github-actions · Nov 3, 2026
diff --git a/CHANGELOG.md b/CHANGELOG.md
diff --git a/packages/crypto_keys_plus/CHANGELOG.md b/packages/crypto_keys_plus/CHANGELOG.md
@@ -1,3 +1,12 @@
+## 2.0.0
+
+> Note: This release has breaking changes.
+
+ - **FIX**: resolve all four library bugs; drive honest unit coverage to ~95% ([#368](https://github.com/Bdaya-Dev/oidc/issues/368)). ([c86bee17](https://github.com/Bdaya-Dev/oidc/commit/c86bee17189a0a70fee947c685e91a55062b1d35))
+ - **FIX**(crypto_keys_plus): resolve pub.dev publish dry-run warnings. ([5bee9a89](https://github.com/Bdaya-Dev/oidc/commit/5bee9a8954e4fc5412f20db826aa7fe053eebabb))
+ - **FEAT**(crypto): RSASSA-PSS (PS256/384/512) + EdDSA/Ed25519. ([6c5c6741](https://github.com/Bdaya-Dev/oidc/commit/6c5c674149fe0504207c95aefbda7fedfca72ae9))
+ - **BREAKING** **FEAT**: consolidate jose_plus, crypto_keys_plus, x509_plus into the workspace. ([3fffc6cd](https://github.com/Bdaya-Dev/oidc/commit/3fffc6cd51f2abb0ead643acc2ec4d5741fac8e5))
+
 ## 1.0.0
 
 > Note: This release has breaking changes.

diff --git a/packages/crypto_keys_plus/pubspec.yaml b/packages/crypto_keys_plus/pubspec.yaml
@@ -1,6 +1,6 @@
 name: crypto_keys_plus
 description: A library for doing cryptographic signing/verifying and encrypting/decrypting.
-version: 1.0.0
+version: 2.0.0
 repository: https://github.com/Bdaya-Dev/oidc/tree/main/packages/crypto_keys_plus
 homepage: https://bdaya-dev.github.io/oidc/
 funding:

diff --git a/packages/jose_plus/CHANGELOG.md b/packages/jose_plus/CHANGELOG.md
@@ -1,3 +1,15 @@
+## 2.0.0
+
+> Note: This release has breaking changes.
+
+ - **FIX**(jose_plus): pass apu/apv to the ECDH-ES Concat KDF in build(). ([aa20db62](https://github.com/Bdaya-Dev/oidc/commit/aa20db62140e7a43cf60224f2a163515aa101314))
+ - **FIX**: resolve all four library bugs; drive honest unit coverage to ~95% ([#368](https://github.com/Bdaya-Dev/oidc/issues/368)). ([c86bee17](https://github.com/Bdaya-Dev/oidc/commit/c86bee17189a0a70fee947c685e91a55062b1d35))
+ - **FIX**(ci): stop swallowing web test failures; pin dart:io fixture tests to vm ([#363](https://github.com/Bdaya-Dev/oidc/issues/363)). ([6102d835](https://github.com/Bdaya-Dev/oidc/commit/6102d8353b0d330f888ea8b8e9b4c52937be2236))
+ - **FIX**(release): add package-name entrypoints for jose_plus and x509_plus. ([4bbcb7f3](https://github.com/Bdaya-Dev/oidc/commit/4bbcb7f3df69cf393be29bd5997f49c15add7ff4))
+ - **FIX**(jose_plus): normalize crypto_keys_plus/x509_plus constraints to caret syntax. ([d0a1d55d](https://github.com/Bdaya-Dev/oidc/commit/d0a1d55da2507e2f12b1244dcedaa1481fad1aed))
+ - **FEAT**(crypto): RSASSA-PSS (PS256/384/512) + EdDSA/Ed25519. ([6c5c6741](https://github.com/Bdaya-Dev/oidc/commit/6c5c674149fe0504207c95aefbda7fedfca72ae9))
+ - **BREAKING** **FEAT**: consolidate jose_plus, crypto_keys_plus, x509_plus into the workspace. ([3fffc6cd](https://github.com/Bdaya-Dev/oidc/commit/3fffc6cd51f2abb0ead643acc2ec4d5741fac8e5))
+
 ## 1.0.1
 
  - **FIX**(jose_plus): pass apu/apv to the ECDH-ES Concat KDF in build(). ([aa20db62](https://github.com/Bdaya-Dev/oidc/commit/aa20db62140e7a43cf60224f2a163515aa101314))

diff --git a/packages/jose_plus/pubspec.yaml b/packages/jose_plus/pubspec.yaml
@@ -1,6 +1,6 @@
 name: jose_plus
 description: Javascript Object Signing and Encryption (JOSE) library supporting JWE, JWS, JWK and JWT
-version: 1.0.1
+version: 2.0.0
 repository: https://github.com/Bdaya-Dev/oidc/tree/main/packages/jose_plus
 homepage: https://bdaya-dev.github.io/oidc/
 funding:
@@ -11,9 +11,9 @@ environment:
   sdk: ">=3.5.0 <4.0.0"
 
 dependencies:
-  crypto_keys_plus: ^1.0.0
+  crypto_keys_plus: ^2.0.0
   meta: ^1.1.6
-  x509_plus: ^1.0.0
+  x509_plus: ^2.0.0
   http: ">=0.13.0 <2.0.0"
   http_parser: ^4.0.0
   asn1lib: ^1.0.0

diff --git a/packages/oidc/CHANGELOG.md b/packages/oidc/CHANGELOG.md
@@ -1,3 +1,17 @@
+## 6.0.0
+
+> Note: This release has breaking changes.
+
+ - **FIX**(ci): respect GitHub's 5-concurrent-macOS-jobs cap, un-shard macos. ([79e50312](https://github.com/Bdaya-Dev/oidc/commit/79e50312fe385d5cf27f1c304c2bf0ee989d2254))
+ - **FIX**(example): stop corrupting the web conformance POST through cors-proxy. ([4eea7cd8](https://github.com/Bdaya-Dev/oidc/commit/4eea7cd840c208582eaf873a0d34ce54e7e2a95e))
+ - **FIX**(oidc): rethrow platform OidcException from getPlatformEndSessionResponse unwrapped. ([ab422b70](https://github.com/Bdaya-Dev/oidc/commit/ab422b70d38093ab4e85a56176df78908780ba71))
+ - **FIX**: await futures returned inside try blocks (unawaited_return_in_try_block). ([452d6ee1](https://github.com/Bdaya-Dev/oidc/commit/452d6ee121674dee760f2d698f2a7d5565ad6600))
+ - **FIX**(example): register the RP's true application_type with the test plan. ([1253d9be](https://github.com/Bdaya-Dev/oidc/commit/1253d9be404bd36ed5d8f83521ce74efb3ca73f1))
+ - **FEAT**(oidc_core): mTLS transport, end-to-end alias routing and web guard ([#386](https://github.com/Bdaya-Dev/oidc/issues/386)). ([d3bd7213](https://github.com/Bdaya-Dev/oidc/commit/d3bd721399ddf579067791f12c536b2fb4022ad5))
+ - **FEAT**(oidc_core): adopt and persist RFC 7592 credential rotation through the manager ([#385](https://github.com/Bdaya-Dev/oidc/issues/385)). ([0b6f57c1](https://github.com/Bdaya-Dev/oidc/commit/0b6f57c199bc3d8b76bf05845b5a0b13c1d9bcd8))
+ - **BREAKING** **FIX**(oidc_core): reject a discovery document whose issuer does not match. ([fab65a06](https://github.com/Bdaya-Dev/oidc/commit/fab65a069d2b4bd4ac8d41fc78e6c194702f32b4))
+ - **BREAKING** **FEAT**(oidc_default_store): bump flutter_secure_storage to ^11 ([#451](https://github.com/Bdaya-Dev/oidc/issues/451)). ([166f394e](https://github.com/Bdaya-Dev/oidc/commit/166f394ed7d937f1098a558b92f325fc52043700))
+
 ## 5.0.2
 
  - **FIX**(ci): respect GitHub's 5-concurrent-macOS-jobs cap, un-shard macos. ([79e50312](https://github.com/Bdaya-Dev/oidc/commit/79e50312fe385d5cf27f1c304c2bf0ee989d2254))

diff --git a/packages/oidc/example/pubspec.yaml b/packages/oidc/example/pubspec.yaml
@@ -21,8 +21,8 @@ dependencies:
   logging: ^1.2.0
   oidc:
     path: ../
-  oidc_core: ^4.0.0
-  oidc_default_store: ^2.0.0
+  oidc_core: ^5.0.0
+  oidc_default_store: ^3.0.0
 dev_dependencies:
   archive: ^4.0.7
   # integration_test + flutter_test back the macOS e2e job only

diff --git a/packages/oidc/pubspec.yaml b/packages/oidc/pubspec.yaml
@@ -1,6 +1,6 @@
 name: oidc
 description: A comprehensive OpenIdConnect plugin that works on all platforms (android, ios, windows, linux, web, macos)
-version: 5.0.2
+version: 6.0.0
 repository: https://github.com/Bdaya-Dev/oidc/tree/main/packages/oidc
 topics: ["oidc", "openidconnect", "oauth", "authentication"]
 homepage: https://bdaya-dev.github.io/oidc/
@@ -30,15 +30,15 @@ dependencies:
   flutter:
     sdk: flutter
   # Endorsed packages
-  oidc_android: ^3.0.1
-  oidc_core: ^4.0.0
-  oidc_darwin: ^1.1.3
-  oidc_linux: ^1.0.4
-  oidc_platform_interface: ^1.0.4
-  oidc_web: ^1.0.5
-  oidc_windows: ^1.0.4
+  oidc_android: ^4.0.0
+  oidc_core: ^5.0.0
+  oidc_darwin: ^2.0.0
+  oidc_linux: ^2.0.0
+  oidc_platform_interface: ^2.0.0
+  oidc_web: ^2.0.0
+  oidc_windows: ^2.0.0
   # ====================
-  jose_plus: ^1.0.1
+  jose_plus: ^2.0.0
 
 dev_dependencies:
   clock: ^1.1.1

diff --git a/packages/oidc_android/CHANGELOG.md b/packages/oidc_android/CHANGELOG.md
@@ -1,3 +1,40 @@
+## 4.0.0
+
+> Note: This release has breaking changes.
+
+ - **FIX**(oidc_web_core): surface the flow timeout as OidcException, not TimeoutException. ([be6a5316](https://github.com/Bdaya-Dev/oidc/commit/be6a5316df6cc83ee90807c4f88f4d37d5cd144d))
+ - **FIX**(oidc_android): forward Map-valued raw intent extras instead of dropping them. ([7ffda6a7](https://github.com/Bdaya-Dev/oidc/commit/7ffda6a74f07aeaba3a077a1d879a615b3dfbe77))
+ - **FIX**(oidc_android): dismiss the Custom Tab after the intent-filter redirect. ([34a83693](https://github.com/Bdaya-Dev/oidc/commit/34a836933563e3fe37dc7121b87272676554a331))
+ - **FIX**: resolve all four library bugs; drive honest unit coverage to ~95% ([#368](https://github.com/Bdaya-Dev/oidc/issues/368)). ([c86bee17](https://github.com/Bdaya-Dev/oidc/commit/c86bee17189a0a70fee947c685e91a55062b1d35))
+ - **FIX**(example): use FlutterFragmentActivity for Auth Tab (ComponentActivity). ([e6e9be47](https://github.com/Bdaya-Dev/oidc/commit/e6e9be47683d80897a6dce6f92433408c89155f4))
+ - **FIX**(oidc_android): remove duplicate mainHandler declaration. ([ae0f70c2](https://github.com/Bdaya-Dev/oidc/commit/ae0f70c20b4c011f35365be44673713622eeacc9))
+ - **FIX**(oidc_android): use flowId self-check instead of Handler.removeCallbacks. ([c8f585a3](https://github.com/Bdaya-Dev/oidc/commit/c8f585a36912af3ef379fdb88eb046035b8d22dd))
+ - **FIX**: pre-v1 correctness — certification claim, license, Android queries, honest native option docs. ([3b8ef447](https://github.com/Bdaya-Dev/oidc/commit/3b8ef447f2a1c0af68ec6711c77d435531fb827f))
+ - **FIX**(native): harden iOS threading, simplify Android redirect to one-line setup. ([a7553f32](https://github.com/Bdaya-Dev/oidc/commit/a7553f326c1d67ac2bd057b0864688d73df24661))
+ - **FEAT**(android): Auth Tab redirect-capture path (Phase 4, opt-in). ([0b80aaf2](https://github.com/Bdaya-Dev/oidc/commit/0b80aaf2a253f31f7b4fee62e91a0f10fdd1fa25))
+ - **FEAT**(observability): native browser events via the existing OidcEvent stream (Phase 3). ([91d1f5bd](https://github.com/Bdaya-Dev/oidc/commit/91d1f5bdfa1526aec170474181ec71ad1bf38c59))
+ - **FEAT**(android): apply typed Custom Tabs options natively (Phase 1). ([10e903eb](https://github.com/Bdaya-Dev/oidc/commit/10e903ebcbdb7fa8cb33c7f2f4d30b58db26d33e))
+ - **FEAT**: implement the session management spec. ([9a133b3b](https://github.com/Bdaya-Dev/oidc/commit/9a133b3bb511c935edeca0762bfc6be365e812f9))
+ - **FEAT**: support logout. ([09504fa3](https://github.com/Bdaya-Dev/oidc/commit/09504fa310605e2d59ce736d7d3cc99ecbbaab13))
+ - **DOCS**(test): state the wiring guard's single-layer scope. ([e25e04b8](https://github.com/Bdaya-Dev/oidc/commit/e25e04b89711cd526919f73ed7c9a8faf5c386cb))
+ - **DOCS**(oidc_android): state the minSdk 23 requirement, and stop instructing 21 ([#427](https://github.com/Bdaya-Dev/oidc/issues/427)). ([1f210d0a](https://github.com/Bdaya-Dev/oidc/commit/1f210d0a36843dd0aa5080be499ecbafa0347c35))
+ - **DOCS**: remove logo branding from screenshots. ([2acf65d3](https://github.com/Bdaya-Dev/oidc/commit/2acf65d34fb47c0449653a73373168df3deb1735))
+ - **DOCS**: Add openid certification mark ([#240](https://github.com/Bdaya-Dev/oidc/issues/240)). ([89313199](https://github.com/Bdaya-Dev/oidc/commit/8931319937b9c263abae9ac873433dd6bd5fa637))
+ - **BREAKING** **REFACTOR**: remove rxdart; adopt bdaya_shared_value ^5.0.0. ([0d65d7fd](https://github.com/Bdaya-Dev/oidc/commit/0d65d7fde062e2db7ffbdd31a47735c59954045a))
+ - **BREAKING** **FIX**(oidc_android): report the options the Auth Tab path cannot apply. ([8b7226ce](https://github.com/Bdaya-Dev/oidc/commit/8b7226ced748e953e8b3ea95ba3c711d8976dd8d))
+ - **BREAKING** **FIX**(oidc_android): apply the documented Custom Tabs options natively. ([9e83a10b](https://github.com/Bdaya-Dev/oidc/commit/9e83a10ba732611ec4ef9d11c8cbe3a68ca8a7b9))
+ - **BREAKING** **FIX**(oidc_android): restore the redirect receiver as a fallback capture path ([#418](https://github.com/Bdaya-Dev/oidc/issues/418)) ([#419](https://github.com/Bdaya-Dev/oidc/issues/419)). ([8df8bc61](https://github.com/Bdaya-Dev/oidc/commit/8df8bc617fb91347eac9f32fcffb7ec88f95328a))
+ - **BREAKING** **FIX**: hasInit is set to true too early in init() of OidcUserManagerBase ([#275](https://github.com/Bdaya-Dev/oidc/issues/275)). ([d704aa5f](https://github.com/Bdaya-Dev/oidc/commit/d704aa5fe7449051831fc062919712a1c5075a13))
+ - **BREAKING** **FIX**: Opening in new tab not working reliably in Safari for iOS [#31](https://github.com/Bdaya-Dev/oidc/issues/31). ([2e30028b](https://github.com/Bdaya-Dev/oidc/commit/2e30028b79f7ed1e7835d4656278b022a9c0ec62))
+ - **BREAKING** **FEAT**(oidc_android): switch to Auth Tab only, remove Custom Tabs path. ([05bf0181](https://github.com/Bdaya-Dev/oidc/commit/05bf01811e299c472d49efb303fb657c939f0bd4))
+ - **BREAKING** **FEAT**(oidc_android): add flowTimeoutSeconds to fix headless CI hang. ([01c844f5](https://github.com/Bdaya-Dev/oidc/commit/01c844f5bd98a3d983b9e50f9fa2192ed7013e50))
+ - **BREAKING** **FEAT**: merge oidc_ios + oidc_macos into a unified oidc_darwin plugin. ([db73858e](https://github.com/Bdaya-Dev/oidc/commit/db73858e71b3b869326867b05b9d1ead3629acb9))
+ - **BREAKING** **FEAT**(native): migrate native transport to Pigeon + automate codegen. ([fc7606f3](https://github.com/Bdaya-Dev/oidc/commit/fc7606f3329cc493281a438ff76482436b018709))
+ - **BREAKING** **FEAT**(oidc_android): replace flutter_appauth with first-party Custom Tabs auth. ([ddd64296](https://github.com/Bdaya-Dev/oidc/commit/ddd642968ca95cc57f0745d3ec59b5d9bc3c290f))
+ - **BREAKING** **FEAT**: Support WASM ([#253](https://github.com/Bdaya-Dev/oidc/issues/253)). ([8b2931ef](https://github.com/Bdaya-Dev/oidc/commit/8b2931ef64c7b25609db563e3d14bf37f5504922))
+ - **BREAKING** **CHORE**(deps): upgrade flutter_appauth to v9.0.0 ([#199](https://github.com/Bdaya-Dev/oidc/issues/199)). ([f027af34](https://github.com/Bdaya-Dev/oidc/commit/f027af3460a833780cc77ed2cce11f692c7a8ce5))
+ - **BREAKING** **CHANGE**: all packages. ([743f8f08](https://github.com/Bdaya-Dev/oidc/commit/743f8f0808a1bcc222e14150db59ac0c78c7340d))
+
 ## 3.0.1
 
  - Update a dependency to the latest release.

diff --git a/packages/oidc_android/example/pubspec.yaml b/packages/oidc_android/example/pubspec.yaml
@@ -15,9 +15,9 @@ dependencies:
   logging: ^1.2.0
   oidc_android:
     path: ../
-  oidc_core: ^4.0.0
-  oidc_default_store: ^2.0.0
-  oidc_platform_interface: ^1.0.4
+  oidc_core: ^5.0.0
+  oidc_default_store: ^3.0.0
+  oidc_platform_interface: ^2.0.0
 
 dev_dependencies:
   flutter_driver:

diff --git a/packages/oidc_android/pubspec.yaml b/packages/oidc_android/pubspec.yaml
@@ -1,6 +1,6 @@
 name: oidc_android
 description: Android implementation of the oidc plugin
-version: 3.0.1
+version: 4.0.0
 repository: https://github.com/Bdaya-Dev/oidc/tree/main/packages/oidc_android
 homepage: https://bdaya-dev.github.io/oidc/
 topics: ["oidc", "openidconnect", "oauth", "authentication"]
@@ -22,8 +22,8 @@ flutter:
 dependencies:
   flutter:
     sdk: flutter
-  oidc_core: ^4.0.0
-  oidc_platform_interface: ^1.0.4
+  oidc_core: ^5.0.0
+  oidc_platform_interface: ^2.0.0
 
 dev_dependencies:
   flutter_test:

diff --git a/packages/oidc_cli/CHANGELOG.md b/packages/oidc_cli/CHANGELOG.md
@@ -1,3 +1,15 @@
+## 2.0.0
+
+> Note: This release has breaking changes.
+
+ - **FIX**(oidc_cli): bound the interactive loopback wait with flowTimeoutSeconds ([#369](https://github.com/Bdaya-Dev/oidc/issues/369)) ([#388](https://github.com/Bdaya-Dev/oidc/issues/388)). ([5e9cf93a](https://github.com/Bdaya-Dev/oidc/commit/5e9cf93a5062cd875096ff232eb64c4d3a42ac05))
+ - **FIX**: resolve all four library bugs; drive honest unit coverage to ~95% ([#368](https://github.com/Bdaya-Dev/oidc/issues/368)). ([c86bee17](https://github.com/Bdaya-Dev/oidc/commit/c86bee17189a0a70fee947c685e91a55062b1d35))
+ - **FIX**(oidc_cli): relax build_runner to avoid Flutter SDK pin conflicts. ([b8697530](https://github.com/Bdaya-Dev/oidc/commit/b86975307bde79bd00ba4b0ddacc558a875ed2f8))
+ - **FEAT**(storage): harden token storage at rest (RFC 9700 §4.9.3). ([76111b4a](https://github.com/Bdaya-Dev/oidc/commit/76111b4a1022a140c0b510e088becaed54835c0f))
+ - **FEAT**(oidc_cli): add provider-agnostic CLI package. ([2598ba4f](https://github.com/Bdaya-Dev/oidc/commit/2598ba4ffa0882fed971b7ecd44c1516bf7bef55))
+ - **DOCS**: remove logo branding from screenshots. ([2acf65d3](https://github.com/Bdaya-Dev/oidc/commit/2acf65d34fb47c0449653a73373168df3deb1735))
+ - **BREAKING** **CHORE**: v1 dependency upgrade + drop the pigeon global-tool wrapper. ([45b62a3e](https://github.com/Bdaya-Dev/oidc/commit/45b62a3ef3f5b42cfb590111c9e37e144bbc11b0))
+
 ## 1.0.4
 
  - Update a dependency to the latest release.

diff --git a/packages/oidc_cli/lib/src/version.dart b/packages/oidc_cli/lib/src/version.dart
diff --git a/packages/oidc_cli/pubspec.yaml b/packages/oidc_cli/pubspec.yaml
@@ -1,6 +1,6 @@
 name: oidc_cli
 description: A small provider-agnostic CLI for authenticating against an OpenID Connect (OIDC) provider.
-version: 1.0.4
+version: 2.0.0
 repository: https://github.com/Bdaya-Dev/oidc/tree/main/packages/oidc_cli
 homepage: https://bdaya-dev.github.io/oidc/
 topics: ["oidc", "openidconnect", "oauth", "authentication"]
@@ -13,8 +13,8 @@ dependencies:
   args: ^2.7.0
   cli_completion: ^0.5.1
   mason_logger: ^0.3.3
-  oidc_core: ^4.0.0
-  oidc_loopback_listener: ^1.1.1
+  oidc_core: ^5.0.0
+  oidc_loopback_listener: ^2.0.0
   path: ^1.9.1
   pub_updater: ^0.5.0
 
@@ -24,7 +24,7 @@ dev_dependencies:
   build_version: ^2.1.3
   # Used by the device-login integration test to sign the mock id_token + serve
   # a JWKS, so the test exercises the real (fail-closed) verification path.
-  jose_plus: ^1.0.1
+  jose_plus: ^2.0.0
   mocktail: ^1.0.4
   test: ^1.21.0
   very_good_analysis: ^10.0.0