1.3.1rc2

ACA-Py 1.3.1 is a maintenance release that focuses on improving reliability, developer experience, and project documentation. It includes important fixes, updated links and metadata, and minor enhancements, particularly in support of long-term stability and governance clarity.

This release includes:

• Extensive updates to outdated or redirected links in documentation and code comments, moving references from Hyperledger to the OpenWallet Foundation and other current locations.
• A fix to a concurrency issue (described in #3738) in the newer anoncreds endpoint that assigns a revocation index to a credential. The operation is new wrapped in a transaction, ensuring data consistency under load.
• Expanded options for running the ACA-Py demo, with support added for Microsoft Dev Tunnels and improved out-of-band connection flows.
• Updates to project governance documentation, including the Code of Conduct, Security Policy, and Maintainers Guide, aligned with the OpenWallet Foundation processes.
• Logging improvements for better observability, especially around public DID handling, routing keys, and outbound websocket messages.
• Demo enhancements, including migration to prompt_toolkit 3.x and fixes to markdown and code formatting issues.
• A fix ensuring webhook events for V2 credential and presentation exchange are correctly emitted after database persistence, preventing race conditions.
• Minor bug fixes and test coverage improvements, including regression test additions and index error handling.

This release also prepares for future long-term support (LTS) work, with internal updates to Docker tags, versioning, and CI metadata. No breaking changes are introduced. As always, routine Dependabot updates were also included to keep dependencies current and secure.

1.3.1 Deprecation Notices

In the next ACA-Py release, we will be dropping from the core ACA-Py repository the AIP 1.0 RFC 0037 Issue Credentials v1.0 and RFC 0037 Present Proof v1.0 DIDComm protocols. Each of the protocols will be moved to the ACA-Py Plugins repo. All ACA-Py implementers that use those protocols SHOULD update as soon as possible to the AIP 2.0 versions of those protocols (RFC 0453 Issue Credential v2.0 and RFC 0454 Present Proof v2.0, respectively). Once the protocols are removed from ACA-Py, anyone still using those protocols MUST adjust their configuration to load those protocols from the respective plugins.

1.3.1 Breaking Changes

There are no breaking changes in this release.

What's Changed

• 🐛 Fix v2 cred ex and pres ex webhook events to emit after db write by @ff137 in #3699
• chore(deps): Update qrcode[pil] requirement from ~=8.1 to ~=8.2 in /demo by @dependabot in #3707
• chore(deps): Bump qrcode from 8.1 to 8.2 by @dependabot in #3705
• chore(deps): Bump postgres from fe3f571 to 304ab81 in /demo/docker-test/db by @dependabot in #3704
• chore(deps): Bump python from e2c7fb0 to 0a886c1 in /scenarios by @dependabot in #3703
• Update images and tags to version 1.3.0 by @jamshale in #3708
• chore(deps): Bump github/codeql-action from 3.28.16 to 3.28.17 in the all-actions group by @dependabot in #3709
• 🎨 Add missing anoncreds field to V20CredExRecordDetail model by @ff137 in #3710
• Feat(demo): migrate to prompt_toolkit 3.x (Fixes #3681) by @andrepestana-aot in #3713
• chore(deps): Bump python from 0a886c1 to d188cfc in /scenarios by @dependabot in #3715
• chore(deps): Bump postgres from 304ab81 to 8648313 in /demo/docker-test/db by @dependabot in #3716
• chore(deps): Bump SonarSource/sonarqube-scan-action from 5.1.0 to 5.2.0 in the all-actions group by @dependabot in #3718
• ⬆️ Update lock file by @ff137 in #3720
• Regress test to check #2818 issue by @andrepestana-aot in #3721
• 🔊 Improve logging in Handlers by @ff137 in #3722
• TestDeleteTails testcase fixes and indexError fix by @ann-aot in #3727
• chore(deps): Bump github/codeql-action from 3.28.17 to 3.28.18 in the all-actions group by @dependabot in #3729
• 🎨 Fix codeblock typing in DIDResolution.md by @ff137 in #3730
• 🔊 Improve logging related to public DIDs and routing keys by @ff137 in #3719
• Cleanup markdown errors in docs/demo/readme by @swcurran in #3734
• Add websocket outbound debug log by @jamshale in #3736
• chore(deps-dev): Bump pydevd-pycharm from 251.25410.122 to 252.16512.37 by @dependabot in #3743
• chore(deps): Bump uuid-utils from 0.10.0 to 0.11.0 by @dependabot in #3742
• Remove unnecessary hash pinning by @jamshale in #3744
• Fix broken links in the aca-py.org site / documentation by @swcurran in #3745
• Tag and Recreate ACA-Py LTS Release by @pradeepp88 in #3735
• Cleaned up more broken links and updates some code permalinks by @swcurran in #3748
• Updates to links in the docs and code comments to URLs that have been redirected -- mostly from Hyperledger to OWF and DIF by @swcurran in #3750
• Update the ACA-Py Security, Code of Conduct, and Maintainers Documents by @swcurran in #3749
• Demo: Change mediation connection to out-of-band by @jamshale in #3751
• 1.3.1rc0 by @swcurran in #3752
• Remove header from http/ws responses by @jamshale in #3753
• chore(deps-dev): Bump pydevd-pycharm from 252.16512.37 to 252.18003.35 by @dependabot in #3758
• chore(deps-dev): Bump pytest-xdist from 3.6.1 to 3.7.0 by @dependabot in #3756
• Repair lts workflow by @jamshale in #3759
• chore(deps): Bump aiohttp from 3.11.18 to 3.12.6 by @dependabot in #3757
• Update webvh package version by @PatStLouis in #3763
• alice/faber demo supports Microsoft dev tunnels by @davidchaiken in #3755
• chore(deps): Bump the all-actions group with 3 updates by @dependabot in #3760
• ⚡ Skip upgrade check for status checks by @ff137 in #3761
• chore: Remove did:indy Stub by @TheTechmage in #3764
• 1.3.1rc1 by @swcurran in #3765
• chore(deps): Bump pytest from 8.3.4 to 8.4.0 in /scenarios by @dependabot in #3768
• chore(deps): Bump pytest from 8.3.4 to 8.4.0 in /demo/playground/examples by @dependabot in #3767
• chore(deps-dev): Bump pytest from 8.3.5 to 8.4.0 by @dependabot in #3766
• chore(deps): Bump github/codeql-action from 3.28.18 to 3.28.19 in the all-actions group by @dependabot in #3769
• Add multi key id binding (supersedes #3472) by @PatStLouis in #3762
• chore(deps): Bump the pip group across 3 directories with 1 update by @dependabot in #3770
• chore(deps): Bump portalocker from 3.1.1 to 3.2.0 by @dependabot in #3776
• chore(deps-dev): Bump pytest-cov from 6.1.1 to 6.2.1 by @dependabot in #3778
• Disable lts-recreate workflow for main branch by @jamshale in #3773
• chore(deps): Bump the all-actions group with 3 updates by @dependabot in #3781
• chore(deps): Bump urllib3 from 2.2.3 to 2.5.0 in /scenarios in the pip group across 1 directory by @dependabot in #3786
• chore(deps-dev): Bump ruff from 0.11.9 to 0.12.0 by @dependabot in #3788
• chore(deps-dev): Bump pytest-ruff from 0.4.1 to 0.5 by @dependabot in #3789
• chore(deps-dev): Bump pydevd-pycharm from 252.18003.35 to 252.23309.36 by @dependabot in #3787
• chore(deps): Bump docker/setup-buildx-action from 3.11.0 to 3.11.1 in the all-actions group by @dependabot in #3791
• chore(deps): Bump the pip group across 2 directories with 1 update by @dependabot in #3790
• Put cred_rev_id read, increment and write in a transaction by @jamshale in #3793
• 🧪 Skip tests with jsonld url resolution failures by @ff137 in #3798
• 🐛 Improve efficiency of revoking credentials by @ff137 in #3795
• 1.3.1rc2 by @swcurran in #3800

New Contributors

• @andrepestana-aot made their first contribution in #3713
• @ann-aot made their first contribution in #3727

Full Changelog: 1.3.0...1.3.1rc2