[Roxen-AS]

Explanation

Summary

Bump @metamask/delegation-deployments to ^2.1.0 across all consuming packages (@metamask/gator-permissions-controller, @metamask/money-account-mfa-whitelist, @metamask/money-account-upgrade-controller, and @metamask/subscription-controller).

Problem

In wallet_requestExecutionPermissions on Robinhood Chain (chain ID 4663), the permission request screen renders but fails on Grant with:

code -32603 | External signature requests cannot sign delegations for internal accounts.

This occurs because @metamask/gator-permissions-controller previously declared @metamask/delegation-deployments ^1.4.0, which lacked deployment entries for chain 4663. Versions 2.0.0 and 2.1.0 include deployments for Robinhood Chain (4663) and Arc networks.

Solution

• Bumped @metamask/delegation-deployments from ^1.4.0 to ^2.1.0 across the 4 consuming packages and updated yarn.lock.
• Added a unit test in packages/gator-permissions-controller/src/decodePermission/enforcerAddresses.test.ts asserting that Robinhood Chain (4663) contracts resolve to valid enforcer addresses.
• Updated changelogs for the affected packages.

References

Fixes #10667

Checklist

• I've updated the test suite for new or updated code as appropriate
• I've updated documentation (JSDoc, Markdown, etc.) for new or updated code as appropriate
• I've communicated my changes to consumers by updating changelogs for packages I've changed
• I've introduced breaking changes in this PR and have prepared draft pull requests for clients and consumer packages to resolve them

---

Note

Medium Risk
Touches delegation signing and permission decoding paths across Money Account and Gator packages; incorrect deployment addresses would break grants on affected chains, but the change is a targeted dependency bump with regression coverage for Robinhood.

Overview
Bumps @metamask/delegation-deployments from ^1.4.0 to ^2.1.0 in gator-permissions-controller, money-account-mfa-whitelist, money-account-upgrade-controller, and subscription-controller, with matching yarn.lock and changelog entries.

v2.x adds delegation framework deployment metadata for Robinhood Chain (4663) and Arc networks that was missing in 1.4.0. That gap caused wallet_requestExecutionPermissions on Robinhood to fail on Grant with delegation signing errors when enforcer addresses could not be resolved for the chain.

Adds a gator-permissions-controller integration test asserting chain 4663 maps to valid enforcer addresses via toEnforcerAddressesByName.

^{Reviewed by Cursor Bugbot for commit 79a7830. Bugbot is set up for automated code reviews on this repo. Configure here.}

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	@​metamask/​delegation-deployments@​1.4.0 ⏵ 2.1.0	+1			+4

View full report