v4.15.1

EricLBuehler/mistral.rsv4.15.1Jun 8, 2026by github-actions[bot]

AI Summary

This patch release focuses on improving login flow reliability and security, including fixes for permission handling in user updates, session retry logic, and email verification redirects during forced MFA scenarios.

Key Highlights

Enhanced login flow with custom request headers support
Retry logic for session creation after registration
Improved handling of forced MFA scenarios
Dependency updates

Full Release Notes

## [4.15.1](https://github.com/zitadel/zitadel/compare/v4.15.0...v4.15.1) (2026-06-08)


### Bug Fixes

* **api:** check permission based on provided data on user updates ([a1748b2](https://github.com/zitadel/zitadel/commit/a1748b2f0326ddf7be0de44b4f980ae2c07c0151))
* **login:** apply custom request headers from environment variable in proxy ([#12144](https://github.com/zitadel/zitadel/issues/12144)) ([aad90ce](https://github.com/zitadel/zitadel/commit/aad90ce380b94d4aa5262ca4c40c661b462707b2)), closes [#12125](https://github.com/zitadel/zitadel/issues/12125)
* **login:** redirect to email verification when forced MFA has no visible factors ([#12060](https://github.com/zitadel/zitadel/issues/12060)) ([9618e33](https://github.com/zitadel/zitadel/commit/9618e33ff235f6ab3eaf23f018663989dd164fd7)), closes [#11536](https://github.com/zitadel/zitadel/issues/11536)
* **login:** retry logic for session creation after registration on NotFound ([#12189](https://github.com/zitadel/zitadel/issues/12189)) ([53d6439](https://github.com/zitadel/zitadel/commit/53d64399ca3e223bfcf1686445e6a7aa106e4218)), closes [#12173](https://github.com/zitadel/zitadel/issues/12173)
* update dependencies ([#12216](https://github.com/zitadel/zitadel/issues/12216)) ([787886d](https://github.com/zitadel/zitadel/commit/787886d5d404e09ebfac0da68e8367b3517ec1af))