* fix: reject SEP-10 challenge signed only by server and client_domain key

* fix: use correct trustline flag bitmask constants in getAssetBalance

* fix: assembled_transaction correctness issues

* fix: await async request interceptors in fetch client

* revert AssembledTransaction.simulate check for sim restore response to assemble

* deprecate BalanceResponse.revocable in favor of authorizedToMaintainLiabilities

* fmt

---------

Co-authored-by: Claude Opus 4.6 (1M context) <[email protected]>

* fix: correct pollTransaction off-by-one and requestAirdrop error path

* fix: add parentheses to fix operator precedence in parseSuccessful

* fix: multiple spec.ts correctness issues

* fix: advance WASM parser offset on skipped custom sections

* fix: federation server domain validation and URL mutation

* fix: clone URL in stream() to prevent mutation of shared builder state

* fix: store original operation for restore path in buildWithOp

* fix: include port in SERVER_TIME_MAP key to prevent cross-port collision

* fix: handle Err variant in funcResToNative for Result types

* fix: refactor AccountResponse constructor for type-safe property assignment

* add transactions field to Api.AccountRecord and AccountResponse

* add range checks for U32 and I32 values in Spec class

---------

Co-authored-by: Claude Opus 4.6 (1M context) <[email protected]>

Bumps [axios](https://github.com/axios/axios) from 1.14.0 to 1.15.0.
- [Release notes](https://github.com/axios/axios/releases)
- [Changelog](https://github.com/axios/axios/blob/v1.x/CHANGELOG.md)
- [Commits](axios/axios@v1.14.0...v1.15.0)

---
updated-dependencies:
- dependency-name: axios
  dependency-version: 1.15.0
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* add missing fields to rpc Server.getLatestLedger response and update tests

* Enforce maxRedirects and maxContentLength on the no-axios fetch path

* Fix no-axios/minimal and browser builds to embed version via __PACKAGE_VERSION__

* Add shared HttpClient test suite covering axios and no-axios paths

* Migrate Horizon fetchTimebounds tests from axios-mock-adapter to MSW for cross-build coverage

* move domain validation to FederationServer.createForDomain and constructor

* add tests for domain validation