chore(release): version packages

[github-actions]

This PR was opened by the Changesets release GitHub action. When you're ready to do a release, you can merge this and the packages will be published to npm automatically. If you're not ready to do a release yet, that's fine, whenever you add more changesets to main, this PR will be updated.

Releases

@forgerock/login-widget@2.0.0

Major Changes

• #468 89ae057 Thanks @vatsalparikh! - Migrate the journey flow implementation from @forgerock/javascript-sdk to @forgerock/journey-client.

Minor Changes

• #478 3d52dfc Thanks @SteinGabriel! - Add invisible reCAPTCHA v2, invisible hCaptcha, and reCAPTCHA Enterprise support.

  • Support invisible mode for both Google reCAPTCHA v2 and hCaptcha via configuration({ captcha: { mode: 'invisible' } }).
  • Add ReCaptchaEnterpriseCallback handler for AM journeys using the Enterprise CAPTCHA node — renders visible checkbox or score-based invisible flow automatically from callback data.
  • Add resolveGrecaptcha() helper that prefers window.grecaptcha.enterprise and falls back to classic window.grecaptcha, keeping existing consumers with migrated keys working without changes.
  • Show inline <Alert type="error"> on CAPTCHA failure or expiry for invisible modes.
  • Fix renderCaptcha to accept an optional elementId param to avoid DOM id collisions between classic and Enterprise components.

• #458 b0db37f Thanks @SteinGabriel! - Add support for custom callback and stage components.

• #450 2265fd7 Thanks @SteinGabriel! - Add TextInputCallback support in the login widget callback renderer.

  • Map and render TextInputCallback using existing text input composition patterns.
  • Include callback metadata handling so steps treat TextInputCallback as required user input.
  • Add Storybook coverage and Playwright E2E coverage for submit flow and TextInput edge cases.

• #470 b2bec85 Thanks @vatsalparikh! - Autofill with passkeys for Webauthn journeys

• #520 9355ed1 Thanks @SteinGabriel! - Add IDM theming support. Consumers can now pass a theme object to configuration({ style: { theme } }) to apply design tokens as CSS custom properties on the widget root. Supports primaryColor, secondaryColor, backgroundColor, linkColor, linkActiveColor, fontFamily, buttonBorderRadius, cardBorderRadius, cardBgColor, inputBgColor, inputBorderColor, inputLabelColor, inputTextColor, inputFocusRingColor, selectAccentColor, selectHoverBgColor, cardTextColor, bodyTextColor, buttonTextColor, buttonFocusRingColor, logo, logoHeight, and primaryOffColor. The Login App SSR layer fetches theme values from the IDM /openidm/config/ui/themerealm endpoint automatically.

• #516 ad1b599 Thanks @vatsalparikh! - Add dedicated stage for PingOne AIC admin registration flow (welcome, OTP verify, privacy policy, invalid invite).

• #400 5f8b168 Thanks @ryanbas21! - Migrate to Svelte 5, pnpm monorepo architecture, and fix published type declarations

  • Upgrade Svelte from v3/v4 to v5 with backward-compatible legacy mode
  • Restructure project into pnpm workspaces: packages/login-widget, apps/login-app, e2e/, core/
  • Fix published type declarations by namespacing core types under dist/core/ with correct relative paths
  • Upgrade Storybook from v7 to v10
  • Replace Rollup with Vite for all builds
  • Overhaul CI pipeline for pnpm strict dependency isolation

• #471 e574fab Thanks @ryanbas21! - Upgrade zod from 3.22.4 to ^4.3.6 and xss from 1.0.14 to ^1.0.15.

  • Migrate core/sdk.config.ts config schema to Zod v4: replace the removed
    z.function().args().returns() schema form with z.custom<Fn>() for the
    callbackFactory, middleware, and tokenStore function validators;
    collapse the z.nativeEnum(CallbackType) validator (which was part of the
    removed z.function().args() chain) into z.custom<CallbackFactoryFn>(); collapse
    { invalid_type_error, required_error } into the unified error
    callback.
  • Migrate core/_utilities/i18n.utilities.ts to the two-argument
    z.record(keySchema, valueSchema) form required by v4.
  • The inferred public config surface (z.infer<typeof partialConfigSchema>)
    is preserved; no behavior change at runtime.

Patch Changes

• #446 16d48f3 Thanks @SteinGabriel! - Fix English locale copy: authenticator typo and grammar wording updates.

• #489 eef8b31 Thanks @vatsalparikh! - Add dedicated MFA enrollment and recovery codes stages for multi-factor setup journeys, including a new mfa-enrollment.svelte stage that handles the MFA setup text-output callback script and a recovery-codes.svelte stage that displays one-time recovery codes after MFA registration.

Bug Fixes

• add loglevel to widget config: widget config to support loglevel option (db864e9)
• update-zod-config: zod-config-literals (37bfde6)

Features

• adds virtual authenticators (ec73811)
• ping-protect: implement-ping-protect (27993c6)
• recoverycodes: add-devicename-to-recoverycodes-page (3b728a3)

1.3.0-beta.2 (2024-05-28)

Bug Fixes

• update-zod-config: zod-config-literals (37bfde6)

1.3.0-beta.1 (2024-05-28)

Bug Fixes

• add loglevel to widget config: widget config to support loglevel option (db864e9)

Features

• adds virtual authenticators (ec73811)
• ping-protect: implement-ping-protect (27993c6)
• recoverycodes: add-devicename-to-recoverycodes-page (3b728a3)

1.3.0-beta.1 (2024-05-22)

Features

• adds virtual authenticators (ec73811)
• ping-protect: implement-ping-protect (27993c6)
• recoverycodes: add-devicename-to-recoverycodes-page (3b728a3)

1.3.0-beta.1 (2024-05-22)

Features

• adds virtual authenticators (ec73811)
• ping-protect: implement-ping-protect (27993c6)
• recoverycodes: add-devicename-to-recoverycodes-page (3b728a3)

1.3.0-beta.1 (2024-05-22)

Features

• adds virtual authenticators (ec73811)
• ping-protect: implement-ping-protect (27993c6)
• recoverycodes: add-devicename-to-recoverycodes-page (3b728a3)

1.3.0-beta.1 (2024-05-22)

Features

• adds virtual authenticators (ec73811)
• ping-protect: implement-ping-protect (27993c6)
• recoverycodes: add-devicename-to-recoverycodes-page (3b728a3)

1.3.0-beta.1 (2024-05-22)

Features

• adds virtual authenticators (ec73811)
• ping-protect: implement-ping-protect (27993c6)
• recoverycodes: add-devicename-to-recoverycodes-page (3b728a3)

1.3.0-beta.1 (2024-05-21)

Features

• adds virtual authenticators (ec73811)
• ping-protect: implement-ping-protect (27993c6)
• recoverycodes: add-devicename-to-recoverycodes-page (3b728a3)

1.2.1 (2024-01-09)

Bug Fixes

• accessible-fields-when-data-is-unchanged (9f8c32e)
• css: fix base css with link specificity issue (e7d69bf)
• e2e-defaults: improve e2e test usage convention and default redirect url (e988eb1)
• e2e: move-e2e-to-sdks-tenant (7d151d4)
• fixing-types: journey-type-updates (899d0ba)
• message-node: render-next-msg-node (c13bf93)
• tests: repair tests from tenant migration (13f41bb)
• widget-api: fix oauth and user disablement in journey config (c527d38)
• zod: improve the use of zod for configuration strictness (25c330b)

Features

• css-variables: build initial "design tokens" for run-time customization (d6107d8)
• LAW: improve rendering of TextOutputCallback's types (0d6af68)
• passwords-config: add config for show password display UI (bea26aa)
• passwords-config: add config for show password display UI (0c8221a)
• recaptcha: support-recaptcha-v2 (3364d0f)
• recaptchav3: implement v3 for recaptcha in LAW (7b83545)
• stage: add new QR Code stage for MFA device registration (b70bd31)

1.2.0-beta.13 (2023-12-15)

Features

• passwords-config: add config for show password display UI (bea26aa)
• passwords-config: add config for show password display UI (0c8221a)

1.2.0-beta.12 (2023-12-15)

Bug Fixes

• tests: repair tests from tenant migration (13f41bb)

1.2.0-beta.11 (2023-12-13)

Bug Fixes

• fixing-types: journey-type-updates (899d0ba)

1.2.0-beta.10 (2023-12-12)

Bug Fixes

• e2e: move-e2e-to-sdks-tenant (7d151d4)

Features

• recaptchav3: implement v3 for recaptcha in LAW (7b83545)

1.2.0-beta.9 (2023-11-13)

Bug Fixes

• message-node: render-next-msg-node (c13bf93)

1.2.0-beta.8 (2023-10-26)

Features

• stage: add new QR Code stage for MFA device registration (b70bd31)

1.2.0-beta.7 (2023-10-19)

Bug Fixes

• e2e-defaults: improve e2e test usage convention and default redirect url (e988eb1)

1.2.0-beta.6 (2023-10-19)

Features

• recaptcha: support-recaptcha-v2 (3364d0f)

1.2.0-beta.5 (2023-10-10)

Bug Fixes

• zod: improve the use of zod for configuration strictness (25c330b)

1.2.0-beta.4 (2023-10-05)

Bug Fixes

• css: fix base css with link specificity issue (e7d69bf)
• widget-api: fix oauth and user disablement in journey config (c527d38)

1.2.0-beta.3 (2023-10-05)

Features

• css-variables: build initial "design tokens" for run-time customization (d6107d8)

1.2.0-beta.2 (2023-09-19)

Bug Fixes

• accessible-fields-when-data-is-unchanged (9f8c32e)

1.2.0-beta.1 (2023-09-13)

Features

• LAW: improve rendering of TextOutputCallback's types (0d6af68)

1.2.0 (2023-09-12)

Features

• LAW: improve rendering of TextOutputCallback's types (0d6af68)

1.1.0 (2023-07-27)

Features

• callbacks: add-webauthn-support (26af184)
• callbacks: device-profile-node addition (a41fa12)

1.1.0-beta.2 (2023-06-22)

Features

• callbacks: add-webauthn-support (26af184)

1.1.0-beta.1 (2023-06-12)

Features

• callbacks: device-profile-node addition (a41fa12)

@forgerock/login-framework-cli@0.2.0

Minor Changes

• #464 1a8ab4e Thanks @SteinGabriel! - Add ping-lf CLI tool (tools/cli/) for bootstrapping and maintaining Login Framework projects.

  Three commands:

  • init <directory> — fetches a GitHub release and scaffolds a new project directory with all necessary configuration, dependencies, and an empty experimental/custom/ structure ready for pnpm install.
  • generate callback|stage <Name> — scaffolds a new custom callback or stage component from templates, naming files correctly (PascalCase → kebab-case). The framework's Vite plugin picks up the new component automatically on the next build or dev-server reload.
  • update [--version <ver>] — fetches the target framework release and overwrites core files while preserving experimental/custom/, and updates .generator-version.

  Installable via npm install -g @forgerock/login-framework-cli.