• Fixed several bugs to improve overall stability.
• Optimized performance for faster load times and smoother operation.
• Improved tracing capabilities for better debugging and issue resolution.

We are constantly working to improve Ory Kratos and this release is no exception. Thank you for using Ory and please let us know if you have any feedback or encounter any issues.

Breaking Changes

The /admin/courier/messages endpoint now uses keysetpagination instead.

Bug Fixes

• Add missing indexes (#2973) (bbb3995)

• Add missing indexes for identity delete (#2952) (dc311f9):

  This significantly improves the performance of identity deletes.

• Cors headers not added to the response #2922 (#2934) (1ed6839)

• Dont reset to false (#2965) (ae8ad7b)

• Flaky test now stable (4e5dcd0)

• Listing sessions query (#2958) (3e06c99), closes #2930

• Missing index on courier list count (#3002) (3b50711)

• Pin geckodriver version to bypass GitHub API quota (#2972) (585cb9e)

• Quickstart demos (#2940) (a7720b2)

• Remove duplicate query in GetIdentity (#2987) (33b01bb)

• Remove unused x-session-cookie parameter (#2983) (56b5c26):

  This patch removes the undocumented and experimental X-Session-Cookie header from the /sessions/whoami endpoint.

• Resilient social sign in (#3011) (ca35b45)

• Respect return_to URL parameter in registration flow when the user is already registered (#2957) (3462ce1)

• Set accept header for GitLab (#2998) (e892113)

• Set config at the start (e58bc6e)

• Spurious cancelation of async webhooks, better tracing (#2969) (72de640):

  Previously, async webhooks (response.ignore=true) would be canceled early once the incoming Kratos request was served and it's associated context released. We now dissociate the cancellation of async hooks from the normal request processing flow.

• TOTP internal context after saving settings (#2960) (8b647b1), closes #2680

• Update pquerna/otp to fix TOTP URL encoding (#2951) (7248636):

  v1.4.0 fixes generating TOTP URLs. Query params now use %20 instead of + to encode spaces. + was not correctly interpreted by some Android authenticator apps, and would show up in the issuer name, e.g. "My+Issuer" instead of "My Issuer".

• Update year (d77e2cf)

• Webhook tracing instrumentation+memory leak (f0044a3)

Code Generation

• Pin v0.11.1 release commit (41595c5)

Documentation

• Improve api headline (#2989) (fc2787b)

Features

• Add client IP to span events (7ce3a74)

• Add NID to logs in courier (#2956) (b407aa9)

• Improve error message when no session is found (#2988) (7ad2b97)

• Improve tracing (#2992) (04d0280)

• Remove duplicate queries from whoami calls (#2995) (b50a222), closes #2402:

  Introduces an expand API to the identity persister which greatly improves whoami performance.

• Require verification on login (#2927) (efb8ae8)

• Store errors of courier message (#2914) (fc7aa86)

Tests

• Improve parallelization (e8e8ce5)
• Regenerate csrf if verification flow expired (#2455) (7025081)
• Update integrity snapshots (#3000) (6d26e5c)

Changelog

• 727439c8 autogen(docs): generate and bump docs
• b3b6f88d autogen(docs): regenerate and update changelog
• d8d47c90 autogen(docs): regenerate and update changelog
• ac052595 autogen(docs): regenerate and update changelog
• d8a2cbd1 autogen(docs): regenerate and update changelog
• a3096c7b autogen(docs): regenerate and update changelog
• e11ba527 autogen(docs): regenerate and update changelog
• 4e1d4704 autogen(docs): regenerate and update changelog
• 0b109cd6 autogen(docs): regenerate and update changelog
• 97e9356a autogen(docs): regenerate and update changelog
• 59172586 autogen(docs): regenerate and update changelog
• d895a268 autogen(docs): regenerate and update changelog
• b6bd3f43 autogen(docs): regenerate and update changelog
• 8fbb1bba autogen(docs): regenerate and update changelog
• 8bb3f2a8 autogen(docs): regenerate and update changelog
• 83131fc2 autogen(docs): regenerate and update changelog
• 935d115c autogen(docs): regenerate and update changelog
• 94e01a92 autogen(docs): regenerate and update changelog
• c52425ed autogen(docs): regenerate and update changelog
• 6fddfbff autogen(docs): regenerate and update changelog
• 03b3c293 autogen(docs): regenerate and update changelog
• 6134150c autogen(docs): regenerate and update changelog
• ce725017 autogen(openapi): regenerate swagger spec and internal client
• bef1a6c2 autogen: add v0.11.0 to version.schema.json
• 41595c52 autogen: pin v0.11.1 release commit
• 2f9b001c chore: add missing security annotations to admin handlers (#2937)
• 561e5689 chore: cleanup test (#2964)
• 20da533b chore: pin nancy (#2977)
• 131b8c5f chore: update repository templates to https://github.com/ory/meta/commit/a1264fa887f73bb5ac92ceabe5b9b568d17d850d
• ab1abee4 ci: fix dockle action
• fc2787ba docs: improve api headline (#2989)
• b407aa94 feat: add NID to logs in courier (#2956)
• 7ce3a747 feat: add client IP to span events
• 7ad2b970 feat: improve error message when no session is found (#2988)
• 04d0280c feat: improve tracing (#2992)
• b50a2229 feat: remove duplicate queries from whoami calls (#2995)
• efb8ae89 feat: require verification on login (#2927)
• fc7aa865 feat: store errors of courier message (#2914)
• 8b647b1f fix: TOTP internal context after saving settings (#2960)
• bbb39957 fix: add missing indexes (#2973)
• dc311f9a fix: add missing indexes for identity delete (#2952)
• 1ed68393 fix: cors headers not added to the response #2922 (#2934)
• ae8ad7be fix: dont reset to false (#2965)
• 4e5dcd0d fix: flaky test now stable
• 3e06c991 fix: listing sessions query (#2958)
• 3b507110 fix: missing index on courier list count (#3002)
• 585cb9e7 fix: pin geckodriver version to bypass GitHub API quota (#2972)
• a7720b2b fix: quickstart demos (#2940)
• 33b01bbb fix: remove duplicate query in GetIdentity (#2987)
• 56b5c26e fix: remove unused x-session-cookie parameter (#2983)
• ca35b45a fix: resilient social sign in (#3011)
• 3462ce15 fix: respect return_to URL parameter in registration flow when the user is already registered (#2957)
• e892113c fix: set accept header for GitLab (#2998)
• e58bc6e9 fix: set config at the start
• 72de640b fix: spurious cancelation of async webhooks, better tracing (#2969)
• 72486368 fix: update pquerna/otp to fix TOTP URL encoding (#2951)
• d77e2cf5 fix: update year
• f0044a36 fix: webhook tracing instrumentation+memory leak
• e8e8ce5e test: improve parallelization
• 7025081b test: regenerate csrf if verification flow expired (#2455)
• 6d26e5c7 test: update integrity snapshots (#3000)

Artifacts can be verified with cosign using this public key.