4.0.3

4.0.3 - 2026-02-05

Security

⚠️ Update immediately: CVE-2026-23989, a security issue in public links is resolved in v4.0.3.

We recommend all deployments running previous versions to update to one of these releases immediately.

❤️ Thanks to all contributors! ❤️

@ScharfViktor, @aduffeck, @fschade, @kulmann, @micbar, @prashant-gurung899, @saw-jan

🐛 Bug Fixes

• Bump reva 2.40.3 [#2275]

✅ Tests

• [tests-only] port tests to stable #2087 #2039 [#2185]
• [full-ci][tests-only] port test fixes [#2017]
• [stable-4.0] Port #2011 [#2018]

📦️ Dependencies

• Bump reva [#2274]

Reva

• fix(authscope): Fix parent check [#522]