• Upgrade to Java v25.0.5, removing the eMudhra root certificates from the bundled certificate store
• Upgrade the bundled Tor to v0.4.9.5 to meet the client protocols now required by the Tor network
• Improve screen reader access across the application by giving dialogs titles and naming icon-only buttons, split buttons, fields, sliders, QR codes and list rows, reading whole rows in the wallet summary and search results tables, exposing tabs, toggle switches, single choice toggle groups and help icons with their correct roles and state, and hiding decorative images, empty rows and inactive views
• Summarise chart data and transaction signatures for screen readers, and announce changes to the selected tab, fee rate, cosigner count, transaction status, recent blocks, test connection result and device and card errors as they appear
• Improve keyboard access by removing unnamed and hidden tab stops, making the transaction status a tab stop, leaving the Send to Many grid with Ctrl-Tab, opening table row actions with Shift-F10 or Ctrl-Return, letting Escape close dialogs from split buttons and tables, browsing the server, sweep and pay to wallet lists before choosing, and moving focus to new wallet tabs, transactions and keystores, the signatures after signing and the transaction status after broadcasting
• Add a View > Go To menu with Ctrl/Cmd-1 to 6 shortcuts to select the Transactions, Send, Receive, Addresses, UTXOs and Settings wallet functions
• Replace the QR display density toggle with low, medium and high levels that produce the same QR code version for UR and BBQr
• Point to rpcallowip when Bitcoin Core v32.1 and later closes the RPC connection, and read the mempool vsize from vsize_adjusted
• Give the macOS launcher a Sparrow-specific Mach-O UUID instead of the one shared by every app packaged with the same JDK (the Local Network permission may be requested again)
• Support inline signed manifests in the download verifier
• Verify wallet input signatures of unconfirmed transactions before adding them to the wallet history (ported from Electrum, see GHSA-6jp4-8v48-cc5v)
• Verify payjoin receiver input signatures against their declared UTXOs before checking the proposal fee
• Check stored transaction block hashes against the header store when a wallet is first fetched, fetch a script hash again when a reorg replaces the block of a payment found by a history fetch in progress, and show a transaction tab confirmation as unverified when its block has been replaced
• Add verification on additional Satscard, Tapsigner and Satschip operations
• Reject output descriptors that provide no extended public keys, including addr() descriptors
• Check the declared cosigner count and reject a malformed wallet type when importing Electrum multisig wallets, and compare cosigner xpubs by public key and chain code when checking for duplicate keystores
• Apply the wallet lock to label import, sweep, Show PayNym, message signing and password prompts that complete after the wallet was locked
• Only delete wallet backups after a password change or addition has saved, keep a symlinked wallet file in place, and hide the backup options for wallets outside the wallets folder
• Name the database file migrated from a JSON wallet after the opened file, and improve handling for existing wallets
• Declare the regtest coin to Trezor and BitBox02 devices on regtest, and allow BitBox02 message signing off mainnet
• Check that a PayNym retrieved by payment code matches the requested code, and ignore PayNym search results that arrive after the search has changed
• Use the application HTTP client for lnurl-auth and auth47 callback requests
• Revalidate the Send tab amount and clear the max selection when payments are set from a payment URI, and always rebuild the transaction when a human readable name is pasted over the pay to address
• Keep the saved server or proxy when an invalid port is entered in server settings, and keep an entered https or ssl when the host is also the alias of a saved server at another protocol
• Turn the server toggle off and retry when a ping finds the server connection closed
• Discard a wallet discovery result where the words or passphrase were edited while it ran
• Show an error when a scanned UR of type bytes is not a PSBT, transaction or UTF-8 text
• Direct the user to the log when a PayNym notification transaction fails to broadcast
• Show an error in the terminal when saving a new wallet or opening a wallet fails, and leave services stopped when Tor starts after going offline
• Remove the surplus signature progress bar segments a finalized multisig transaction discards
• Replace a transaction entry moved within its block in Cormorant, and stop relisting unconfirmed entries as updates
• Upgrade JavaFX to v27.0.1
• Upgrade openpnp-capture-java to v0.0.4 to fix MJPG camera decoding on Linux
• Upgrade jackson to v2.21.8
• Upgrade hummingbird to v1.7.6
• Bug fix: Fix encryption when adding accounts to multisig wallets with mixed seed and watch-only keystores
• Bug fix: Fix incomplete transaction entries being included in the wallet balance and the new transactions notification
• Bug fix: Fix a silent payments wallet scan completing after its wallet is closed refreshing and subscribing the closed wallet again
• Bug fix: Fix an unknown message type from a Trezor v1 device failing with a null pointer exception rather than a device error
• Bug fix: Fix the SecureString subsequence returning misplaced characters for a nonzero start index
• Bug fix: Fix inefficient matching of amounts in RBF insufficient fee broadcast errors
• Bug fix: Fix overlapping BWT shutdowns