RC 484

User-Facing Improvements

• Authentication: Add help articles (#12186)

Bug Fixes

• Document Capture Security: Fix file upload vulnerability in TrueID SDK (#12201)

RC 483

User-Facing Improvements

• In-person Proofing: Update barcode page and ready to verify emails to account for users who skip location search (#12193) (#12193)
• PIV/CAC errors: Add language for PIV/CAC errors (#12200)

Internal

• Images refactor: Add IdvImage object to help with image handling (#12197)
• Reporting: Add Monthly IRS Verification Report job (#12198)

Upcoming Features

• Attempts API: Small changes to existing events (#12203)
• Attempts API: Add language attribute to events (#12202) (#12202)
• Attempts API: Log event for event polling (#12196)

RC 482

Internal

• Doc Auth: Change log for ab test for all of idv (#12190)
• Document Authentication: TrueIDReponse successful if transaction status passes (#12177)
• Internal Report: IRS Verification Report (#12178, #12194)
• Maintenance: Remove unused feature_pending_in_person_password_reset_enabled configuration (#12192)
• Maintenance: Add backfill task for InPersonEnrollment document type (#12149)
• One Account: Create job to track deletion workflow dropouts (#12187)
• One Verified Account: Use separate feature flag for logging duplicate profiles (#12195)

Upcoming Features

• Attempts API: Add idv-ssn-submitted event (#12189)
• In-person Proofing: Add passport info section to verify info form (#12181)

RC 481

Bug Fixes

• Authentication: Phishing resistant required at options screen lists available mfas until fully logged in (#12167)

Internal

• Maintenance: Update gems (#12184)

Upcoming Features

• Attempts API: Add idv-address-submitted event (#12188)
• Attempts API: Add idv-verification-submitted event (#12185)
• Attempts API: User registration email events (#12175)
• Document Authentication: A/B vendor routing for DocAuth w/ selfie (#12156)
• In-person Proofing: Add passport submit without DoS surname check (#12168)

RC 480

Internal

• DataWarehouse Alerts: Update the TableSummaryStatsExportJob rails job to also check cloudwatch (#12165)
• Dependencies: Update dependencies to latest versions (#12180)
• Report: IRS Verification Report (#12147)
• DataWarehouse Alerts: Update the TableSummaryStatsExportJob rails job to use the right timestamp filter for idp tables (#12182)

Upcoming Features

• Attempts API: Add login-rate-limited and session-timeout events (#12176)
• Doc Auth: Passport feature specs (#12141)
• In-person Proofing: Add Passport Content to Ready to Verify View and Email. Content renders based on document_type on InPersonEnrollment (#12162)

RC 479

Internal

• Analytics: Remove redundant events (#12159)
• Background Jobs: Limit total size for CreateNewDeviceAlertJob to 1k (#12170) (#12170)
• Internal Report: Additional Query (#12151)
• Reporting: IRS Reporting updates for email subject title (#12173) (#12173)

Upcoming Features

• Attempts API: Add generic mfa-enrolled event and update existing ones to use it (#12163)
• Attempts API: Add enroll and login phone-otp-sent events (#12171)
• Doc Auth: Remove upload option for IAL1 (#12157)
• In-person proofing: Display different content when passports are enabled (#12153)
• One Account: Add table to record user confirmation of duplicate profiles (#12123)

RC 478

Bug Fixes

• Profile: Delete related DuplicateProfileConfirmations when deleting Profile (#12164)

Internal

• Attempts API: Allow creating AgencyIdentity if it does not exist (#12155)
• Attempts API: Fix incorrect event exceptions and nil users (#12161)
• Background Jobs: Limit batch size and total size for CreateNewDeviceAlertJob (#12166)
• Dependencies: Update dependencies with vulnerabilities (#12160)
• Reporting: IRS Monthly Fraud Metrics Report (#12124)
• Reporting: IRS Authentication Report (#12136)

Upcoming Features

• Attempts API: Adds idv-phone events (#12158)
• Doc Auth: Show one image on review issues page for passport (#12094)

RC 477

User-Facing Improvements

• In-person Proofing: Add empty location icon alt text translations (#12138) (#12138)

Bug Fixes

• Authentication: Ensure new device is evaluated consistently in sign-in reCAPTCHA (#12142)
• Profiles: Update ssn fingerprint with normalized form (#12140)

Internal

• IPP: Write document_type when saving enrollments (#12097)
• In-person proofing: Document and Update address-search Package (#12143) (#12143)
• Specs: Fixing flakey cancel specs (#12146)

Upcoming Features

• Attempts API: Adds idv-enrollment-complete event (#12132)
• Attempts API: Adds forgot-password-email-sent event (#12150)
• Attempts API: Updating events to address feedback (#12145)
• Doc Auth: Add new address screen for passports (#12120)
• Doc Auth: Add a/b test for disabling manual document upload (#12139)
• In-person proofing: Add address, ssn, and verify info to IPP passport flow (#12134)
• In-person proofing: Add second DOS health check after post office selection (#12133)
• In-person proofing: Set document_type on InPersonEnrollment for Passports (#12135)

RC 476

Internal

• Doc Auth: Rename state_id_type to id_doc_type (#12130)

Upcoming Features

• Attempts API: Add account recovery events (#12122)
• In-person proofing: IPP Passport Form (#12095)

RC 475

User-Facing Improvements

• Doc Auth: Support re enter mail address from verify by mail (#12116)
• In-person Proofing: USPS Locations Outage Detection (#12100) (#12100)

Bug Fixes

• Identity-Hostdata: Sharing the secret file under analytics/v1 between the analytics and analytics-migration instance (Issue 968) (#12125)

Internal

• Maintenance: Update net-imap gem (#12128)
• Reporting: Add SSN Signature Report (#12075)

Upcoming Features

• Attempts API: Wiring in doc escrow in the local document upload event (#12117)
• Doc Auth: Verify passports with TrueID (#12121)