v2.25.0

Release date: July 2, 2025

New features

Added ledger SDK options

Request overrides

We improved the SDK experience by introducing new options. Many users had issues with setting headers in SDK with setHeader, which was done globally for the whole SDK instance.

In methods read and list, users can optionally pass ReadOptions where they can override headers and auth params. This works only for that request, not globally. In method send for all SDK builders, users can optionally pass RequestOptions which also allow overriding headers and auth params. This works only for that request, not globally. We improved the documentation of setHeader to clarify that it works globally.

Signer Factors

We added support for include query parameter with meta.secret to allow fetching secrets when reading a signer-factor record.

Server feature flags

We are introducing the concept of server feature flags. This will enable us to:

• Have different sets of features enabled on environments like dev, staging, and production.
• Incrementally improve features until they are in a better state for public release to clients - improving user experience.
• Slowly/partially roll out risky features, minimizing impacts to system stability.

Improvements

User-Facing

• [studio] Make 2FA enabling configurable per ledger. This will enable ledgers to opt in to 2FA. Disabled by default.
• [studio] Improve 2FA security by limiting client-side exposure of 2FA secret.
• [studio] Improve security of Studio by addressing vulnerabilities from latest security analysis.
• [docs] Included documentation for PUT requests to update existing records, detailing proxy handling.

Internal

• [studio] Upgrade to React Router v7
• [layout] studio-e2e-seed layout that will be used to seed studio-e2e instances before running tests.
• [ledger] Updated databases of Ledger and bridges to Postgres 17 for STG environment.
• [ledger] Updated databases of Ledger and bridges to Postgres 17 for local dev, CI, and dev environment.
• [ledger] Change access validation for signer-factor-secret revealing to use access rules instead of an environment variable. JWT is enforced and a valid HSH Claim should be present in its payload.
• [ledger] ReferenceIncludeQueryParams decorator to support and validate include query parameter used to reference other records in the query.
• [ci] Changed target self hosted machines to "mid", which represents arm64 machines recently provisioned.
• [ci] Improved pull request pipeline performance by breaking ledger e2e into multiple executions with sharding.
• [ci] Improved pull request pipeline performance by removing usage of self hosted runners where it's not needed.
• [ci] Improved pull request workflow performance by re-enabling NX build cache.
• [ci] Improved ledger e2e performance by moving some trivial tests to unit tests at ledger app. Open API schema validations and basic access checks.
• [ci] Improved ledger e2e performance by reusing ledgers and records as much as possible within tests.
• [ci] Improved performance by reusing ledgers in tests and reduced frequency of ledger cleaning operations.
• [ci] Add studio e2e tests.
• [db] Extracted sql-parser into its own separate library

Fixes

• [ledger] Update bad docs example of anchor lookup in SDK cheat sheet.
• [monorepo,ledger-sdk] upgraded nanoid (3.3.7 -> 3.3.11), jose (4.11.0 -> 4.15.9) and axios (1.7.4 -> 1.10.0) dependencies to fix security vulnerabilities reported by npm audit when installing @minka/ledger-sdk