Release 1149.0.0

[saustrie-consensys]

Explanation

Releases @metamask/ramps-controller@17.2.0 (minor bump).

Changes in this release:

• Adds getHeadlessProviderAllowlist(remoteFeatureFlagState) helper resolving the provider-id allowlist from the moneyHeadlessAllProviders flag's object payload.
• Adds HEADLESS_ALL_PROVIDERS_FEATURE_VERSION constant ('1') and getHeadlessAllProvidersMinimumVersion(remoteFeatureFlagState) helper for version gating.
• Widens the moneyHeadlessAllProviders flag value contract to accept { enabled: true, featureVersion: "1", providerIds?: string[] } alongside the existing boolean form. Old clients coerce the object payload to false (native-only), so serving it cannot turn widening on for a client that cannot parse it.

Also includes a housekeeping fix to the CHANGELOG and a JSDoc correction (stale surface/HEADLESS_ALLOWLIST_SURFACES/HeadlessAllowlistSurface references that were in the original #9524 merge before those were removed).

References

• Builds on feat(ramps-controller): accept a JSON moneyHeadlessAllProviders payload carrying provider allowlists #9524 (moneyHeadlessAllProviders object payload support)
• Consumer bump PR: feat(ramp): consume JSON moneyHeadlessAllProviders payload + thread rampSurface into headless getQuotes metamask-mobile#33362

Checklist

• I've updated the test suite for new or updated code as appropriate
• I've updated documentation (JSDoc, Markdown, etc.) for new or updated code as appropriate
• I've communicated my changes to consumers by updating changelogs for packages I've changed
• I've introduced breaking changes in this PR and have prepared draft pull requests for clients and consumer packages to resolve them

---

Note

Low Risk
Version bumps and documentation/changelog fixes only; no new logic in the diff.

Overview
Release cut for @metamask/ramps-controller@17.2.0 and the monorepo at 1149.0.0, with transaction-pay-controller and the lockfile bumped to depend on ramps-controller ^17.2.0.

The 17.2.0 changelog is finalized and corrected so it matches the shipped API: object-form moneyHeadlessAllProviders is documented as { enabled, featureVersion: "1", providerIds? } with helpers getHeadlessProviderAllowlist and getHeadlessAllProvidersMinimumVersion, and stale references to per-surface allowlists (surfaces, HEADLESS_ALLOWLIST_SURFACES, getQuotessurface option) are removed. featureFlags.ts JSDoc is updated the same way. No runtime code changes appear in this diff beyond version numbers and docs.

^{Reviewed by Cursor Bugbot for commit c6d5c11. Bugbot is set up for automated code reviews on this repo. Configure here.}

[metamask-ci]

❌ Changelog validation failed. Check the workflow run for details.

[amitabh94]

I am not sure if this file change belongs to the release PR but approving since this is just a comment change.

[saustrie-consensys]

They're only docstrings that were not updated.

[mcmire]

I won't block on this, but yes, ideally release PRs should only bump versions and dependencies and update changelogs, they should not update anything else.

[mcmire]

LGTM.

[mcmire]

I won't block on this, but yes, ideally release PRs should only bump versions and dependencies and update changelogs, they should not update anything else.