• [PATCH] Update common @25.1.0
• [PATCH] Remove Native Auth V2 isInvalidCredentials; rejected passwords submitted through PasswordRequiredStateV2 use isInvalidPassword. isInvalidUsername now reflects local validation only. V1 is unchanged.
• [PATCH] Classify Native Auth V2 user-not-found and password-validation errors from structured service fields, and require invalid_grant/web_redirect_required for service-requested browser fallback.
• [PATCH] Native Auth V2 MFA/enrollment code failures use isInvalidChallenge instead of isInvalidCode. Remove isUserAlreadyExists, isAuthMethodBlocked, and isVerificationContactBlocked; inspect raw diagnostics on general errors instead. V1 is unchanged.
• [PATCH] Use password-free NativeAuthSignInParametersV2 with signInV2; supply passwords through PasswordRequiredStateV2.submitPassword. V1 sign-in is unchanged.
• [PATCH] Return AuthMethodSelectionRequired when Native Auth V2 sign-in offers multiple supported first-factor methods instead of choosing one automatically.
• [PATCH] Add AuthMethodSelectionRequired for password reset and existing-account sign-up with multiple supported methods.
• [PATCH] Separate V1 and V2 password-reset parameters with NativeAuthResetPasswordParametersV2.
• [PATCH] Native Auth V2 sign-up sends the username at start and retains profile attributes until collection.
• [PATCH] Add password-free NativeAuthSignUpParametersV2 and remove upfront password retention from V2 sign-up.
• [PATCH] Remove Native Auth V2 AttributesInvalidStateV2 and NativeAuthResultV2.AttributesInvalid.
• [PATCH] Native Auth V2 errors now use NativeAuthErrorV2. Replace operation-specific V2 error type checks with its classifiers; rejected sign-in passwords use isInvalidCredentials, not isInvalidPassword. V1 is unchanged (AB#3784695).
• [PATCH] Native Auth V2 sign-in, sign-up and password-reset entries accept scopes and claims. Scope is also sent at token exchange; claims are sent only at entry. Null continuation scopes retain entry scopes, while explicit empty scopes request default OIDC scopes (AB#3784690).
• [PATCH] Update Native Auth V2 error mapping and MFA routing, Fixes AB#3808200 (#2639)
• [PATCH] Remove password from sign-in parameters, Fixes AB#3808198 (#2638)
• [PATCH] Update Native Auth V2 sign-up, method selection, and parameters, Fixes AB#3803937 (#2630)
• [MINOR] Implement Native Auth V2 JIT registration states, Fixes AB#3797292 (#2629)