diff --git a/CHANGELOG.md b/CHANGELOG.md index f1bb948e..5450d0c3 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -1,5 +1,14 @@ # Change Log +## [3.2.1](https://github.com/auth0/Lock.Android/tree/3.2.2) (2023-01-11) +[Full Changelog](https://github.com/auth0/Lock.Android/compare/3.2.1...3.2.2) + +This patch release does not contain any functional changes, but is being released using an updated signing key for verification as part of our commitment to best security practices. +Please review [the README note for additional details.](https://github.com/auth0/Lock.Android/blob/main/README.md) + +**Security** +- Bump Auth0.Android dependency to 2.8.1 [\#652](https://github.com/auth0/Lock.Android/pull/652) ([poovamraj](https://github.com/poovamraj)) + ## [3.2.1](https://github.com/auth0/Lock.Android/tree/3.2.1) (2022-06-24) [Full Changelog](https://github.com/auth0/Lock.Android/compare/3.2.0...3.2.1) diff --git a/README.md b/README.md index d2f2ef96..cf39fd28 100644 --- a/README.md +++ b/README.md @@ -1,3 +1,8 @@ +> **Note** +> As part of our ongoing commitment to best security practices, we have rotated the signing keys used to sign previous releases of this SDK. As a result, new patch builds have been released using the new signing key. Please upgrade at your earliest convenience. +> +> While this change won't affect most developers, if you have implemented a dependency signature validation step in your build process, you may notice a warning that past releases can't be verified. This is expected, and a result of the key rotation process. Updating to the latest version will resolve this for you. + ![Lock for Android](https://cdn.auth0.com/website/sdks/banners/lock-android-banner.png) [![CircleCI](https://circleci.com/gh/auth0/Lock.Android.svg?style=shield)](https://circleci.com/gh/auth0/Lock.Android) @@ -38,7 +43,7 @@ android { Lock is available in [Maven Central](http://search.maven.org). To start using *Lock* add this line to the dependencies of your `build.gradle` file: ```groovy -implementation 'com.auth0.android:lock:3.2.1' +implementation 'com.auth0.android:lock:3.2.2' ``` ## Next Steps