[github-actions]

Publishes IDKit Kotlin 4.2.0.

Included changes:

• #339 adds the Nullifier API.
• #343 updates the shared Rust Bridge: polling now reports timeout, rate-limit, and server HTTP responses as errors. The Kotlin release workflow compiles this Rust Core into the published package.
• #358 adds native session creation with uniqueness proofs.
• #359 updates the bundled native TLS trust: rustls-webpki 0.103.16 rejects the eight compromised eMudhra intermediate public keys, and webpki-roots 1.0.10 removes emSign ECC Root CA - G3. This release rebuilds the Kotlin native libraries from the updated lockfile; existing installed SDK binaries require an upgrade.

Validation for the CA update:

• cargo test --locked -p idkit-core --lib --features ffi: 137 passed.
• A local certificate harness using IDKit's locked dependency versions accepted a normal control chain and explicitly rejected all eight upstream compromised public keys with CertDistrusted. The old versions accepted the same locally signed fixtures.
• Confirmed emSign ECC Root CA - G3 is absent from the updated bundled root store.
• Native reqwest HTTPS checks completed TLS against the public bridge and developer portal; both returned HTTP 403, so this is TLS connectivity evidence only.

Release rollout remains necessary: existing installed native binaries keep their embedded verifier/root store until consumers upgrade.

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated
idkit-js-example	Ready	Preview	Oct 21, 2026 5:30pm UTC