Release Note: V1.9.2

Date

Aug 30, 2026

New Features and Improvements

• XPass Q2 is supported.
  • XPQ2-DPB
• Added new door alarm flags: LOCK_OVERRIDE and FIRE. See AlarmFlag.
• Added DESFireConfig.lockEV2SM to restrict DESFire cards to EV2 Secure Messaging. See DESFireLockEV2SM.
• Supports graceful shutdown of the gRPC server:
  • The master gateway now provides the -lr option to release the license when it receives SIGTERM/SIGINT. See the master gateway installation.
• Added the Device Notify API to stream device-initiated QR/barcode scans (BS2_CMD_NOTIFY_QR). Enable bypassData via Card.SetQRConfig and subscribe with SubscribeQRScan.
• The gRPC server now binds to the configured rpc_server.ip, so you can select which network interface accepts connections (a specific NIC or 127.0.0.1). It still defaults to all interfaces. See the gateway configuration and the master gateway configuration.

Security and CRA

• Each release ships CRA-supporting evidence for every component: a CycloneDX SBOM, a Grype vulnerability report (zero known matches), the SECURITY.md policy, and per-archive SHA256SUMS.txt checksums. These are included in the SDK package.

SDK License Agreement

• The SDK License Agreement file (“LICENSE_AGREEMENT.txt”) must be in the same path as the current working directory before running device_gateway.
• The SDK License Agreement file (“LICENSE_AGREEMENT.txt”) can be created by renaming the file (“LICENSE.txt”) distributed with the SDK package.
• Placing the renamed SDK License Agreement file (“LICENSE_AGREEMENT.txt”) in the same path as device_gateway is considered as the end user agreeing to the use of the software license.
• The End User License Agreement file (“EULA.txt”) is no longer used.