release-2025-12-05: Anchor migration & unsupported page redirect

This is Internet Identity release release-2025-12-05 for commit 493f4c5f68cb13414dd1c87b2aa7692fa81ccda4.
The sha256 of production asset internet_identity_production.wasm.gz is 8101e325042b0df95f8cf1eb91ce3433db0e337241eba20234abd413a50e6e3e.

This is mostly a maintenance release with one user-visible change:

• Redirect to landing page when unsupported page is visited directly.

In addition, this release contains the following code changes:

• The first phrase of the anchor storage migration: each anchor's data is read from the current (bounded) storage, marshalled into a new, clearer format (e.g., recovery keys and passkeys are now stored in separate types), and then stored in the unbounded anchor memory. The code ensures that anchor data is kept in sync between the two storages, but the source of truth remains in the bounded memory (switching the source of truth will be proposed in a subsequent proposal).
• Implementation of the new recovery phrase feature for id.ai (which remains disabled for now since more testing is needed).

What's Changed

• Recovery phrase unverified status based on last_authentication. by @sea-snake in #3519
• Refactor recovery phrase e2e and add more test cases. by @sea-snake in #3523
• chore: Make StorableAnchor a structural super-type of StorableFixedAnchor by @aterga in #3522
• Redirect to landing page when unsupported page is visited directly. by @sea-snake in #3521
• chore: Fallback for passkeys without credential IDs by @aterga in #3526
• Support for resetting locked recovery phrases. by @sea-snake in #3527
• Use classes instead of component for buttons. by @sea-snake in #3529

Full Changelog: release-2025-11-28...release-2025-12-05

Build flavors

For more information please see the Build flavors section of the README.

Filename	sha256 (links to CI Run)
internet_identity_production.wasm.gz	8101e325042b0df95f8cf1eb91ce3433db0e337241eba20234abd413a50e6e3e
internet_identity_dev.wasm.gz	51aa14f7d88a389e3d3434cd135967ac9b24ddd61c17a45e21d46006776016b3
internet_identity_test.wasm.gz	d64fa85da9770a7eac4d1c9c227c81c7dc1b6d70ee66f3ed21a82ada11b22114
archive.wasm.gz	44149b657f8b9693da4b4f9a134e799c1c7d223ab09fea3d5c3fa1cfa7ddaba9
vc_demo_issuer.wasm.gz	f079d2118fc6932b2812f627f78841e3c1f4e850362a820716aa27792bf58f4d

Wasm Verification

To build the wasm modules yourself and verify their hashes, run the following commands from the root of the Internet Identity repository:

git pull # to ensure you have the latest changes.
git checkout 493f4c5f68cb13414dd1c87b2aa7692fa81ccda4
./scripts/verify-hash --ii-hash 8101e325042b0df95f8cf1eb91ce3433db0e337241eba20234abd413a50e6e3e

Make sure to compare the hashes also with the proposal payload when verifying canister upgrade proposals.