Release 2.0.0

pk-auth 2.0.0

Maven Central

Add the modules you need (all share the same version):

implementation("com.codeheadsystems:pk-auth-spring-boot-starter:2.0.0")
// or :pk-auth-dropwizard / :pk-auth-micronaut for the other adapters
implementation("com.codeheadsystems:pk-auth-persistence-jdbi:2.0.0")
// testImplementation("com.codeheadsystems:pk-auth-testkit:2.0.0")

<dependency>
  <groupId>com.codeheadsystems</groupId>
  <artifactId>pk-auth-spring-boot-starter</artifactId>
  <version>2.0.0</version>
</dependency>

Modules Published

• com.codeheadsystems:pk-auth-core:2.0.0
• com.codeheadsystems:pk-auth-jwt:2.0.0
• com.codeheadsystems:pk-auth-admin-api:2.0.0
• com.codeheadsystems:pk-auth-backup-codes:2.0.0
• com.codeheadsystems:pk-auth-magic-link:2.0.0
• com.codeheadsystems:pk-auth-otp:2.0.0
• com.codeheadsystems:pk-auth-persistence-jdbi:2.0.0
• com.codeheadsystems:pk-auth-persistence-dynamodb:2.0.0
• com.codeheadsystems:pk-auth-testkit:2.0.0
• com.codeheadsystems:pk-auth-spring-boot-starter:2.0.0
• com.codeheadsystems:pk-auth-dropwizard:2.0.0
• com.codeheadsystems:pk-auth-micronaut:2.0.0

What's Changed

See commits since last release for details.

Note: Artifacts may take up to 2 hours to appear in Maven Central after release.

What's Changed

• Validate docs/ADRs against code + fix DynamoDB refresh-token forensic-retention TTL by @wolpert in #37
• Added claude file for Nitish by @wolpert in #38
• test(browser): close mutation-testing coverage gaps in passkeys SDK by @wolpert in #40
• test(browser): cover the full ceremony flows (correcting a PR #40 oversight) by @wolpert in #41
• build(deps): Bump the dev-dependencies group with 4 updates by @dependabot[bot] in #42
• test: raise line/branch coverage across library, adapters, and persistence by @wolpert in #43
• Add mutation testing as part of ci pipeline. by @bernata in #39
• test: prune low-value tests (getters/accessors, tautologies, no-assertion smoke) by @wolpert in #44
• build(deps): Bump the dev-dependencies group with 4 updates by @dependabot[bot] in #46
• build(deps): Bump the gh-actions group with 2 updates by @dependabot[bot] in #45
• Add stryker dashboard to ci workflow. by @bernata in #47
• docs(readme): add passkeys-browser mutation score badge by @wolpert in #48
• build(deps-dev): Bump @types/node from 25.9.2 to 25.9.3 in /clients/passkeys-browser in the npm-dependencies group across 1 directory by @dependabot[bot] in #50
• build(deps): Bump the dev-dependencies group with 11 updates by @dependabot[bot] in #51
• ci: add SonarQube Cloud static analysis and coverage tracking by @wolpert in #52
• ci: harden npm steps against script execution and unpinned fetches by @wolpert in #53
• fix: resolve SonarQube reliability bugs and null-contract violations by @wolpert in #54
• build: remove SonarQube Cloud; enforce line + branch coverage via JaCoCo by @wolpert in #56
• Add sonarqube by @bernata in #49
• build(deps): Bump the dev-dependencies group with 2 updates by @dependabot[bot] in #58
• Top-10 maintainability/test/design improvements (security-constrained) by @wolpert in #57
• Maintainability pass: correctness fixes, dedup, sealed start* ceremony, docs by @wolpert in #59
• ci: add workflow_dispatch to allow on-demand runs (browser SonarQube scan) by @wolpert in #61
• fix(sdk): clear SonarQube ReDoS hotspot in base64url encode by @wolpert in #62
• fix(deps): force esbuild >=0.28.1 (Dependabot alert #5, GHSA-gv7w-rqvm-qjhr) by @wolpert in #63
• build(deps): Bump gradle/actions from 6.1.1 to 6.2.0 in the gh-actions group by @dependabot[bot] in #64
• build(deps): Bump the dev-dependencies group with 2 updates by @dependabot[bot] in #65
• ci: skip SonarQube/Stryker on Dependabot PRs (secrets withheld) by @wolpert in #66
• chore(release): prepare 2.0.0 by @wolpert in #67

New Contributors

• @bernata made their first contribution in #39

Full Changelog: v1.3.1...v2.0.0