megachangelog
Feature4.17.0

ZITADEL v4.17.0

This release adds support for Zitadel as an identity provider with full CRUD operations, dynamic OIDC client registration and management per RFC 7591/7592, native passkey app links, and numerous bug fixes including improvements to login flows, metadata handling, and database operations.

4.17.0 (2026-08-12)

Bug Fixes

  • actions: allow adding raw metadata values via appendMetadataRaw (#12567) (c1b9885), closes #10666 #5526 #10470 #5526
  • allow invite codes for users whose auth methods were all removed (#12453) (eb7af25)
  • api: accept SetSecuritySettings on /v2/settings/security (#12518) (6e07fb7), closes #12313
  • console: change username abort dialog and set email as verified #10803 #12146 (#12155) (8e2dc18)
  • database: skip CREATE USER when role exists to avoid password in Postgres logs (#12538) (207f14a), closes #12178
  • login: honour login_hint and skip the auto-submit loop in OIDC flow (#12431) (3bb23d2), closes #12346
  • login: provide hidden username on password set/change forms (#12490) (e82b845)
  • login: resolve unknownContext error on password page caused by inconsistent ignoreUnknownUsernames handling (#12512) (65e50fc)
  • login: treat user-verified passkey as fulfilling MFA in session validity check (#12575) (4f3a1dd)

Features

idpoidcsecurityloginapipasskeys

Source: original entry ↗