> ## Documentation Index
> Fetch the complete documentation index at: https://docs.meshconnect.com/llms.txt
> Use this file to discover all available pages before exploring further.

# SDK release notes & versioning

> What's new in each Mesh SDK version, why you should update, and how to get notified automatically when a release ships.

## Latest releases

Each entry below mirrors the release notes on GitHub, where every SDK release is published automatically as part of the Mesh release workflow. The GitHub releases page for each SDK is the canonical source of truth.

<Update label="Web SDK 3.10.3" description="July 6, 2026" tags={["Web"]}>
  **Why update:** Completes coverage of event payloads so you can respond to previously unreported SDK events. Drop-in upgrade — no breaking changes.

  * Added missing event payloads, giving your integration access to a more complete set of callback data.

  [Full release notes on GitHub →](https://github.com/FrontFin/mesh-web-sdk/releases/tag/3.10.3)
</Update>

<Update label="React Native SDK 2.4.2" description="July 6, 2026" tags={["React Native"]}>
  **Why update:** Removes several previously hardcoded third-party origins from `WHITELISTED_ORIGINS`; review your configuration if you relied on those defaults.

  * **`WHITELISTED_ORIGINS`** — hardcoded third-party origins have been removed from the default whitelist.

  [Full release notes on GitHub →](https://github.com/FrontFin/mesh-react-native-sdk/releases/tag/2.4.2)
</Update>

<Update label="Flutter SDK 1.1.6" description="June 17, 2026" tags={["Flutter"]}>
  **Why update:** Adds support for opening BybitPay, Kraken Pay, Crypto.com Pay, and Cash App Pay in hosted-QR deposit and pay flows, and tightens origin matching. Drop-in upgrade — no breaking changes.

  * **New partner pay flows** — BybitPay, Kraken Pay, Crypto.com Pay, and Cash App Pay are now in the externally-opened origins list, so hosted-QR deposit and pay flows open the correct partner app or browser.
  * **Deep link support** — added `bybit`, `cryptocom`, `krakenpay`, and `cashapp` to `allowedNativeSchemes` for custom-scheme deep links.
  * **iOS setup docs** — README now documents the `LSApplicationQueriesSchemes` entries required in client apps.
  * `isExternallyOpenedOrigin` now matches scheme and host exactly via URI parsing instead of string-prefix matching, preventing lookalike-domain bypasses.

  [Full release notes on GitHub →](https://github.com/FrontFin/mesh-flutter-sdk/releases/tag/v1.1.6)
</Update>

<Update label="Android SDK 3.4.4" description="July 6, 2026" tags={["Android"]}>
  **Why update:** Removes certain hardcoded origins from the WebView domain whitelist; drop-in upgrade with no API changes.

  * Removed hardcoded third-party origins from the WebView domain whitelist.

  [Full release notes on GitHub →](https://github.com/FrontFin/mesh-android-sdk/releases/tag/3.4.4)
</Update>

<Update label="iOS SDK 3.3.0" description="March 12, 2026" tags={["iOS"]}>
  **Why update:** Removes an unnecessary third-party dependency from the SDK.

  * Disabled the QuantumIOS dependency.

  [Full release notes on GitHub →](https://github.com/FrontFin/mesh-ios-sdk/releases/tag/3.3.0)
</Update>

## Versioning policy

Mesh SDKs follow [semantic versioning](https://semver.org/) (`MAJOR.MINOR.PATCH`):

| Version bump                    | Meaning                                   | Action needed                                              |
| ------------------------------- | ----------------------------------------- | ---------------------------------------------------------- |
| **Major** (`3.x.x` → `4.0.0`)   | Breaking change — APIs changed or removed | Review the migration notes in the release before upgrading |
| **Minor** (`3.9.x` → `3.10.0`)  | New feature, non-breaking                 | Safe to upgrade; review what's new                         |
| **Patch** (`3.10.0` → `3.10.1`) | Bug fix or improvement                    | Safe to upgrade; recommended                               |

## Releases by platform

GitHub is the canonical source for versions and release notes. Each SDK also publishes to its package registry:

| SDK          | Package                                                                                                  | Registry              | Releases                                                                      | Changelog                                                                                          |
| ------------ | -------------------------------------------------------------------------------------------------------- | --------------------- | ----------------------------------------------------------------------------- | -------------------------------------------------------------------------------------------------- |
| Web          | [`@meshconnect/web-link-sdk`](https://www.npmjs.com/package/@meshconnect/web-link-sdk)                   | npm                   | [GitHub releases](https://github.com/FrontFin/mesh-web-sdk/releases)          | [README](https://github.com/FrontFin/mesh-web-sdk/tree/main/packages/link#meshconnectweb-link-sdk) |
| iOS          | [`FrontFin/mesh-ios-sdk`](https://github.com/FrontFin/mesh-ios-sdk?tab=readme-ov-file#installation)      | Swift Package Manager | [GitHub releases](https://github.com/FrontFin/mesh-ios-sdk/releases)          | [README](https://github.com/FrontFin/mesh-ios-sdk?tab=readme-ov-file#mesh-connect-ios-sdk)         |
| Android      | [`com.meshconnect:link`](https://central.sonatype.com/artifact/com.meshconnect/link)                     | Maven Central         | [GitHub releases](https://github.com/FrontFin/mesh-android-sdk/releases)      | [CHANGELOG.md](https://github.com/FrontFin/mesh-android-sdk/blob/main/CHANGELOG.md)                |
| React Native | [`@meshconnect/react-native-link-sdk`](https://www.npmjs.com/package/@meshconnect/react-native-link-sdk) | npm                   | [GitHub releases](https://github.com/FrontFin/mesh-react-native-sdk/releases) | [CHANGELOG.md](https://github.com/FrontFin/mesh-react-native-sdk/blob/main/CHANGELOG.md)           |
| Flutter      | [`mesh_sdk_flutter`](https://pub.dev/packages/mesh_sdk_flutter)                                          | pub.dev               | [GitHub releases](https://github.com/FrontFin/mesh-flutter-sdk/releases)      | [CHANGELOG.md](https://github.com/FrontFin/mesh-flutter-sdk/blob/main/CHANGELOG.md)                |

## Get notified automatically

Set this up once during your integration build so new releases reach you without checking the docs.

### Watch releases on GitHub

On the GitHub repo for your SDK, click **Watch → Custom → Releases**. GitHub emails you whenever Mesh publishes a new release — every release includes notes describing what changed and why it matters.

### Enable Dependabot

If your repo is on GitHub, [Dependabot version updates](https://docs.github.com/en/code-security/how-tos/secure-your-supply-chain/secure-your-dependencies/configure-version-updates) automatically open a PR in your repo whenever a new SDK version is published. The configs below are scoped to Mesh packages only via the [allow list](https://docs.github.com/en/code-security/reference/supply-chain-security/dependabot-options-reference#allow--), so you won't get PRs for unrelated dependencies. Add a `.github/dependabot.yml` to your repo:

<CodeGroup>
  ```yaml Web / React Native (npm) theme={null}
  version: 2
  updates:
    - package-ecosystem: "npm"
      directory: "/"
      schedule:
        interval: "daily"
      allow:
        - dependency-name: "@meshconnect/*"
  ```

  ```yaml Android (Gradle) theme={null}
  version: 2
  updates:
    - package-ecosystem: "gradle"
      directory: "/"
      schedule:
        interval: "daily"
      allow:
        - dependency-name: "com.meshconnect:*"
  ```

  ```yaml Flutter (pub) theme={null}
  version: 2
  updates:
    - package-ecosystem: "pub"
      directory: "/"
      schedule:
        interval: "daily"
      allow:
        - dependency-name: "mesh_sdk_flutter"
  ```

  ```yaml iOS (Swift PM) theme={null}
  version: 2
  updates:
    - package-ecosystem: "swift"
      directory: "/"
      schedule:
        interval: "daily"
      allow:
        # Swift package identity is the lowercased repo URL
        - dependency-name: "github.com/frontfin/mesh-ios-sdk"
  ```
</CodeGroup>

<Tip>
  Already running Dependabot? Just add the Mesh `dependency-name` entry to the `allow` list of your existing config — or remove the `allow` block entirely if you want Dependabot to keep all your dependencies current.
</Tip>

***

<Accordion title="AI coding reference (llms.txt)">
  *AI coding reference — a compact summary of this page's APIs, parameters, and patterns for use by AI coding assistants (following the [llms.txt standard](https://llmstxt.org/)). Human readers can safely ignore this.*

  **llms.txt — SDK release notes & versioning**

  Mesh SDK versions and release notes. GitHub releases are the canonical source of truth; this page mirrors them.

  **Latest versions** (as of July 2026): Web `@meshconnect/web-link-sdk` 3.10.3, React Native `@meshconnect/react-native-link-sdk` 2.4.2, Flutter `mesh_sdk_flutter` 1.1.6, Android `com.meshconnect:link` 3.4.4, iOS 3.3.0.

  **Versioning**: Semantic versioning. Major = breaking (review migration notes), minor = new features (safe), patch = fixes (safe, recommended).

  **Release notes**: GitHub releases per repo — FrontFin/mesh-web-sdk, FrontFin/mesh-ios-sdk, FrontFin/mesh-android-sdk, FrontFin/mesh-react-native-sdk, FrontFin/mesh-flutter-sdk.

  **Stay updated**: GitHub Watch → Custom → Releases for email notifications. Dependabot (`.github/dependabot.yml`, ecosystems: npm, gradle, pub, swift) auto-opens PRs on new versions; scope to Mesh with `allow: [dependency-name: "@meshconnect/*"]` (npm), `"com.meshconnect:*"` (gradle), `"mesh_sdk_flutter"` (pub), `"github.com/frontfin/mesh-ios-sdk"` (swift).
</Accordion>
