Release 2026-06-24 (#7736)

## Summary

RELEASE

## Changes

2a7a9a9 feat(widget): control tokens switching (#7717)
8942c59 feat: Widget Configurator Revamp (#7604)
5a38bec feat: add balancec-watcher updater [pr 2 - connection logic]
(#7640)

e532bc8 fix(widget): add iframe loading retry logic (#7636)
ef110aa fix(trade-state): preserve URL chainId on first load when
wallet is connected (#7692)
d965091 fix: tighten cow-fi content links and remote token parsing
(#7619)
257f304 fix: tighten frontend trust boundaries and client secrets
(#7623)

Author: kernelwhisperer

.github/workflows/deployment-v2.yml

@@ -2,8 +2,8 @@ name: Deployment v2
 
 on:
   push:
-    branches: [ main ]
-    tags: [ cowswap-*, explorer-* ]
+    branches: [main]
+    tags: [cowswap-*, explorer-*]
 
 concurrency:
   group: ${{ startsWith(github.ref, 'refs/tags/') && format('release-tag-{0}', github.sha) || 'release-branch-sync' }}
@@ -19,11 +19,13 @@ jobs:
     if: startsWith(github.ref, 'refs/tags/')
     runs-on: ubuntu-latest
     outputs:
+      release-commit: ${{ steps.collect.outputs.release-commit }}
       release-tags: ${{ steps.collect.outputs.release-tags }}
     steps:
       - name: Checkout code
         uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
         with:
+          ref: refs/heads/main
           fetch-depth: 0
           persist-credentials: false
 
@@ -32,9 +34,15 @@ jobs:
         run: |
           set -euo pipefail
 
-          git fetch --tags origin
+          git fetch --tags origin main
 
           release_commit="$(git rev-list -n 1 "${GITHUB_REF}")"
+
+          if ! git merge-base --is-ancestor "${release_commit}" "origin/main"; then
+            echo "::error::Release tag ${GITHUB_REF_NAME} does not point to a commit reachable from origin/main"
+            exit 1
+          fi
+
           release_tags="$(
             git tag --points-at "${release_commit}" \
               | sort \
@@ -45,6 +53,7 @@ jobs:
             release_tags="${GITHUB_REF_NAME}"
           fi
 
+          echo "release-commit=${release_commit}" >> "$GITHUB_OUTPUT"
           echo "release-tags=${release_tags}" >> "$GITHUB_OUTPUT"
 
   sync-develop:
@@ -61,6 +70,7 @@ jobs:
       - name: Checkout workflow repository
         uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
         with:
+          ref: refs/heads/main
           fetch-depth: 0
           persist-credentials: false
 
@@ -132,6 +142,7 @@ jobs:
       - name: Checkout workflow repository
         uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
         with:
+          ref: refs/heads/main
           fetch-depth: 0
           persist-credentials: false
 
@@ -148,15 +159,17 @@ jobs:
         run: |
           set -euo pipefail
 
-          git fetch origin main staging
+          git fetch origin main staging --tags
           git checkout -B staging origin/staging
-          git merge --ff-only origin/main
+          git merge --ff-only "${RELEASE_COMMIT}"
           git push origin staging
+        env:
+          RELEASE_COMMIT: ${{ needs.collect-release-metadata.outputs.release-commit }}
 
   notify-production-approval:
     name: Notify Slack for production approval
     if: startsWith(github.ref, 'refs/tags/cowswap-') || startsWith(github.ref, 'refs/tags/explorer-')
-    needs: [ collect-release-metadata, sync-staging ]
+    needs: [collect-release-metadata, sync-staging]
     runs-on: ubuntu-latest
     steps:
       - name: Notify Slack
@@ -174,13 +187,14 @@ jobs:
   sync-production:
     name: Fast-forward production to main
     if: startsWith(github.ref, 'refs/tags/cowswap-') || startsWith(github.ref, 'refs/tags/explorer-')
-    needs: [ collect-release-metadata, notify-production-approval ]
+    needs: [collect-release-metadata, notify-production-approval]
     runs-on: ubuntu-latest
     environment: production # Env configured in GitHub UI. Requires manual approval before this job can run
     steps:
       - name: Checkout workflow repository
         uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
         with:
+          ref: refs/heads/main
           fetch-depth: 0
           persist-credentials: false
       - name: Setup release sync
@@ -196,7 +210,9 @@ jobs:
         run: |
           set -euo pipefail
 
-          git fetch origin main production
+          git fetch origin main production --tags
           git checkout -B production origin/production
-          git merge --ff-only origin/main
+          git merge --ff-only "${RELEASE_COMMIT}"
           git push origin production
+        env:
+          RELEASE_COMMIT: ${{ needs.collect-release-metadata.outputs.release-commit }}

apps/cow-fi/app/(main)/tokens/[tokenId]/page.tsx

@@ -15,12 +15,12 @@ type Props = {
 
 function getTokenMetaData(token: TokenDetails) {
   const { name, symbol, change24h, priceUsd } = token
-  const change24 = parseFloat(change24h as string)
-  const change24hFormatted = change24.toFixed(2)
-  const isIncrease = parseFloat(change24h as string) >= 0
-  const priceChangeEmoji = isIncrease ? '🟢' : '🔴'
-  const changeDirection = isIncrease ? '▲' : '▼'
-  const title = `${priceChangeEmoji} ${name} (${symbol}) $${priceUsd} (${change24hFormatted}% ${changeDirection}) - ${CONFIG.metatitle_tokenDetail} - ${CONFIG.title.default}`
+  const priceSegment = typeof priceUsd === 'number' ? `$${priceUsd}` : 'Price unavailable'
+  const change24hFormatted = typeof change24h === 'number' ? change24h.toFixed(2) : '0.00'
+  const isIncrease = typeof change24h === 'number' ? change24h >= 0 : true
+  const priceChangeEmoji = typeof change24h === 'number' ? (isIncrease ? '🟢' : '🔴') : '⚪'
+  const changeDirection = typeof change24h === 'number' ? (isIncrease ? '▲' : '▼') : '•'
+  const title = `${priceChangeEmoji} ${name} (${symbol}) ${priceSegment} (${change24hFormatted}% ${changeDirection}) - ${CONFIG.metatitle_tokenDetail} - ${CONFIG.title.default}`
   const description = `Track the latest ${name} (${symbol}) price, market cap, trading volume, and more with CoW DAO's live ${name} price chart.`
 
   return { title, description }

apps/cow-fi/app/(main)/widget/page.tsx

@@ -51,7 +51,7 @@ const widgetParams: CowSwapWidgetParams = {
   appCode: 'CoW Protocol: Widget Demo',
   theme: 'light',
   standaloneMode: true,
-  width: '100%',
+  rootStyle: { width: '100%' },
 }
 
 export default function Page(): ReactNode {

apps/cow-fi/components/ChartSection/index.test.tsx

@@ -0,0 +1,74 @@
+/** @jest-environment jsdom */
+
+import type { JSX, ReactNode } from 'react'
+
+import { render } from '@testing-library/react'
+
+import { ChartSection } from '.'
+
+const mockUseQuery = jest.fn()
+
+jest.mock('@apollo/client', () => ({
+  useQuery: (...args: unknown[]) => mockUseQuery(...args),
+}))
+
+jest.mock('@visx/responsive', () => ({
+  ParentSize: ({ children }: { children: ({ width }: { width: number }) => JSX.Element }) => children({ width: 320 }),
+}))
+
+jest.mock('services/uniswap-price/queries', () => ({
+  tokenPriceQuery: 'token-price-query',
+  HistoryDuration: {
+    Day: 'day',
+  },
+  Chain: {
+    Ethereum: 'ethereum',
+  },
+}))
+
+jest.mock('util/fixChart', () => ({
+  fixChart: jest.fn(() => ({ prices: [], blanks: [] })),
+}))
+
+jest.mock('lib/hooks/usePriceHistory', () => ({
+  usePriceHistory: jest.fn(() => null),
+}))
+
+jest.mock('../Chart/LoadingChart', () => ({
+  ChartContainer: ({ children }: { children: ReactNode }) => <div>{children}</div>,
+  LoadingChart: () => <div>Loading chart</div>,
+}))
+
+jest.mock('../Chart', () => ({
+  Chart: () => <div>Chart</div>,
+  TimePeriod: {
+    DAY: 'DAY',
+  },
+}))
+
+describe('ChartSection', () => {
+  beforeEach(() => {
+    jest.clearAllMocks()
+    mockUseQuery.mockReturnValue({ data: undefined, loading: false })
+  })
+
+  it('skips the Ethereum price query when the ethereum platform is missing', () => {
+    expect(() =>
+      render(
+        <ChartSection
+          platforms={{
+            base: {
+              contractAddress: '0x4200000000000000000000000000000000000006',
+              decimalPlace: 18,
+            },
+          }}
+        />,
+      ),
+    ).not.toThrow()
+
+    expect(mockUseQuery).toHaveBeenCalledWith('token-price-query', {
+      variables: undefined,
+      skip: true,
+    })
+  })
+})

apps/cow-fi/components/ChartSection/index.tsx

@@ -1,3 +1,4 @@
+import type { JSX } from 'react'
 import { useMemo } from 'react'
 
 import { useQuery } from '@apollo/client'
@@ -10,8 +11,7 @@ import { fixChart } from 'util/fixChart'
 import { usePriceHistory } from 'lib/hooks/usePriceHistory'
 
 import { Chart, TimePeriod } from '../Chart'
-import { ChartContainer } from '../Chart/LoadingChart'
-import { LoadingChart } from '../Chart/LoadingChart'
+import { ChartContainer, LoadingChart } from '../Chart/LoadingChart'
 
 type ChartSectionProps = {
   platforms: Platforms
@@ -23,18 +23,20 @@ type QueryVars = {
   address: string
 }
 
-export function ChartSection({ platforms }: ChartSectionProps) {
+export function ChartSection({ platforms }: ChartSectionProps): JSX.Element {
+  const ethereumAddress = platforms.ethereum?.contractAddress
+
   const queryVariables = useMemo<QueryVars | undefined>(() => {
-    if (!platforms.ethereum.contractAddress) {
+    if (!ethereumAddress) {
       return undefined
     }
 
     return {
       duration: HistoryDuration.Day,
       chain: Chain.Ethereum,
-      address: platforms.ethereum.contractAddress,
+      address: ethereumAddress,
     }
-  }, [platforms.ethereum.contractAddress])
+  }, [ethereumAddress])
 
   const { data, loading } = useQuery(tokenPriceQuery, {
     variables: queryVariables,

apps/cow-fi/data/cow-amm/const.tsx

@@ -215,7 +215,7 @@ export const FAQ_DATA = [
       <>
         CoW AMM pools live on Balancer can be found at{' '}
         <Link
-          href="http://balancer.fi/pools/cow"
+          href="https://balancer.fi/pools/cow"
           external
           utmContent="cow-amm-balancer-pools"
           onClick={() =>