Download Latest Version v4.20.0 source code.zip (172.6 MB) Google Add to Preferred Sources
Home / v4.19.5
Name Modified Size InfoDownloads / Week
Parent folder
zitadel-darwin-amd64.tar.gz 2026-10-15 53.1 MB
0
zitadel-linux-amd64.tar.gz 2026-10-15 52.2 MB
0
zitadel-windows-amd64.tar.gz 2026-10-15 53.0 MB
0
zitadel-darwin-arm64.tar.gz 2026-10-15 50.6 MB
0
zitadel-windows-arm64.tar.gz 2026-10-15 48.5 MB
0
zitadel-linux-arm64.tar.gz 2026-10-15 48.4 MB
0
zitadel-login.tar.gz 2026-10-15 16.4 MB
0
checksums.txt 2026-10-15 763 Bytes
0
README.md 2026-10-15 3.4 kB
0
v4.19.5 source code.tar.gz 2026-10-15 168.1 MB
0
v4.19.5 source code.zip 2026-10-15 172.6 MB
0
Totals: 11 Items   662.9 MB 0

4.19.5 (2026-10-15)

⚠️ Upgrade notes

  • Device authorization: users now confirm the device on a consent screen. If a project requires a grant to authenticate, users without one can no longer sign in through the device flow. Custom login UIs need the session.read permission for GetDeviceAuthorizationRequest.
  • Login V2: email and invite verification, passkey registration and IdP linking are now also protected by ZITADEL_SESSION_COOKIE_SECRET. If you use a value from an example configuration (e.g. SessionCookieSecretNeedsAtLeast32Chars from the compose .env.example), replace it with a random one. Users in the middle of one of these steps during the upgrade have to repeat it.
  • List limits: list endpoints now enforce the default and maximum query limits (A10018).

Bug Fixes

Source: README.md, updated 2026-10-15