1.15.0 - December release

[DennisDyallo]

1.15.0

Release date: December 3rd, 2025

Features:

• The SDK now supports CTAP 2.3's EncCredStoreState (encrypted credential store state) AuthenticatorInfo property, which is available on YubiKeys with firmware version 5.8 and above. This property, which must be decrypted using a YubiKey's PPUAT, can be used by platforms to detect when credentials have been added and removed or when the YubiKey has been reset. The Fido2Session property, AuthenticatorCredStoreState, has been added to simplify the process of retrieving and decrypting the EncCredStoreState value. (#354)
• It is now possible to toggle serial number visibility (over API, USB, or button press) when calling any of the OTP application slot configuration methods, including ConfigureChallengeResponse, ConfigureHotp, ConfigureStaticPassword, ConfigureYubicoOtp, and ConfigureNdef. (#328)
• The Yubico.NativeShims library's Linux build is now compiled with Zig and targets glibc 2.23 for broad Linux distribution compatibility. (#337)

Bug Fixes:

• The YubiKeyDevice properties, ChallengeResponseTimeout, AutoEjectTimeout, IsNfcRestricted, DeviceFlags, and ConfigurationLocked, have been modified so that they are set immediately after their respective configuration methods are called instead of after a refresh. YubiKeyDevice integration tests have also been updated to improve error handling and validate the modified YubiKeyDevice properties. (#348)

Documentation:

• Comprehensive docs covering SDK support for the Persistent PinUvAuthToken (PPUAT) have been added to the User's Manual. (#333)
• NFC instructions have been added to the FIDO2 reset docs. (#341)
• The PIV sample code has been updated to use the newer IPublicKey and IPrivateKey classes and support the Ed25519 and X25519 key types. (#343)

Full changelog:

• docs: user's manual documentation on the Persistent PinUvAuthToken (PPUAT) by @equijano21 in docs: user's manual documentation on the Persistent PinUvAuthToken (PPUAT) #333
• fix: incorrectly issuing errors in DesktopSmartCardDeviceListener.cs by @DennisDyallo in fix: incorrectly issuing errors in DesktopSmartCardDeviceListener.cs #339
• docs: improved 1.14.1 release notes by @equijano21 in docs: improved 1.14.1 release notes #340
• docs: added NFC instructions for FIDO2 reset by @equijano21 in docs: added NFC instructions for FIDO2 reset #341
• build: Use Zig to compile NativeShims for Linux targeting glibc 2.28 by @DennisDyallo in build: Use Zig to compile NativeShims for Linux targeting glibc 2.28 #337
• refactor: Replace PivPublicKey and PivPrivateKey with IPublicKey and IPrivateKey in PivSampleCode by @oskardanielsson-yubico in refactor: Replace PivPublicKey and PivPrivateKey with IPublicKey and IPrivateKey in PivSampleCode #343
• docs: add GitHub repository links to documentation by @DennisDyallo in docs: add GitHub repository links to documentation #346
• build(macos): Update GitHub MacOS runner (macos-14) by @oskardanielsson-yubico in build(macos): Update GitHub MacOS runner (macos-14) #347
• build(linux): Optimize Zig compiler wrappers by adding optimization flags by @DennisDyallo in build(linux): Optimize Zig compiler wrappers by adding optimization flags #352
• fix: certain YubiKeyDevice properties were not being updated in the YubiKeyDevice by @DennisDyallo in fix: certain YubiKeyDevice properties were not being updated in the YubiKeyDevice #348
• ci: GitHub Actions hardening (Security audit remediation) by @DennisDyallo in ci: GitHub Actions hardening (Security audit remediation) #345
• deps: Bump the all_packages group with 1 update by @dependabot[bot] in deps: Bump the all_packages group with 1 update #335
• feat: add CTAP 2.3 AuthenticatorInfo fields by @DennisDyallo in feat: add CTAP 2.3 AuthenticatorInfo fields #354
• feat(otp): Can now add serial number visibility on Configure*-methods by @DennisDyallo in feat(otp): Can now add serial number visibility on Configure*-methods #328
• feat: Adds ossf scorecard to the repo by @oskardanielsson-yubico in feat: Adds ossf scorecard to the repo #351
• Bump the all_packages group with 6 updates by @dependabot[bot] in Bump the all_packages group with 6 updates #358
• build(deps): bump the github-actions group with 12 updates by @dependabot[bot] in build(deps): bump the github-actions group with 12 updates #353
• docs: hmac-secret-mc extension by @equijano21 in docs: hmac-secret-mc extension #350
• fix(otp): getting incorrect firmware on special keys by @oskardanielsson-yubico in fix(otp): getting incorrect firmware on special keys  #359
• ci: fix syntax for GitHub Actions CodeQL by @DennisDyallo in ci: fix syntax for GitHub Actions CodeQL #360
• Release 1.15.0 by @DennisDyallo in Release 1.15.0 #361
• docs: release notes for 1.15.0 by @equijano21 in docs: release notes for 1.15.0 #357
• Release/1.15.0 by @DennisDyallo in Release/1.15.0 #362

New Contributors

• @oskardanielsson-yubico made their first contribution in refactor: Replace PivPublicKey and PivPrivateKey with IPublicKey and IPrivateKey in PivSampleCode #343

Full Changelog: 1.14.1-2...1.15.0

---

This discussion was created from the release 1.15.0 - December release.