release: version packages

Author: silverhand-bot

.changeset/big-games-deny.md

@@ -1,5 +1,13 @@
 # Change Log
 
+## 1.28.0
+
+### Patch Changes
+
+- Updated dependencies [35bbc4399]
+  - @logto/shared@3.3.0
+  - @logto/schemas@1.28.0
+
 ## 1.27.0
 
 ### Minor Changes

.changeset/dirty-mice-fail.md

@@ -1,6 +1,6 @@
 {
   "name": "@logto/cli",
-  "version": "1.27.0",
+  "version": "1.28.0",
   "description": "Logto CLI.",
   "author": "Silverhand Inc. <contact@silverhand.io>",
   "homepage": "https://github.com/logto-io/logto#readme",
@@ -44,8 +44,8 @@
   "dependencies": {
     "@logto/connector-kit": "workspace:^4.3.0",
     "@logto/core-kit": "workspace:^2.6.0",
-    "@logto/schemas": "workspace:1.27.0",
-    "@logto/shared": "workspace:^3.2.0",
+    "@logto/schemas": "workspace:1.28.0",
+    "@logto/shared": "workspace:^3.3.0",
     "@silverhand/essentials": "^2.9.1",
     "@silverhand/slonik": "31.0.0-beta.2",
     "chalk": "^5.3.0",

.changeset/funny-eels-wonder.md

@@ -0,0 +1,7 @@
+# @logto/connector-qq
+
+## 1.0.0
+
+### Major Changes
+
+- 2f8f9d631: add QQ social connector for web

.changeset/honest-news-rush.md

@@ -1,6 +1,6 @@
 {
   "name": "@logto/connector-qq",
-  "version": "0.1.0",
+  "version": "1.0.0",
   "description": "QQ web connector implementation.",
   "author": "Yen Harvey. <2117555041@qq.com>",
   "dependencies": {

.changeset/moody-turtles-bake.md

@@ -1,5 +1,22 @@
 # Change Log
 
+## 1.25.0
+
+### Minor Changes
+
+- 35bbc4399: add phone number validation and parsing to ensure the correct format when updating an existing user’s primary phone number or creating a new user with a phone number
+- e8df19b7e: feat: introduce email blocklist settings page
+
+  Add a new email blocklist settings page to the Logto console under the Security section. This page allows administrators to manage the email blocklist policy for end users. Use this policy to restrict users from signing up or linking their accounts with any email addresses that are against the specified blocklist.
+
+### Patch Changes
+
+- 80112708d: always show enable CAPTCHA toggle
+
+  Even if there is no CAPTCHA provider, the toggle will be shown but disabled.
+
+  Also the back link of the captcha details page is changed to `/security/captcha`.
+
 ## 1.24.0
 
 ### Minor Changes

.changeset/nice-houses-sneeze.md

@@ -1,6 +1,6 @@
 {
   "name": "@logto/console",
-  "version": "1.24.0",
+  "version": "1.25.0",
   "description": "> TODO: description",
   "author": "Silverhand Inc. <contact@silverhand.io>",
   "homepage": "https://github.com/logto-io/logto#readme",
@@ -35,8 +35,8 @@
     "@logto/phrases": "workspace:^1.19.0",
     "@logto/phrases-experience": "workspace:^1.10.0",
     "@logto/react": "^4.0.6",
-    "@logto/schemas": "workspace:^1.27.0",
-    "@logto/shared": "workspace:^3.2.0",
+    "@logto/schemas": "workspace:^1.28.0",
+    "@logto/shared": "workspace:^3.3.0",
     "@mdx-js/react": "^3.0.1",
     "@mdx-js/rollup": "^3.0.1",
     "@monaco-editor/react": "^4.6.0",

.changeset/perfect-phones-relax.md

@@ -1,5 +1,63 @@
 # Change Log
 
+## 1.28.0
+
+### Minor Changes
+
+- 35bbc4399: add phone number validation and parsing to ensure the correct format when updating an existing user’s primary phone number or creating a new user with a phone number
+- 613305ec8: refactor: make the `userinfo_endpoint` field optional in the OIDC connector configuration to support providers like Azure AD B2C that do not expose a userinfo endpoint
+
+  Azure AD B2C SSO applications do not provide a userinfo_endpoint in their OIDC metadata. This has been a blocker for users attempting to integrate Azure AD B2C SSO with Logto, as our current implementation strictly follows the OIDC spec and relies on the userinfo endpoint to retrieve user claims after authentication.
+
+  - Updated the OIDC config response schema to make the userinfo_endpoint optional for OIDC based SSO providers.
+  - If the `userinfo_endpoint` is missing from the provider's OIDC metadata, the system will now extract user data directly from the `id_token` claims.
+  - If the `userinfo_endpoint` is present, the system will continue to retrieve user claims by calling the endpoint (existing behavior).
+
+  `userinfo_endpoint` is a standard OIDC field that specifies the endpoint for retrieving user information. For most of the OIDC providers, this update will not affect this existing implementation. However, for Azure AD B2C, this change allows users to successfully authenticate and retrieve user claims without the need for a userinfo endpoint.
+
+- e8df19b7e: feat: introduce email blocklist policy
+
+  We have added a new `emailBlocklistPolicy` in the `signInExperience` settings. This policy allows you to customize the email restriction rules for all users. Once this policy is set, users will be restricted from signing up or linking their accounts with any email addresses that are against the specified blocklist.
+  This feature is particularly useful for organizations that want to prevent users from signing up with personal email addresses or any other specific domains.
+
+  Available settings include:
+
+  - `customBlocklist`: A custom blocklist of email addresses or domains that you want to restrict.
+  - `blockSubaddressing`: Restrict email subaddressing (e.g., 'user+tag@example.com').
+
+- 494148355: refactor: enhanced user lookup by phone with phone number normalization
+
+  In some countries, local phone numbers are often entered with a leading '0'. However, in the context of the international format this leading '0' should be stripped. E.g., +61 (0)2 1234 5678 should be normalized to +61 2 1234 5678.
+
+  In the previous implementation, Logto did not normalize the user's phone number during the user sign-up process. Both 61021345678 and 61212345678 were considered as valid phone numbers, and we do not normalize them before storing them in the database. This could lead to confusion when users try to sign-in with their phone numbers, as they may not remember the exact format they used during sign-up. Users may also end up with different accounts for the same phone number, depending on how they entered it during sign-up.
+
+  To address this issue, especially for legacy users, we have added a new enhenced user lookup by phone with either format (with or without leading '0') to the user sign-in process. This means that users can now sign-in with either format of their phone number, and Logto will try to match it with the one stored in the database, even if they might have different formats. This will help to reduce confusion and improve the user experience when logging in with phone numbers.
+
+  For example:
+
+  - If a user signs up with the phone number +61 2 1234 5678, they can now sign-in with either +61 2 1234 5678 or +61 02 1234 5678.
+  - The same applies to the phone number +61 02 1234 5678, which can be used to sign-in with either +61 2 1234 5678 or +61 02 1234 5678.
+
+  For users who might have created two different accounts with the same phone number but different formats. The lookup process will always return the one with an exact match. This means that if a user has two accounts with the same phone number but different formats, they will still be able to sign-in with either format, but they will only be able to access the account that matches the format they used during sign-up.
+
+  For example:
+
+  - If a user has two accounts with the phone numbers +61 2 1234 5678 and +61 02 1234 5678. They will need to sign-in to each account using the exact format they used during sign-up.
+
+  related github issue [#7371](https://github.com/logto-io/logto/issues/7371).
+
+### Patch Changes
+
+- Updated dependencies [35bbc4399]
+- Updated dependencies [80112708d]
+- Updated dependencies [e8df19b7e]
+- Updated dependencies [c1dfbfdd2]
+  - @logto/experience@1.14.0
+  - @logto/console@1.25.0
+  - @logto/shared@3.3.0
+  - @logto/schemas@1.28.0
+  - @logto/cli@1.28.0
+
 ## 1.27.0
 
 ### Minor Changes

.changeset/red-rules-cheat.md

@@ -1,6 +1,6 @@
 {
   "name": "@logto/core",
-  "version": "1.27.0",
+  "version": "1.28.0",
   "description": "The open source identity solution.",
   "main": "build/index.js",
   "author": "Silverhand Inc. <contact@silverhand.io>",
@@ -33,7 +33,7 @@
     "@koa/cors": "^5.0.0",
     "@logto/affiliate": "^0.1.0",
     "@logto/app-insights": "workspace:^2.1.0",
-    "@logto/cli": "workspace:^1.27.0",
+    "@logto/cli": "workspace:^1.28.0",
     "@logto/connector-kit": "workspace:^4.3.0",
     "@logto/console": "workspace:*",
     "@logto/core-kit": "workspace:^2.6.0",
@@ -43,8 +43,8 @@
     "@logto/language-kit": "workspace:^1.2.0",
     "@logto/phrases": "workspace:^1.19.0",
     "@logto/phrases-experience": "workspace:^1.10.0",
-    "@logto/schemas": "workspace:^1.27.0",
-    "@logto/shared": "workspace:^3.2.0",
+    "@logto/schemas": "workspace:^1.28.0",
+    "@logto/shared": "workspace:^3.3.0",
     "@silverhand/essentials": "^2.9.1",
     "@silverhand/slonik": "31.0.0-beta.2",
     "@simplewebauthn/server": "^10.0.0",

.changeset/soft-eggs-sell.md

@@ -1,5 +1,11 @@
 # Change Log
 
+## 1.28.0
+
+### Patch Changes
+
+- @logto/cli@1.28.0
+
 ## 1.27.0
 
 ### Minor Changes

.changeset/swift-glasses-drive.md

@@ -1,6 +1,6 @@
 {
   "name": "@logto/create",
-  "version": "1.27.0",
+  "version": "1.28.0",
   "author": "Silverhand Inc. <contact@silverhand.io>",
   "license": "MPL-2.0",
   "type": "module",
@@ -15,6 +15,6 @@
     "node": "^22.14.0"
   },
   "dependencies": {
-    "@logto/cli": "workspace:^1.27.0"
+    "@logto/cli": "workspace:^1.28.0"
   }
 }

packages/cli/CHANGELOG.md

@@ -1,5 +1,15 @@
 # Change Log
 
+## 1.14.0
+
+### Minor Changes
+
+- 35bbc4399: add phone number validation and parsing to ensure the correct format when updating an existing user’s primary phone number or creating a new user with a phone number
+
+### Patch Changes
+
+- c1dfbfdd2: add CAPTCHA box to identifier sign in form
+
 ## 1.13.0
 
 ### Minor Changes

packages/cli/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@logto/experience",
-  "version": "1.13.0",
+  "version": "1.14.0",
   "license": "MPL-2.0",
   "type": "module",
   "private": true,
@@ -26,8 +26,8 @@
     "@logto/language-kit": "workspace:^1.2.0",
     "@logto/phrases": "workspace:^1.19.0",
     "@logto/phrases-experience": "workspace:^1.10.0",
-    "@logto/schemas": "workspace:^1.27.0",
-    "@logto/shared": "workspace:^3.1.4",
+    "@logto/schemas": "workspace:^1.28.0",
+    "@logto/shared": "workspace:^3.3.0",
     "@react-spring/shared": "^9.6.1",
     "@react-spring/web": "^9.6.1",
     "@silverhand/eslint-config": "6.0.1",

packages/connectors/connector-qq/CHANGELOG.md

@@ -1,5 +1,11 @@
 # Change Log
 
+## 1.13.0
+
+### Minor Changes
+
+- 35bbc4399: add phone number validation and parsing to ensure the correct format when updating an existing user’s primary phone number or creating a new user with a phone number
+
 ## 1.12.0
 
 ### Minor Changes

packages/connectors/connector-qq/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@logto/integration-tests",
-  "version": "1.12.0",
+  "version": "1.13.0",
   "description": "Integration tests for Logto.",
   "author": "Silverhand Inc. <contact@silverhand.io>",
   "license": "MPL-2.0",
@@ -29,8 +29,8 @@
     "@logto/core-kit": "workspace:^",
     "@logto/js": "^5.1.0",
     "@logto/node": "^3.1.3",
-    "@logto/schemas": "workspace:^1.27.0",
-    "@logto/shared": "workspace:^3.2.0",
+    "@logto/schemas": "workspace:^1.28.0",
+    "@logto/shared": "workspace:^3.3.0",
     "@silverhand/eslint-config": "6.0.1",
     "@silverhand/essentials": "^2.9.1",
     "@silverhand/ts-config": "6.0.0",