🆕 New Features

🕒 Session Timeout Callback Added: Applications can now alert users before idle or hard session timeouts, and optionally extend sessions. Developers must implement the new callbacks to prevent unexpected logouts. Refer to SDK docs for full implementation details.
🔐 Code Obfuscation: Previously unprotected sections of the SDK are now obfuscated to enhance security.

🐛 Bug Fixes

❌ Immediate Session Expiry on Device Deletion: Fixed a bug where active sessions on deleted devices were not expiring until a server-triggered timeout. Now, sessions expire immediately on device deletion or status change via GM API.
🔁 Password Fallback Fix: Resolved an issue where users couldn't fall back to password authentication after cancelling LDA during normal login (especially when the password was added later from another device).
🧠 Forgot Password Flow Fix: Fixed an issue causing users to be incorrectly prompted for device activation after password reset on new or reinstalled devices. Now users can log in directly after verifying their new password (based on activationtoken challenge).
🔐 NO_AUTH Login Fix: Fixed a bug where apps incorrectly prompted for a password instead of biometric or Ditto ID Pattern when the auth type was set to NO_AUTH.
💾 Memory Leak Fixes: Addressed multiple memory leaks across SDK modules.

🧾 Regula Android SDKs:
- DocumentReader: v7.7.11299
- DocumentReaderFullAuthRFID: v7.7.13549
🍏 Regula iOS SDKs:
- DocumentReader: v7.7.4496
- DocumentReaderFullAuthRFID: v7.7.12011

The SDK now throws an error for missing Passive Authentication certificates only when:
- NFC scan is enabled AND
- No PKD certificate is added in the application.

🧼 Removed demo palm capture API and callbacks.
🏷 Updated label: "Re-capture" → "Recapture" across all IDV and biometric opt-in/out flows for consistency.

🐞 Improved Threat Message: App Tampering message now begins with "Debugger is attached" for better clarity.
📶 VPN Threat Fixes:
- Corrected threat level to Low
- Included SSID and BSSID details in the VPN threat payload.