v2025.9.2 Production Release

Notes

This version of the Custodia platform has been upgraded to utilize node 22.

New Features

• DEV-15357: API support added for forceMultiple during activity creation. This prevents duplicate activities from being created during file uploads.
• DEV-15369: Users can now set the PIN for their cards (DiPocket only currently).
• DEV-15405: The app name is now included in login info extra data for easier debugging.
• DEV-15402: An App Name column added to the login events grid in order to know which application a user was logged into.
• INF-1458: Security audit events added for single LinkedUserAccount deletions.
• INF-1464: Improved purchase order creation performance via AppUser optimizations.

Bug Fixes

• DEV-15325: Fixed card appearance on the Order Card screen based on user team.
• DEV-15368: Resolved ACL issues for DipocketUser.
• ZEN-37708: Fixed component loading issue when Linked Accounts is disabled.
• INF-1460: 404 responses from Expenses/findOne now properly propagate (instead of 500 response code errors).
• DEV-15373: Fixed duplicate entries from balance update file loading.
• DEV-15396: Fixed allocation duplication check in Activity Wizard when no currency is selected.
• DEV-15370: Suppressed Dipocket error messages in API responses.
• INF-1462: Rejected non-UTF-8 encoded CSV uploads.
• DEV-15173: Implemented handling for poison messages on failed transactions.
• INF-1466: Fixed billing start/end dates and corrected statement title in ICC billing.

Dependency Updates

• Bump: tar-fs from 2.1.2 to 2.1.3 in /custodia-ui.
• Bump: npm_and_yarn group across 14 directories with 3 updates.
• Bump: npm_and_yarn group across 13 directories with 1 update.
• INF-1459: General dependency updates.