ACA-Py Release 1.6.0 continues the clean up of the migration of deployments moving from the askar wallet type to askar-anoncreds. More use case specific issues have been found with the upgrade and corrected in this release, notably when revokable AnonCreds credentials rooted in Indy, with Endorsers and when an initial revocation publication operation fails. The proper handle of such a condition is again properly handled. Also added is an interoperability improvement with the Credo-TS framework around the handling of JWS verification.
The release also includes new documentation to support migration from Indy-based AnonCreds issuance to did:webvh, reflecting the broader ecosystem shift toward more flexible and web-native DID methods.
Additional updates include dependency upgrades, improvements to CI/CD and test management, and routine maintenance changes. Dependabot updates have also been incorporated to keep dependencies current and secure.
1.6.0 Breaking Changes
This release introduces no intentional breaking changes. Note that PR #3998 in release 1.5.1 was initially missed in the release as breaking, but is a breaking change. Implementations relying on the removed duplicate webhooks for present-proof v2 should adjust to the new behavior.
Included are required fixes that correct behavior in some edge cases related to deployments using AnonCreds revocation, Indy and upgrading from the askar wallet type to the askar-anoncreds wallet type. Deployments that have already upgraded to 1.4.0 and later SHOULD upgrade to 1.6.0.
ACA-Py now prefers the kid value in the JWS header over jwk.kid when verifying signatures in attachment decorators. While this aligns with expected standards behavior, integrations relying on the previous resolution order should validate their assumptions.
These changes are not expected to impact most deployments but should be reviewed in environments with custom integrations or strict interoperability requirements.
1.6.0 Deprecation Notices
The acapy_agent.revocation_anoncreds package has been deprecated and relocated to acapy_agent.anoncreds.revocation for improved consistency across the codebase. The change should only affect [ACA-Py Plugins] that implement AnonCreds, but other developers should also take note.
The wallet-type configuration value askar is now deprecated and all deployments still using that wallet type should migrate to either the askar-anoncreds or (ideally) kanon-anoncreds wallet types.
AIP 1.0 protocols that were previously announced as deprecated have now been removed from ACA-Py core. Implementers still using those protocols MUST adjust their configuration to load those protocols from the respective plugins, or better, upgrade to their AIP 2.0 equivalents.
What's Changed
- docs: add migration guide for Indy to did:webvh AnonCreds issuance by @PatStLouis in #4059
- chore(deps): Bump the all-actions group with 3 updates by @dependabot[bot] in #4072
- fix: exclude BBS+ present-proof scenarios from BDD interop tests by @PatStLouis in #4074
- ci: scope permissions to jobs and fix workflow syntax by @PatStLouis in #4066
- chore: Update the interop tails server url by @jamshale in #4075
- chore: bump jsonpath-ng to 1.8.0 and fix full_path format by @PatStLouis in #4078
- chore(deps): Bump apispec from 6.9.0 to 6.10.0 by @dependabot[bot] in #4081
- fix: Revocation errors in the anoncreds upgrade by @jamshale in #4080
- fix: prefer JWS header kid over jwk.kid in attach decorator verify (fixes #4077) by @PatStLouis in #4085
- chore(deps): Bump pyjwt from 2.11.0 to 2.12.1 by @dependabot[bot] in #4088
- chore(deps): Bump the all-actions group across 1 directory with 8 updates by @dependabot[bot] in #4089
- chore: Update ruff version in github action runner to project major version by @jamshale in #4093
- Feat/4086 anoncreds indy accum fix with endorsement by @jamshale in #4090
- chore: add PR template and issue templates by @Chaithanya5gif in #4091
- chore(deps-dev): Bump pytest-cov from 7.0.0 to 7.1.0 by @dependabot[bot] in #4096
- 1.6.0rc0 by @swcurran in #4097
- chore(deps): Bump the all-actions group with 4 updates by @dependabot[bot] in #4099
- chore(deps): Bump the pip group across 3 directories with 1 update by @dependabot[bot] in #4102
- chore(deps): Update pygments requirement from ~=2.19 to ~=2.20 in /demo by @dependabot[bot] in #4105
- chore(deps): Bump pygments from 2.19.2 to 2.20.0 by @dependabot[bot] in #4104
- chore(deps): Bump cryptography from 46.0.5 to 46.0.6 in the pip group across 1 directory by @dependabot[bot] in #4103
- chore(deps): Bump the all-actions group with 2 updates by @dependabot[bot] in #4106
- 1.6.0 by @swcurran in #4109
New Contributors
- @Chaithanya5gif made their first contribution in #4091
Full Changelog: 1.5.1...1.6.0
