Releases: Sphereon-Opensource/SSI-SDK
Releases · Sphereon-Opensource/SSI-SDK
Release list
v0.40.1
v0.40.0
v0.39.0
v0.38.0
0.38.0 (2026-06-04)
Bug Fixes
- enhance x5chain decoding logic to handle both browser and non-browser environments (d57aaf2)
- ensure compatibility in JWK handling and schema references updates (1ee9ecf)
- issueCredentialEndpoint persist VC as issuer role, not holder (37ee325)
- issueCredentialEndpoint persist VC as issuer role, not holder (90c07d3)
- request entity too large (77f49b9)
Features
- add dynamic trust anchor providers, enhance x509 validation, and improve logging in mdoc verification (639db9e)
- add ITB testbed dc+sd-jwt credential tests and remove redundant verification logic in did mode (84a6783)
- add locale resolution enhancements, private_key_jwt selection, and improved branding logic for OIDC4VCI (f19cac5)
- added credential designs module (d1b70a5)
- cwt support (7f1b21e)
- cwt support (4845935)
- oid4vc 1.0, mdoc support, update dev and runtime dependencies to latest versions, and clean up imports (ca1dded)
- oid4vp and oid4vci 1.0 support (c446079)
- oid4vp and oid4vci 1.0 support (c800441)
v0.37.1
0.37.1 (2026-03-06)
Bug Fixes
- add null check for optional fields in OID4VCIHolder service and machine logic (625d096)
- improve image handling by adding checks for missing dataUri and handling failed downloads (70393d8)
- improve image handling by adding checks for missing dataUri and handling failed downloads (36354c7)
- improve image handling by adding checks for missing dataUri and handling failed downloads (3632ea6)
v0.37.0
0.37.0 (2026-01-30)
Bug Fixes
- change blakejs import to namespace import for better CommonJS/ESM interop (84f9a21)
- contacts list was crashing without any message when encountering a party without a contact (78caef9)
- handle CommonJS/ESM interop for blakejs in MappingUtils (9a2b1f0)
- improve locale fallback and clientId resolution logic in OID4VCI holder, update locale handling in SdJwt types and mappers (0ce9cdf)
- Issue 2 seconds in the past due to clock skew (b238874)
- move imports to top of file for proper module syntax (10ec0cd)
- UQ constraint on discovering ID using existing alias (ff40ab6)
Features
v0.36.0
0.36.0 (2025-11-19)
IMPORTANT
This release is removing support for Presentation Exchange. Reason is that later OID4VP specifications removed it as well in favor of DCQL. We also dropped support for anyhing but OID4VP Draft28 and 1.0 final as well as OID4VCI Draft 15 (1.0 final to follow soon). Reason is that we are now at or near final specifications, and thus retaining old draft specification is not feasible
Bug Fixes
- add verified data to the auth status response (1342ce4)
- allow ""; charset=UTF-8" in content types (OID4VP/SIOP) (655b5b3)
- builder fixes (ee98a3e)
- class-validator has changed behavior, so fixating to the older version (0f35c70)
- export datastore types (c2ed6fe)
- fix dcql presentation check (663555b)
- fixed dcql query payload assignment (ea643e4)
- linkhandler error handling when a link handling returns an error it was not properly cascaded (34a84d7)
- merge issues (693d8f0)
- removed unused interface from type (3635ad5)
- semver fix (1c8e8a9)
- We only mapped on configurationId values, whilst the branding was indexed by types, leading to branding not loading or being stored in some cases (abc1dfe)
Features
- Add support for VCDM2 SDJWT (322c421)
- added dcql presentation validation check (668150e)
- added module kms-rest-client (ddb3f69)
- added support for callbacks when creating auth requests (117ad37)
- implemented Universal OID4VP API spec (f633961)
- Merge crypto extension modules now the build process is faster and we have turbo. Means we will have consistent versions between SDK and crypto extension modules (6a366b9)
- updated siopv2-oid4vp-op-auth plugin to use OID4VP v1 (c1721a5)
v0.34.0
0.34.0 (2025-05-22)
Bug Fixes
- Ensure we have a uniform verification result across the different VCDM credential providers (44037dd)
- experimental holder signing for JWT vc was not using the correct vc object (6f7f40b)
- validity policies (fdb5575)
- validity policies also allow validFrom, validUntil (9f10696)
- VCDM1 credentials were using VCDM2 presentations. Now it inspects the credentials first and then picks the most appropriate version (4b691dc)
- VCDM2 context was not taken into account (7765edb)
Features
- Add tsup for esm and cjs (1ff3959)
- Move to nx and fix a lot of tsconfig references in the process (9f634bd)
- Move to nx and fix a lot of tsconfig references in the process (08361fa)
- Move to nx and fix a lot of tsconfig references in the process (5e22c85)
- move to vitest (117285e)
- New digital credentials vc lib support (33881cd)
- Packages are now ESM and CJS. Move to tsup and turborepo (e68c8f7)
- Redesign of VCDM credential plugin. Now we have plugable providers, for JWT and JsonLD and a shiny new VCDM Credential Plugin using these providers. (67da208)
- VCDM 2 (0660005)
- VCDM 2 - JOSE implementation mostly supported (8e67307)
v0.33.0
0.33.0 (2025-03-14)
Bug Fixes
- Do not retrieve AS metadata from store in case an external AS is used. Fetch from remote (7f46a5a)
- Do not retrieve AS metadata from store in case an external AS is used. Fetch from remote (99c3f8e)
- Do not try OIDF resolution on http:// urls (fe88114)
- Export branding functions (9a04ac4)
- Fixed merging issue (6fc5099)
- Fixed the encoded presentation creation (f8a8c17)
- Fixed type issues (c3754e6)
- Fixed type issues and updated oid4vc dependency (f919a29)
- Fixes to bit length handling and changing default length from 2 to 1 to have more compact lists and not all parties support multiple bits yet (f6d3940)
- Fixes to bit length handling and changing default length from 2 to 1 to have more compact lists and not all parties support multiple bits yet (90e82b6)
- Issue with credential local branding in Postgresql where a uuid column was compared with a varchar (2d51dd8)
- Issuer opts are not AS opts. Make sure we actually return issuer opts when requested (18b4ced)
- Make OID4VCI access token signer more resiliant (6e09be4)
- match jwk from jwt header by kid and load into JwtVerifyResult (84bbb0f)
- Removed local dependencies (a50eb33)
- Updated dependencies (2b871d5)
- Updated dependencies and fixed broken code (4982faa)
- Updated pnpm-lock.yaml (d2c23db)
Features
- add default hasher implementation (0a17930)
- Add oid4vci state store (56ec3e0)
- Add QR code generation to OID$VP Auth Request API (c9749f7)
- Add swagger Ui to the hosted context, so we have a swagger API per OID4VCI instance (4de300e)
- added first party flow to holder plugin (2f19e12)
- added sd-jwt vct metadata branding support (a21d812)
- Enabled Swagger UI on OID4VP instance endpoints below /api-docs (a6c9fb4)
- Improve status list handling and default status list handling (ab043c7)
- Initial credential configuration REST API to add new and remove existing credentials from OID4VCI (c120d45)
- Make sure we set default hasher implementations in case an app forgets to provide them (ad3a60d)
Reverts
- Revert "chore: reverted updateStatusListEntry for sd-jwt status lists" (7978dec)