RC 424

User-Facing Improvements

• Content: Improve text spacing for some content in Simplified Chinese (#11356)
• F/T Unlock passkeys: Move userVerification to discouraged (#11354) (#11354)
• In-person Proofing: Fix ipp emails to distinguish between selected and visited location name (#11353)
• In-person proofing: Update signout link text (#11325)
• Split document capture: Added helpful explanation to the selfie page. (#11367)

Bug Fixes

• Login Button Component: Update hover state (#11366)

Internal

• Analytics: Add feature usage table to Protocols Report (#11369) (#11369)
• Automated Testing: Restructure PIV/CAC setup spec for consistency (#11355)
• Automated Testing: Extract common spec helpers for decoding OIDC tokens (#11371)
• CI: Fixing service name reference, adding additional env vars to review-apps (#11372) (#11372)
• Code Quality: Remove unused view code (#11342)
• Code Quality: Consolidate phishing-resistant MFA checks to protocol controllers (#11375)
• Configuration: Add test to require all config defined in application.yml.default (#11365)
• Dependencies: Update dependencies to resolve security advisories (#11358)
• Identity Proofing: Log state_id_type on doc auth verify proofing results event (#11328)
• Linting: Update rspec-rails to lint deprecated enum keywords (#11364)
• Logging: Add cpu_time and idle_time to job logs (#11376)
• Maintenance: Update good_job in preparation for 4.0 upgrade (#11374)
• Maintenance: Remove compose-components JavaScript package (#11373)
• Socure: Download and store reason codes weekly (#11350)
• Tests: Updating some tests to be easier to read (#11352) (#11352)
• event tracking: Remove out dated doc auth event tracker (#11361)
• split doc auth: Remove past code and refrences to single page doc auth and split conditionals (#11343)

Upcoming Features

• reCAPTCHA: Enable reCAPTCHA in log-only mode (#11349)

RC 423

User-Facing Improvements

• In-person proofing: Update Chinese translation on How to Verify view for selfie (#11344)
• Partner account: Cancel adding email (#11303)

Internal

• Test Coverage: Making acr_values the default test case (#11345)

RC 422

Bug Fixes

• Document Capture: Extend session when moving between document capture steps (#11333)

Internal

• Analytics: Adding facial match issuers query to report (#11339)
• Analytics: Log edit distance for SSNs (#11331, #11336)
• CI: Adding label to ArgoCD application manifest (#11332)
• Tests: Updating to default to acr_values (#11335)

RC 421

User-Facing Improvements

• Doc Auth: Change alt text to selfie green checkmark (#11310)
• Camera capture: Update french text during camera capture (#11330)

Bug Fixes

• Account Reset: Fix race condition where concurrent requests to cancel could result in an exception (#11329)
• In-person Proofing: Fix 404 Error on PO Search Page (#11287)

Internal

• Analytics: Streamlining inclusion of resolved ACR names (#11307)
• Configuration: Remove configuration not needed any longer (#11326)
• In-person proofing: Increased @18f/identity-address-search version number to next major version (#11322)
• Reporting: Sensitive tag to all columns (#11316)
• Deploying: Cuts over review app deployment to kustomize overlay/base instead of helm chart (#11125)

Upcoming Features

• Partner Email Selection: Add analytics for consent screen email selection (#11321)
• Identity verification: socure in hybrid handoff (#11289)

RC 420

User-Facing Improvements

• Identity verification: Updates to French and Simplified Chinese translations (#11305)
• In-person proofing: Add step indicator to how to verify view (#11298)
• Document authentication: Updating attempts messages (#11308)

Internal

• Facial Match: Update language (#11304)
• In-person proofing: Fix specs (#11314) (#11314)
• Refactoring: Move constant to appropriate owner (#11306)

Upcoming Features

• Account creation: Threat metrix addiition (#11278)
• Partner Email Selection: Add translations for email not yet selected (#11320)
• Document authentication: Visual and content changes for split doc auth capture pages (#11285)

RC 419

Internal

• Facial Match: Update more language (#11301)
• Identity Proofing: Update code to reflect program language (#11296)
• Logging: Add liveness flag to all relevant events. (#11292)
• Tooling: Add SQLite support to query-cloudwatch command (#11291)

Upcoming Features

• split doc auth: Adding feature tests for more code coverage in prep for split doc auth FF enabling (#11263)

RC 418

User-Facing Improvements

• Identity verification: Verify license expiration dates with AAMVA. (#11283)
• Account verified email: Prompt user to return to SP (#11295)

Bug Fixes

• Sign up: Add request id (#11286)

Internal

• Analytics: Add app_differentiator field to events (#11262)

Upcoming Features

• Identity verification: Send phone number to Socure (#11272)

RC 417

Bug Fixes

• In-person proofing: Update USPS Proofing Results Job exclude overwriting profile deactivation reason (#11261)

Internal

• Deploy: Deploy to EKS (#11231)
• In-person proofing: Accept String when scrubbing sponsor id with ipp helper (#11269)
• Reporting: Fix database query timeout in report (#11284)
• Reporting: Add Idv legacy to biometric conversion (#11276)

RC 416

User-Facing Improvements

• Identity verification: Added new selfie capture heading to selfie step in for split doc auth (#11241) (#11241)

Bug Fixes

• In-person Proofing: Add validation for PO search that matches other address field validations (#11224) (#11224)

Internal

• Account Management: Include identity-verified status in account reset delete event (#11236)
• Code Quality: Remove unused variant for phone input component (#11260)
• Dependencies: Update google-protobuf (#11273)
• Dependencies: Update dependency to latest version (#11257)
• Dependencies: Update Puma (#11271)
• Identity verification: Prevent errors during verify info step due to missing session id. (#11254)
• Protocols: Update saml_idp gem version (#11270)
• Webauthn Setup: Move aaguid call in webauthn setup form (#11248)

Upcoming Features

• reCAPTCHA: Add reCAPTCHA disclaimer text to sign-in page (#11253)

RC 415

User-Facing Improvements

• Reports: Verified (event) field in Drop Off report description and calculation updated for accuracy (#11234)

Bug Fixes

• Personal Keys: Fix double personal key generation when using personal key as second factor (#11227)

Internal

• In-person proofing: Set state id controller feature flag to true in test (#11217)

Upcoming Features

• doc auth: Seperate selfie and doc capture into seperate form pages (steps) based on FF (#11194)