27 January 2026

Production release: 27 January 2026
Staging release: 22 January 2026

22 January 2026

HSTS Implementation (STAGE): Enabled HTTP Strict Transport Security (HSTS) headers for all HTTPS responses in the Stage environment to enforce secure, encrypted browser connections.
Regional mTLS Updates : Updated production mTLS domain names for non-US regions to ensure regional connectivity and compliance.
Legal Compliance : Updated the legal consent copy to align with the latest requirements.
Login Tracking : Enhanced logging by ensuring the lastLoginTimestamp is updated for every TID User login.
Email Change Log Improvements : Improved observability by including “Old Email” details in the success logs whenever a user’s email address is updated via change email workflow.
Email Validation : Introduced a 512-character limit for email addresses to ensure compatibility.
Mail Module Refactoring : Refactored email builder methods into a dedicated module to centralize mail content management and improve code reusability.
Configuration Cleanup : Removed the deprecated global configuration path /id/mtls_endpoint/iam.

Social User MFA Fix: Resolved an issue preventing users with legacy MFA formats (string-based) from logging in via social federation when “Enforce MFA” was enabled.
Session Management : Fixed a runtime error occurring during the handling of Cognito sessions.
Admin Console Stability : Fixed a bug where users were prematurely logged out of the Admin Console when attempting an account-level password reset after an idle period.
mTLS Syncing : Fixed a synchronization error affecting the /sync/{proxy+} mTLS endpoint.
Database Reliability : Resolved a ValidationException in DynamoDB by enforcing strict character limits on email inputs before they reach the database layer.