solana_kit_pyth 0.10.0

Pyth Network Hermes client and price account codecs for Solana Kit Dart.

Changelog

All notable changes to this project will be documented in this file.

This changelog is managed by monochange.

0.10.0 - 2026-09-21

Breaking changes

Raise the Dart and Flutter baseline

The workspace now builds against Dart 3.13.3 and Flutter 3.47.4, and every package declares that floor instead of the previous Dart 3.12 range. Consumers on older SDKs can no longer resolve these packages, so this release is breaking even though no Dart API changed.

The Flutter floor rises from 3.44 to 3.47 for solana_kit_mobile_wallet_adapter, solana_kit_mobile_wallet_adapter_protocol, and solana_kit_wallet_adapter, matching the floor solana_kit_wallet_ui already required. solana_kit_lints ships the raised floor to consumers, so it carries the same breaking bump. Every other package raises only the Dart SDK floor.

Raising the language version also switches dart format to the tall style, so 83 files across library, test, script, and Codama-generated trees are reflowed. The renderer pipes generated output through dart format, so regenerating stays consistent.

Align your own SDK constraint with the workspace:

environment:
  sdk: ^3.13.0
  # Omit for pure Dart packages; required for the Flutter packages above.
  flutter: ">=3.47.0"

Owner: Ifiok Jr. · Introduced in: 5f5fe01 · Last updated in: 19932db

Fixes

Restore complete version inventories in package READMEs

The versions.json data source that renders every package README's installation section had drifted: packages first released after the legacy knope era were never added, so their READMEs told consumers to depend on a bare ^ with no version. The retired solana_kit_functional entry and a stale solana_kit_mobile_wallet_adapter_example version were also lingering.

The inventory now matches every package's pubspec.yaml, the solana_kit_functional key is gone, and the affected installation sections render the real published version again:

dependencies:
  "solana_kit_jupiter": ^0.9.3

Owner: Ifiok Jr. · Introduced in: 4c8855b

0.9.3 - 2026-09-12

Changed

• No package-specific changes were recorded; solana_kit_pyth was updated to 0.9.3 as part of group main.

0.9.2 - 2026-09-06

🐛 Fixed

Validate Anchor and Pyth event data

Validate Anchor event provenance against the IDL program's runtime invocation stack, ignoring foreign-program and embedded-message event forgeries. Bound Hermes price conversion work for extreme untrusted exponents to prevent application stalls.

Preserve all 64 bits of unsigned Pyth confidence and slot fields so large confidence intervals cannot become negative and bypass application upper-bound checks.

Owner: @ifiokjr · Review: PR #238

0.9.1 - 2026-08-30

Changed

• No package-specific changes were recorded; solana_kit_pyth was updated to 0.9.1 as part of group main.

0.9.0 - 2026-08-30

💥 Breaking Change

Add the Pyth Network client

Add the Pyth Network client package: the Hermes HTTP client (price feeds, binary price updates), Wormhole VAA and accumulator update parsing, Solana price-account and price-update-v2 decoders, postUpdateAtomic/postUpdate instruction builders for the Pyth Solana receiver program, and typed price-feed models.

final hermes = HermesClient(HermesConfig());
final feeds = await hermes.getLatestPriceFeeds([feedId]);

Owner: @ifiokjr · Review: PR #227

🐛 Fixed

Harden Pyth and SNS validation

Require the Pyth price-update account signer declared by the receiver IDL, validate Pyth account headers and bounded integer inputs, normalize malformed update data to typed decode errors, and cover the signer requirement through the Surfpool transaction flow. Also enforce SNS record lengths, EVM address sizes, and TLD-trimmed domain-key inputs.

Owner: @ifiokjr · Review: PR #227