Apply security patch 0.11.x

[jamshale]

Apply security patch to branch 0.11.x

• Receiving unauthenticated DIDComm messages from a connection in the invitation state #3094

Integration tests currently need to be ran manually on patch releases. I ran all the @gha tag tests against a local von network and tails server and all 4 features passed.

[swcurran]

Running AATH tests…so far so good.

[swcurran]

Very weird. With these changes, all but a set of 7 peer-did tests fail. When I run with 0.11.x branch in ACA-Py a whole bunch more tests fail — coordinate mediation, oob, issue credential and one present proof. Running again, in case it was a glitch, but local tests are usually pretty reliable…

[jamshale]

Interesting. I've only run the integration tests for acapy for this patch. The AATH acapy runset all passed for me for the 0.12.x patch.

Going to run on the current 0.11.x branch and patched forked branch and see if there's any differences.

[dbluhm]

Most of the peer did work wasn't merged until 0.12.0, right? We should expect AATH peer did tests to fail, wouldn't we?

[jamshale]

I think that aligns with what tests failed. I kind of expected some failing tests with this branch.

[swcurran]

Ran the AATH acapy runset with this PR, 0.11.x/3.12 and 0.11.x/3.9. All were consistent, with the same set of tests failing that would be expected — things added after 0.11.x. However, as noted above, one of the two 0.11.x/3.12 tests had some additional failures — but worked the next time.

I think we’re good with this, and we can go ahead.

Next up will be a PR to publish the patch release. Stay tuned!