v4.16.0

OpenBB-finance/OpenBBv4.16.0Jul 10, 2026by github-actions[bot]

AI Summary

This release focuses on resolving a wide range of login and authentication bugs, improving UI accessibility and contrast, and optimizing user list performance. It also introduces compliance features and new configuration options for secret generators.

Key Highlights

  • Performance optimization for user list retrieval by login name.
  • Login flow improvements including custom protocols and error handling.
  • FIPS 140-3 compliance for cryptographic operations.
  • UI/UX enhancements for login screens and account navigation.

New Features

  • FIPS 140-3 compliant build and runtime checks.
  • Allow managing invite codes in secret generators.

Full Release Notes

# [4.16.0](https://github.com/zitadel/zitadel/compare/v4.15.3...v4.16.0) (2026-07-10)


### Bug Fixes

* correct scope validation in token exchange ([#12312](https://github.com/zitadel/zitadel/issues/12312)) ([02d07e9](https://github.com/zitadel/zitadel/commit/02d07e951b0b6ff8d5fa5e74b65209a8e9efddfe)), closes [#12319](https://github.com/zitadel/zitadel/issues/12319) [#12322](https://github.com/zitadel/zitadel/issues/12322) [#12319](https://github.com/zitadel/zitadel/issues/12319) [#12322](https://github.com/zitadel/zitadel/issues/12322)
* Correctly remove adjacent roles on user grants ([dc89900](https://github.com/zitadel/zitadel/commit/dc899002ec77eb30c1c2ab6326dcccf6f522d419))
* increase performance of ListUser by login name ignore case ([#12350](https://github.com/zitadel/zitadel/issues/12350)) ([8fed358](https://github.com/zitadel/zitadel/commit/8fed3582c47f01724bb70cf199570188f24a692d))
* **login:** allow custom protocols for native apps again ([#12332](https://github.com/zitadel/zitadel/issues/12332)) ([5b3c10e](https://github.com/zitadel/zitadel/commit/5b3c10ecd7cf4730071eab3acbd05afd2d470405))
* **login:** improve contrast of IDP processing message ([#12309](https://github.com/zitadel/zitadel/issues/12309)) ([30ad9ab](https://github.com/zitadel/zitadel/commit/30ad9ab8a1afc8fb9af00fd653b96560ff1a1d3d))
* **login:** improve error handling for user registration ([#12338](https://github.com/zitadel/zitadel/issues/12338)) ([fa916e7](https://github.com/zitadel/zitadel/commit/fa916e7659695d0e101d3af9c2b9afb155de7909))
* **login:** migrate legacy Tailwind v4 opacity utilities and fix checkbox contrast color ([#12360](https://github.com/zitadel/zitadel/issues/12360)) ([70850db](https://github.com/zitadel/zitadel/commit/70850db9d53ebdc96cdab40f6c04c654bbd2da78))
* **login:** preserve org domain suffix through account chooser navigation ([#12304](https://github.com/zitadel/zitadel/issues/12304)) ([3311fb9](https://github.com/zitadel/zitadel/commit/3311fb9ccdbcd232a59da148791bc906c04314c6)), closes [#12024](https://github.com/zitadel/zitadel/issues/12024)
* **login:** Prevent IDP auto-creation failure when name fields are missing ([#11070](https://github.com/zitadel/zitadel/issues/11070)) ([ab2e099](https://github.com/zitadel/zitadel/commit/ab2e099514ff63ff39c3c36755301d461d237dd3))
* **login:** redirect to loginname instead of empty accounts page when org scope filters all sessions ([#12346](https://github.com/zitadel/zitadel/issues/12346)) ([f21f95c](https://github.com/zitadel/zitadel/commit/f21f95ce37699c5ed48618ccfa0839dfb09ee954)), closes [#11914](https://github.com/zitadel/zitadel/issues/11914)
* **login:** use correct requestId with oidc_ prefix in Prompt.LOGIN + loginHint flow ([#12376](https://github.com/zitadel/zitadel/issues/12376)) ([57eb145](https://github.com/zitadel/zitadel/commit/57eb1453f26db3efdfcce26f294ad0436363e9db)), closes [#11946](https://github.com/zitadel/zitadel/issues/11946) [#11946](https://github.com/zitadel/zitadel/issues/11946)
* prevent double triggering of verification emails ([#11995](https://github.com/zitadel/zitadel/issues/11995)) ([9ae9bf3](https://github.com/zitadel/zitadel/commit/9ae9bf3bc8bc55b9f47d72c48e51584fc935b814))


### Features

* allow managing invite code in secret generators ([#12109](https://github.com/zitadel/zitadel/issues/12109)) ([915586a](https://github.com/zitadel/zitadel/commit/915586a40f1174014b116a2a653e4933468a2465))
* **crypto:** FIPS 140-3 compliant build and runtime checks ([#12233](https://github.com/zitadel/zitadel/issues/12233)) ([c03d9f4](https://github.com/zitadel/zitadel/commit/c03d9f4c6ecbd4af39e5c4dbd876244f3740e13a))