The 2022 winter release of Ory Kratos is here, and we are extremely excited to share with you some of the highlights included: * Ory Kratos now supports verification and recovery codes, which replace are now the default strategy and should be used instead of magic links. * Import of MD5-hashed passwords is now supported. * Ory Kratos can now act as the login app for the Ory Hydra Consent & Login Flow using the `oauth2_provider.url` configuration value. * Ory Kratos' SDK is now released as version 1. Learn more in the [upgrade guide](https://www.ory.sh/docs/guides/upgrade/sdk-v1). * New APIs are available to manage Ory Sessions. * Ory Sessions now contain device information. * Added all claims to the Social Sign-In data mapper as well as the option to customize admin and public metadata. * Add webhooks that can block the request, useful to do some additional validation. * Add asynchronous webhooks which do not block the request. * A CLI helper to clean up stale data. Please read the changelog carefully to identify changes which might affect you. Always test upgrading with a copy of your production system before applying the upgrade in production.