1.7.0

Breaking Changes Ahead!

• Add AttestationValueException.Reason.TIME to indicate too far off or missing attestation statement creation
  time inside the attestation statement (in contrast to Certificate validity issues)
• Add attestationStatementValiditySeconds to Android attestation configuration, to set a custom attestation statement
  validity.
  Defaults to 5 minutes (i.e. 300)
• Fix verification time calculation

1.6.0

• Rebrand to WARDEN-roboto
• Update to latest upstream attestation code
  • rollbackResistant -> rollbackResistance
  • Dependency Updates
    • Guava: 33.2.1-jre
    • autovalue: 1.11.0
    • protobuf-javalite: 4.27.0

1.5.2

• Support HTTP proxy for fetching Android Revocation list
• Dependency Updates:
  • Java 17
  • Kotlin 2.0.0
  • bouncycastle: 1.78.1!!
  • coroutines: 1.8.1
  • datetime: 0.6.0
  • kmmresult: 1.6.1
  • kotest: 5.9.1!!
  • kotlin: 2.0.0
  • ksp: 1.0.22
  • ktor: 2.3.11
  • napier: 2.7.1
  • nexus: 1.3.0
  • serialization: 1.7.1

1.5.1

• dependency updates
• correctly expose guava as api dependency

1.5.0

• Kotlin 1.9.22
• Update to latest android-key-attestation codebase from Google (2024-01-31)
• Dependency updates:
  • Bouncy Castle 1.77
  • Ktor 2.3.7
  • kotlinx.datetime 0.5.0
  • Napier 2.7.1
  • Guava 33.0.0-jre
  • Error Prone 2.24.1
  • (NEW) AutoValue 1.10.4

1.4.0

• reorganized constructors for less confusing file-based config loading
• update to latest conventions plugin
• build against JDK11 as per gradle.properties

1.3.0

• make configuration play nicely with file-based config loading (e.g. HopLite)

1.2.1

• make all config classes data classes

1.2.0

• introduce well-defined error codes for every way an attestation can fail
• refactor exception hierarchy as a consequence

1.1.0

• introduce builder for AppData