4.0.3 - 2026-02-05
Security
⚠️ Update immediately: CVE-2026-23989, a security issue in public links is resolved in v4.0.3.
We recommend all deployments running previous versions to update to one of these releases immediately.
❤️ Thanks to all contributors! ❤️
@ScharfViktor, @aduffeck, @fschade, @kulmann, @micbar, @prashant-gurung899, @saw-jan
🐛 Bug Fixes
- Bump reva 2.40.3 [#2275]
✅ Tests
- [tests-only] port tests to stable #2087 #2039 [#2185]
- [full-ci][tests-only] port test fixes [#2017]
- [stable-4.0] Port #2011 [#2018]
📦️ Dependencies
- Bump reva [#2274]
Reva
- fix(authscope): Fix parent check [#522]