payment notifications arriving before the subscribe response is recorded, discarding those of a replaced subscription
• Hide account discovery on silent payments wallets, and hide the gap limit and request a birth date for them in the terminal
• Derive the fee of a wallet transaction from the transactions funding its inputs rather than the value its history entry reports
• Include unconfirmed wallet descendant fees when increasing a transaction fee, advise the replaced fees plus relay cost on rejection, and allow a CPFP child to be replaced
• Clear a replacement transaction when a UTXO it spends is frozen rather than silently removing the input
• Revert the sighash selection when the SIGHASH_NONE warning is dismissed rather than answered no
• Map transaction hex witness segments by the segwit flag, treating an input with no witness as empty
• Ignore amount digits typed beyond the selected unit precision in the Send tab amount and fee fields and the Send to Many grid, and cut pasted amounts to it
• Read sats amounts with a fraction or exponent in a Send to Many CSV import, cutting them to whole sats rather than skipping those rows
• Switch wallet tables and charts to BTC when an open wallet on the auto unit receives 1 BTC or more
• Name the bitcoin unit in the value, balance and fee column headings of the transactions, UTXOs and search results CSV exports
• Refuse an announced chain tip below the last pinned header, or one the header sync cannot link in, reverting to the stored tip with a warning
• Verify a transaction tab height taken from the server, warning where the server will not prove it
• Treat a Bitcoin Core chain that falls below the last polled tip as a reorg rather than failing every poll until reconnect
• Refresh a node when its script hash status returns to an earlier value, retiring the mitigation for electrs versions before v0.9.0
• Ensure Cormorant responses and notifications are serialized per client connection, lock the store against client connection reads, and close the client socket however its handler exits
• Purge a Bitcoin Core wallet transaction with only mempool conflicts from Cormorant once it leaves the mempool
• Refresh the cached Bitcoin Core descriptor ranges when a wallet wants a range beyond them, so a range already extended is not imported again or refused
• Cancel a retrying connection attempt when testing a server, and do not import wallet descriptors on a Cormorant started for the test
• Report Bitcoin Core RPC errors that carry no result instead of failing on a null response, and retain an entered https scheme when configuring a Bitcoin Core server
• Floor the Electrum batch page size at one when halving it after a timeout
• Skip the exchange currencies request in offline mode in the desktop and terminal general settings
• Refuse to display a wallet seed in the terminal when the wallet was locked while its key was being derived
• Skip addresses already given out under a label, and widen the gap limit on an explicit advance in the terminal receive dialog
• Reject unknown command line options and values given to flags with an error and exit code instead of starting on the default network, and accept the --option=value form
• Bug fix: Fix the transaction tab confirmation indicator when the tab opens at six confirmations or a reorg takes it back below, clamping confirmations at zero for a transaction above the current tip
• Bug fix: Fix the transaction tab confirmation count not following new blocks when its input transactions cannot be fetched
• Bug fix: Fix handling an input transaction the server cannot return in the fee, spend, outpoint and diagram views
• Bug fix: Fix transactions not held in a wallet's transactions model being registered for confirmation updates, and entries not being unregistered on removal, history clear and tab close
• Bug fix: Fix the node refresh subscription not being released when a wallet is closed
• Bug fix: Fix a silent payments history waiter left parked for the session when a failed widening restores a completed scan
• Bug fix: Fix wallet keystore changes affecting addresses not considering silent payment scan addresses
• Bug fix: Fix the stored table layout of a wallet not being copied, and not being cleared along with silent payment addresses on a new account
• Bug fix: Fix a PayNym contact whose payment code does not parse being kept with a null code or failing the whole PayNym response, omitting it instead
• Bug fix: Fix a unit format decimal formatter shared between the export task and table cells
• Bug fix: Fix handling a short server.version response when testing a server connection in the desktop and terminal
• Bug fix: Fix showing terminal alert buttons carrying their own text, and disable the terminal add account button when no accounts remain
• Bug fix: Fix an error when importing a Sparrow wallet file by deriving its public keys from the seed
• Bug fix: Fix a previously scanned wallet being kept when a file, text payload or unrecognised QR is then imported in the same pane
• Bug fix: Fix the sizing of an unresolved silent payment output when deriving the fee
• Bug fix: Fix the silent payment input hash being derived only from inputs contributing a public key, and the BIP375 k ordering of silent payment codes sharing a scan key
• Bug fix: Fix recognising a silent payments descriptor when matching BIP329 label origins and reading a descriptor PDF
• Bug fix: Fix a new server toggle pulse animation starting while a previous one is still running