v7.2.0

7.2.0 (2026-08-19)

Features

• issuance: add credential reuse policy (#948) (383f744)

---

This release is also available on:

• v7.2.0
• npm package (@latest dist-tag)
• v7.2.0

v7.1.1

7.1.1 (2026-08-18)

Bug Fixes

• allow state in the as server (#943) (341698f)
• show version update based on type (#945) (56dc2f0)

---

This release is also available on:

• v7.1.1
• npm package (@latest dist-tag)
• v7.1.1

v7.1.0

7.1.0 (2026-08-18)

Bug Fixes

• adjust script (#914) (dc652b3)
• align outbound webhook config policy and docs (#915) (0d4e347)
• handle optional and clearable tenant fields (#924) (be95130)

Features

• bind external AS tokens to issuance sessions (#940) (13fc149)
• cli: validate tenant config-import files offline (#941) (18d1ca8), closes #926

---

This release is also available on:

• v7.1.0
• npm package (@latest dist-tag)
• v7.1.0

v7.0.1

7.0.1 (2026-08-13)

Bug Fixes

• publish cli binaries in release (#913) (daf2f1d)

---

This release is also available on:

• v7.0.1
• npm package (@latest dist-tag)
• v7.0.1

v7.0.0

7.0.0 (2026-08-12)

Bug Fixes

• align CLI standalone release to multi-platform builds (#903) (1d0af91)
• issuer: avoid reserved authorization server id in default issuance config fallback (#900) (8d85cca)
• cli windows release steps (#912) (ee8d823)
• consolidate CLI demo flow and release demo image promotion (#909) (cd0e7a9)
• deploy page (#906) (9705bd2)
• harden OIDF conformance flows and key-chain trust handling (#894) (2f9090c)
• verifier: honor per-request webhook override in ISO 18013-7 offer flow (#890) (da9e5bd)
• improve release step (#874) (440ff26)
• only install required deps in cli release (#911) (44272a7)
• publish website on every main push (#905) (8c21cad)
• release pipeline permission (#908) (8178230)
• remove deprecated presentation webhook payload (#897) (f896f95)
• update dependencies (#896) (526a801)
• update release workflow (#907) (424b330)
• update website (#902) (a69251b)
• validate client ids and surface unavailable user management (#901) (01ad804)

chore

• release: prepare EUDIPLO 7.0.0 (#904) (aae0256)

Features

• add configurable presentation status check modes across SD-JWT and mDOC (#881) (e92bc96)
• add ISSUER_MULTI_CONSUMPTION flag for multi-use issuance (#880) (286b238)
• iso18013: add opt-in reader authentication (ISO 18013-7 Annex C) (#884) (3f947be)
• migrate config validation to Zod (#898) (ac192de), closes #890
• support OID4VCI attestation proof type with trust anchor validation (#885) (312228b), closes #877

BREAKING CHANGES

• release: EUDIPLO 7.0 changes the trust-list and presentation configuration formats. Existing 6.x configurations must be migrated according to https://eudiplo.dev/docs/main/migration/6.x-to-7.0/

Signed-off-by: Mirko Mollik mirko.mollik@eudi.sprind.org

---

This release is also available on:

• v7.0.0
• npm package (@latest dist-tag)
• v7.0.0

v6.2.0

6.2.0 (2026-07-21)

Bug Fixes

• correct Python heredoc indentation in Deploy Website CI workflow (#859) (e96499f)
• verifier: fail closed when a configured trust list cannot be loaded (#862) (1247a9b)
• gate CWT status-list requests and fix CLI SEA release invocation (#871) (16317c1)
• gh makes (7f38623)
• increase pnpm version (#873) (f6249a0)
• normalize mdoc PID field namespace mapping (#865) (09e67ac)
• page deploy (#858) (4dc358b)
• update node version in ci (#872) (7befde8)

Features

• ship CLI SEA build and website quick-start updates (#863) (5a67231)

---

This release is also available on:

• v6.2.0
• npm package (@latest dist-tag)
• v6.2.0

v6.1.0

6.1.0 (2026-07-18)

Bug Fixes

• add deployment job (6bff97b)
• align issuer registration certificate generation and lifecycle UX (#852) (21685f5)
• cwt generation (#851) (a2a87ad)
• page deploy (62e9cc6)
• urls for new documentation (#856) (c22cc08)
• webpage ci fix (f46e7fb)
• website for page deployment (#854) (daa3ef0)

Features

• add GitHub Pages homepage and publish docs under /docs (#853) (3d94901)
• add verifier skew seconds configuration (#857) (7ddbef2)

---

This release is also available on:

• v6.1.0
• npm package (@latest dist-tag)

v6.0.0

6.0.0 (2026-07-15)

• feat(auth)!: finalize authorization server logic change (#845) (b9253dc)

Bug Fixes

• issuance: advertise classic and fully-specified mdoc alg ids (#819) (2791988), closes #814
• client: decouple mdoc namespace from path in field management (#830) (3acddf6)
• enforce single-use credential_offer_uri resolution (#829) (c9c18f7), closes #796
• security: harden tenant/session isolation and outbound webhook safety (#820) (546b68d)
• improve e2e execution and stabilize OIDF test lifecycle (#823) (02a1dd8)
• make webhooks selectable (#802) (cdb84fc)
• resolve malformed mDOC issuer items and offer form generation (#812) (3a518da)
• sdk versioning (#815) (f800b24)
• send trusted_authorities to wallets by default (#766) (#821) (655de85)
• support DCQL claim_sets in OpenID4VP (#828) (bb79c9f)
• wire mdoc status issuance and verification (#846) (e74f13f)

Features

• add csc as additional kms option (#825) (bd0a8b6)
• add CWT status list negotiation, verifier support, tests, and docs (#844) (f15667c)
• add ISO 18013-7 Annex C (org-iso-mdoc) Digital Credentials API support (#836) (df24900), closes #1
• issuance: add issuer registration certificate import/generate in metadata (#818) (9cbd662)
• add published demo backend image with embedded config bootstrap (#841) (23781f2)
• add schema metadata name support and refresh generated APIs (#850) (2951898)
• oid4vci: default pre-authorized flow to built-in AS (#827) (b7653d9)
• issuance: enforce id-only authorization server references (#839) (366f480)
• implement credential offer by reference for vci (#795) (ba40c5a)
• move refresh-token policy to auth server config and unify credential field editing (#831) (cb93d24)
• support nested credential fields with children (#799) (cc2ac00)
• kms: tenant config support and admin/key management UI alignment (#826) (4c49428)
• update issuance config and certificate import (#805) (2a4df45), closes #798

BREAKING CHANGES

• authorization server references must now be id-only. Existing inline/full-object configs are no longer accepted. See migration docs for required config updates.

Signed-off-by: Mirko Mollik mirko.mollik@eudi.sprind.org

---

This release is also available on:

• v6.0.0
• npm package (@latest dist-tag)

v5.1.0

5.1.0 (2026-06-17)

Bug Fixes

• remove unsupported PID date field type (#785) (1652d83)
• trim schema metadata resolve payload (#786) (e5c749f)

Features

• add wallet test app and e2e coverage updates (#793) (2977d28)

---

This release is also available on:

• v5.1.0
• npm package (@latest dist-tag)

v5.0.0

5.0.0 (2026-06-11)

Bug Fixes

• add migration files for better update (#767) (75914ca)
• add session pagination and SonarQube CI integration (#736) (63a5822)
• address SonarCloud issues and refactor client assets (#729) (51fa8d2)
• align credential schemas for vct and claim field path (#727) (941ebf5)
• improve sdk and k6 handling (#778) (149f822)
• move sonarcloud to extension (#779) (dd98862)
• registrar credential validation and dashboard config detection (#741) (06341c9)
• sonarqube issues (#732) (6e495c8)
• support client base href for Monaco assets (#780) (8a62e9c)
• upload test coverage to SonarCloud (#737) (346f9eb)
• test: validate TLS in OIDF e2e instead of skipping verification (#723) (a3bed4b), closes #542
• VCI request/response encryption (#742) (618d2e1)

Features

• add k6 load tests and harden OIDF e2e stability (#752) (51d1a04)
• add openid federation (#720) (7329040)
• KMS refactoring, PKCS#11 / HSM support, and HTTP remote KMS adapter (#744) (5efda22)
• migrate credential config to field-based model (#722) (72a04d4)
• pre-select single configuration (#715) (#716) (e2df792), closes #657
• update wallet flow (#783) (eaeec84)

BREAKING CHANGES

• new credential config format for better field handling, see the migration guide for updates

Signed-off-by: Mirko Mollik mirko.mollik@eudi.sprind.org

---

This release is also available on:

• v5.0.0
• npm package (@latest dist-tag)