1.13.2 - Patch release

[DennisDyallo]

Release date: July 3rd, 2025

Features:

• A new RawData property, which exposes raw CBOR-encoded data, has been added to the FIDO2 MakeCredentialData class. (#225)
• A new VersionQualifier has been added for handling YubiKey firmware (by version number, type, and iteration). The YubiKeyDeviceInfo class has also been updated to support VersionQualifier. (#240)
• The GitHub Actions workflows have been updated to use the windows-2022 runner instead of windows-2019, which ensures compatibility with newer environments and improves the consistency of the build and publish pipelines. (#242)

Documentation:

• The documentation site has been updated with a new search bar, light/dark mode, new styling, and a modified table of contents. (#241)
• New documentation covering the YubiKey Bio Multi-protocol Edition and its quirks, including the DeviceReset() method, has been added. (#237)
• A discrepancy in the documentation on attestation statement generation has been fixed. (#236)
• The documentation covering the default management key value and algorithm has been clarified. (#233)
• The DER encoding details in the documentation on the PIV AuthenticateSignCommand() have been corrected. (#239)

Bug Fixes:

• NativeShims now outputs Net47 build files into the correct architecture-specific folders. Supported architectures include x86, x64, and Arm64. (#211)
• An ongoing dotnet issue that has broken the resolution of core libraries on macOS 15 prevented the SDK from locating important dependencies on Mac when using .NET8 and above. To fix macOS and .NET compatibility with the SDK, the CoreFoundation, IOKitFramework, and WinSCard constants have been updated to use absolute paths (/System/Library/Frameworks/...) instead of relative paths (.framework/...) to align with macOS system conventions. (#255)
• Use of the deprecated PivPrivateKey and PivPublicKey types when importing into the new PIV methods is now handled correctly (by throwing an exception). (#231)
• An issue affecting the use of the RSA-3072 and RSA-4096 algorithms with attestation certificates has been fixed. (#230)

Dependencies:

• The Yubico.NET.SDK repository now includes the GitHub dependabot to automate dependency updates for the nuget and dotnet-sdk package ecosystems. (#244)
• Several dependencies across the Core (Yubico.Core.csproj), Integration Tests (Yubico.YubiKey.IntegrationTests.csproj), Sandbox (Yubico.YubiKey.TestApp.csproj), Unit Tests (Yubico.YubiKey.UnitTests.csproj), and Utilities (Yubico.YubiKey.TestUtilities.csproj) projects have been updated to newer versions. (#256, #254, #250)

Deprecations:

• PivEccPublic, PivEccPrivateKey, PivRsaPublic, and PivRsaPrivateKey have been marked as obsolete. Use implementations of ECPublicKey, ECPrivateKey, RSAPublicKey, and RSAPrivateKey instead. (#231)
• The CreateFromPkcs8 methods in the Curve25519PublicKey, ECPublicKey, and RSAPublicKey classes have been marked as obsolete and replaced with new CreateFromSubjectPublicKeyInfo methods. (#243)

All changes:

• github: Add issue type to GitHub issue template by @DennisDyallo in github: Add issue type to GitHub issue template #232
• feat: Expose the cbor raw data from a MakeCredential command by @DennisDyallo in feat: Expose the cbor raw data from a MakeCredential command #225
• docs: Changed wording for default management key value and algorithm by @equijano21 in docs: Changed wording for default management key value and algorithm #233
• docs: Corrected docs on attestation statement by @equijano21 in docs: Corrected docs on attestation statement #236
• fix: Fixed bug importing PIV private key in legacy classes by @DennisDyallo in fix: Fixed bug importing PIV private key in legacy classes #231
• build(deps): bump setuptools from 70.0.0 to 78.1.1 in /Yubico.YubiKey/examples/python/PythonForNet by @dependabot in build(deps): bump setuptools from 70.0.0 to 78.1.1 in /Yubico.YubiKey/examples/python/PythonForNet #238
• fix,tests: Fixed bug where attest cert could not be RSA3072 or RSA4096, removed obsolete tests and consolidated Piv tests by @DennisDyallo in fix,tests: Fixed bug where attest cert could not be RSA3072 or RSA4096, removed obsolete tests and consolidated Piv tests  #230
• docs: New docs covering YubiKey Bio MPE quirks and special considerations by @equijano21 in docs: New docs covering YubiKey Bio MPE quirks and special considerations #237
• ci: Updating windows runners to 2022 by @DennisDyallo in ci: Updating windows runners to 2022 #242
• feat: Implement reading of VersionQualifier into YubikeyDeviceInfo by @DennisDyallo in feat: Implement reading of VersionQualifier into YubikeyDeviceInfo #240
• feat: Improved documentation site with search, dark mode, sitemap.xml and less cluttered navigation by @DennisDyallo in feat: Improved documentation site with search, dark mode, sitemap.xml and less cluttered navigation #241
• docs: Fix docs about encodings for PIV signing command by @YourMJK in docs: Fix docs about encodings for PIV signing command #239
• ci: Add dependabot scanning for dependency updates by @DennisDyallo in ci: Add dependabot scanning for dependency updates  #244
• refactor: Add consistent docs and proper naming for certain methods for creating keys by @DennisDyallo in refactor: Add consistent docs and proper naming for certain methods for creating keys #243
• ci: Add comprehensive summary for build by @DennisDyallo in ci: Add comprehensive summary for build #248
• ci: fix links for build output and add image hash by @DennisDyallo in ci: fix links for build output and add image hash #249
• Bump Microsoft.SourceLink.GitHub and System.Memory by @dependabot in Bump Microsoft.SourceLink.GitHub and System.Memory #250
• Bump Microsoft.Extensions.Logging.Console and 4 others by @dependabot in Bump Microsoft.Extensions.Logging.Console and 4 others #254
• Bump coverlet.collector and 11 others by @dependabot in Bump coverlet.collector and 11 others #253
• fix(net47): NativeShims correctly outputs net47 dlls in the correct folders by @DennisDyallo in fix(net47): NativeShims correctly outputs net47 dlls in the correct folders #211
• fix(macOS): Hard coding the default frameworks path in order to resolve macOS frameworks by @DennisDyallo in fix(macOS): Hard coding the default frameworks path in order to resolve macOS frameworks #255
• Update dependencies by @DennisDyallo in Update dependencies #256
• Replace Moq with NSubstitute by @DennisDyallo in Replace Moq with NSubstitute #258
• Update access modifier of VersionQualifier by @DennisDyallo in Update access modifier of VersionQualifier #261

New Contributors

• @YourMJK made their first contribution in docs: Fix docs about encodings for PIV signing command #239

Full Changelog: 1.13.1...1.13.2

---

This discussion was created from the release 1.13.2.