Stack Wallet

This commit changes which version of the 'Spark Mobile' cryptographic library Stack Wallet uses. It switches from the official Firo project repository to a fork maintained by Cypher Stack (the same company that makes Stack Wallet) and updates the pinned commit hash. The change itself does not show any vulnerability in the code, but it is a supply-chain-style update: the wallet now depends on a different copy of a library that handles sensitive private-key and transaction operations for the Firo cryptocurrency. Without knowing what changed between the two commit hashes, we cannot say whether this makes users safer or less safe.

This commit fixes a small parsing bug in the Stack Wallet app's ShopInBit feature. The app reads a 'state/province' line from a support ticket message. Previously it only looked for lines starting with 'Delivery state:', but now it also accepts 'State:'. A user-facing loading message was also reworded from 'Updating available countries' to 'Checking available countries'. There is no clear security relevance in the change itself.

This tiny commit reverts a database version bump and fixes a typo in a messaging refresh call. It appears to be a quick correction of an accidental change rather than a security fix. There is no clear security relevance visible in the code itself.

This commit is a feature refactor that adds a new in-app notification system for ShopInBit support tickets. It introduces a local database table for notifications, merges those notifications into the existing notification feed, and marks tickets/notifications as read when the user views them. There is no clear security vulnerability in the diff, but the change touches notification plumbing and local database migrations, so it carries normal implementation risk.

This commit only changes the marketing description text for a third-party concierge shopping service called ShopinBit. It rewords what users see on screen but does not alter any code behavior, security logic, or data handling.

This commit adds the ability to attach files to customer-support messages in the ShopInBit feature of Stack Wallet. It introduces file picking, client-side type and size checks, and a multipart upload path to the server. The change is a feature addition, not a documented security fix. There are no obvious remote-code-execution or data-theft bugs visible in the diff, but the new code handles user-chosen files and uploads them over the network, which always carries some privacy and abuse risk.

This commit fixes how timestamps are stored for a built-in shopping/ticket feature. Previously, database columns used Drift's default dateTime type, which truncates fractional seconds. The patch switches those columns to store ISO 8601 UTC strings with millisecond precision and normalizes message timestamps to UTC. This is a data-integrity/correctness fix rather than a security vulnerability; it prevents subtle ordering or duplicate-detection bugs but does not create a direct path for an attacker to steal funds or run code.

This commit refines how the wallet app checks for updates to ShopInBit support tickets. It reduces unnecessary API calls by only fetching full ticket details and messages when something has actually changed, and it tightens the code so that newly created ticket records must always have complete data. There is no obvious security vulnerability here; it is primarily a performance and robustness improvement.

This small change makes the app keep checking for updates on a 'ShopInBit ticket' page even when the desktop app window is not in focus. Previously, the app would pause polling when backgrounded and resume when the user returned. Now on desktop it never pauses. This is a behavior change, not a clear security fix or vulnerability. It could slightly increase background network activity and keep a connection alive longer, but there is no direct evidence it introduces a security flaw.

This commit is a small code-quality cleanup in a cryptocurrency wallet app. It replaces a hardcoded text string ('NEW') and a hardcoded status value with references to a shared enum definition. There is no direct evidence in the commit that this fixes an exploitable security vulnerability; it appears to be a maintainability improvement that reduces the chance of future typos or mismatched status values.

This commit is a purely cosmetic UI change. It swaps the ShopinBit service icon from a generic settings-style icon to a dedicated 'SIB' logo, hard-coding the logo colors to match the previous style. It also removes a settings gear icon from the mobile services page. There is no security-relevant change visible in the diff.

This commit is a routine UI cleanup of a travel-booking form inside the Stack Wallet app. It removes unused date-mode options (flexible dates, trip length, month/year pickers), simplifies the arrangement choices, reorders a text box, and changes one label to mention that users can paste a link. There is no security-relevant change visible in the code.

This commit changes how often the app checks for updates on a support ticket and skips re-downloading the full ticket details when the app already has them. It is a routine performance and responsiveness improvement, not a security fix. There is no indication it addresses a vulnerability.

This commit moves two existing app features—gift cards and concierge services—from a wallet-specific menu to the main home screen on mobile. It is a user-interface navigation change, not a security fix or vulnerability patch. There is no indication it fixes a bug that could be exploited.

This commit adds on-screen warnings telling users to send only USDT (TRC20) to a displayed address and not to send plain TRX. It is a user-interface safety hint, not a code change that fixes a software vulnerability. There is no evidence in the commit of an exploit, bug, or security flaw being patched.

This commit is a purely cosmetic UI change. It adjusts the width and button height of a confirmation dialog on desktop versions of the app. There is no security relevance.

This commit simply changes the user interface for entering a billing/shipping name. Instead of one 'Full name' text box that the app later tried to split into first and last names, it now shows two separate boxes labeled 'First name' and 'Last name'. There is no security fix or vulnerability here; it is a routine UI and data-handling refactor.

This commit fixes a programming crash in the Stack Wallet app's checkout screen. In some countries, the app was forcing a 'State' field to be shown even when no state was selected, which could cause the app to crash with a null error. The fix hides the state field when it isn't needed and only forces it when it is required.

This commit is a user-experience refactor, not a security fix. It moves the loading of a ShopInBit offer from inside the offer screen to the moment the user taps the 'Review offer' button, so the screen opens with data already loaded. The 'Accept offer' button no longer needs to be temporarily disabled while waiting. There is no indication this change addresses a security vulnerability.

This commit simply renames a button label from 'Decline' to 'Cancel' on a shopping offer screen so the text matches what the button actually does (close the screen). There is no security relevance.

This is a small code-quality cleanup in a Flutter screen that shows ticket attachment details. It stops passing a UI framework reference (WidgetRef) into helper methods and instead passes the actual service object directly. There is no direct security vulnerability visible in the diff, but the change removes a pattern that can make code harder to reason about and could theoretically hide lifecycle bugs.

This is a small bug-fix patch in a mobile wallet's shopping-support ticket screen. It stores a service reference when the screen first loads, then reuses that reference later, instead of asking the app's state-management system for the service again after the screen may have been destroyed. The change prevents a runtime crash ('provider read after dispose') but does not appear to be a security vulnerability.

This is a one-line UI bug fix for opening attachment links on desktop versions of the Stack Wallet app. The change tells the app to use the root navigator on desktop when displaying an 'Opening attachment' progress indicator. There is no indication this fixes a security vulnerability; it appears to address a navigation/display issue specific to desktop layouts.

This commit is a minor user-interface wording cleanup for a shopping feature. It changes two on-screen labels so that the heading now mentions VAT and the price line no longer repeats it. There is no security relevance in the code change itself.

This commit only changes a user-visible label in a shopping concierge form from a longer description to a shorter one, and tweaks how a multi-line text field label is visually aligned. There is no security-relevant change.