v2.14.0

2.14.0 (2026-09-03)

Bug Fixes

• clean up lint issues in dashboard (bf2745c)
• ensure dpop keys are included with auth requests (2588cd5)
• move sdk builds to github runners to maintain provenance for trusted publishing (3564574)
• prevent race condition causing sessions to be destroyed when many session requests are made rapidly (82af2d2)
• retire previous sessions before registering new one (0d6f3bf)
• revoke sessions with the PDS when they're destroyed (71a2147)
• use correct keys in metrics tests (b762464)
• use trusted publishing for npm packages (626aa70)

Features

• add confidential session support to SDKs (3fd7f6b)
• add opt-in telemetry (eb46b55)
• allow jwks rotation without breaking active sessions (52c9b91)
• allow JWKSs to be revoked (16184f0)
• update HappyView internal clients to use confidential sessions (ccc6e71)
• use confidential sessions for API clients (dc1ddd9)