1.15.1 - January release

[DennisDyallo]

1.15.1

Release date: January 28th, 2026

Bug Fixes:

• Fixed regression in Piv sample app (#398

Documentation:

• The documentation on PIV certificate sizes has been restructured to improve clarity and readability. Additionally, firmware behavior details and practical examples have been added/updated. (#356)

Dependencies:

• Several dependencies across integration, unit, and utilities test projects, the test app, and the Yubico.Core and Yubico.YubiKey projects have been updated. (#388, #387, #386, #384)

What's Changed:

• docs: third-party payment extension by @equijano21 in docs: third-party payment extension #349
• docs: updated 1.15.0 release notes by @equijano21 in docs: updated 1.15.0 release notes #364
• [StepSecurity] Apply security best practices by @step-security-bot in [StepSecurity] Apply security best practices #366
• build(deps): bump nginx from b3c656d to 289deca by @dependabot[bot] in build(deps): bump nginx from b3c656d to 289deca #368
• build(deps): bump the github-actions group with 8 updates by @dependabot[bot] in build(deps): bump the github-actions group with 8 updates #372
• Bump Serilog.Sinks.Console and System.Configuration.ConfigurationManager by @dependabot[bot] in Bump Serilog.Sinks.Console and System.Configuration.ConfigurationManager #388
• Bump Microsoft.Bcl.Cryptography and 3 others by @dependabot[bot] in Bump Microsoft.Bcl.Cryptography and 3 others #387
• Bump Microsoft.Bcl.AsyncInterfaces and 4 others by @dependabot[bot] in Bump Microsoft.Bcl.AsyncInterfaces and 4 others #386
• Bump Microsoft.CodeAnalysis.NetAnalyzers and 3 others by @dependabot[bot] in Bump Microsoft.CodeAnalysis.NetAnalyzers and 3 others #384
• build(deps): bump the github-actions group across 1 directory with 6 updates by @dependabot[bot] in build(deps): bump the github-actions group across 1 directory with 6 updates #379
• build(deps): bump nginx from 289deca to 052b75a by @dependabot[bot] in build(deps): bump nginx from 289deca to 052b75a #375
• refactor: apply least privilege principle to workflow permissions by @DennisDyallo in refactor: apply least privilege principle to workflow permissions #389
• docs: edits to page covering max PIV cert sizes by @equijano21 in docs: edits to page covering max PIV cert sizes  #356
• chore(deps): bump the github-actions group with 3 updates by @dependabot[bot] in chore(deps): bump the github-actions group with 3 updates #393
• Bump the all_packages group with 10 updates by @dependabot[bot] in Bump the all_packages group with 10 updates #394
• chore(deps): bump nginx from 052b75a to 66d420c by @dependabot[bot] in chore(deps): bump nginx from 052b75a to 66d420c #392
• fix(piv): Fix YubiKeySignatureGenerator.DigestData regression in Sample App by @DennisDyallo in fix(piv): Fix YubiKeySignatureGenerator.DigestData regression in Sample App #398
• chore(deps): bump nginx from 66d420c to 2622096 by @dependabot[bot] in chore(deps): bump nginx from 66d420c to 2622096 #400
• Bump the all_packages group with 1 update by @dependabot[bot] in Bump the all_packages group with 1 update #401
• chore(deps): bump the github-actions group with 5 updates by @dependabot[bot] in chore(deps): bump the github-actions group with 5 updates #402
• Release/1.15.1 by @DennisDyallo in Release/1.15.1 #403

New Contributors

• @step-security-bot made their first contribution in [StepSecurity] Apply security best practices #366

Full Changelog: 1.15.0...1.15.1

---

This discussion was created from the release 1.15.1 - January release.