v4.16.0
Added 2
- Allow managing invite code in secret generators
- FIPS 140-3 compliant build and runtime checks
Fixed 12
- Correct scope validation in token exchange
- Correctly remove adjacent roles on user grants
- Increase performance of ListUser by login name ignore case
- Allow custom protocols for native apps again
- Improve contrast of IDP processing message
- Improve error handling for user registration
- Migrate legacy Tailwind v4 opacity utilities and fix checkbox contrast color
- Preserve org domain suffix through account chooser navigation
- Prevent IDP auto-creation failure when name fields are missing
- Redirect to loginname instead of empty accounts page when org scope filters all sessions
- Use correct requestId with oidc_ prefix in Prompt.LOGIN + loginHint flow
- Prevent double triggering of verification emails
4.16.0 (2026-07-10)
Bug Fixes
- correct scope validation in token exchange (#12312) (02d07e9), closes #12319 #12322 #12319 #12322
- Correctly remove adjacent roles on user grants (dc89900)
- increase performance of ListUser by login name ignore case (#12350) (8fed358)
- login: allow custom protocols for native apps again (#12332) (5b3c10e)
- login: improve contrast of IDP processing message (#12309) (30ad9ab)
- login: improve error handling for user registration (#12338) (fa916e7)
- login: migrate legacy Tailwind v4 opacity utilities and fix checkbox contrast color (#12360) (70850db)
- login: preserve org domain suffix through account chooser navigation (#12304) (3311fb9), closes #12024
- login: Prevent IDP auto-creation failure when name fields are missing (#11070) (ab2e099)
- login: redirect to loginname instead of empty accounts page when org scope filters all sessions (#12346) (f21f95c), closes #11914
- login: use correct requestId with oidc_ prefix in Prompt.LOGIN + loginHint flow (#12376) (57eb145), closes #11946 #11946
- prevent double triggering of verification emails (#11995) (9ae9bf3)