Skip to content

Release Notes

This page lists the most recent updates, improvements, and bug fixes for the Root Security Platform.

Version 2.5.0 (Current)

Release Date: May 15, 2024

New Features

  • WebAuthn Support: Added native support for passwordless authentication using FIDO2/WebAuthn standards
  • Custom Branding API: New API endpoints for customizing login pages programmatically
  • Advanced Role Mapping: Enhanced SAML and OIDC role mapping with support for conditional expressions

Improvements

  • Improved token validation performance by 35%
  • Enhanced user session management with more granular controls
  • Updated JavaScript SDK with TypeScript 5.0 support
  • Expanded logging options for security events

Bug Fixes

  • Fixed an issue with password reset flows timing out prematurely
  • Corrected CORS headers in API responses
  • Resolved a rare race condition in concurrent user creation
  • Fixed pagination in the users API endpoint

Version 2.4.2

Release Date: March 28, 2024

Bug Fixes

  • Fixed an issue with OAuth 2.0 refresh tokens expiring prematurely
  • Resolved a security vulnerability in the password reset flow (CVE-2024-XXXXX)
  • Fixed cross-browser compatibility issues with the login widget

Version 2.4.1

Release Date: March 12, 2024

Bug Fixes

  • Addressed performance degradation in high-volume authentication scenarios
  • Fixed a bug affecting SAML assertions with certain IdPs
  • Corrected error handling in the Go SDK

Version 2.4.0

Release Date: February 28, 2024

New Features

  • Adaptive MFA: Context-aware multi-factor authentication based on risk assessment
  • Advanced User Search: Enhanced search capabilities in the management API
  • Rate Limiting Controls: Configurable rate limiting for authentication endpoints

Improvements

  • Expanded audit log retention options
  • Enhanced dashboard analytics with custom report builder
  • Improved performance for organizations with large user bases

Deprecation Notices

The following features are deprecated and scheduled for removal:

  • Legacy Authentication API (v0) - Will be removed on August 31, 2024
  • Basic authentication for API endpoints - Will be removed on October 15, 2024

Update Policy

  • Major releases (X.0.0) - Quarterly with potential breaking changes
  • Minor releases (X.Y.0) - Monthly with backward-compatible features
  • Patch releases (X.Y.Z) - As needed for bug fixes and security updates

Subscribe to our release announcements to stay informed about upcoming releases.