We recommend updating to this version of the SDK for security enhancements.
New Features
Added optional timeoutCardWaitSeconds to startPayment, allowing integrators to configure how long the SDK waits for card presentation.
The default card-wait timeout is now 240 seconds. Supported values are clamped between 60 and 240 seconds.
Updated SDK build support for Android 16 / API 36.
Updated core security, attestation, obfuscation, and payment kernel dependencies.
Fixes
Fixed an issue where rotating the device during an active transaction could interrupt the payment flow.
Fixed a recovery issue where transactions could keep failing with “Could not connect to the server” after a temporary network failure until the app was restarted.
Improved NFC card-read handling by retrying after supported L1 read errors.
Integration Notes
Existing integrations continue to work without code changes.
Integrators can optionally pass timeoutCardWaitSeconds when starting a payment to customize the card presentation timeout.
Added support of Online Pin SCA (Strong Customer Authentication).
Added card data to PaymentEvent.TransactionDone event: card type, card scheme, last four digits, and merchant code.
Transparent attestation process. The SDK now returns error details if attestation fails in PaymentEvent.TransactionFailed event. This helps developers understand and resolve attestation issues more effectively.
API changes to make it more concise. Now TapToPay.startPayment() function returns Flow<PaymentEvent> instead of Flow<Result<PaymentEvent>>.
Mitigated threats are now filtered out during attestation. If a threat has "mitigated": true, it is excluded from the threat list that is used to determine whether the COTS is attested.