Skip to main content

​
Latest releases

Each entry below mirrors the release notes on GitHub, where every SDK release is published automatically as part of the Mesh release workflow. The GitHub releases page for each SDK is the canonical source of truth.
​
Web
October 15, 2026
Why update: Adds a withdrawalRequested event and validates link tokens before Link opens; a drop-in upgrade if you use tokens from the Mesh API, but review the token-validation change if you supply your own tokens.
  • Link token validation — openLink now accepts a token only if it points to Mesh-hosted Link over https (meshconnect.com / meshpay.com). Other tokens are rejected: no iframe opens, no access tokens are sent, and onExit('Invalid link token!') is called. No change is needed if you use tokens from the Mesh API.
  • New withdrawalRequested event — when a user confirms a withdrawal, onEvent receives { type: 'withdrawalRequested', payload: { transferId, status } } and Link then closes. Treat this event, not onExit, as the confirmation; the payload contains no address or amount.
  • onIntegrationConnected is now optional in LinkOptions, so withdrawal-only integrations no longer need a placeholder callback.
  • Backup widget improvements — the close button now works on the loading and error screens, token and network lists are split into Popular and Others, more bundled logos are included (CRO, Cronos, Arbitrum), and browser Back steps back through the screens.
  • Token handling fixes — a token that isn’t valid base64 now calls onExit instead of throwing, and a token written in non-standard form now opens Mesh Link correctly.
Full release notes on GitHub →
​
React Native
October 16, 2026
Why update: Adds *.meshpay.com to the SDK’s whitelisted domains. Drop-in upgrade — no breaking changes.
  • Whitelisted *.meshpay.com domains so flows served from those domains load correctly within the SDK.
Full release notes on GitHub →
​
Flutter
October 7, 2026
Why update: Fixes Android deep links for Base, Bitget Wallet, and OKX Wallet so they open correctly. Drop-in upgrade — no breaking changes.
  • Base, Bitget Wallet, and OKX Wallet (okxwallet://) deep links now open the wallet on Android instead of being blocked.
  • README and example app now include okxwallet in the iOS LSApplicationQueriesSchemes list.
Full release notes on GitHub →
​
Android
October 12, 2026
Why update: Adds a new withdrawalRequested event to the LinkEvents stream. Drop-in upgrade — no breaking changes.
  • withdrawalRequested event — added to the LinkEvents stream, sent when a user confirms a withdrawal in Link.
Full release notes on GitHub →
​
iOS
October 15, 2026
Why update: Includes security hardening for the Link webview and documentation improvements. Drop-in upgrade — no breaking changes.
  • Security fix — strengthened input handling and origin validation in the Link webview.
  • Clarified the deep link setup guidance in the README.
Full release notes on GitHub →

​
Versioning policy

Mesh SDKs follow semantic versioning (MAJOR.MINOR.PATCH):

​
Releases by platform

GitHub is the canonical source for versions and release notes. Each SDK also publishes to its package registry:

​
Get notified automatically

Set this up once during your integration build so new releases reach you without checking the docs.

​
Watch releases on GitHub

On the GitHub repo for your SDK, click Watch → Custom → Releases. GitHub emails you whenever Mesh publishes a new release — every release includes notes describing what changed and why it matters.

​
Enable Dependabot

If your repo is on GitHub, Dependabot version updates automatically open a PR in your repo whenever a new SDK version is published. The configs below are scoped to Mesh packages only via the allow list, so you won’t get PRs for unrelated dependencies. Add a .github/dependabot.yml to your repo:
Already running Dependabot? Just add the Mesh dependency-name entry to the allow list of your existing config — or remove the allow block entirely if you want Dependabot to keep all your dependencies current.
AI coding reference — a compact summary of this page’s APIs, parameters, and patterns for use by AI coding assistants (following the llms.txt standard). Human readers can safely ignore this.llms.txt — SDK release notes & versioningMesh SDK versions and release notes. GitHub releases are the canonical source of truth; this page mirrors them.Latest versions (as of October 2026): Web @meshconnect/web-link-sdk 3.15.0, React Native @meshconnect/react-native-link-sdk 2.5.7, Flutter mesh_sdk_flutter 1.1.13, Android com.meshconnect:link 3.4.8, iOS 3.3.4.Versioning: Semantic versioning. Major = breaking (review migration notes), minor = new features (safe), patch = fixes (safe, recommended).Release notes: GitHub releases per repo — FrontFin/mesh-web-sdk, FrontFin/mesh-ios-sdk, FrontFin/mesh-android-sdk, FrontFin/mesh-react-native-sdk, FrontFin/mesh-flutter-sdk.Stay updated: GitHub Watch → Custom → Releases for email notifications. Dependabot (.github/dependabot.yml, ecosystems: npm, gradle, pub, swift) auto-opens PRs on new versions; scope to Mesh with allow: [dependency-name: "@meshconnect/*"] (npm), "com.meshconnect:*" (gradle), "mesh_sdk_flutter" (pub), "github.com/frontfin/mesh-ios-sdk" (swift).