Merge branch 'main' into docs/indy-to-webvh-migration

Author: PatStLouis

.github/workflows/snyk-lts.yml

@@ -3,7 +3,9 @@ on:
   push:
     branches:
       - main
+      - '**.lts'  # LTS release branches (e.g., 0.12.lts, 1.2.lts)
     paths:
+      - aries_cloudagent/**  # Legacy directory (older LTS branches)
       - acapy_agent/**
       - docker/**
 
@@ -37,6 +39,18 @@ jobs:
         image: acapy-agent
         args: --file=docker/Dockerfile
 
+    - name: Run Snyk monitor for continuous monitoring
+      # Continuously monitor for new vulnerabilities in released/releasable code
+      # See https://support.snyk.io/hc/en-us/articles/360000920818-What-are-the-differences-among-snyk-test-monitor-and-protect
+      continue-on-error: true
+      uses: snyk/actions/docker@9adf32b1121593767fc3c057af55b55db032dc04 # 1.0.0
+      env:
+        SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }}
+      with:
+        image: acapy-agent
+        args: --file=docker/Dockerfile
+        command: monitor
+
       # Replace any "null" security severity values with 0. The null value is used in the case
       # of license-related findings, which do not do not indicate a security vulnerability.
       # See https://github.com/github/codeql-action/issues/2187 for more context.

.github/workflows/snyk.yml

@@ -1,8 +1,8 @@
 # ACA-Py Changelog
 
-## 1.5.1rc0
+## 1.5.1
 
-### February 20, 2026
+### February 27, 2026
 
 ACA-Py 1.5.1 is a clean up release primarily to address some follow-on issues related to the [1.5.0] release -- notably with the handling of AnonCreds revocation. There are some  convenience additions and a GitHub Actions pipeline fix.
 
@@ -25,14 +25,18 @@ AIP 1.0 protocols that were [previously announced as deprecated](#140-deprecatio
 - **Core Platform and Architecture**
   - Enable outbound transport in `--no-transport` mode, only disable inbound [\#4050](https://github.com/openwallet-foundation/acapy/pull/4050) [PatStLouis](https://github.com/PatStLouis)
   - feat: add list endpoint for out-of-band records [\#4046](https://github.com/openwallet-foundation/acapy/pull/4046) [kukgini](https://github.com/kukgini)
+  - fixed duplicate present-proof v2 webhook [\#3998](https://github.com/openwallet-foundation/acapy/pull/3998) [sonivijayk](https://github.com/sonivijayk)
 - **AnonCreds, Revocation, and Wallet Migration**
-  - Fix revocation setup [\#4047](https://github.com/openwallet-foundation/acapy/pull/4047) [PatStLouis](https://github.com/PatStLouis)
   - fix: handle revocation registry race conditions for BDD integration tests [\#4056](https://github.com/openwallet-foundation/acapy/pull/4056) [PatStLouis](https://github.com/PatStLouis)
+  - Fix revocation setup [\#4047](https://github.com/openwallet-foundation/acapy/pull/4047) [PatStLouis](https://github.com/PatStLouis)
 - **Testing, Logging, and Diagnostics**
+  - Consolidate snyk scanning GHA [\#4067](https://github.com/openwallet-foundation/acapy/pull/4067) [esune](https://github.com/esune)
   - FIX BDD interop integration tests [\#4052](https://github.com/openwallet-foundation/acapy/pull/4052) [PatStLouis](https://github.com/PatStLouis)
 - **Dependabot PRs**
-  - [Link to list of Dependabot PRs in this release](https://github.com/openwallet-foundation/acapy/pulls?q=is%3Apr+is%3Amerged+merged%3A2025-01-29..2026-02-20+author%3Aapp%2Fdependabot+)
+  - [Link to list of Dependabot PRs in this release](https://github.com/openwallet-foundation/acapy/pulls?q=is%3Apr+is%3Amerged+merged%3A2025-01-29..2026-02-27+author%3Aapp%2Fdependabot+)
 - **Release management pull requests**:
+  - 1.5.1 [\#4068](https://github.com/openwallet-foundation/acapy/pull/4068) [swcurran](https://github.com/swcurran)
+  - 1.5.1rc1 [\#4063](https://github.com/openwallet-foundation/acapy/pull/4063) [swcurran](https://github.com/swcurran)
   - 1.5.1rc0 [\#4054](https://github.com/openwallet-foundation/acapy/pull/4054) [swcurran](https://github.com/swcurran)
 
 ## 1.5.0

CHANGELOG.md

@@ -97,7 +97,7 @@ To delete the documentation version, do the following:
 - Check your `git status` and make sure there are no changes in the branch --
   e.g., new files that shouldn't be added to the `gh-pages` branch. If there are
   any -- delete the files so they are not added.
-- Remove the folder for the RC.  For example `rm -rf 1.5.1rc0`
+- Remove the folder for the RC.  For example `rm -rf 1.5.1rc1`
 - Edit the `versions.json` file and remove the reference to the RC release in
   the file.
 - Push the changes via a PR to the ACA-Py `gh-pages` branch (don't PR them into

Managing-ACA-Py-Doc-Site.md

@@ -152,9 +152,9 @@ For the build test, the RTD Sphinx theme needs to be added to the docker image,
      - `1.5` - Major.minor tag (moves to latest patch release)
      - `latest` - Only assigned if this is the highest semantic version
 
-   - **Release Candidates** (e.g., `1.5.1rc0`):
-     - `py3.12-1.5.1rc0` - Python version specific RC tag
-     - `1.5.1rc0` - Semantic version RC tag
+   - **Release Candidates** (e.g., `1.5.1rc1`):
+     - `py3.12-1.5.1rc1` - Python version specific RC tag
+     - `1.5.1rc1` - Semantic version RC tag
      - **Note**: RC releases do NOT receive major.minor (`1.5`) or `latest` tags
 
    The `latest` tag is explicitly managed by comparing semantic versions across all

PUBLISHING.md

@@ -8,7 +8,7 @@ ACA-Py or the repository `main` branch. Reminders (and PRs!) to update this page
 welcome! If you have any questions, please contact us on the #aries channel on
 [OpenWallet Foundation Discord](https://discord.gg/openwallet-foundation) or through an issue in this repo.
 
-**Last Update**: 2026-02-20, Release 1.5.1rc0
+**Last Update**: 2026-02-27, Release 1.5.1
 
 > The checklist version of this document was created as a joint effort
 > between [Northern Block](https://northernblock.io/), [Animo Solutions](https://animo.id/) and the Ontario government, on behalf of the Ontario government.

docs/features/SupportedRFCs.md

@@ -2,7 +2,7 @@
   "openapi" : "3.0.1",
   "info" : {
     "title" : "Aries Cloud Agent",
-    "version" : "v1.5.1rc0"
+    "version" : "v1.5.1"
   },
   "servers" : [ {
     "url" : "/"

open-api/openapi.json

@@ -1,7 +1,7 @@
 {
   "swagger" : "2.0",
   "info" : {
-    "version" : "v1.5.1rc0",
+    "version" : "v1.5.1",
     "title" : "Aries Cloud Agent"
   },
   "tags" : [ {

open-api/swagger.json

@@ -1,6 +1,6 @@
 [tool.poetry]
 name = "acapy_agent"
-version = "1.5.1rc0"
+version = "1.5.1"
 description = "(ACA-Py) A Cloud Agent Python is a foundation for building decentralized identity applications and services running in non-mobile environments. "
 authors = []
 license = "Apache-2.0"