January 2026 brought steady progress (15 PRs merged) on robustness and APIs: dependency and CI updates, wasm bindings and API improvements, protocol feature additions (AppData mechanisms and GREASE handling), better TreeSync error handling and PSK checks, plus work to store pending proposals.
We also released two new versions of OpenMLS (technically in February on the 4th not in January).
v0.7.2
This release includes critical security patches addressing vulnerabilities identified through external security research. We recommend all users update to the latest version immediately.
The release does not contain breaking changes and should allow anyone on v0.7.1 to easily update.
Links
v0.8.0
v0.8.0 is a regular release, including the critical fixes from v0.7.2, as well as a significantly improved message validation and other changes.
New features
Extensions Draft 08 Support: Partial support for the extensions-draft-08
behind the extensions-draft-08 feature flag.
This includes handling for AppEphemeral proposals, AppData mechanisms, and the
forward secure exporter.
GREASE Support: Added handling and helper functions for GREASE (Generate Random Extensions And Sustain Extensibility) values to improve future protocol compatibility.
Links
Merged PRs January 2026
- #1941: Don’t use git dependencies for hpke-rs, update tonic in interop_client
- #1934: add AAD getter to
PrivateMessageIn - #1930: Add AppData mechanisms from the extensions draft
- #1928: fix: check for duplicate PSK IDs in commits
- #1927: Enforce allowed extension types using Rust types
- #1926: Update rand dependency for
openmlstests andds-libcrate - #1924: feat: make JoinBuilder::new API public
- #1922: chore(deps): update reqwest requirement from 0.12 to 0.13
- #1921: add to_bytes/from_bytes wasm bindings for KeyPackage/RatchetTree
- #1917: Fix typo in test comment for own messages
- #1914: ci update
- #1912: chore(deps): update criterion requirement from ^0.7 to ^0.8
- #1903: Improve the error return types in TreeSync
- #1900: Add handling and helpers for GREASE values
- #1873: feat: store pending proposals