[tylerc-consensys]

Explanation

Release 1379.0.0. This PR bumps @metamask/money-account-mfa-whitelist from 0.1.0 to 0.2.0 (minor, breaking for a 0.x package) to ship #11185, which whitelists single-use vault deposit delegations that carry a Timestamp deadline caveat. DelegationFrameworkContracts now requires TimestampEnforcer. The root monorepo version is bumped to 1379.0.0.

No other package in this repo depends on @metamask/money-account-mfa-whitelist, so no other packages are included.

References

• Ships #11185
• Previous release: #11210

Checklist

• I've updated the test suite for new or updated code as appropriate (N/A: version bump and changelog only)
• I've updated documentation (JSDoc, Markdown, etc.) for new or updated code as appropriate (N/A)
• I've communicated my changes to consumers by updating changelogs for packages I've changed
• I've introduced breaking changes in this PR and have prepared draft pull requests for clients and consumer packages to resolve them (consumers: metamask-mobile and mpc-service add TimestampEnforcer to their whitelist config when they bump)

---

Note

Medium Risk
The release ships a breaking MFA-whitelist API/config change (TimestampEnforcer); this PR is low-risk mechanically but consumers must update integration when upgrading.

Overview
Release 1379.0.0 bumps the monorepo from 1378.0.0 and publishes @metamask/money-account-mfa-whitelist 0.2.0 (from 0.1.0). The diff is version metadata, a finalized 0.2.0 changelog section, and yarn.lock resolution updates—no runtime source changes in this PR.

The 0.2.0 notes (already merged elsewhere, e.g. #11185) that consumers must treat as shipped with this tag: breaking requirement that DelegationFrameworkContracts includes TimestampEnforcer, a fix to whitelist single-use vault deposit delegations with a Timestamp deadline caveat, Node.js 26 support, and @metamask/utils ^12.0.1. Downstream apps (e.g. metamask-mobile, mpc-service) need config updates when they bump.

^{Reviewed by Cursor Bugbot for commit 5c01c4d. Bugbot is set up for automated code reviews on this repo. Configure here.}

[metamask-ci]

✅ No changelog changes needed.

[github-actions]

This pull request has been closed

This release PR was automatically closed because it had no activity for 3 hours (last updated 3.2h ago).

Open release PRs are expected to merge promptly so they do not block others from starting a new release.

To keep a release PR open longer in exceptional cases, add the release:keep-open label.