v1.23.2

1.23.2 (2026-06-12)

Bug Fixes

• enhance OTP validation error messages for better user feedback (#1616) (ed88df9)
• implement transient OTP verification in delete MFA flows (#1613) (f099689)
• tolerate legacy invalid characters in user profile names (#1615) (fddd13a)
• Updated the .devcontainer to run python bookworn (#1591) (d1d1ae9)

Miscellaneous Chores

• bump prod version (a3ed2b2)
• bump prod version 1.23.1 (#1612) (a3ed2b2)
• bump staging version (#1606) (bf73463)

v1.23.1

1.23.1 (2026-06-10)

Bug Fixes

• GA changes for Manage App (#1576) (c08e108)
• update IBMVerifyUserProfileSchema to prioritize details over URN alias and enhance user profile normalization (#1604) (ddac734)

Miscellaneous Chores

• deps: bump qs from 6.15.0 to 6.15.2 in /frontend (#1482) (0a71829)
• deps: lock file maintenance (#1517) (b702e37)
• deps: pin dependencies (#968) (4f2b984)
• deps: update all minor dependencies (#1516) (19f52c0)
• deps: update all patch dependencies (#1573) (acce785)

Continuous Integration

• bump prod version to 1.23.0 (7dfdd1e)
• bump PROD version to 1.23.0 (#1593) (7dfdd1e)
• bump staging to 1.23.0 (#1589) (5c10eb5)

v1.23.0

1.23.0 (2026-06-09)

Features

• [identity verification] update idv flow to navigate to the correct screen (#1566) (8d49571)

Bug Fixes

• change password flow go to otp validation if only one mfa factor available (#1586) (528abfb)
• hotfix not delete extra attribute (#1587) (4e06bd0)

v1.22.2

1.22.2 (2026-06-08)

Bug Fixes

• add success notice for OTP verification in password change flow (#1570) (3448476)
• Implement error handling for OTP validation and add password attempt tracking (#1569) (aefdf2f)
• implement session storage management for password change redirection (#1572) (e2830fb)
• refactor contact number handling to use phoneNumbers array (#1581) (2831801)
• update email verification messages and translations to align with design specifications (#1571) (8eb9583)
• update package-lock.json to resolve vitest v4 peer dependency conflict (#1522) (5efa37d)
• update password change flow to use returnToPage for redirection and remove session storage dependency (#1575) (91ce6aa)
• use enrolled email in change password otp instead of profile attribute (#1580) (9d9eb3f)

v1.22.1

1.22.1 (2026-06-04)

Bug Fixes

• Correct French translation formatting for OTP message display (#1558) (ac966f7)
• Fixed Accessibility Defect on Manage App Passkey Screen (#1542) (f13bf34)
• GA implementation for rename passkey (#1534) (835ceed)
• Underline action links in OtpSelection component to match design specifications (#1557) (7eb7a12)
• Update help center links and refactor link handling in OtpSelection and VerifyFIDO2Passkey components (#1544) (8359386)
• Update help center links to use production URLs for two-step verification (#1547) (1ebe728)
• Update password minimum length error messages to match design specifications (#1556) (d4b9f15)
• Update username retrieval logic to prioritize givenName and familyName (#1554) (33c5c37)

v1.22.0

1.22.0 (2026-06-02)

Features

• add FIDO2_RP_ID configuration and refactor RP ID retrieval logic (#1504) (b7b8519)
• add Online Verification Info component (#1521) (16b8c70)
• passkey fr localization figma alignment (#1525) (50a9eb3)

Bug Fixes

• align add/delete passkey figma design (#1506) (2c41f56)
• align add/delete phone number with figma design (#1498) (b53f4d7)
• auth: improve sign-out logic and handle prompt for login (#1508) (4a89d1e)
• Implemented GA for Passkey flow (#1493) (e1d96fd)
• Manage 2FA landing page Figma alignment (#1497) (96453ea)
• minor fix on UI (#1503) (eb7a75b)

Code Refactoring

• FIDO2 passkey verification Figma alignment (#1511) (1c34ae7)
• replace FIDO2_RP_ID with ROOT_DOMAIN in configuration and related logic (#1532) (84d95d8)
• ui align reverify otp (#1512) (85d59e5)

Miscellaneous Chores

• ci: add PR title check workflow (#1518) (0ab62a5)
• deps: lock file maintenance (#1425) (a85d3fa)
• deps: update all minor dependencies (#1424) (c36172a)
• deps: update all non-major github action dependencies (#1090) (b0a7ff8)
• deps: update all patch dependencies (#1423) (fb748f2)
• deps: update all patch dependencies (#1515) (29d3bef)
• deps: update dependency authlib to v1.6.12 [security] (#1457) (39866e6)
• deps: update dependency axios to v1.15.2 [security] (#1436) (6c77da1)
• deps: update dependency python-multipart to v0.0.27 [security] (#1441) (0595746)

v1.21.0

1.21.0 (2026-05-26)

Features

• add email otp verification for change password (#1481) (db66838)
• add passkey as option 2fa when add/delete OTP (#1476) (77571e0)
• frontend: implement online provincial ID verification page (#1485) (8fcb1a0)
• frontend: remove cancel button from passkey nickname screen (#1484) (24300f8)
• identity-verification: start identity proofing (#1468) (6e81585)
• prevent delete last 2fa otp/passkey (#1491) (38e6072)

Bug Fixes

• improve error handling for password verification (#1489) (070e4aa)

Miscellaneous Chores

• add LICENSE and SECURITY.md (#1490) (48e9660)
• bump staging deployed version to 1.20.0 (#1471) (b59073a)
• update feature flag to enable passkeys in test env (#1494) (f4fc8b8)

Continuous Integration

• bump prod version 1.20.0 (#1475) (ad6d328)

v1.20.0

1.20.0 (2026-05-20)

Features

• add Proven Information Card and integrate into ProfileHome component (30d8d54)
• frontend: add Proven Information Card and integrate into ProfileHome component (#1445) (30d8d54)
• identity-verification: integrate GC Notify for sending in-person verification codes (#1463) (8445607)

Bug Fixes

• Google Analytics Error Tracking for API Endpoints (#1461) (d251255)

Code Refactoring

• config: make Bluink Client ID and Secret optional (#1454) (31760c4)

Miscellaneous Chores

• bump staging deployed version to 1.19.0 (#1460) (104338e)
• remove hardcoded API tokens from dev documentation (32fa191)
• remove stale hardcoded API tokens from dev documentation (#1464) (32fa191)

Continuous Integration

• bump prod version 1.19.0 (#1467) (447e181)
• bump prod version to 1.19.0 (447e181)

v1.19.0

1.19.0 (2026-05-07)

Features

• frontend: add IDV in person ssc unique id verification screen (#1438) (e55e01e)

v1.18.0

1.18.0 (2026-05-06)

Features

• Add semgrep linter to catch local container state (#1439) (7b1fd80)
• add Service Canada Centre page and localization support (#1433) (fde0996)

Bug Fixes

• remove document title setting from trackPage function (78e908d)
• Remove renaming browser tab on page change (#1435) (78e908d)

Miscellaneous Chores

• bump prod deployed version to 1.17.2 (#1432) (ea2d85f)
• bump staging deployed version to 1.17.2 (#1430) (c6af44e)