v0.62.0

0.62.0 (2026-11-02)

⚠ BREAKING CHANGES

• verifier: TransactionsConfig.RequestURIBase or RedirectURI with userinfo (even a bare "@") or a non-ASCII host is refused by NewTransactions. Give an internationalized domain name as its xn-- A-label.
• verifier: a sealed verifier transaction record written by v0.61.0 or earlier no longer opens (sqlstore.ErrRecordFormat): a request in flight at the upgrade fails, and a completed one's result is lost. Upgrade with no request in flight, or accept those failing. Unsealed records are unaffected.
• oid4vci: a token request (code exchange, CIBA or refresh) whose authorization_details drop all of the grant's credential_identifiers is refused with invalid_authorization_details; keep some, or send no authorization_details. An openid_credential object with an empty credential_identifiers, locations or claims array, an empty location, a malformed claims path or a repeated claims path is refused.

Bug Fixes

• name what an origin carries beyond its scheme, host and port (80fd636)
• oid4vci: refuse narrowing that drops credential_identifiers, and malformed objects (1790fe1)
• verifier: bind sealed transaction fields to who may read the result (53c9dd2)
• verifier: check request_uri_base and redirect_uri as endpoint URLs (585c081)
• walletflow: make a revocation CheckStatus finds final (97bd6e4)