Release 2026.07-1

Highlights

• Biometric authentication: new userAuthenticationRequired Wallet Core config option skips app authentication before credential presentation when the wallet already enforces biometrics on its keys. Added error feedback (with da/de/fr/it translations) when biometrics are unavailable or not enrolled during mandatory setup.
• Release build fixed: resolved R8 MissingClass problems by adding keep rules for ML Kit Text Recognition, Google Play Services SafeParcelable/KeepName, and reflection-backed MRZ parser record classes.
• MRZ scanner crash fixed: invalid crop dimensions from the viewfinder height calculation no longer crash Bitmap.createBitmap; crop coordinates are now bounds-checked and coerced.
• SpongyCastle -> BouncyCastle: replaced the deprecated SpongyCastle JCE provider with BouncyCastle in the passport-scanner.

What's new

• userAuthenticationRequired Wallet Core config option
• biometric_setup_required_error feedback with da/de/fr/it translations
• CI check preventing raw ${e.message} logging in passport/issuance paths (PII guard)
• Documented FLAG_SECURE production hardening action

Changed

• Dependency updates: AGP 9.0.1 → 9.2.1, Kotlin 2.3.0 → 2.3.20, Compose BOM 2026.02.00 → 2026.06.00, Gradle 9.3.1 → 9.6.0, Koin 4.1.1 → 4.2.2, Ktor 3.4.0 → 3.5.0, Coil 3.3.0 → 3.5.0, plus navigation, lifecycle, core, camera, protobuf, material
• All compilation warnings now treated as errors; removed android.enableR8.fullMode=false
• Generic log messages replace raw exception messages in passport-scanner NFC/MRZ paths

Fixed

• Splash screen footer hiding behind the system navigation bar
• SonarQube severity issues, including disabling cleartext traffic for older Android versions and clearing the biometric error on cancel
• MRZ analyzer crash from negative/zero crop bounds

Full changelog: see the 2026.07-1 section in CHANGELOG.md.

Release 2026.06-3

2026.06-3

Changed

• Bound the database cipher and biometric authentication state to the vault key,
  including updated storage providers and revocation handling while the vault is
  locked.

Fixed

• Presentation flow when the vault is locked.

Release 2026.04-2

This release hardens the Age Verification Blueprint App across several layers.

• On-device data: database and settings encrypted at rest, with keys protected by the device’s hardware-backed key store.
• Runtime: the app checks device integrity on startup and refuses to run on rooted or jailbroken devices. Production deployments should complement it with stronger device-attestation mechanisms appropriate to their infrastructure and compliance requirements.
• Passport onboarding: more stable scanning; the passport photo is stored privately and deleted as soon as it’s no longer needed.
• PIN: stricter rules block easy-to-guess PINs; PINs are salted and hashed, never stored in plain form.

First hardening step — more to come.

Release 2026.04-1

Release 2026.04-1
Dynamic age value display

• Age verification attestation now displays the age value dynamically based on the actual claim rather than a fixed representation
• Updated app logo

Release 2026.02-2

1. Wallet Instance Attestation (WIA) support
   • The app supports requesting and presenting Wallet Instance Attestations when required.
   • Integration with the already deployed attestation service is completed.
   • WIA handling complies with ARF section 6.5.3.4.
2. 3rd Party Enrollment (Pre-authorized Code Flow)
   • Support for credential issuance initiated from a 3rd party application (e.g., banking app).
   • Handling of credential offer URLs via deep linking.
   • Support for OpenID4VCI pre-authorized code flow.
   • Secure handover between 3rd party app and AV app.
3. Over-the-Counter (QR-based) Enrollment
   • New enrollment option: “Token / QR Code”
   • Start of issuance flow after successful QR scan - OpenID4VCI pre-authorized code flow with transaction code.

2026.02-1

What's Changed

Adds automated same device regression tests with Maestro framework
Improvements to MRZ scanning
Handling of DC API QRs via in-app QR code scanner
Improved no internet connection error with retry across all app flows
Downloads biometric model on Passport Scanning flow intro

Full Changelog: 2026.01-1...2026.02-1

2026.01-1

What's Changed

• support for zero knowledge proof*

• Release 2026.01-1 by @brahyam in #54

*in order to test zero knowledge proofs:

• on the same device you installed the app visit the verifier at https://verifier.multipaz.org/
• select as credential "Age Verification credential (mdoc)"
• select as protocol "W3C DC API 18013-7 Annex C)
• click on "Age Over 18 (ZKP)"

Full Changelog: 2025.12-1...2026.01-1

2025.12-1

Changelog:

• support eID MRZ scan and NFC reading for ICAO compliant eIDs
• update OpenID4VCI to v1.0
• allow user to go back from PIN reenter screen
• more informative error when NFC reading fails in common cases of loosing NFC tag
• sync translations with CMS

2025.11-2

What's Changed

• updated EUDI Wallet Core dependency to 0.20.0
• other Maintenance updates

This version supports:
OpenID4VP 1.0,
OpenId4VCI 1.0,
DC API,
Passport Reading

Full Changelog: 2025.11-1...2025.11-2

eID NFC reading feature preview

Merge pull request #52 from eu-digital-identity-wallet/release/2025.11-2

Release 2025.11 2