Changelog

[0.20.1] - 2026-05-19 (UTC)

Implemented OID4VP 1.0 Section 8.5 wallet error response handling in Verifier2, enabling proper error redirect flows when wallets reject presentation requests or encounter errors (WAL-965) (#1707).
Added structured failure detail surfacing on Verifier2 sessions with credential policy attribution, DCQL fulfillment results, and ordered unsatisfied sets for better debugging (WAL-976, WAL-977) (#1706).
Fixed mdoc TDate format by removing fractional seconds from the implementation to align with ISO 18013-5 requirements (WAL-993) (#1722).
Refactored Issuer and OpenID4VCI to enforce type parameters for JWT signing, improving type safety and fixing the typ header in the JWT signing process (WAL-894) (#1723).
Added AWS KMS Key Cleanup workflow for automated purging of untagged keys, improving cloud resource management (#1713).
Reverted SameSite cookie attribute to Strict and aligned test naming for session token handling (WAL-1010) (#1728).

Implemented OID4VP 1.0 Section 8.5 wallet error response handling on direct_post endpoint (#1707).
Added support for wallet rejection responses with proper error redirect flows (#1707).
Hardened wallet error response handling across verifier2 and wallet modules (#1707).
Surfaced structured failure detail on verification sessions with credential policy attribution (#1706).
Added explicit DCQL fulfillment result returns for better verification diagnostics (#1706).
Preserved ordered unsatisfied sets in verification results (#1706).

Refactored Issuer and OpenID4VCI to enforce type parameter for JWT, improving type safety (#1723).
Fixed typ header in JWT signing process (#1723).
Extended CredentialParser to support nested W3C contexts and types (#1723).
Added preAuthorizedGrantAnonymousAccessSupported in the default issuer metadata (#1723).

Removed fractional seconds from mdoc TDate implementation to align with ISO 18013-5 specification (WAL-993) (#1722).

Reverted SameSite cookie attribute to Strict for improved security (WAL-1010) (#1728).
Aligned test naming for session token handling (#1728).

Added AWS KMS Key Cleanup workflow for automated purging of untagged keys (#1713).
Fixed creation date parsing from ISO-8601 string format in KMS cleanup workflow (#1715).
Combined dependency bumps including mina-core and package lock updates (#1717).

PR	Title	Author	Reviewer	Merged
#1706	feature/wal-976-977-verifier2-structured-failures	szijpeter		2026-05-14
#1707	feature/wal-965-oid4vp-wallet-error-response	szijpeter		2026-05-14
#1713	feat: Add AWS KMS Key Cleanup workflow	dinkar-jain		2026-05-12
#1715	fix: Update creation date parsing in KMS cleanup workflow	dinkar-jain	philpotisk	2026-05-12
#1717	chore/dependency-bumps-combined	philpotisk		2026-05-15
#1722	WAL-993: Remove fractional seconds from mdoc implementation	JakeFernandes98		2026-05-16
#1723	wal-894: Refactor Issuer and OpenID4VCI for JWT type safety	chsavvaidis		2026-05-14
#1728	fix/wal-1010: Revert SameSite to Strict	JakeFernandes98		2026-05-19

This changelog covers v0.20.0 through main (intended v0.20.1).

feature/wal-976-977-verifier2-structured-failures by @szijpeter in #1706
feature/wal-965-oid4vp-wallet-error-response by @szijpeter in #1707
feat: Add AWS KMS Key Cleanup workflow by @dinkar-jain in #1713
fix: Update creation date parsing in KMS cleanup workflow by @dinkar-jain in #1715
chore/dependency-bumps-combined by @philpotisk in #1717
WAL-993: Remove fractional seconds from mdoc implementation by @JakeFernandes98 in #1722
wal-894: Refactor Issuer and OpenID4VCI for JWT type safety by @chsavvaidis in #1723
fix/wal-1010: Revert SameSite to Strict by @JakeFernandes98 in #1728

Full Changelog: v0.20.0...main