4.10.0 (2026-01-23)

⚠️ There was an issue in the build pipeline and the "SMS country code selector to SMS OTP (LoginV1)" was not correctly built. Please use v4.10.1 if you rely on the new feature.

Bug Fixes

• api: correctly handle organization_id on creation (#11396) (2f909ff), closes #11269
• login v1: only check password expiry for local users with password (#11344) (7eb3bd5)
• login: passkey reauth (#11365) (11630c5)
• login: prevent eventual consistency issues on /password/change, missing permissions (#11371) (56bd6d9), closes #11345
• login: use constructUrl for implicit IdP success/failure URLs (#11389) (d3321c8), closes #11386

Features

• Add SMS country code selector to SMS OTP (LoginV1) (#11373) (8968dbe), closes #8891
• api: allow filtering apps by client id and entity id (#11385) (b4cecc8), closes #11340
• cmd: skip privileged database commands during initialization if objects already present (#11021) (0d8c8d2), closes #10730
• i18n: add Arabic language support (#11161) (4ff4526), closes #11146