@umutcansu/react-native-pinvault 2.6.0 → 2.6.1

package/CHANGELOG.md

@@ -1,5 +1,19 @@
 # Changelog
 
+## 2.6.1 — 2026-10-15
+
+### Fixed
+
+- **iOS: without `tokenHosts`, only the block's own Config API carries
+  `PinVault-Token`** (as Android has since 2.4.1). A block without
+  `tokenHosts` sent the token (and `PinVault-Proof`) to every host pinned by
+  its live config, so a pinned CDN or analytics host received it. Name your
+  API hosts in `tokenHosts` if they need the token.
+
+### Changed
+
+- Depends on PinVault 2.6.1 (Maven Central, Swift package tag `v2.6.1`).
+
 ## 2.6.0 — 2026-10-14
 
 ### Fixed

package/README.md

@@ -29,9 +29,9 @@ npm install @umutcansu/react-native-pinvault
 cd ios && pod install
 ```
 
-The native libraries come with it, at the package's own version: npm 2.6.0
-uses `io.github.umutcansu:pinvault:2.6.0` from Maven Central and the Swift
-package at tag `v2.6.0`. The New Architecture must stay on (React Native's
+The native libraries come with it, at the package's own version: npm 2.6.1
+uses `io.github.umutcansu:pinvault:2.6.1` from Maven Central and the Swift
+package at tag `v2.6.1`. The New Architecture must stay on (React Native's
 default since 0.76).
 
 **iOS.** The pod depends on the PinVault Swift package through React Native's

package/RNPinVault.podspec

@@ -4,7 +4,7 @@ package = JSON.parse(File.read(File.join(__dir__, "package.json")))
 
 # PinVault for iOS is a Swift package (Package.swift at the repository root,
 # product "PinVault"). React Native's spm_dependency adds it to the Pods project:
-#   - consumers: the git URL at the tag of this package's version (v2.6.0);
+#   - consumers: the git URL at the tag of this package's version (v2.6.1);
 #   - development: PINVAULT_IOS_PACKAGE_PATH = a PinVault checkout (the sample's
 #     Podfile sets it to this repository), the counterpart of pinvault.localPath.
 pinvault_url = "https://github.com/umutcansu/PinVault.git"

package/android/build.gradle

@@ -9,7 +9,7 @@ buildscript {
     kotlinVersion: "2.2.0",
     minSdkVersion: 24,
     compileSdkVersion: 36,
-    pinvaultVersion: "2.6.0",
+    pinvaultVersion: "2.6.1",
   ]
   ext.pinvaultRnExt = { prop ->
     rootProject.ext.has(prop) ? rootProject.ext.get(prop) : PinVaultRN[prop]

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@umutcansu/react-native-pinvault",
-  "version": "2.6.0",
+  "version": "2.6.1",
   "description": "PinVault for React Native: dynamic certificate pinning with signed remote configs, mTLS enrollment and signed vault files, as a thin bridge over the native PinVault libraries",
   "main": "./lib/module/index.js",
   "types": "./lib/typescript/src/index.d.ts",