Merge main into SDK-6001 to bring branch up to date

Author: utkrishtsahu

.version

@@ -1 +1 @@
-3.12.0
+3.12.1

CHANGELOG.md

@@ -1,5 +1,14 @@
 # Change Log
 
+## [3.12.1](https://github.com/auth0/Auth0.Android/tree/3.12.1) (2026-01-07)
+[Full Changelog](https://github.com/auth0/Auth0.Android/compare/3.12.0...3.12.1)
+
+**Deprecated**
+- refactor: Deprecated the PasskeyAuthProvider class [\#890](https://github.com/auth0/Auth0.Android/pull/890) ([pmathew92](https://github.com/pmathew92))
+
+**Fixed**
+- fix: Fixing the memory leak introduced in the DPoP flow [\#891](https://github.com/auth0/Auth0.Android/pull/891) ([pmathew92](https://github.com/pmathew92))
+
 ## [3.12.0](https://github.com/auth0/Auth0.Android/tree/3.12.0) (2025-12-11)
 [Full Changelog](https://github.com/auth0/Auth0.Android/compare/3.11.0...3.12.0)
 

README.md

@@ -52,7 +52,7 @@ To install Auth0.Android with [Gradle](https://gradle.org/), simply add the foll
 
 ```gradle
 dependencies {
-    implementation 'com.auth0.android:auth0:3.12.0'
+    implementation 'com.auth0.android:auth0:3.12.1'
 }
 ```
 

auth0/src/main/java/com/auth0/android/dpop/DPoP.kt

@@ -22,7 +22,9 @@ public data class HeaderData(val authorizationHeader: String, val dpopProof: Str
  * Class for securing requests with DPoP (Demonstrating Proof of Possession) as described in
  * [RFC 9449](https://datatracker.ietf.org/doc/html/rfc9449).
  */
-public class DPoP(private val context: Context) {
+public class DPoP(context: Context) {
+
+    private val applicationContext: Context = context.applicationContext
 
     /**
      * Determines whether a DPoP proof should be generated for the given URL and parameters. The proof should
@@ -79,7 +81,7 @@ public class DPoP(private val context: Context) {
      */
     @Throws(DPoPException::class)
     internal fun generateKeyPair() {
-        DPoPUtil.generateKeyPair(context)
+        DPoPUtil.generateKeyPair(applicationContext)
     }
 
     /**

auth0/src/test/java/com/auth0/android/authentication/AuthenticationAPIClientTest.kt

@@ -76,6 +76,7 @@ public class AuthenticationAPIClientTest {
         mockAPI = AuthenticationAPIMockServer()
         mockKeyStore = mock()
         mockContext = mock()
+        whenever(mockContext.applicationContext).thenReturn(mockContext)
         val auth0 = auth0
         client = AuthenticationAPIClient(auth0)
         gson = GsonBuilder().serializeNulls().create()

auth0/src/test/java/com/auth0/android/dpop/DPoPTest.kt

@@ -47,6 +47,8 @@ public class DPoPTest {
         mockResponse = mock()
         mockKeyStore = mock()
         mockResponseBody = mock()
+
+        whenever(mockContext.applicationContext).thenReturn(mockContext)
         dPoP = DPoP(mockContext)
 
         DPoP._auth0Nonce = null

auth0/src/test/java/com/auth0/android/provider/WebAuthProviderTest.kt

@@ -95,6 +95,7 @@ public class WebAuthProviderTest {
 
         mockKeyStore = mock()
         mockContext = mock()
+        Mockito.`when`(mockContext.applicationContext).thenReturn(mockContext)
 
         DPoPUtil.keyStore = mockKeyStore