1.4.0

ACA-Py 1.4.0 delivers a major internal upgrade centered on the introduction of Kanon Storage, a new modular storage architecture that separates cryptographic key management from general data persistence. Kanon moves ACA-Py’s non-key data (connections, credentials, protocol records, etc.) out of the encrypted Askar wallet into a dedicated, database-native storage layer that is encrypted at rest. Askar now functions purely as a Key Management Service (KMS), responsible for secure creation and use of keys and secrets. This shift enables ACA-Py deployments to leverage the full capabilities of their database engines—better indexing, analytics, and scalability—while preserving strong security boundaries around key material.

Kanon Storage is optional and fully backward compatible. Developed by the team at VeriDID (https://verid.id), this contribution represents a major advancement in ACA-Py's modular architecture and storage flexibility, and we extend our thanks to the VeriDID developers (notably dave-promulgare and vinaysingh8866) for their work in designing and implementing this foundational change. Existing ACA-Py deployments using Askar for all storage continue to function unchanged and can migrate to Kanon at any time. New deployments are encouraged to adopt Kanon for improved performance and operational flexibility. See the Kanon Storage documentation for details on configuration, migration, and best practices.

Alongside Kanon, this release includes significant refactoring in the AnonCreds revocation subsystem, modernization of event handling via an updated EventBus, and improvements to credential signing for SD-JWT to ensure correct verification-method key usage. Developers will also notice lint rule revisions, post-Kanon cleanup, and smaller enhancements to demos and test infrastructure such as the --debug-webhooks flag and interop test fixes. Together, these updates improve maintainability, observability, and readiness for large-scale production use.

1.4.0 Deprecation Notices

In an upcoming ACA-Py release, we will be dropping from the core ACA-Py repository the AIP 1.0 RFC 0036 Issue Credentials v1.0 and RFC 0037 Present Proof v1.0 DIDComm protocols. Each of the protocols will be moved to the ACA-Py Plugins repo. All ACA-Py implementers that use those protocols SHOULD update as soon as possible to the AIP 2.0 versions of those protocols (RFC 0453 Issue Credential v2.0 and RFC 0454 Present Proof v2.0, respectively). Once the protocols are removed from ACA-Py, anyone still using those protocols MUST adjust their configuration to load those protocols from the respective plugins.

The acapy_agent.revocation_anoncreds package has been deprecated and relocated to acapy_agent.anoncreds.revocation for improved consistency across the codebase. The change should only affect ACA-Py Plugins that implement AnonCreds, but other developers should also take note.

The wallet-type configuration value askar is now deprecated and all deployments still using that wallet type should migrate to either the askar-anoncreds or (ideally) kanon-anoncreds wallet types.

Breaking Changes

This release introduces no breaking changes for existing ACA-Py deployments. Existing instances can continue to use Askar for both key and data storage by default.

Implementers are encouraged to evaluate Kanon as the preferred approach for new deployments or planned upgrades. Kanon provides better scalability, performance, and integration with database-native capabilities such as indexing, analytics, and external management tools — while maintaining secure handling of cryptographic keys within Askar.

What's Changed

• Add --debug-webhooks config to demo agents by @jamshale in #3865
• chore(deps): Bump openwallet-foundation/acapy-agent from py3.12-1.3.1 to py3.12-1.3.2 in /demo/multi-demo by @dependabot[bot] in #3869
• chore(deps): Bump openwallet-foundation/acapy-agent from py3.12-1.3.1 to py3.12-1.3.2 in /demo/docker-agent by @dependabot[bot] in #3868
• chore(deps): Bump openwallet-foundation/acapy-agent from py3.12-1.3.1 to py3.12-1.3.2 in /demo/playground by @dependabot[bot] in #3867
• chore(deps): Bump github/codeql-action from 3.29.8 to 3.29.11 in the all-actions group by @dependabot[bot] in #3862
• chore(deps): Bump markdown from 3.8.2 to 3.9 by @dependabot[bot] in #3873
• chore(deps-dev): Bump pytest-cov from 6.2.1 to 6.3.0 by @dependabot[bot] in #3872
• ♻️ Refactor and modularize anoncreds revocation package by @ff137 in #3861
• fix: Repair Interop tests url by @jamshale in #3881
• chore(deps): Bump pynacl from 1.5.0 to 1.6.0 by @dependabot[bot] in #3880
• chore(deps): Bump the all-actions group across 1 directory with 4 updates by @dependabot[bot] in #3882
• chore(deps-dev): Bump ruff from 0.12.10 to 0.13.0 by @dependabot[bot] in #3879
• chore(deps-dev): Bump pydevd-pycharm from 252.25557.70 to 252.26199.25 by @dependabot[bot] in #3878
• chore(deps-dev): Bump pytest-cov from 6.3.0 to 7.0.0 by @dependabot[bot] in #3877
• Chore(chart): delete chart files and add chart relocation notice by @i5okie in #3883
• chore(deps-dev): Bump pydevd from 3.3.0 to 3.4.1 by @dependabot[bot] in #3884
• chore(deps): Bump postgres from 17 to 18 in /demo/docker-test/db by @dependabot[bot] in #3889
• chore(deps-dev): Bump pydevd-pycharm from 253.17525.96 to 253.24325.40 by @dependabot[bot] in #3898
• chore(deps): Bump the all-actions group across 1 directory with 4 updates by @dependabot[bot] in #3890
• 🔧 🎨 Revise lint rules by @ff137 in #3900
• Kanon Storage by @dave-promulgare in #3850
• 🎨 Post-Kanon cleanup by @ff137 in #3901
• ♻️ 💥 Refactor EventBus notify method by @ff137 in #3690
• (fix) Properly use VM key when signing [SD-]JWT by @gmulhearn in #3892
• chore(deps): Bump the all-actions group with 3 updates by @dependabot[bot] in #3899
• chore(deps-dev): Bump ruff from 0.13.3 to 0.14.0 by @dependabot[bot] in #3905
• chore(deps): Bump github/codeql-action from 4.30.7 to 4.30.8 in the all-actions group by @dependabot[bot] in #3908
• chore(deps): Bump pydantic from 2.11.3 to 2.12.0 in /scenarios by @dependabot[bot] in #3903
• chore(deps): Bump aiohttp from 3.12.15 to 3.13.0 by @dependabot[bot] in #3902
• 🎨 Move AnonCreds set_active_registry route by @ff137 in #3915
• 1.4.0rc0 by @swcurran in #3912
• 🎨 Fix and simplify AnonCreds-backend checks by @ff137 in #3913
• ✨ Implement ProfileSessionHandle by @ff137 in #3914
• Upgrade demo dockerfile acapy images to 1.3.2 by @jamshale in #3910
• Documentation for Kanon Storage under Features/Kanon Storage by @dave-promulgare in #3918
• chore(deps-dev): Bump pydevd-pycharm from 253.24325.40 to 253.27642.35 by @dependabot[bot] in #3919
• chore(deps): Bump github/codeql-action from 4.30.8 to 4.30.9 in the all-actions group by @dependabot[bot] in #3921
• fix(kanon):fixed password bug and tests for kanon postgres by @vinaysingh8866 in #3922
• Update bcvrin test genesis url by @PatStLouis in #3926
• Add document metadata to response by @pat...

1.4.0rc1

ACA-Py 1.4.0 delivers a major internal upgrade centered on the introduction of Kanon Storage, a new modular storage architecture that separates cryptographic key management from general data persistence. Kanon moves ACA-Py’s non-key data (connections, credentials, protocol records, etc.) out of the encrypted Askar wallet into a dedicated, database-native storage layer that is encrypted at rest. Askar now functions purely as a Key Management Service (KMS), responsible for secure creation and use of keys and secrets. This shift enables ACA-Py deployments to leverage the full capabilities of their database engines—better indexing, analytics, and scalability—while preserving strong security boundaries around key material.

Kanon Storage is optional and fully backward compatible. Developed by the team at VeriDID (https://verid.id), this contribution represents a major advancement in ACA-Py's modular architecture and storage flexibility, and we extend our thanks to the VeriDID developers (notably dave-promulgare and vinaysingh8866) for their work in designing and implementing this foundational change. Existing ACA-Py deployments using Askar for all storage continue to function unchanged and can migrate to Kanon at any time. New deployments are encouraged to adopt Kanon for improved performance and operational flexibility. See the Kanon Storage documentation for details on configuration, migration, and best practices.

Alongside Kanon, this release includes significant refactoring in the AnonCreds revocation subsystem, modernization of event handling via an updated EventBus, and improvements to credential signing for SD-JWT to ensure correct verification-method key usage. Developers will also notice lint rule revisions, post-Kanon cleanup, and smaller enhancements to demos and test infrastructure such as the --debug-webhooks flag and interop test fixes. Together, these updates improve maintainability, observability, and readiness for large-scale production use.

1.4.0 Deprecation Notices

In an upcoming ACA-Py release, we will be dropping from the core ACA-Py repository the AIP 1.0 RFC 0036 Issue Credentials v1.0 and RFC 0037 Present Proof v1.0 DIDComm protocols. Each of the protocols will be moved to the ACA-Py Plugins repo. All ACA-Py implementers that use those protocols SHOULD update as soon as possible to the AIP 2.0 versions of those protocols (RFC 0453 Issue Credential v2.0 and RFC 0454 Present Proof v2.0, respectively). Once the protocols are removed from ACA-Py, anyone still using those protocols MUST adjust their configuration to load those protocols from the respective plugins.

The acapy_agent.revocation_anoncreds package has been deprecated and relocated to acapy_agent.anoncreds.revocation for improved consistency across the codebase. The change should only affect ACA-Py Plugins that implement AnonCreds, but other developers should also take note.

The wallet-type configuration value askar is now deprecated and all deployments still using that wallet type should migrate to either the askar-anoncreds or (ideally) kanon-anoncreds wallet types.

⚠️ Breaking Changes

This release introduces no breaking changes for existing ACA-Py deployments. Existing instances can continue to use Askar for both key and data storage by default.

Implementers are encouraged to evaluate Kanon as the preferred approach for new deployments or planned upgrades. Kanon provides better scalability, performance, and integration with database-native capabilities such as indexing, analytics, and external management tools — while maintaining secure handling of cryptographic keys within Askar.

What's Changed

• ✨ Implement ProfileSessionHandle by @ff137 in #3914
• Upgrade demo dockerfile acapy images to 1.3.2 by @jamshale in #3910
• Documentation for Kanon Storage under Features/Kanon Storage by @dave-promulgare in #3918
• chore(deps-dev): Bump pydevd-pycharm from 253.24325.40 to 253.27642.35 by @dependabot[bot] in #3919
• chore(deps): Bump github/codeql-action from 4.30.8 to 4.30.9 in the all-actions group by @dependabot[bot] in #3921
• fix(kanon):fixed password bug and tests for kanon postgres by @vinaysingh8866 in #3922
• Update bcvrin test genesis url by @PatStLouis in #3926
• Add document metadata to response by @PatStLouis in #3925
• chore(deps): Bump the all-actions group with 2 updates by @dependabot[bot] in #3930
• Add skip verification option for credential storage by @PatStLouis in #3928
• Enable remote config by @PatStLouis in #3927
• chore(deps): Bump github/codeql-action from 4.31.0 to 4.31.2 in the all-actions group by @dependabot[bot] in #3932
• fix(kanon):storage postgres provisioning issues by @vinaysingh8866 in #3931
• 1.4.0rc1 by @swcurran in #3933

New Contributors

• @vinaysingh8866 made their first contribution in #3922

Full Changelog: 1.4.0rc0...1.4.0rc1

1.4.0rc0

ACA-Py 1.4.0 delivers a major internal upgrade centered on the introduction of Kanon Storage, a new modular storage architecture that separates cryptographic key management from general data persistence. Kanon moves ACA-Py’s non-key data (connections, credentials, protocol records, etc.) out of the encrypted Askar wallet into a dedicated, database-native storage layer. Askar now functions purely as a Key Management Service (KMS), responsible for secure creation and use of keys and secrets. This shift enables ACA-Py deployments to leverage the full capabilities of their database engines—better indexing, analytics, and scalability—while preserving strong security boundaries around key material.

Kanon Storage is optional and fully backward compatible. Developed by the team at VeriDID (https://verid.id), this contribution represents a major advancement in ACA-Py's modular architecture and storage flexibility, and we extend our thanks to the VeriDID developers (notably dave-promulgare and vinaysingh8866) for their work in designing and implementing this foundational change. Existing ACA-Py deployments using Askar for all storage continue to function unchanged and can migrate to Kanon at any time. New deployments are encouraged to adopt Kanon for improved performance and operational flexibility.

Documentation for Kanon Storage for this 1.4.0rc0 release is limited to the Kanon Storage PR 3850. Additional documentation will be available before we finalize the 1.4.0 release.

Alongside Kanon, this release includes significant refactoring in the AnonCreds revocation subsystem, modernization of event handling via an updated EventBus, and improvements to credential signing for SD-JWT to ensure correct verification-method key usage. Developers will also notice lint rule revisions, post-Kanon cleanup, and smaller enhancements to demos and test infrastructure such as the --debug-webhooks flag and interop test fixes. Together, these updates improve maintainability, observability, and readiness for large-scale production use.

1.4.0 Deprecation Notices

In an upcoming ACA-Py release, we will be dropping from the core ACA-Py repository the AIP 1.0 RFC 0036 Issue Credentials v1.0 and RFC 0037 Present Proof v1.0 DIDComm protocols. Each of the protocols will be moved to the ACA-Py Plugins repo. All ACA-Py implementers that use those protocols SHOULD update as soon as possible to the AIP 2.0 versions of those protocols (RFC 0453 Issue Credential v2.0 and RFC 0454 Present Proof v2.0, respectively). Once the protocols are removed from ACA-Py, anyone still using those protocols MUST adjust their configuration to load those protocols from the respective plugins.

The acapy_agent.revocation_anoncreds package has been deprecated and relocated to acapy_agent.anoncreds.revocation for improved consistency across the codebase. The change should only affect ACA-Py Plugins that implement AnonCreds, but other developers should also take note.

⚠️ Breaking Changes

This release introduces no breaking changes for existing ACA-Py deployments. Existing instances can continue to use Askar for both key and data storage by default.

Implementers are encouraged to evaluate Kanon as the preferred approach for new deployments or planned upgrades. Kanon provides better scalability, performance, and integration with database-native capabilities such as indexing, analytics, and external management tools — while maintaining secure handling of cryptographic keys within Askar.

What's Changed

• Add --debug-webhooks config to demo agents by @jamshale in #3865
• chore(deps): Bump openwallet-foundation/acapy-agent from py3.12-1.3.1 to py3.12-1.3.2 in /demo/multi-demo by @dependabot[bot] in #3869
• chore(deps): Bump openwallet-foundation/acapy-agent from py3.12-1.3.1 to py3.12-1.3.2 in /demo/docker-agent by @dependabot[bot] in #3868
• chore(deps): Bump openwallet-foundation/acapy-agent from py3.12-1.3.1 to py3.12-1.3.2 in /demo/playground by @dependabot[bot] in #3867
• chore(deps): Bump github/codeql-action from 3.29.8 to 3.29.11 in the all-actions group by @dependabot[bot] in #3862
• chore(deps): Bump markdown from 3.8.2 to 3.9 by @dependabot[bot] in #3873
• chore(deps-dev): Bump pytest-cov from 6.2.1 to 6.3.0 by @dependabot[bot] in #3872
• ♻️ Refactor and modularize anoncreds revocation package by @ff137 in #3861
• fix: Repair Interop tests url by @jamshale in #3881
• chore(deps): Bump pynacl from 1.5.0 to 1.6.0 by @dependabot[bot] in #3880
• chore(deps): Bump the all-actions group across 1 directory with 4 updates by @dependabot[bot] in #3882
• chore(deps-dev): Bump ruff from 0.12.10 to 0.13.0 by @dependabot[bot] in #3879
• chore(deps-dev): Bump pydevd-pycharm from 252.25557.70 to 252.26199.25 by @dependabot[bot] in #3878
• chore(deps-dev): Bump pytest-cov from 6.3.0 to 7.0.0 by @dependabot[bot] in #3877
• Chore(chart): delete chart files and add chart relocation notice by @i5okie in #3883
• chore(deps-dev): Bump pydevd from 3.3.0 to 3.4.1 by @dependabot[bot] in #3884
• chore(deps): Bump postgres from 17 to 18 in /demo/docker-test/db by @dependabot[bot] in #3889
• chore(deps-dev): Bump pydevd-pycharm from 253.17525.96 to 253.24325.40 by @dependabot[bot] in #3898
• chore(deps): Bump the all-actions group across 1 directory with 4 updates by @dependabot[bot] in #3890
• 🔧 🎨 Revise lint rules by @ff137 in #3900
• Kanon Storage by @dave-promulgare in #3850
• 🎨 Post-Kanon cleanup by @ff137 in #3901
• ♻️ 💥 Refactor EventBus notify method by @ff137 in #3690
• (fix) Properly use VM key when signing [SD-]JWT by @gmulhearn in #3892
• chore(deps): Bump the all-actions group with 3 updates by @dependabot[bot] in #3899
• chore(deps-dev): Bump ruff from 0.13.3 to 0.14.0 by @dependabot[bot] in #3905
• chore(deps): Bump github/codeql-action from 4.30.7 to 4.30.8 in the all-actions group by @dependabot[bot] in #3908
• chore(deps): Bump pydantic from 2.11.3 to 2.12.0 in /scenarios by @dependabot[bot] in #3903
• chore(deps): Bump aiohttp from 3.12.15 to 3.13.0 by @dependabot[bot] in #3902
• 🎨 Move AnonCreds set_active_registry route by @ff137 in #3915
• 1.4.0rc0 by @swcurran in #3912
• 🎨 Fix and simplify AnonCreds-backend checks by @ff137 in #3913

New Contributors

• @dave-promulgare made their first contribution in #3850

Full Changelog: 1.3.2...1.4.0rc0

1.3.2

ACA-Py 1.3.2 is a maintenance and enhancement release with a mix of bug fixes, dependency updates, documentation improvements, and operational enhancements. It focuses on improving reliability in credential revocation handling, refining webhook payload structures, modernizing async task management, and ensuring better resilience when opening the Askar store. Developers will also find several documentation updates and dependency cleanups. See the Categorized List of Changes below for more details about the changes in this release.

The release includes a fix for a change (#3081 added in Release 1.0.0) that introduced a PII leakage possibility. See the 1.3.2 Breaking Changes section below for details.

1.3.2 Deprecation Notices

In an upcoming ACA-Py release, we will be dropping from the core ACA-Py repository the AIP 1.0 RFC 0037 Issue Credentials v1.0 and RFC 0037 Present Proof v1.0 DIDComm protocols. Each of the protocols will be moved to the ACA-Py Plugins repo. All ACA-Py implementers that use those protocols SHOULD update as soon as possible to the AIP 2.0 versions of those protocols (RFC 0453 Issue Credential v2.0 and RFC 0454 Present Proof v2.0, respectively). Once the protocols are removed from ACA-Py, anyone still using those protocols MUST adjust their configuration to load those protocols from the respective plugins.

1.3.2 Breaking Changes

Release 1.3.2 includes a privacy-related change that also introduces a breaking change for some deployments -- including those using acapy-vc-authn-oidc.

• Removal of by_format from webhook payloads (#3837)
  In a recent update, ACA-Py webhook events for credential and presentation v2.0 exchanges included a by_format field by default, instead of only when used with the ACAPY_DEBUG_WEBHOOKS configuration parameter. by_format contains sensitive protocol payload data and, in some cases, could result in personally identifiable information (PII) being logged. This behavior has been reverted.

  Impact when upgrading:

  • If your deployment relies on the by_format field in webhook events you need to ensure the startup parameter ACAPY_DEBUG_WEBHOOKS is activated.
  • Most applications that simply respond to the state of v2.0 credential exchanges (e.g., credential_issued, presentation_verified) are not affected.
  • Applications that parsed or logged the by_format contents must ensure the ACAPY_DEBUG_WEBHOOKS configuration is set, or better, update their logic to not require that information.

Because this change addresses a privacy issue (PII leakage), it is being included in the 1.3.x patch series rather than requiring a minor release increment.

What's Changed

• chore(deps): Bump github/codeql-action from 3.29.0 to 3.29.2 in the all-actions group by @dependabot[bot] in #3805
• chore(deps): Bump openwallet-foundation/acapy-agent from py3.12-1.3.0 to py3.12-1.3.1 in /demo/playground by @dependabot[bot] in #3814
• chore(deps): Bump openwallet-foundation/acapy-agent from py3.12-1.3.0 to py3.12-1.3.1 in /demo/docker-agent by @dependabot[bot] in #3813
• chore(deps): Bump openwallet-foundation/acapy-agent from py3.12-1.3.0 to py3.12-1.3.1 in /demo/multi-demo by @dependabot[bot] in #3812
• Upgrade pytest-asyncio to major version 1.0.0 by @jamshale in #3810
• chore(deps): Bump the pip group across 2 directories with 1 update by @dependabot[bot] in #3823
• Fixed debug port setting by @Gavinok in #3828
• Update README with latest on LTS Release Status by @swcurran in #3833
• chore(deps): Bump github/codeql-action from 3.29.2 to 3.29.3 in the all-actions group by @dependabot[bot] in #3836
• Remove by_format from standard webhook payloads by @jamshale in #3837
• chore(deps): Bump the all-actions group with 2 updates by @dependabot[bot] in #3842
• ➖ Remove unused dependency: ecdsa by @ff137 in #3847
• Only strip did:sov dids to unqualified did in oob receive invitation requests (holder) by @jamshale in #3846
• Add retries when opening the askar store / Refactor store.py by @jamshale in #3811
• chore(deps): Bump the all-actions group with 3 updates by @dependabot[bot] in #3849
• Update scenarios to openwallet acapy-minimal-example repo by @jamshale in #3851
• Fix: Some asyncio task management and modernization by @jamshale in #3818
• chore(deps-dev): Bump pre-commit from 4.2.0 to 4.3.0 by @dependabot[bot] in #3855
• Add DeepWiki AI Docs Badge and revise the README intro by @swcurran in #3853
• chore(deps-dev): Bump pydevd-pycharm from 252.23309.36 to 252.23892.439 by @dependabot[bot] in #3854
• chore(deps): Bump the all-actions group with 3 updates by @dependabot[bot] in #3856
• fix: update tails server upload methods to return public file URIs by @TheTechmage in #3852
• 1.3.2rc0 by @swcurran in #3858
• Approve ACA-Py Project Charter by @SeanBohan in #3857
• ♻️ Sync ruff version by @ff137 in #3859
• Update did-webvh package version by @PatStLouis in #3860
• 1.3.2 by @swcurran in #3863

New Contributors

• @SeanBohan made their first contribution in #3857

Full Changelog: 1.3.1...1.3.2

1.3.2rc0

ACA-Py 1.3.2 is a maintenance and enhancement release with a mix of bug fixes, dependency updates, documentation improvements, and operational enhancements. It focuses on improving reliability in credential revocation handling, refining webhook payload structures, modernizing async task management, and ensuring better resilience when opening the Askar store. Developers will also find several documentation updates and dependency cleanups. See the Categorized List of Changes below for more details about the changes in this release.

1.3.2 Deprecation Notices

In an upcoming ACA-Py release, we will be dropping from the core ACA-Py repository the AIP 1.0 RFC 0037 Issue Credentials v1.0 and RFC 0037 Present Proof v1.0 DIDComm protocols. Each of the protocols will be moved to the ACA-Py Plugins repo. All ACA-Py implementers that use those protocols SHOULD update as soon as possible to the AIP 2.0 versions of those protocols (RFC 0453 Issue Credential v2.0 and RFC 0454 Present Proof v2.0, respectively). Once the protocols are removed from ACA-Py, anyone still using those protocols MUST adjust their configuration to load those protocols from the respective plugins.

1.3.2 Breaking Changes

There are no breaking changes in this release.

What's Changed

• chore(deps): Bump github/codeql-action from 3.29.0 to 3.29.2 in the all-actions group by @dependabot[bot] in #3805
• chore(deps): Bump openwallet-foundation/acapy-agent from py3.12-1.3.0 to py3.12-1.3.1 in /demo/playground by @dependabot[bot] in #3814
• chore(deps): Bump openwallet-foundation/acapy-agent from py3.12-1.3.0 to py3.12-1.3.1 in /demo/docker-agent by @dependabot[bot] in #3813
• chore(deps): Bump openwallet-foundation/acapy-agent from py3.12-1.3.0 to py3.12-1.3.1 in /demo/multi-demo by @dependabot[bot] in #3812
• Upgrade pytest-asyncio to major version 1.0.0 by @jamshale in #3810
• chore(deps): Bump the pip group across 2 directories with 1 update by @dependabot[bot] in #3823
• Fixed debug port setting by @Gavinok in #3828
• Update README with latest on LTS Release Status by @swcurran in #3833
• chore(deps): Bump github/codeql-action from 3.29.2 to 3.29.3 in the all-actions group by @dependabot[bot] in #3836
• Remove by_format from standard webhook payloads by @jamshale in #3837
• chore(deps): Bump the all-actions group with 2 updates by @dependabot[bot] in #3842
• ➖ Remove unused dependency: ecdsa by @ff137 in #3847
• Only strip did:sov dids to unqualified did in oob receive invitation requests (holder) by @jamshale in #3846
• Add retries when opening the askar store / Refactor store.py by @jamshale in #3811
• chore(deps): Bump the all-actions group with 3 updates by @dependabot[bot] in #3849
• Update scenarios to openwallet acapy-minimal-example repo by @jamshale in #3851
• Fix: Some asyncio task management and modernization by @jamshale in #3818
• chore(deps-dev): Bump pre-commit from 4.2.0 to 4.3.0 by @dependabot[bot] in #3855
• Add DeepWiki AI Docs Badge and revise the README intro by @swcurran in #3853
• chore(deps-dev): Bump pydevd-pycharm from 252.23309.36 to 252.23892.439 by @dependabot[bot] in #3854
• chore(deps): Bump the all-actions group with 3 updates by @dependabot[bot] in #3856
• fix: update tails server upload methods to return public file URIs by @TheTechmage in #3852
• 1.3.2rc0 by @swcurran in #3858

Full Changelog: 1.3.1...1.3.2rc0

1.2.5

This patch release adds a GitHub Action to publish an LTS container image with the tag 1.2-lts when a release is published from the ACA-Py 1.2.lts branch. This is a convenience for those who want to use the latest LTS version of ACA-Py in their deployments, and is not intended to be used as a replacement for the latest release of ACA-Py or when a specific release is required.

The release includes the following PRs from the main branch cherry-picked into this release:

• Put cred_rev_id read, increment and write in a transaction #3793
• Remove header from http/ws responses #3753
• 🐛 Fix v2 cred ex and pres ex webhook events to emit after db write #3699
• fix: multiuse invite derived conns should have msg id #3692

As well, a dependency update was applied, updating the poetry.lock file to use the latest minor versions of the dependencies.

1.2.5 Breaking Changes

There are no breaking changes in this release.

What's Changed

• Add recreate lts workflow to 1.2.lts branch by @jamshale in #3772
• Don't run workflow for release candidates by @jamshale in #3797
• 1.2.lts.patch by @jamshale in #3816
• 1.2.5rc0 by @swcurran in #3821
• 1.2.5 by @swcurran in #3830

Full Changelog: 1.2.4...1.2.5

1.2-lts

This patch release adds a GitHub Action to publish an LTS container image with the tag 1.2-lts when a release is published from the ACA-Py 1.2.lts branch. This is a convenience for those who want to use the latest LTS version of ACA-Py in their deployments, and is not intended to be used as a replacement for the latest release of ACA-Py or when a specific release is required.

The release includes the following PRs from the main branch cherry-picked into this release:

• Put cred_rev_id read, increment and write in a transaction #3793
• Remove header from http/ws responses #3753
• 🐛 Fix v2 cred ex and pres ex webhook events to emit after db write #3699
• fix: multiuse invite derived conns should have msg id #3692

As well, a dependency update was applied, updating the poetry.lock file to use the latest minor versions of the dependencies.

1.2.5 Breaking Changes

There are no breaking changes in this release.

What's Changed

• Add recreate lts workflow to 1.2.lts branch by @jamshale in #3772
• Don't run workflow for release candidates by @jamshale in #3797
• 1.2.lts.patch by @jamshale in #3816
• 1.2.5rc0 by @swcurran in #3821
• 1.2.5 by @swcurran in #3830

Full Changelog: 1.2.4...1.2.5

0.12.8

Release 0.12.8 is needed to enable publishing the LTS container image to the Hyperledger Package Repository. The release is otherwise identifical to 0.12.7.

This patch release adds a GitHub Action to publish an LTS container image with the tag 0.12-lts when a release is published from the ACA-Py 0.12.lts branch. This is a convenience for those who want to use the latest LTS version of ACA-Py in their deployments, and is not intended to be used as a replacement for the latest release of ACA-Py or when a specific release is required.
This patch release adds a GitHub Action to publish an LTS container image with the tag 0.12-lts when a release is published from the ACA-Py 0.12.lts branch. This is a convenience for those who want to use the latest LTS version of ACA-Py in their deployments, and is not intended to be used as a replacement for the latest release of ACA-Py or when a specific release is required.

The release includes the following PRs from the main branch cherry-picked into this release:

• 🐛 Fix v2 cred ex and pres ex webhook events to emit after db write #3699
• fix: multiuse invite derived conns should have msg id #3692
• Fix unchanged endpoint being rewritten to ledger #3608

As well, a dependency update was applied, updating the poetry.lock file to use the latest minor versions of the dependencies, including an update to the version of Rust being used in the indy-build container artifact.

A reminder that the 0.12 LTS branch will reach end-of-life in October, 2025. Anyone still using this branch should plan to upgrade to the 1.2 LTS or (better) latest release of ACA-Py as soon as possible.

0.12.8 Breaking Changes

There are no breaking changes in this release.

What's Changed

• Add recreate lts workflow to 0.12.lts branch by @jamshale in #3771
• Don't run workflow for release candidates by @jamshale in #3796
• 0.12.7rc0 by @swcurran in #3794
• 0.12.lts.patch by @jamshale in #3817
• 0.12.7rc1 by @swcurran in #3820
• Upgrade rust version for indy-build to 1.56 by @jamshale in #3826
• 0.12.7rc2 by @swcurran in #3827
• 0.12.7 by @swcurran in #3829
• Change ghcr token to hyperledger scoped by @jamshale in #3832
• 0.12.8 by @swcurran in #3834

Full Changelog: 0.12.6...0.12.8

0.12.7

This patch release adds a GitHub Action to publish an LTS container image with the tag 0.12-lts when a release is published from the ACA-Py 0.12.lts branch. This is a convenience for those who want to use the latest LTS version of ACA-Py in their deployments, and is not intended to be used as a replacement for the latest release of ACA-Py or when a specific release is required.

The release includes the following PRs from the main branch cherry-picked into this release:

• 🐛 Fix v2 cred ex and pres ex webhook events to emit after db write #3699
• fix: multiuse invite derived conns should have msg id #3692
• Fix unchanged endpoint being rewritten to ledger #3608

As well, a dependency update was applied, updating the poetry.lock file to use the latest minor versions of the dependencies, including an update to the version of Rust being used in the indy-build container artifact.

A reminder that the 0.12 LTS branch will reach end-of-life in October, 2025. Anyone still using this branch should plan to upgrade to the 1.2 LTS or (better) latest release of ACA-Py as soon as possible.

0.12.7 Breaking Changes

There are no breaking changes in this release.

What's Changed

• Add recreate lts workflow to 0.12.lts branch by @jamshale in #3771
• Don't run workflow for release candidates by @jamshale in #3796
• 0.12.7rc0 by @swcurran in #3794
• 0.12.lts.patch by @jamshale in #3817
• 0.12.7rc1 by @swcurran in #3820
• Upgrade rust version for indy-build to 1.56 by @jamshale in #3826
• 0.12.7rc2 by @swcurran in #3827
• 0.12.7 by @swcurran in #3829

Full Changelog: 0.12.6...0.12.7

0.12-lts

Release 0.12.8 is needed to enable publishing the LTS container image to the Hyperledger Package Repository. The release is otherwise identifical to 0.12.7.

This patch release adds a GitHub Action to publish an LTS container image with the tag 0.12-lts when a release is published from the ACA-Py 0.12.lts branch. This is a convenience for those who want to use the latest LTS version of ACA-Py in their deployments, and is not intended to be used as a replacement for the latest release of ACA-Py or when a specific release is required.
This patch release adds a GitHub Action to publish an LTS container image with the tag 0.12-lts when a release is published from the ACA-Py 0.12.lts branch. This is a convenience for those who want to use the latest LTS version of ACA-Py in their deployments, and is not intended to be used as a replacement for the latest release of ACA-Py or when a specific release is required.

The release includes the following PRs from the main branch cherry-picked into this release:

• 🐛 Fix v2 cred ex and pres ex webhook events to emit after db write #3699
• fix: multiuse invite derived conns should have msg id #3692
• Fix unchanged endpoint being rewritten to ledger #3608

As well, a dependency update was applied, updating the poetry.lock file to use the latest minor versions of the dependencies, including an update to the version of Rust being used in the indy-build container artifact.

A reminder that the 0.12 LTS branch will reach end-of-life in October, 2025. Anyone still using this branch should plan to upgrade to the 1.2 LTS or (better) latest release of ACA-Py as soon as possible.

0.12.8 Breaking Changes

There are no breaking changes in this release.

What's Changed

• Add recreate lts workflow to 0.12.lts branch by @jamshale in #3771
• Don't run workflow for release candidates by @jamshale in #3796
• 0.12.7rc0 by @swcurran in #3794
• 0.12.lts.patch by @jamshale in #3817
• 0.12.7rc1 by @swcurran in #3820
• Upgrade rust version for indy-build to 1.56 by @jamshale in #3826
• 0.12.7rc2 by @swcurran in #3827
• 0.12.7 by @swcurran in #3829
• Change ghcr token to hyperledger scoped by @jamshale in #3832
• 0.12.8 by @swcurran in #3834

Full Changelog: 0.12.6...0.12.8