backend/v2.6.0

elizaOS/elizabackend/v2.6.0Jun 5, 2026by FreddyDevelop

AI Summary

This release introduces an Inactivity Logout feature that allows user sessions to be terminated based on user inactivity, along with an updated session validation endpoint.

Key Highlights

  • Inactivity Logout for user sessions
  • New idle_expires_at timestamp in /sessions/validate endpoint
  • WebAuthn credential signature count check
  • Updated Vue and Go dependencies

New Features

  • Inactivity logout configuration
  • WebAuthn signature count check

Full Release Notes

The main feature of this release is **Inactivity Logouts**, which allow user sessions to be proactively terminated if no user activity is detected.

This can be configured via a new configuration option. In addition, an `idle_expires_at` timestamp is now returned by the `/sessions/validate` endpoint, allowing frontends to react to upcoming idle logouts accordingly.

Beyond that, we updated a number of dependencies and included several small bug fixes.

## What's Changed
* chore(deps): bump vue from 3.5.25 to 3.5.29 in /frontend by @dependabot[bot] in https://github.com/teamhanko/hanko/pull/2459
* chore(deps-dev): bump prettier from 3.6.2 to 3.8.1 in /frontend by @dependabot[bot] in https://github.com/teamhanko/hanko/pull/2460
* feat: webauthn cred signature count check by @lfleischmann in https://github.com/teamhanko/hanko/pull/2464
* chore(deps-dev): bump @vitejs/plugin-react from 4.5.0 to 5.1.4 in /frontend by @dependabot[bot] in https://github.com/teamhanko/hanko/pull/2467
* fix: handle email claim as (*)EmailJWT when reading JWT by @lfleischmann in https://github.com/teamhanko/hanko/pull/2466
* chore(deps-dev): bump css-loader from 6.11.0 to 7.1.4 in /frontend by @dependabot[bot] in https://github.com/teamhanko/hanko/pull/2469
* chore(deps): bump github.com/knadh/koanf/v2 from 2.3.2 to 2.3.3 in /backend by @dependabot[bot] in https://github.com/teamhanko/hanko/pull/2479
* chore(deps-dev): bump turbo from 2.8.12 to 2.8.13 in /frontend by @dependabot[bot] in https://github.com/teamhanko/hanko/pull/2476
* chore(deps): bump preact from 10.28.2 to 10.28.4 in /frontend by @dependabot[bot] in https://github.com/teamhanko/hanko/pull/2484
* chore(deps): bump github.com/aws/aws-sdk-go-v2/service/kms from 1.50.1 to 1.50.2 in /backend by @dependabot[bot] in https://github.com/teamhanko/hanko/pull/2482
* chore(deps): bump github.com/aws/aws-sdk-go-v2/config from 1.32.10 to 1.32.11 in /backend by @dependabot[bot] in https://github.com/teamhanko/hanko/pull/2477
* chore(deps): bump github.com/docker/cli from 27.4.1+incompatible to 29.2.0+incompatible in /backend by @dependabot[bot] in https://github.com/teamhanko/hanko/pull/2485
* chore(deps-dev): bump sass-loader from 13.3.3 to 16.0.7 in /frontend by @dependabot[bot] in https://github.com/teamhanko/hanko/pull/2473
* fix: listener cleanups by @lfleischmann in https://github.com/teamhanko/hanko/pull/2486
* chore(deps): bump docker/setup-qemu-action from 3 to 4 by @dependabot[bot] in https://github.com/teamhanko/hanko/pull/2495
* chore(deps): bump docker/setup-buildx-action from 3 to 4 by @dependabot[bot] in https://github.com/teamhanko/hanko/pull/2494
* chore(deps): bump docker/login-action from 3 to 4 by @dependabot[bot] in https://github.com/teamhanko/hanko/pull/2493
* chore(deps): bump docker/build-push-action from 6 to 7 by @dependabot[bot] in https://github.com/teamhanko/hanko/pull/2492
* chore(deps): bump docker/metadata-action from 5 to 6 by @dependabot[bot] in https://github.com/teamhanko/hanko/pull/2491
* fix: add timeout to webhook trigger requests by @lfleischmann in https://github.com/teamhanko/hanko/pull/2488
* chore(deps): bump github.com/aws/aws-sdk-go-v2/config from 1.32.11 to 1.32.12 in /backend by @dependabot[bot] in https://github.com/teamhanko/hanko/pull/2500
* chore(deps): bump github.com/aws/aws-sdk-go-v2/service/kms from 1.50.2 to 1.50.3 in /backend by @dependabot[bot] in https://github.com/teamhanko/hanko/pull/2509
* chore: update go version by @lfleischmann in https://github.com/teamhanko/hanko/pull/2496
* chore(deps): bump golang.org/x/oauth2 from 0.35.0 to 0.36.0 in /backend by @dependabot[bot] in https://github.com/teamhanko/hanko/pull/2489
* chore(deps): bump golang.org/x/text from 0.34.0 to 0.35.0 in /backend by @dependabot[bot] in https://github.com/teamhanko/hanko/pull/2497
* chore(deps): bump golang.org/x/crypto from 0.48.0 to 0.49.0 in /backend by @dependabot[bot] in https://github.com/teamhanko/hanko/pull/2498
* chore(deps-dev): bump turbo from 2.8.13 to 2.8.17 in /frontend by @dependabot[bot] in https://github.com/teamhanko/hanko/pull/2515
* chore(deps-dev): bump @tsconfig/node24 from 24.0.3 to 24.0.4 in /frontend by @dependabot[bot] in https://github.com/teamhanko/hanko/pull/2514
* chore(deps): bump jwks-rsa from 3.2.0 to 4.0.1 in /frontend by @dependabot[bot] in https://github.com/teamhanko/hanko/pull/2512
* chore(deps): bump next from 16.0.10 to 16.1.7 in /frontend by @dependabot[bot] in https://github.com/teamhanko/hanko/pull/2511
* chore(deps-dev): bump turbo from 2.8.17 to 2.8.18 in /frontend by @dependabot[bot] in https://github.com/teamhanko/hanko/pull/2523
* chore(deps-dev): bump vue-tsc from 3.2.5 to 3.2.6 in /frontend by @dependabot[bot] in https://github.com/teamhanko/hanko/pull/2522
* chore(deps): bump express from 4.22.1 to 5.2.1 in /frontend by @dependabot[bot] in https://github.com/teamhanko/hanko/pull/2521
* chore(deps): bump github.com/lib/pq from 1.11.2 to 1.12.0 in /backend by @dependabot[bot] in https://github.com/teamhanko/hanko/pull/2518
* chore(deps): bump github.com/russellhaering/goxmldsig from 1.5.0 to 1.6.0 in /backend by @dependabot[bot] in https://github.com/teamhanko/hanko/pull/2517
* chore(deps): bump github.com/russellhaering/gosaml2 from 0.10.0 to 0.11.0 in /backend by @dependabot[bot] in https://github.com/teamhanko/hanko/pull/2516
* chore(deps): bump github.com/buger/jsonparser from 1.1.1 to 1.1.2 in /backend by @dependabot[bot] in https://github.com/teamhanko/hanko/pull/2525
* chore(deps): bump next from 16.1.7 to 16.2.0 in /frontend by @dependabot[bot] in https://github.com/teamhanko/hanko/pull/2526
* chore(deps-dev): bump webpack-cli from 5.1.4 to 7.0.2 in /frontend by @dependabot[bot] in https://github.com/teamhanko/hanko/pull/2528
* chore(deps): bump @rollup/rollup-linux-x64-gnu from 4.55.1 to 4.59.0 in /frontend by @dependabot[bot] in https://github.com/teamhanko/hanko/pull/2529
* chore(deps): bump vue from 3.5.29 to 3.5.30 in /frontend by @dependabot[bot] in https://github.com/teamhanko/hanko/pull/2536
* chore(deps): bump github.com/knadh/koanf/v2 from 2.3.3 to 2.3.4 in /backend by @dependabot[bot] in https://github.com/teamhanko/hanko/pull/2534
* chore(deps-dev): bump @vitejs/plugin-vue from 6.0.3 to 6.0.5 in /frontend by @dependabot[bot] in https://github.com/teamhanko/hanko/pull/2543
* chore(deps): bump zone.js from 0.16.0 to 0.16.1 in /frontend by @dependabot[bot] in https://github.com/teamhanko/hanko/pull/2544
* chore(deps): bump vue-router from 5.0.3 to 5.0.4 in /frontend by @dependabot[bot] in https://github.com/teamhanko/hanko/pull/2545
* chore(deps-dev): bump turbo from 2.8.18 to 2.8.20 in /frontend by @dependabot[bot] in https://github.com/teamhanko/hanko/pull/2550
* chore(deps): bump @rollup/rollup-linux-x64-gnu from 4.59.0 to 4.60.0 in /frontend by @dependabot[bot] in https://github.com/teamhanko/hanko/pull/2551
* fix: explicitly disable spellcheck on inputs by @lfleischmann in https://github.com/teamhanko/hanko/pull/2541
* chore(deps-dev): bump jest from 30.2.0 to 30.3.0 in /frontend by @dependabot[bot] in https://github.com/teamhanko/hanko/pull/2552
* chore(deps-dev): bump sass from 1.97.1 to 1.98.0 in /frontend by @dependabot[bot] in https://github.com/teamhanko/hanko/pull/2555
* chore(deps-dev): bump webpack from 5.105.2 to 5.105.4 in /frontend by @dependabot[bot] in https://github.com/teamhanko/hanko/pull/2553
* chore(deps-dev): bump @vue/tsconfig from 0.8.1 to 0.9.1 in /frontend by @dependabot[bot] in https://github.com/teamhanko/hanko/pull/2556
* feat: add idle timeouts by @lfleischmann in https://github.com/teamhanko/hanko/pull/2540
* ci: bump go and node workflow versions by @lfleischmann in https://github.com/teamhanko/hanko/pull/2558
* chore(deps): bump github.com/gobuffalo/pop/v6 from 6.1.1 to 6.2.1 in /backend by @dependabot[bot] in https://github.com/teamhanko/hanko/pull/2533
* chore(deps): bump next from 16.2.0 to 16.2.1 in /frontend by @dependabot[bot] in https://github.com/teamhanko/hanko/pull/2570
* chore(deps): bump vue from 3.5.30 to 3.5.31 in /frontend by @dependabot[bot] in https://github.com/teamhanko/hanko/pull/2569
* chore(deps): bump github.com/aws/aws-sdk-go-v2/service/kms from 1.50.3 to 1.50.4 in /backend by @dependabot[bot] in https://github.com/teamhanko/hanko/pull/2565
* chore(deps): bump github.com/aws/aws-sdk-go-v2/config from 1.32.12 to 1.32.13 in /backend by @dependabot[bot] in https://github.com/teamhanko/hanko/pull/2563
* chore(deps): bump github.com/rs/zerolog from 1.34.0 to 1.35.0 in /backend by @dependabot[bot] in https://github.com/teamhanko/hanko/pull/2575
* chore(deps): bump github.com/lib/pq from 1.12.0 to 1.12.1 in /backend by @dependabot[bot] in https://github.com/teamhanko/hanko/pull/2574
* chore(deps): bump github.com/jackc/pgx/v5 from 5.8.0 to 5.9.1 in /backend by @dependabot[bot] in https://github.com/teamhanko/hanko/pull/2573
* chore(deps): bump github.com/go-playground/validator/v10 from 10.30.1 to 10.30.2 in /backend by @dependabot[bot] in https://github.com/teamhanko/hanko/pull/2576
* chore(deps): bump github.com/aws/aws-sdk-go-v2/config from 1.32.13 to 1.32.14 in /backend by @dependabot[bot] in https://github.com/teamhanko/hanko/pull/2578
* chore(deps): bump github.com/go-jose/go-jose/v4 from 4.1.3 to 4.1.4 in /backend by @dependabot[bot] in https://github.com/teamhanko/hanko/pull/2581
* chore(deps): bump github.com/lib/pq from 1.12.1 to 1.12.3 in /backend by @dependabot[bot] in https://github.com/teamhanko/hanko/pull/2582
* feat: add idle expires at timestamp to session validation response by @lfleischmann in https://github.com/teamhanko/hanko/pull/2585
* chore: increase frontend versions to 2.6.0 by @FreddyDevelop in https://github.com/teamhanko/hanko/pull/2591


**Full Changelog**: https://github.com/teamhanko/hanko/compare/backend/v2.5.0...backend/v2.6.0