4.14.0 (2026-04-24)
Bug Fixes
- console: always show settings page to admin (#11779) (2f81454), closes #10912
- console: disallow smtp double create #8964 (#11868) (aeddf0e)
- console: Fix onboarding link for user login guide (#11958) (677450e)
- console: jwt provider callback urls #11589 (#11966) (bfbf943)
- console: normalize empty OIDC redirect uri updates #12053 (#12067) (c16667b)
- console: pass data to user delete dialog (#11595) (4706a80)
- console: update protoc-gen-js (#12046) (a1cd331)
- grpc: increase MaxSendMsgSize (#12066) (31ac2a4)
- grpc: return 401 for unauthenticated v1 gateway errors (#11786) (5b4e6ec), closes #11730
- invalid jwt assertion error handling (#11933) (1c04220), closes /github.com/zitadel/oidc/blob/main/pkg/oidc/verifier.go#L195
- login: add OIDC/SAML requestId to resend invite / resend email code (#11927) (501091c)
- login: ClassifiedConnectError breaking ConnectError instanceof checks (#12022) (72bbfd4), closes #11903 #11926
- login: improve error classification (#11926) (6b9062f), closes #11923
- login: invite flow instead of email verification for users with no primary method, improve sending behaviour (#11837) (fa1d9e8), closes #10929
- login: load SSL_CERT_DIR certificates without requiring hashed filenames (#12029) (95f61c7)
- login: preserve OIDC request context during email verification (#11990) (b61ad1e)
- login: prevent duplicate email-code verification issue (#11893) (c1919db), closes #11857
- login: replace custom SWR cache with lru-cache (#11945) (c3b0982)
- login: respect branding themeMode for theme toggle, fix CSP (#11903) (643088f), closes #11721
- oidc: use authenticated encryption for opaque tokens (#12017) (4ad07d2), closes #11315
- propagate non-NotFound errors from instance interceptor (#12019) (52f9d7e)
Features
- add option to use x.509 certificate system-api-user tokens (#11876) (9a00c49), closes #11442
- allow ECDSA and ED25519 public keys (#11819) (bce7c48), closes #8433 #8433
- console: improve org search performance in create project grant page #11121 (#12057) (7e20724)
- login: add Portuguese (pt) translations for Login V2 (#11897) (88ba29c), closes #11782 #11782
- login: add ZITADEL_API_AWAITINITIALCONN support (#12032) (ad6b5b1)
- login: simplify login client auth and support PKCS#1 keys (#11888) (810b344)
- support standard OTEL env vars via autoexport (#11864) (3f1a29f)