---
title: "0.21"
description: "Database Migration Framework"
stack: "Enterprise Stack (commercial) — version 0.21.0"
stack_version: "0.21.0"
stack_comparison: https://docs.walt.id/community-vs-enterprise.md
canonical_url: https://docs.walt.id/enterprise-stack/release-notes/releases/0.21.x
generated: 2026-07-20
---
# 0.21

## 0.21.0

### Features

**Database Migration Framework**

- Implemented cluster-aware database migration framework for safe multi-node deployments.
- Added dry run and rollback capabilities for migrations.
- Added node restart recovery and cluster state management.
- Added progress logging for migration tracking.
- Added migration for organization tree collection timestamps.
- Ensured database backward compatibility with existing data.

**Transaction Data Support**

- Added transaction_data support in verifier2 flows.
- Implemented config-driven transaction data type profiles via endpoint.
- Added UI integration for transaction data with profile-driven configuration.
- Validated and restricted transaction data to specific credential formats.
- Enforced authentication on transaction-data-profiles endpoint.
- Aligned transaction data handling with OpenID4VP specification.

**Resource Timestamps**

- Added `createdAt` and `updatedAt` timestamps to TreeEntry interface.
- Ensured timestamps are evaluated in enterprise backend service (not client-provided).
- Added index for sorting by `updatedAt` field.
- Moved timestamp fields to end of resource constructors for compatibility.
- Added migration for existing data to populate timestamp fields.

**X.509 and CSR Support**

- Added CSR support with UI integration for certificate generation.
- Added support for generic X.509 certificates and CSR flows.
- Added x5c support for W3C credentials.
- Added integration tests for data functions.

**Credential Status**

- Added support for capacity monitoring and automatic rollover for status lists.
- To enable auto-rollover on existing services, update the service configuration to include `capacity.autoRollover: true`

### Fixes and improvements

- Fixed issuerState handling for preauthorized offers.
- Updated token and credential endpoint errors.
- Upgraded to Ktor 3.4 with associated fixes.
- Removed openid metadata endpoint.
- Fixed OIDC metadata compatibility.
- Updated MongoDB connection strings for new infrastructure.
- Updated ingress class from nginx to Traefik.
- Updated kubeconfig secret references.
- Updated helm and k8s deployment workflow references.
- Fixed policy field comparison to avoid timestamp mismatch in tests.
- Fixed Sonar findings and code cleanup.
- Reduced code duplication across services.
- Removed unnecessary try-catch blocks.
- Fixed duplicate imports after merge.

### Breaking changes

None