Skip to content

chore(main): release 0.68.0 #771

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
osanderson merged 1 commit into from
Nov 1, 2026
Merged

chore(main): release 0.68.0 #771

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion .release-please-manifest.json
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,4 +1,4 @@
{
".": "0.67.2",
".": "0.68.0",
"sqlstore": "0.3.0"
}
17 changes: 17 additions & 0 deletions CHANGELOG.md
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,5 +1,22 @@
# Changelog

## [0.68.0](https://github.com/IDFoundry/FAPIgo/compare/v0.67.2...v0.68.0) (2026-11-01)


### ⚠ BREAKING CHANGES

* **server:** X5CAttesterChain refuses an attestation whose x5c carries, below the signing certificate, a certificate with the subject and public key of the anchor a verified chain ends at, even when it is not byte-identical to the configured anchor. Send x5c as the signing certificate and its intermediates only. See UPGRADING.md for v0.68.0.
* **server:** X5CAttesterChain with the default LeafPolicy refuses an attestation whose signing certificate lists the ISO/IEC 18013-5 mDL JWS or VICAL signer, ISO/IEC TS 23220-4 mdoc document signer or reader, RFC 9336 document signing, or RFC 6187 SSH extended key usage, or that chains only through a CA restricted to such roles. Issue attesters a dedicated certificate, or set LeafPolicy to AnyAttesterLeaf or your own AttesterLeafPolicyFunc. See UPGRADING.md for v0.68.0.

### Bug Fixes

* **client:** send authorization_details without HTML escaping ([9988f69](https://github.com/IDFoundry/FAPIgo/commit/9988f6945a5b08a272b8c1001b13aa51f5f3ed33))
* **extension:** encode RARSet output without HTML escaping ([7b25c0c](https://github.com/IDFoundry/FAPIgo/commit/7b25c0cf632e56c6e8b02c4eff6676a1eaeda7e2))
* **resource:** refuse typed-nil access-token key sources and stores ([4e31c30](https://github.com/IDFoundry/FAPIgo/commit/4e31c30f63740c171e605838262478bd8709bb33))
* **server:** refuse a re-issued or cross-signed anchor in attester x5c ([6ce2b00](https://github.com/IDFoundry/FAPIgo/commit/6ce2b00689be0c1fa4d862b5e5af88dc9fda44e9))
* **server:** refuse more signing roles in DefaultAttesterLeafPolicy ([db7e273](https://github.com/IDFoundry/FAPIgo/commit/db7e2736991e871b8101d5b4c34d00e201406c00))
* **server:** refuse typed-nil trust fields before validating them ([0403b7e](https://github.com/IDFoundry/FAPIgo/commit/0403b7e855213c3d6a09b516970981baa551a59c))

## [0.67.2](https://github.com/IDFoundry/FAPIgo/compare/v0.67.1...v0.67.2) (2026-10-31)


Expand Down
Loading