release-2024-10-25: Improve id alias credential verification

This is Internet Identity release release-2024-10-25 for commit 34d593f727f16e4432e147f785c84c829831752a.
The sha256 of production asset internet_identity_production.wasm.gz is 41fbbb7a47342cf0169bdf5599f52fa4239409ea3882e955243a02ce3c730680.

This release adds a new field in the id alias credential that should be used to ensure that user's principal comes from the expected derivation origin.

What's Changed

• Update release in README by @gix-bot in #2663
• Add "derivationOrigin" to id_alias credential by @lmuntaner in #2664
• Add test-canisters.sh script to CI by @lmuntaner in #2655
• Update e2e test documentation in HACKING.md by @frederikrothenberger in #2665
• Update II spec with new registration flow by @frederikrothenberger in #2666
• Update ii-spec.mdx by @LXIF in #2667
• Update dfx by @gix-bot in #2668
• Update vc-spec.md by @LXIF in #2669

New Contributors

• @LXIF made their first contribution in #2667

Full Changelog: release-2024-10-18...release-2024-10-25

Build flavors

For more information please see the Build flavors section of the README.

Filename	sha256 (links to CI Run)
internet_identity_production.wasm.gz	41fbbb7a47342cf0169bdf5599f52fa4239409ea3882e955243a02ce3c730680
internet_identity_dev.wasm.gz	cb28add63876e24f143245738889d7d155fc439e34e6ab04accf5f856e972e63
internet_identity_test.wasm.gz	885db6b7a0fdd584f72b09417aa0fa69c05a955d18617c484200157d7cb1c32a
archive.wasm.gz	5cc69b679e8a51cb4b1449258b0939389b919774c2d7461256d62182574c7759
vc_demo_issuer.wasm.gz	d170e54c04344a67b7d293236400b30c214433ca461b803eb5f250b4ec720da2

Wasm Verification

To build the wasm modules yourself and verify their hashes, run the following commands from the root of the Internet Identity repository:

git pull # to ensure you have the latest changes.
git checkout 34d593f727f16e4432e147f785c84c829831752a
./scripts/verify-hash --ii-hash 41fbbb7a47342cf0169bdf5599f52fa4239409ea3882e955243a02ce3c730680 --archive-hash 5cc69b679e8a51cb4b1449258b0939389b919774c2d7461256d62182574c7759

Make sure to compare the hashes also with the proposal payload when verifying canister upgrade proposals.