4.3.0

• Add prehash_and_encrypt_password helper to hash passwords client-side and transmit it to an untrusted medium so it can be used to enroll an identity using the new PrehashedAndEncryptedPassphraseVerification method, available in python and ruby only.
• Add PrehashedAndEncryptedPassphraseVerification verification method, can only be used to enroll new identities.

v4.2.1

• Extend support to Python 3.9, 3.10, and 3.11 in addition to Python 3.12
• The SDK now has fewer dependencies to improve compatibility with other python packages

v4.2.0

• Add new OpenID Connect verification flow through the new OidcIDTokenVerification method, see the updated guide for details
• OIDC is now a valid pre-verified verification method with the new PreverifiedOidcVerification method
• Deprecate create_oidc_nonce, set_oidc_test_nonce, and OidcIdTokenVerification as they are now obsolete with the new OIDC verification flow
• Invalid responses that do not come from the Tanker backend can now result in a NetworkError, instead of an InternalError
• Drop support for Python version 3.11. Only 3.12 is now officially supported.

v4.1.0

This is a maintenance release, there are no external changes.

v4.0.0

This release is strictly speaking a semver break, but does not introduce any major API changes.

• The OIDCIDTokenVerificationMethod objects
  now contain the provider_id and provider_display_name methods, corresponding to the verification method's OIDC provider.

v3.3.2

• Limit maximum number of resource IDs * recipients to 100 in a single call to share

v3.3.1

• Upgrade to Python 3.11, dropping support for Python 3.10

v3.3.0

• Add support for SDK downgrade between compatible versions even in case of changes to the local storage schema, see manage sdk versions for more details
• Drop support for Python versions 3.7, 3.8, 3.9, and 3.11. Only 3.10 is now officially supported
• Drop support for Windows

v3.2.1

• Improve error messages for decrypt, decrypt_stream and get_resource_id when the given encrypted data is empty. Note that decrypt and decrypt_stream will throw an INVALID_ARGUMENT error when that happens, not a DECRYPTION_FAILED.
• Downgrade severity for logs related to internal storage and HTTP requests from Info to Debug
• Dependency upgrades

v3.1.1

• Update zlib to 1.2.13 to fix CVE-2022-37434.