1.17.1

[DennisDyallo]

1.17.1

Release date: June 29th, 2026

Features:

• The FIDO2 application now exposes raw CBOR-encoded response data for GetAssertion and credential management operations through GetAssertionData.RawData and CredentialManagementData.RawData, allowing callers to inspect, forward, or preserve original response data while remaining forward-compatible with future protocol extensions. (#510, #508)

Bug Fixes:

• Fixed an issue where FIDO2 credential management responses containing fields introduced after CTAP 2.1 could throw a Ctap2DataException, including the thirdPartyPayment field on YubiKeys with firmware version 5.8 and above. The known thirdPartyPayment field is now parsed, and other unknown fields are preserved for forward compatibility. (#507, #508)

Documentation:

• Warning language has been added to clarify that ARKG-related previewSign code and test utilities are experimental and not production cryptographic guidance. (#488)

Dependencies:

• Several dependencies across the Yubico.Core project, GitHub Actions workflows, and Docker-based documentation image have been updated to newer versions. (#494, #495, #497, #498, #499)

---

Full Changelog: 1.17.0...1.17.1

---

This discussion was created from the release 1.17.1.