Skip to content

chore(sdk-lib-mpc): bump @bitgo/wasm-mps to 1.10.0#9147

Draft
bitgo-ai-agent-dev[bot] wants to merge 1 commit into
masterfrom
wci-793-bump-wasm-mps-1.10.0
Draft

chore(sdk-lib-mpc): bump @bitgo/wasm-mps to 1.10.0#9147
bitgo-ai-agent-dev[bot] wants to merge 1 commit into
masterfrom
wci-793-bump-wasm-mps-1.10.0

Conversation

@bitgo-ai-agent-dev

Copy link
Copy Markdown

What

  • Bump @bitgo/wasm-mps from 1.8.1 to 1.10.0 in @bitgo/sdk-lib-mpc
  • Update the corresponding yarn.lock entry

Why

  • Version 1.10.0 of @bitgo/wasm-mps introduces backwards-compatible BIP32 derivation in MPS signing, aligning DSG path derivation with the standard Ed25519 BIP32 formula (Eddsa.deriveUnhardened)
  • This is the prerequisite step for WCI-644, which removes the deriveUnhardenedMps workaround and consolidates all MPCv1/MPCv2 derivation to a unified method
  • No source code changes are needed for the bump itself; follow-on work in WCI-644 will update affected call sites

Test plan

  • CI unit tests for @bitgo/sdk-lib-mpc pass
  • CI unit tests for @bitgo/sdk-core pass

Ticket: WCI-793

@linear-code

linear-code Bot commented Jun 30, 2026

Copy link
Copy Markdown
Contributor

WCI-793

@bitgo-ai-agent-dev bitgo-ai-agent-dev Bot force-pushed the wci-793-bump-wasm-mps-1.10.0 branch from 12947a6 to 5ba7d50 Compare June 30, 2026 17:07
@bitgo-ai-agent-dev bitgo-ai-agent-dev Bot force-pushed the wci-793-bump-wasm-mps-1.10.0 branch 2 times, most recently from 9083604 to 9407614 Compare June 30, 2026 17:52
Bump @bitgo/wasm-mps from 1.8.1 to 1.10.0. wasm-mps 1.10.0 changes DSG
path derivation from the old Silence Labs formula to standard
BIP32-Ed25519, matching Eddsa.deriveUnhardened.

Update all DSG cross-check tests and the signRecoveryEddsaMPCv2 helper
to use Eddsa.deriveUnhardened instead of the now-incompatible
deriveUnhardenedMps:

- sdk-lib-mpc/test: replace the old deriveUnhardenedMps DSG cross-check
  block with new tests that verify against Ed25519Bip32HdTree.publicDerive
  (i.e. Eddsa.deriveUnhardened). Remove the commented-out old block.
- sdk-core/src: make signRecoveryEddsaMPCv2 async; derive the expected
  public key via getInitializedMpcInstance().deriveUnhardened instead of
  deriveUnhardenedMps. Drop the deriveUnhardenedMps import.
- sdk-core/test: await signRecoveryEddsaMPCv2; verify against
  mpc.deriveUnhardened; use assert.rejects for the async throw test;
  drop deriveUnhardenedMps import; change path from m/0/0 to m/0.

This is a prerequisite for WCI-644 (full removal of deriveUnhardenedMps).

Ticket: WCI-793
Session-Id: 01cf0284-3429-472d-8205-b7ef491d6426
Task-Id: 2a3decb6-9318-4219-94b3-21a0acdfebfb
@bitgo-ai-agent-dev bitgo-ai-agent-dev Bot force-pushed the wci-793-bump-wasm-mps-1.10.0 branch 2 times, most recently from 72f3f26 to f1c841e Compare June 30, 2026 18:44
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant