backend/v2.4.0 v3.15.5

high risk

feder-cr/invisible_dotsJan 20, 2026 → Jan 26, 20266 days between releases

What's New

v3.15.5 fixes xstate build failures and diff security, but major jump from 2.4.0 may include undocumented breaking changes.

Breaking Changes

  • Major version jump from 2.4.0 to 3.15.5 may include breaking changes not documented in these release notes.

Improvements

  • Updated diff dependency from 4.0.2 to 4.0.4 to address security vulnerabilities.

Bug Fixes

  • Fixed xstate v4/v5 compatibility issue causing frontend build failures by adding npm overrides.
  • Updated diff dependency from 4.0.2 to 4.0.4 in CDK package to address security vulnerabilities.

Upgrade Notes

This is a major version jump (2.x to 3.x); review the full changelog for breaking changes beyond the two fixes listed. Ensure frontend builds use compatible xstate versions and update CDK dependencies to diff 4.0.4+. Test thoroughly in staging.

The Two Releases

backend/v2.4.0

Hanko 2.4

Jan 20, 2026· 9 months ago

Introduces alphanumeric passcodes, AWS KMS external key provider, and PKCE default for better security, along with multi-user device trust and Dutch localization.

Full release notes
v3.15.5

v3.15.5

Jan 26, 2026· 9 months ago

Addresses frontend build failures due to xstate compatibility and updates the diff dependency to address security vulnerabilities.

Full release notes