Sparrow Wallet

This commit adds keyboard shortcuts (Ctrl+Shift+Left/Right) to move wallet tabs left and right in the Sparrow Wallet application. It also slightly changes the underlying logic to use the currently selected tab rather than the tab that was right-clicked. There is no security issue visible in this change.

This commit swaps the macOS menu library used by Sparrow Wallet from an older package (centerdevice-nsmenufx) to a newer fork (nsmenufx). The stated reason is to avoid a NullPointerException (NPE). The change also removes several JavaFX internal-access permissions that the old library needed. There is no direct evidence in the commit of a security vulnerability; it reads as a routine dependency update to fix a crash bug.

This commit updates a single camera-library dependency version in the project's build file. The stated reason is to stop using deprecated macOS camera device type constants, which could otherwise cause camera-related features to break on newer Macs. There is no direct evidence in the commit of a security vulnerability being fixed.

This commit is a routine version bump from 2.3.0 to 2.3.1. It only changes version strings in build files, documentation, and a macOS package file. There are no code changes that affect security or functionality.

This commit changes how the wallet's build packaging handles file metadata. It removes settings that make archive files (like ZIPs) bit-for-bit identical every time they are built, and instead restores an older Gradle behavior that preserves file permissions (such as whether a file is executable). This is likely a build-fix rather than a direct security patch, but it could affect whether downloaded archives have correct executable bits, which matters for usability and trust in reproducible builds.

This commit is a routine version bump from 2.2.4 to 2.3.0. It only changes three version number strings in build files and source code. There are no functional code changes, bug fixes, or security-related modifications visible in the diff.

This commit refines how Sparrow Wallet stores DNS payment details extracted from a Bitcoin PSBT (a transaction template). The old code tried to cache DNS payment info for both regular addresses and silent payment addresses in one combined flow, using helper methods like hasAddress() and hasSilentPaymentAddress(). The new code separates the two cases and, importantly, validates that the DNS payment record actually matches the address/silent payment address before caching it. This looks like a hardening change: it reduces the chance that a malicious or malformed PSBT could trick the wallet into caching a DNS payment entry for an unrelated address.

This commit simply downgrades the JavaFX graphical toolkit version from 24.0.2 to 23.0.2 in the project's build file. The stated reason is to avoid a packaging bug that affects how the application launcher links libraries, not to fix a security vulnerability. There is no indication this change protects users from attack.

This commit rolls back the build toolchain from Java 25 and JavaFX 25 to Java 22.0.2 and JavaFX 24.0.2 because of a known upstream packaging bug in the Java Development Kit (JDK bug ID 8345810). It is a build/packaging workaround, not a code change inside the wallet itself. There is no direct evidence in the commit that this fixes a security vulnerability in Sparrow Wallet.

This commit simply downgrades a camera-capture library dependency by one patch version because the newer version broke compatibility with macOS 13's Continuity Camera feature. There is no security content visible in the diff or message.

This commit updates a camera-access library and adds a macOS setting so Sparrow Wallet can discover and use Apple's Continuity Camera feature (for example, using an iPhone as a webcam) when scanning QR codes. There is no direct evidence in the commit that this fixes a security vulnerability; it appears to be a feature/compatibility update for camera device enumeration on Mac.

This commit updates the JDBI database library to a newer version and removes some manual module configuration. The stated reason is to drop an older Caffeine caching dependency. It is a routine dependency maintenance change, not a clearly security-focused patch. There is no direct evidence in the commit that it fixes a known vulnerability, but keeping dependencies current is generally good security hygiene.

This commit is a routine maintenance patch. It adds a JVM command-line flag to allow a library (JNA, used for native code access) to avoid a deprecation warning, and updates one Java call from an older constructor style to a newer static builder style. There is no security-relevant change visible in the diff.

This commit simply updates two common helper libraries (Guava and Apache Commons Lang3) to newer versions in the project's build file. It does not change any application code. Such updates are often done to pick up bug fixes or security fixes in those libraries, but the commit message does not say this is a security fix, and no specific vulnerability is mentioned.

This commit updates Sparrow Wallet's build system to use Java 25, JavaFX 25, Gradle 9.1, and newer GitHub Actions versions. It also adjusts native-access permissions and module settings needed for the newer Java version. The change is a routine platform upgrade, not a security patch. There is no direct evidence in the commit that it fixes a known vulnerability, but any major runtime upgrade can introduce or remove security-relevant behavior.

This commit removes pre-packaged native ZBar barcode-scanning libraries from the Sparrow Wallet application and switches to a Java-only ZBar implementation. It also tightens the permissions of temporary directories created when loading native libraries, so only the owner can access them. The change reduces the attack surface from shipping opaque binary libraries and fixes a potential local information-disclosure weakness in temp directory creation.

This commit adds support for resolving human-readable payment names (like DNS-based addresses) inside Sparrow Wallet's 'send to many' dialog. It also refactors how the OK button and CSV loading work, and adds a cache so resolved addresses don't need to be looked up repeatedly. There is no clear security bug in the diff, but the change involves network lookups and address resolution, so it deserves normal review care.

This commit adds the first version of 'silent payments' sending support to the Sparrow Wallet desktop app. Silent payments are a newer Bitcoin privacy technique where the recipient's address is not directly visible on the blockchain. The change touches many UI and transaction-building files to recognize silent payment addresses, build transactions for them, display them correctly, and disable RBF (Replace-By-Fee) for those transactions. It also converts PSBTs to version 0 before export and makes small cleanups. There is no direct evidence in the commit or supplied references that this fixes a known security vulnerability; it reads as a feature addition with some defensive checks.

This commit only improves an error message shown to the user when a payjoin transaction fails. It adds a specific catch block so that an existing 'PayjoinReceiverException' is logged and re-thrown with its original message intact, instead of being wrapped in a generic 'Payjoin error'. There is no security fix here—just better error reporting.

This commit is described as updating a dependency or submodule named 'drongo' in the Sparrow Wallet project. No diff content is available, and no verified references were supplied. There is no visible information indicating this is a security fix, vulnerability, or malicious change.

This commit is a simple spelling/brand-name correction. It changes every visible mention of 'Blue Wallet' to 'BlueWallet' in the code that handles importing and exporting multisig wallet setups from the BlueWallet mobile app. There is no security change.

This commit is a user-interface layout tweak for Sparrow Wallet. It lets the transaction diagram's input and output labels use more horizontal space so long text (such as addresses or labels) is easier to read. There is no security change here.

This commit updates the project's build tool (Gradle) from version 8.9 to 8.14.3 and adjusts related build scripts and plugins. It is a routine maintenance change. There is no direct evidence in the commit that it fixes a security vulnerability, but keeping build tools up to date can help avoid known bugs and weaknesses in older versions.

This appears to be a one-line change to a test file named 'drongo' with the description 'fix non bip32 child derivation test'. There is no actual diff content available, and no security-related context is provided. Based solely on the title and stats, this looks like a routine correction to a unit test for Bitcoin BIP32 hierarchical deterministic wallet key derivation logic. Nothing in the supplied materials indicates a security vulnerability, exploit, or user-facing bug.