release-2026-06-15: Consolidated email recovery verification

This is Internet Identity release release-2026-06-15 for commit 1f4104b53ddaecf745426769e895013168591b17.

Try it out

• Staging: https://beta.id.ai
• Testing application: https://try.id.ai

What's Changed

• feat(be): collapse email-recovery DNS verification to a single DoH path, gating DNSSEC behind a deploy flag by @sea-snake in #4020

Full Changelog: release-2026-06-12...release-2026-06-15

Artifacts

Filename	sha256 (links to CI Run)
internet_identity_backend.wasm.gz	a2818676f07639a63b6b4ad55df0ad18868711ea305a1afb4d1167a080e2a911
internet_identity_frontend.wasm.gz	719c7ea03fe4946cb67f71878dd15926dc3bfae2466100c5880bba8e817a205b
archive.wasm.gz	fd07137ca4687da569d766a2f1e16604ffd74e527e7b6bf43b7bdd0f8ed92edc

Wasm Verification

To build the wasm modules yourself and verify their hashes, run the following commands from the root of the Internet Identity repository:

git pull # to ensure you have the latest changes.
git checkout 1f4104b53ddaecf745426769e895013168591b17
./scripts/verify-hash     --ii-hash a2818676f07639a63b6b4ad55df0ad18868711ea305a1afb4d1167a080e2a911     --iife-hash 719c7ea03fe4946cb67f71878dd15926dc3bfae2466100c5880bba8e817a205b     --archive-hash fd07137ca4687da569d766a2f1e16604ffd74e527e7b6bf43b7bdd0f8ed92edc

Make sure to compare the hashes also with the proposal payload when verifying canister upgrade proposals.