Skip to content

CHANGELOG.md

Latest commit

 

History

History
221 lines (202 loc) · 12.2 KB

CHANGELOG.md

File metadata and controls

221 lines (202 loc) · 12.2 KB
Raw

Changelog

All notable changes to this project will be documented in this file.

The format is based on Keep a Changelog, and this project adheres to Semantic Versioning.

[0.101.0] - Expected September 2026

Significant changes since Multipaz 0.100.0 include:

  • [To be written]
  • New custom_head_html server setting, injected into the <head> of every HTML page served by serveResources(), so a deployment can restyle the built-in pages without forking their markup.

[0.100.0] - 2026-07-08

Significant changes since Multipaz 0.99.0 include:

  • Support for a new NFCv2 engagement protocol, including support for sequence numbers.
  • Implementation of SD-JWT Digital Payment Credentials (DPC) and support for SD-JWT VC in ISO 18013-5 DeviceRequest and DeviceResponse.
  • Introduction of higher-level Verifier APIs, and fully decoupled the VerificationSession API from DCQL.
  • Support for controlling how documents are exported to Android Credential Manager (Credman), and fallback support for matching protocols in the Digital Credentials API.
  • Support for parsing additional fields from OpenID4VCI display metadata, and support for multi-signed requests.
  • ZKP improvements, including issuing ZKP-friendly mDLs in the test app and surfacing ZKP errors to Kotlin.
  • Hoisted state in VerticalCardList for SwiftUI and Compose, and added support for use-case driven consent prompts.
  • BLE reliability improvements, including L2CAP connect retry logic.
  • Splitting off multipaz-utopia into its own repository.
  • Fixed Ed25519 signing in AndroidKeystoreSecureArea.

[0.99.0] - 2026-05-04

Significant changes since Multipaz 0.98.0 include:

  • New multipaz-utopia module for non-standardized doctypes and payment services.
  • Introduction of the Multipaz Pass file format for sharing credentials.
  • Improved Swift integration by using SKIE Bundling to move Swift code into KMP libraries.
  • Support for web-based verification transactions and proximity reading transaction data.
  • Enhanced OpenID4VCI and OpenID4VP support, including Android Keystore attestation and state propagation.
  • New WebStorage implementation for JS and WasmJS using IndexedDB.
  • Support for document badges and attribute sensitivity levels.
  • Improved cross-platform UI with browser tabs for authorization and new Swift UI components.
  • Enhanced event logging with support for app-specific and provisioning events.
  • Updated to Longfellow ZK version 0.9 with bundled circuits for easier deployment.
  • Continued internationalization efforts, including translations for the multipaz-doctypes module.
  • Support for app-provided configuration for document provisioning.
  • Support in DeviceCheck for non-hardware-backed environments.

[0.98.0] - 2026-03-19

Significant changes since Multipaz 0.97.0 include:

  • Add translation infrastructure and translations for 21 languages
  • Add support for ISO/IEC 18013-5 Second Edition query language
  • Add support ISO/IEC 18013-7:2025 Annex A on verifier.multipaz.org and in TestApp
  • Add support for USB-connected NFC readers, (https://www.youtube.com/watch?v=KR8U-dZM6f4)
  • New vertical document list composable/view for both Compose and SwiftUI including support for QuickAccessWallet on Android (https://www.youtube.com/watch?v=YUkJMlIxr0A, https://youtu.be/rdLyNJPpEsQ)
  • Unification of proximity and online presentment UI/UX (https://youtu.be/nbNL2e7Ckjs)
  • TrustManager enhancements including composables for editing trust lists in multipaz-compose
  • New event logging framework for recording significant user events such as presentment
  • Support for sharing files on Android and iOS
  • Better exception handling throughout the library
  • Preliminary support for Digital Payment Credentials
  • Support for Aadhaar doctype, including in https://verifier.multipaz.org

Starting with Multipaz 0.98.0 we are now doing releases on Maven Central instead of GMaven.

[0.97.0] - 2026-02-17

Changes since Multipaz 0.96.0 include:

  • Export library version in Platform singleton.
  • Use correct COSE algorithm in 18013-5 DeviceRequest.
  • Update to Ktor 3.x series.
  • Publish JavaScript and WasmJS variants of libraries and start implementing abstractions for the web platform, including Crypto backed by Web Crypto.
  • Add support for display data in OpenID4VCI.
  • Add support for refreshing credentials using OpenID4VCI.
  • Add W3C Digital Credentials support on iOS.
  • Don't force KMP resources on apps using multipaz-compose.
  • Simplify presentment APIs.
  • Add multipaz-swift library and Swift test app.
  • Update to Longfellow ZK version 0.8.6.
  • DocumentCarousel UI enhancements (haptics, reordering).
  • Support for creating SD-JWTs without fully recursive disclosures.
  • New generic key/value storage ("Tags") for documents and credentials.
  • Update Dokka to 1.2.0.
  • Bug fixes.

[0.96.0] - 2025-12-11

Changes since Multipaz 0.95.0 include:

  • Longfellow support for iOS, see https://youtu.be/pJPrjxGb9Ro
  • Support for RICAL according to 18013-5 Second Edition drafts.
  • Support for 18013-5 Second Edition in DeviceResponse, MobileSecurityObject including support for encrypted documents. Additional 18013-5 Second Edition features (mainly just the new Query Language) will be added in a future release.
  • Update PhotoID doctype according to latest 23220-4 draft, in particular change to the lowercase doctype and namespace name.
  • OpenID4VCI fixes in response to OpenID interop event.
  • ISO 18013-5 fixes in response to ISO SC17 WG10 interop event in New Zealand.
  • Support for IETF Status List, Identifier List, and CRLs.
  • Multiplatform file and image picker dialogs in multipaz-compose.
  • DocumentCarousel composable in multipaz-compose.
  • PromptModel improvements.
  • DocumentStore optimizations.
  • Update to Kotlin 2.2.21 and XCode 26.1.1.

[0.95.0] - 2025-11-11

Changes since Multipaz 0.94.0 include:

  • Longfellow updates to latest version and compliance with latest 18013-5 Second Edition draft
  • Support for Longfellow on MacOS arm64.
  • Support for parsing and generating X.509 CRLs
  • Merge multipaz-models library into multipaz library.
  • Move W3C DC API implementations into multipaz-dcapi library.
  • Support for Observe Mode
  • New AsymmetricKey abstraction for nicer APIs supporting both local and remote keys.
  • OpenID4VCI fixes.
  • Age Verification doctype updates.
  • SecureArea improvements for unlocking.
  • W3C Digital Credentials API app-to-app presentment fixes on Android
  • Improved HKDF and HPKE implementations
  • Move some code to new Multipaz Extras repository, including multipaz-vision library.
  • Support for external NFC readers connected via USB in Multipaz Test App.
  • Bug fixes.

[0.94.0] - 2025-09-26

Changes since Multipaz 0.93.0 include:

  • Improved and standards-compliant DCQL support in OpenID4VP implementation.
  • Generalizing of the Multipaz X.509 extension including adding support for using this extension on reader certificates for conveying reader identity.
  • OpenID4VCI support with ProvisioningModel and ProvisioningClient.
  • Support for querying and setting whether Bluetooth is enabled.
  • High-level composable for simpler QR mdoc presentment.
  • Support for creating AttestKey in Android Keystore Secure Area.
  • Native support for W3 Digital Credentials API on Android.
  • New org.multipaz.verification package with utility functions to make it easier to create W3C DC requests and validate W3C DC Responses.
  • Support for EU Age Verification ISO mdoc document type (eu.europa.ec.av.1) with support for this in both the issuer, testapp, and verifier.
  • Support for 18013-5 Second Edition in DeviceRequest and DeviceEngagement. Additional support 18013-5 Second Edition will appear in future releases.
  • New org.multipaz.loyality.1 ISO mdoc document type, for use in samples and codelabs.
  • Update PhotoID document type to latest ISO/IEC 23220-4 draft.
  • System of Record and Issuer enhancements.
  • NFC Reading enhancements.

[0.93.0] - 2025-08-04

Changes since Multipaz 0.92.1 include:

  • TrustManager rearchitecture to better support applications allowing the user to add/remove/edit entries, e.g. Multipaz Identity Reader.
  • W3C Digital Credential improvements on Android to include the Exchange Protocol, as required.
  • Make DeviceRequestGenerator work with keys in a SecureArea.
  • New system-of-record server and OpenID4VCI interoperability fixes.
  • Allow scanning NFC without a dialog, for platforms that support it (e.g. Android).
  • Support for Longfellow ZK and new ZKP plumbing in latest ISO/IEC 18013-5 Second Edition drafts.
  • OpenID4VP 1.0 support using URI schemes.
  • Support requests with multiple protocols in W3C DC API in verifier.multipaz.org and properly handle it in Multipaz Test App.
  • Unit tests for Android Credential Manager Matcher.
  • Face matching support in multipaz-vision, using LiteRT and FaceNet.
  • Update of all dependencies to latest version, including kotlinx-datetime 0.7.1 which includes the migration of Instant and Clock from kotlinx.datetime to kotlin.time.
  • Bug fixes and other enhancements.

[0.92.1] - 2025-06-27

Changes since Multipaz 0.92.1 include:

  • Fix BLE GATT on older Android devices.
  • Pass the full JWS for OpenID4VCI key attestations, not just the body of the JWT.

[0.92.0] - 2025-06-25

Changes since Multipaz 0.91 include:

  • Face Detection routines and Selfie detection, using MLKit
  • BLE GATT data race fixes.
  • Update SD-JWT implementation to properly handle non-top-level disclosures.
  • Update JWE, JWS routines to work on Kotlin Multiplatform and drop dependency on Nimbus library.
  • Update to latest W3C Digital Credential API.
  • OpenID4VP Draft 29 support.
  • OpenID4VCI interoperability fixes.
  • Removal of BouncyCastle Dependency.
  • Consent Prompt enhancements.
  • Exporting of Android services/activities to make W3C DC API and NFC Engagement easier to implement.
  • Fix for Annex C implementation discovered during interop testing ("Response" -> "response").
  • Migration of all server code to use Ktor environment, making it easier to deploy.
  • Stand up at https://verifier.multipaz.org, https://issuer.multipaz.org, and https://csa.multipaz.org.
  • New "Raw DCQL" box in online verifier code.
  • Rework QR code generation and scanning and drop some dependencies.
  • Generate and publish Multipaz.xcframework w/ Package.swift file for easy consumption in Swift projects.

[0.91.0] - 2025-05-30

Changes since Multipaz 0.90 include

  • Fix generated reader auth certificates to contain required extensions from ISO/IEC 18013-5:2021 Annex B.1.7.
  • Multiplatform Camera composable in multipaz-compose library.
  • OpenID4VP draft 24 updates, based on interoperability testing.
  • OpenID4VCI updates.
  • Preliminary ZKP support.
  • Preliminary support for scanning barcodes, using MLKit.
  • Updated RPC schema hash calculations to better support with different Kotlin versions.
  • Better support for semantic versioning.
  • New icons.
  • New https://apps.multipaz.org/ website with prebuilt APKs.

[0.90] - 2025-03-26

This is the first release with the CHANGELOG.md file and also the first release using the new Multipaz name. Main changes since the Identity Credential version 202411.1 include:

  • The project has been renamed to Multipaz and all package names have been changed from com.android.identity to org.multipaz.
  • New multipaz-models and multipaz-compose libraries
  • Removal of appholder module.
  • Conversion of DocumentStore, Document, Credential to use suspend methods.
  • Conversion of SecureArea to use suspend methods.
  • Introduction of new PromptModel to handle interaction with the user for asynchronous methods on SecureArea and NFC tag reading.
  • New multiplatform ASN.1 and X.509 code.
  • New multiplatform ISO/IEC 18013-5 proximity presentment stack.
  • New multiplatform NFC stack and NFC tag reader abstraction.
  • New multiplatform storage backend.
  • New presentment model and composable.
  • New HTML/Markdown, Notifications, LockScreen multiplatform composables.