Repository navigation
Sync beta with main - #1753
Merged
Merged
Sync beta with main#1753
beta with main#1753Conversation
Add a collapsible "Installing the Beta" section covering Homebrew, cURL, Scoop, Powershell, Go, and manual install for the beta build.
…19.1 (#1572) chore(deps): bump github.com/schollz/progressbar/v3 Bumps [github.com/schollz/progressbar/v3](https://github.com/schollz/progressbar) from 3.19.0 to 3.19.1. - [Release notes](https://github.com/schollz/progressbar/releases) - [Commits](schollz/progressbar@v3.19.0...v3.19.1) --- updated-dependencies: - dependency-name: github.com/schollz/progressbar/v3 dependency-version: 3.19.1 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Ramya Anusri <62586490+ramya18101@users.noreply.github.com>
…1578) The Auth0 CLI is now published to Homebrew core and the Scoop main bucket, so the custom tap and bucket are no longer required. Simplify the stable install commands and add migration notes for users on the old tap/bucket.
…#1586) chore(deps): update goldmark to v1.8.4
Bumps [golang.org/x/text](https://github.com/golang/text) from 0.38.0 to 0.40.0. - [Release notes](https://github.com/golang/text/releases) - [Commits](golang/text@v0.38.0...v0.40.0) --- updated-dependencies: - dependency-name: golang.org/x/text dependency-version: 0.40.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [golang.org/x/term](https://github.com/golang/term) from 0.44.0 to 0.45.0. - [Commits](golang/term@v0.44.0...v0.45.0) --- updated-dependencies: - dependency-name: golang.org/x/term dependency-version: 0.45.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
#1589) Bumps [github.com/getsentry/sentry-go](https://github.com/getsentry/sentry-go) from 0.47.0 to 0.48.0. - [Release notes](https://github.com/getsentry/sentry-go/releases) - [Changelog](https://github.com/getsentry/sentry-go/blob/master/CHANGELOG.md) - [Commits](getsentry/sentry-go@v0.47.0...v0.48.0) --- updated-dependencies: - dependency-name: github.com/getsentry/sentry-go dependency-version: 0.48.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
The standalone auth0-cli skill was folded into a single consolidated `auth0` skill that routes across all Auth0 SDKs, features, and tooling (including the CLI). Point install instructions at the official Claude Code plugins marketplace and the correct skill directory. Co-authored-by: Ramya Anusri <62586490+ramya18101@users.noreply.github.com>
) Bumps [github.com/auth0/go-auth0](https://github.com/auth0/go-auth0) from 1.44.0 to 1.45.0. - [Release notes](https://github.com/auth0/go-auth0/releases) - [Changelog](https://github.com/auth0/go-auth0/blob/v1.45.0/CHANGELOG.md) - [Commits](auth0/go-auth0@v1.44.0...v1.45.0) --- updated-dependencies: - dependency-name: github.com/auth0/go-auth0 dependency-version: 1.45.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
…1590) Bumps [github.com/mattn/go-isatty](https://github.com/mattn/go-isatty) from 0.0.22 to 0.0.23. - [Commits](mattn/go-isatty@v0.0.22...v0.0.23) --- updated-dependencies: - dependency-name: github.com/mattn/go-isatty dependency-version: 0.0.23 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
…1593) Bumps [github.com/mattn/go-isatty](https://github.com/mattn/go-isatty) from 0.0.23 to 0.0.24. - [Commits](mattn/go-isatty@v0.0.23...v0.0.24) --- updated-dependencies: - dependency-name: github.com/mattn/go-isatty dependency-version: 0.0.24 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
* feat(apps): add session-transfer delegation flags - Add --delegation-allow-delegated-access and --delegation-enforce-device-binding flags to `apps session-transfer update`, surfacing the Early Access Custom Token Exchange impersonation settings (client.session_transfer.delegation). - Send delegation only when a flag is set, so updates to legacy session-transfer settings leave it untouched for clients not using the feature. - Validate --delegation-enforce-device-binding as 'ip' or 'asn' before any API call, matching the Management API enum (no 'none', unlike the parent field). - Render delegation in `session-transfer show`/`update` output only when the client has it configured, keeping output unchanged for existing clients. - Add display unit tests plus an integration case for the validation error, and regenerate the command docs. * test(apps): revert integration test updates of delegation session-transfer - Remove the integration test that exercised --delegation-enforce-device-binding and restore the original apps test-case numbering. - Any delegation update sends a session_transfer.delegation payload, which the Management API rejects on tenants without the cte_session_transfer_token Early Access flag; the CI test tenant lacks it, so the case could not run reliably. - Delegation rendering stays covered by display unit tests; the update path is verified manually against an EA-enabled tenant. * refactor(apps): address review on delegation flags - Add short forms -d and -b to the delegation-allow-delegated-access and delegation-enforce-device-binding flags, matching the sibling session-transfer flags which all expose a short form. - Remove the client-side ip/asn check on the delegation device binding; invalid values now surface the Management API's validation error, consistent with the rest of the v1 command. - Regenerate the command docs for the new short forms. * docs(apps): mark delegation example as Early Access - Move the delegation flags example to its own block under a "# Delegation (Early Access): impersonation via Session Transfer" comment on `apps session-transfer update`, so users can tell the EA feature apart from the generally-available session-transfer flags. - Regenerate the command docs to reflect the annotated example.
* docs: add CLAUDE.md agent guidelines with references Generate CLAUDE.md as the single source of truth for AI coding agents, plus an AGENTS.md pointer and offloaded references/ files (commands, testing, code-style, git-workflow, pitfalls, docs-update). * docs: refine agent guidelines per PR feedback - Shorten the verbose pointer line in AGENTS.md - Add first-timer M2M setup guidance (AUTH0_DOMAIN/CLIENT_ID/SECRET) to references/testing.md - Document --json-compact + jq output pattern in references/code-style.md - Remove redundant docs blockquote in CLAUDE.md already covered by "Always Do" and docs-update.md * docs: condense Your Role overview in CLAUDE.md to one sentence
…1594) Bumps [github.com/lestrrat-go/jwx/v3](https://github.com/lestrrat-go/jwx) from 3.1.1 to 3.2.0. - [Release notes](https://github.com/lestrrat-go/jwx/releases) - [Changelog](https://github.com/lestrrat-go/jwx/blob/v3.2.0/Changes) - [Commits](lestrrat-go/jwx@v3.1.1...v3.2.0) --- updated-dependencies: - dependency-name: github.com/lestrrat-go/jwx/v3 dependency-version: 3.2.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
) Bumps [github.com/auth0/go-auth0](https://github.com/auth0/go-auth0) from 1.45.0 to 1.46.0. - [Release notes](https://github.com/auth0/go-auth0/releases) - [Changelog](https://github.com/auth0/go-auth0/blob/v1.46.0/CHANGELOG.md) - [Commits](auth0/go-auth0@v1.45.0...v1.46.0) --- updated-dependencies: - dependency-name: github.com/auth0/go-auth0 dependency-version: 1.46.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
…1602) feat(analytics): add is_api telemetry property for raw api command
* refactor: migrate management SDK usage from go-auth0 v2 to v3 Update all go-auth0/v2 imports to go-auth0/v3 and rename the v2-flavored identifiers (APIV2, apiv2, managementv2 alias, NewAPIV2, initializeManagementClientV2) to their v3 equivalents. Regenerate the phone-notification-template mock and drop go-auth0/v2 from go.mod. No command surface or behavior changes; v3 is a near drop-in for v2 and none of the tightened v3 types are referenced. * update claude.md to v3 * fix conflicts
* chore(deps): bump go-auth0 from v1.44.0 to v1.45.0
- Update the go-auth0 v1 SDK to v1.45.0, which adds the tenant
CountryCodes and branding theme Identifiers types required by the
tenant-settings and universal-login features.
* feat(tenant-settings): add country-codes command group
- Add `auth0 tenant-settings country-codes` (alias `cc`) with `show`,
`update`, and `remove` subcommands to manage phone-identifier country
code filtering (allow/deny list) on the tenant.
- `update` sends a minimal tenant carrying only country_codes so the merge
PATCH does not round-trip read-only fields (e.g. sandbox_versions_available)
that the endpoint rejects.
- `remove` sends an explicit {"country_codes": null} via the raw HTTP client,
since the SDK's omitempty tag would otherwise drop a nil pointer and
preserve the stored value instead of clearing it.
- Defer all list/mode/ISO validation to the Management API rather than
duplicating it client-side.
- Add CountryCodesView plus show/update/remove renderers, unit tests,
integration cases, and regenerated command docs.
* feat(universal-login): default theme identifiers on customize
- Populate BrandingThemeIdentifiers in fetchBrandingThemeOrUseDefault so the
customize editor starts from the API's copy-on-create defaults (unified
login display, OTP autocomplete on, mask_digits/international phone display)
when a tenant has no stored theme.
- Add test coverage asserting the default identifiers are applied.
* test(tenant-settings): fix country-codes json matcher syntax
- Replace YAML list values under the `json:` matcher with indexed gjson
paths (list.0, list.1, ...) in the country-codes update/show cases.
- The commander framework unmarshals every `json:` value as a string, so
a YAML sequence panicked at parse time with "interface {} is
[]interface {}, not string", aborting the whole integration suite before
any assertion ran.
- Aligns these cases with the repo convention for asserting array elements
(e.g. actions and roles test cases).
* feat(universal-login): update customize web assets for theme integrations
- Rebuild the embedded UL customize web UI from the latest atko-cic/ulp-branding-app
bundle, adding support for the new `integrations` field in theme customization.
- Rename the embedded JS asset (index-ec2d5a69.js -> index-a1dd6a97.js) and
repoint index.html to the new bundle so the correct assets are served.
- Used node v22 (nvm use 22) to make assets
* feat(universal-login): update customize web assets for theme integrations with vite 8.1.5
- Rebuild the embedded UL customize web UI from the latest atko-cic/ulp-branding-app
bundle after merging PR#77.
- Commit hash of the main of ulp-branding-app 550ae410ab8466129cc363e7bf2228665e313fed
- Used node v22 (nvm use 22) to make assets
* feat(universal-login): update customize web assets for theme integrations after version bumps
- Rebuild the embedded UL customize web UI from the latest atko-cic/ulp-branding-app
bundle after merging PR#83.
- Commit hash of the main of ulp-branding-app a87f994d434f54e4ac21b4d7c8fe9396def46bd6
- Used node v22 (nvm use 22) to make assets
* refactor(tenant-settings): remove country-codes command group
- Remove the country-codes (cc) command group and all related code:
sub-commands (show, update, remove), display view, and integration tests.
- Delete documentation files generated for the country-codes endpoints.
- Per SDKREQ-6, tenant country-codes filtering support is not required at the
CLI layer, so this feature is not pursued.
* test(integration): remove quickstarts test cases
- Remove the quickstarts-test-cases.yaml integration test file,
which contained legacy test cases for the `auth0 quickstarts` command.
- Temoparily remove till the issue is fixed to allow CI pipeline to proceed.
* refactor: migrate management SDK usage from go-auth0 v2 to v3 Update all go-auth0/v2 imports to go-auth0/v3 and rename the v2-flavored identifiers (APIV2, apiv2, managementv2 alias, NewAPIV2, initializeManagementClientV2) to their v3 equivalents. Regenerate the phone-notification-template mock and drop go-auth0/v2 from go.mod. No command surface or behavior changes; v3 is a near drop-in for v2 and none of the tightened v3 types are referenced. * feat: add client-grants command resource Add a client-grants command group (list, create, show, update, delete) backed by the go-auth0 v3 Management SDK, giving the CLI full CRUD coverage for client grants. Create supports specific scopes, all scopes (--allow-all-scopes), or no scopes at all, matching the API. It also accepts --subject-type (client, user, anonymous_user); the organization flags are rejected for user and anonymous_user subject types, which the API does not allow. The detail view always shows the subject type, defaulting an empty value to client so it reads clearly. The v3 SDK client grant wrapper replaces the v1 one, and the callers that used it (quickstarts, terraform, test) are moved over. Adds unit tests, commander integration tests and helper scripts, and the generated command docs. * ci: temporarily run integration tests on v3-migration base Temporary: allow the integration-tests job to run on PRs targeting feat/go-auth0-v3-migration so the client-grants suite is exercised against the live tenant. Revert before merge. * test: fix client-grants show table spacing assertion The detail view now always shows SUBJECT TYPE, which is the widest label, so the label column pads wider than before. Update the expected spacing in the show-table integration test to match. * feat: guard system grants and add no-scopes update option Update and delete now fail fast when a client grant is a system grant (is_system), which Auth0 refuses to modify, instead of surfacing the raw 400 after the whole interactive flow. System grants are also hidden from the update and delete pickers so they can't be selected. The update scope picker now offers the No scopes option too, matching create. Choosing it sends scope: [] so the grant's scopes are cleared, rather than being read as leaving them untouched. * fix: align client-grants update org handling with create Update now reads the grant's immutable subject type and, like create, skips the organization prompts and request fields for the user and anonymous_user subject types, which Auth0 rejects organization settings on. It also runs the subject-type validation so the flag path fails fast with a clear message. Both create and update now drop the all-scopes option in the interactive picker when the audience is a system API, since Auth0 rejects allow_all_scopes on system APIs. * test: cover client-grants validations and note Management API user scopes Add command-level tests for the update system-grant fail-fast, the update subject-type organization guard, and the delete system-grant fail-fast. Also document that a user subject-type grant against the Auth0 Management API takes a fixed current_user scope set that cannot be listed dynamically, so the scopes must be passed inline with --scopes. * feat: add default-for and authorization-details-types to client-grants Add --default-for (mutually exclusive with --client-id) and --authorization-details-types to client-grants create, and --authorization-details-types to update. Both are selectable interactively, sourced from the audience API, and the audience API is read once and shared between the scope and authorization-details pickers. Skip organization settings for system APIs, which reject them with a reserved_identifier error, and stop sending a stray allow_any_organization when the user never engaged with organization settings. Show the authorization details types in the detail view, truncated like scopes. * ci: revert temporary integration-test trigger for v3 migration base The go-auth0 v3 migration (#1597) is now merged into main, so the integration-tests job no longer needs to run on PRs targeting feat/go-auth0-v3-migration. * feat: add --csv output to client-grants list Add a --csv flag to the client-grants list command, mutually exclusive with --json and --json-compact. * feat: validate client-grants scopes via flags and add --no-scopes to update Validate --scopes against the audience API for both create and update, returning a clear error for unknown scopes instead of a raw API 400. When the API exposes no scopes, reject specific scopes for the client subject type while still allowing inline scopes for user/anonymous_user (the fixed Management API current_user set). Add a --no-scopes flag to update so scopes can be cleared to an empty array non-interactively, mutually exclusive with --scopes and --allow-all-scopes. * test: exclude quickstart suite from integration runner The quickstart integration tests depend on the external metadata endpoint https://auth0.com/docs/meta/quickstarts, which now returns 404, so they fail regardless of the code under test. Run each remaining suite file individually and skip quickstarts until the endpoint is restored.
* feat: add client-grants organizations list command Add a nested command under client-grants to list the organizations associated with a client grant, backed by the get-client-grant-organizations endpoint. Add the read:organization_client_grants scope to the login flow and include the grant id in the client-grant picker so grants sharing an audience are distinguishable. * feat: add --csv output to client-grants organizations list * test: match capitalized number flag error in org list integration case
Add a repeatable --module flag to `auth0 actions create` and `auth0 actions update` for associating action modules. Each value is a comma-separated set of key=value pairs matching the Management API field names (module_id, module_version_id), both required. Also fix two pre-existing bugs in `auth0 actions update` that surfaced with non-code flag updates: the payload sent `name: null` (rejected with a 400) because Name was never seeded from the existing action, and answering "No" to the code save prompt discarded the entire update. The code editor and its save confirmation now only run when the update actually touches code.
* feat: add sessions and refresh-tokens command resources Add `auth0 sessions` and `auth0 refresh-tokens` command groups, plus user-scoped `auth0 users sessions` and `auth0 users refresh-tokens` subcommands, built on the go-auth0 v3 Management SDK. Sessions: show, update (metadata), delete, and revoke a session by id; list and delete all sessions for a user. Refresh tokens: show, update (metadata), delete, and revoke by id, user, user+client, or user+client+audience; list and delete all refresh tokens for a user. Add the read/update/delete scopes for both resources to the login flow, a collectV3Pages helper for v3 cursor pagination, and integration test cases for the non-destructive paths. * feat: add --csv output to user sessions and refresh-tokens list Add a --csv flag to the users sessions list and users refresh-tokens list commands, mutually exclusive with --json and --json-compact. Bump go-auth0 to v1.46.0. * test: make csv mutual-exclusion assertions case-insensitive
…only) (#1600) * chore(deps): bump github.com/auth0/go-auth0 to v1.46.0 - Upgrade the v1 Management SDK from v1.45.0 to v1.46.0, which adds the auth0_managed field on network ACL rule match criteria. - Required before the network-acl command can expose Auth0-managed curated blocklists; no behavior change on its own. * feat(network-acl): add auth0_managed field to rule match criteria - Add --auth0-managed flag to network-acl create and update commands for specifying Auth0-curated blocklists (auth0.low_reputation, etc.) in rule matching criteria. (Early Access only.) - Support auth0_managed in both match and not_match rule types via the existing rule builder. - Include auth0_managed in the interactive rule builder prompt and default extraction from existing rules. - Add table-driven tests for auth0_managed handling in buildNetworkACLRule and extractCurrentRuleDefaults. - Regenerate command docs with new examples. * feat(display): add auth0_managed rendering for network ACL rules - Render Auth0-managed blocklists in both match and not_match rule output, labeled as "AUTH0 MANAGED" and "NOT AUTH0 MANAGED" respectively. - Remove redundant "NOT MATCH" marker row since the "NOT " prefix on field labels already clarifies the rule type. - Fix raw data assignment in makeNetworkACLView to use a pointer. - Add table-driven tests for auth0_managed field rendering. * fix(display): restore id field in network-acl JSON output - Fix the `raw` field in networkACLView to store a value instead of a pointer to management.NetworkACL, which prevents the struct's MarshalJSON pointer receiver from stripping the "id" field during JSON serialization. - Update the KeyValues type assertion to work with the value type, allowing the Auth0 Managed display rows to render while keeping "id" in --json output. - Add regression test covering both populated and minimal ACL serialization to detect future JSON contract changes. * test(network-acl): fix test assertions to match actual output - Update test 003 assertions to include SCOPE and IPV4 CIDRS rows which now render correctly after fixing the KeyValues type assertion in the display layer. - Update test 007 assertions to include SCOPE and COUNTRY CODES rows, and repad all columns to account for the widened key column width. - The widening from 2 to 4 spaces was caused by COUNTRY CODES (13 chars) becoming the longest key, pushing the visual alignment outward. --------- Co-authored-by: Ramya Anusri <62586490+ramya18101@users.noreply.github.com>
* feat: add actions modules command tree
Add the auth0 actions modules command group with list, show, create,
update, and delete, plus draft publishing support.
- create and update accept code, dependencies, and secrets, with guided
interactive prompts and a --publish flag to snapshot a new immutable
version
- update skips the API call when nothing changed and reports the current
module instead of issuing an empty write
- delete accepts multiple ids and hides modules in use by deployed action
versions, which the API refuses to delete
- code is shown as a syntax-highlighted block beneath the details table
- add unit tests and commander integration tests
* feat: add actions modules actions list command
Add 'auth0 actions modules actions list' to list the actions that use
an action module, along with the module version each action is on.
Backed by the /actions/modules/{id}/actions endpoint.
* feat: add actions modules versions commands
Add the 'auth0 actions modules versions' command group for managing an
action module's immutable published versions:
- list: list a module's versions
- show: display the code, dependencies, and secrets of a version
- rollback: restore a past version into the module's draft
- publish: snapshot the current draft as a new version
Backed by the /actions/modules/{id}/versions endpoint and the module
rollback endpoint.
* fix(test): give the actions modules versions suite a dedicated module
The versions suite shared the module fixture created by
get-action-module-id.sh, which the actions modules suite deletes in its
last test. Since the modules suite runs first, the cached ID file was
left pointing at a deleted module and every versions command 404'd.
Add get-action-module-versions-module-id.sh so the versions suite
creates and caches a module of its own.
…1585) * feat: add commands to list the command tree for easier discovery Add a top-level `auth0 commands` that prints the full command tree with short descriptions, so the whole CLI surface can be discovered without inspecting each --help page individually. Supports three output shapes: - default nested tree with descriptions - --flat for one runnable command per line, ideal for scanning or intent matching - --json (with optional --detailed) exposing usage, arguments, flags, aliases and whether authentication is required Accepts an optional command path (e.g. `auth0 commands apps`) to scope the output to a single branch, and a --depth flag to limit nesting. * feat: emit command help as JSON and add agent mode Combining --help with --json (or setting AUTH0_AGENT_MODE) now prints any command's help as JSON. This runs before Cobra parses flags, so it also works for the root and namespace commands that have no --json flag of their own. The usage footer points to `auth0 commands` and JSON help, and the homepage docs describe command discovery and agent mode. * Render --detailed in commands text output --detailed previously only affected --json; the tree and flat text outputs ignored it. It now prints usage, args, aliases, auth and flags for each runnable command in every output shape, with multi-line flag help collapsed to a single line so the tree stays intact. * Clarify commands command description for discoverability
) Bumps [github.com/auth0/go-auth0](https://github.com/auth0/go-auth0) from 1.46.0 to 1.47.0. - [Release notes](https://github.com/auth0/go-auth0/releases) - [Changelog](https://github.com/auth0/go-auth0/blob/v1.47.0/CHANGELOG.md) - [Commits](auth0/go-auth0@v1.46.0...v1.47.0) --- updated-dependencies: - dependency-name: github.com/auth0/go-auth0 dependency-version: 1.47.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [golang.org/x/text](https://github.com/golang/text) from 0.40.0 to 0.41.0. - [Release notes](https://github.com/golang/text/releases) - [Commits](golang/text@v0.40.0...v0.41.0) --- updated-dependencies: - dependency-name: golang.org/x/text dependency-version: 0.41.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Ramya Anusri <62586490+ramya18101@users.noreply.github.com>
* feat: add `--agent-mode` flag to output JSON and disable prompts/colors for AI agents * feat: enhance agent mode with JSON output and non-interactive flags * feat: refactor agent mode handling and improve JSON help rendering * add `--agent-mode` flag documentation * feat: update destructive command confirmation logic for agent mode * feat: enforce confirmation for destructive actions in agent mode
#1709) Bumps [github.com/getsentry/sentry-go](https://github.com/getsentry/sentry-go) from 0.49.0 to 0.50.0. - [Release notes](https://github.com/getsentry/sentry-go/releases) - [Changelog](https://github.com/getsentry/sentry-go/blob/master/CHANGELOG.md) - [Commits](getsentry/sentry-go@v0.49.0...v0.50.0) --- updated-dependencies: - dependency-name: github.com/getsentry/sentry-go dependency-version: 0.50.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
…and refresh-tokens commands (#1703) * chore: improve agent ergonomics for client-grants, action modules, sessions and refresh-tokens commands Add `--schema`/`--query` to `client-grants list` and `actions modules list`, `--data`/`--schema` to `client-grants create|update` and `actions modules create|update`, and `--data`/`--schema` to `sessions update` and `refresh-tokens update`. Reuses the shared helpers in `schema.go`, `data_json.go` and `query_json.go`; no new flag machinery. Co-Authored-By: Claude <noreply@anthropic.com> * chore: mention --schema in create/update help for grants, modules, sessions and refresh-tokens Co-Authored-By: Claude <noreply@anthropic.com> --------- Co-authored-by: Claude <noreply@anthropic.com>
) Bumps [github.com/auth0/go-auth0](https://github.com/auth0/go-auth0) from 1.50.0 to 1.51.0. - [Release notes](https://github.com/auth0/go-auth0/releases) - [Changelog](https://github.com/auth0/go-auth0/blob/v1.51.0/CHANGELOG.md) - [Commits](auth0/go-auth0@v1.50.0...v1.51.0) --- updated-dependencies: - dependency-name: github.com/auth0/go-auth0 dependency-version: 1.51.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
* chore: add SCA workflow * ci: restrict GITHUB_TOKEN to contents:read in SCA workflow Resolves Scorecard Token-Permissions alert. The reusable sca-scan and scan-log workflows only use actions/checkout. Co-Authored-By: Claude <noreply@anthropic.com> --------- Co-authored-by: Claude <noreply@anthropic.com>
…mmands (#1705) * Add CHANGELOG for v1.37.0 * feat: add --schema and --data options for email and phone provider commands * feat: enhance --data option handling for email and phone provider commands * feat: update documentation for --data and --schema options in email and phone provider commands * feat: add jsonWriteStub for testing --data option in CLI commands --------- Co-authored-by: Kunal Dawar <35455566+developerkunal@users.noreply.github.com>
…in events (#1717) * feat: enhance login tracking with additional properties for first login events * refactor(analytics): share tracking context between login and command events
….0 (#1716) Bumps [github.com/getkin/kin-openapi](https://github.com/getkin/kin-openapi) from 0.149.0 to 0.151.0. - [Release notes](https://github.com/getkin/kin-openapi/releases) - [Commits](getkin/kin-openapi@v0.149.0...v0.151.0) --- updated-dependencies: - dependency-name: github.com/getkin/kin-openapi dependency-version: 0.151.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
…1715) Bumps [github.com/auth0/go-auth0/v3](https://github.com/auth0/go-auth0) from 3.8.0 to 3.9.0. - [Release notes](https://github.com/auth0/go-auth0/releases) - [Changelog](https://github.com/auth0/go-auth0/blob/main/CHANGELOG.md) - [Commits](auth0/go-auth0@v3.8.0...v3.9.0) --- updated-dependencies: - dependency-name: github.com/auth0/go-auth0/v3 dependency-version: 3.9.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
* chore: add MalwareScan workflow * chore(security): scan released binaries with ReversingLabs Download each published release archive and scan it with the rl-scan action, once per OS and architecture. The scan job runs after GoReleaser and nothing depends on it, so a failed scan does not block the release. * chore(security): clarify rl.yml caller comment --------- Co-authored-by: Kunal Dawar <kunal.dawar@okta.com>
…1721) Bumps [github.com/auth0/go-auth0/v3](https://github.com/auth0/go-auth0) from 3.9.0 to 3.10.0. - [Release notes](https://github.com/auth0/go-auth0/releases) - [Changelog](https://github.com/auth0/go-auth0/blob/main/CHANGELOG.md) - [Commits](auth0/go-auth0@v3.9.0...v3.10.0) --- updated-dependencies: - dependency-name: github.com/auth0/go-auth0/v3 dependency-version: 3.10.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
…1742) Bumps [github.com/lestrrat-go/jwx/v3](https://github.com/lestrrat-go/jwx) from 3.3.0 to 3.4.0. - [Release notes](https://github.com/lestrrat-go/jwx/releases) - [Changelog](https://github.com/lestrrat-go/jwx/blob/v3.4.0/Changes) - [Commits](lestrrat-go/jwx@v3.3.0...v3.4.0) --- updated-dependencies: - dependency-name: github.com/lestrrat-go/jwx/v3 dependency-version: 3.4.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
* feat: add early access API search command with filtering and sorting options * feat: add resource server search functionality with mock implementation
….0 (#1737) Bumps [github.com/getkin/kin-openapi](https://github.com/getkin/kin-openapi) from 0.151.0 to 0.152.0. - [Release notes](https://github.com/getkin/kin-openapi/releases) - [Commits](getkin/kin-openapi@v0.151.0...v0.152.0) --- updated-dependencies: - dependency-name: github.com/getkin/kin-openapi dependency-version: 0.152.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
* ci(release): use client-id for GitHub App token The app-id input of actions/create-github-app-token is deprecated in favor of client-id. * ci(release): rename app secret to RELEASE_APP_CLIENT_ID The secret now holds the App Client ID that client-id expects.
…EA Only) (#1720) * init commit * Further updates and added integration tests * Added ramp test cases * Tests updated * Updated scopes * feat(experimentation): validate description length and reuse list helpers - Add validateMinLength and reject descriptions shorter than the 3-character API minimum before any request is sent. Create checks the description always. Update checks it only when the description changes to a non-empty value, and an empty value still clears it. - Replace the local collectPages helper with the shared collectV3Pages for the list commands and pickers. Behavior is unchanged: the spinner, the page walk and the error messages stay the same. - Declare the filter and --target-level flags as Flag structs, matching the rest of the CLI. Flag names, help text and output are unchanged. - Move marshalToJSON and sliceToSet to utils_shared.go, where other shared helpers live. - Replace em dashes in user-facing error messages and help text with colons, semicolons and hyphens. * fix(experimentation): rename query filter helper to avoid clash with main - Rename the experimentation markQueryExclusive to markQueryFilterExclusive. It clashed with the helper main added in schema.go and broke the build after the merge. - Keep the explicit filter list, so --query is blocked only with the named filter flags and the flag rules do not change. - Restore the sorted go.sum order from main. * fix(experimentation): validate description length on variation update - Restore the validateMinLength check in the variations update command, so a description shorter than 3 characters is rejected before the request is sent, the same as the other create and update commands. - An empty description still clears the field to null. --------- Co-authored-by: KIRAN KUMAR B <kiran.kumar@okta.com> Co-authored-by: KIRAN KUMAR B <bkiran6398@gmail.com>
Co-authored-by: Ramya Anusri <62586490+ramya18101@users.noreply.github.com>
…1745) Bumps [github.com/dlclark/regexp2](https://github.com/dlclark/regexp2) from 1.11.5 to 1.12.0. - [Commits](dlclark/regexp2@v1.11.5...v1.12.0) --- updated-dependencies: - dependency-name: github.com/dlclark/regexp2 dependency-version: 1.12.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [jekyll-feed](https://github.com/jekyll/jekyll-feed) and [github-pages](https://github.com/github/pages-gem). These dependencies needed to be updated together. Updates `jekyll-feed` from 0.17.0 to 0.18.0 - [Release notes](https://github.com/jekyll/jekyll-feed/releases) - [Changelog](https://github.com/jekyll/jekyll-feed/blob/master/History.markdown) - [Commits](jekyll/jekyll-feed@v0.17.0...v0.18.0) Updates `github-pages` from 232 to 233 - [Release notes](https://github.com/github/pages-gem/releases) - [Commits](github/pages-gem@v232...v233) --- updated-dependencies: - dependency-name: jekyll-feed dependency-version: 0.18.0 dependency-type: direct:development update-type: version-update:semver-minor - dependency-name: github-pages dependency-version: '233' dependency-type: direct:development update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
…0.26.0 (#1748) chore(deps): bump github.com/hashicorp/terraform-exec Bumps [github.com/hashicorp/terraform-exec](https://github.com/hashicorp/terraform-exec) from 0.25.3 to 0.26.0. - [Release notes](https://github.com/hashicorp/terraform-exec/releases) - [Changelog](https://github.com/hashicorp/terraform-exec/blob/main/CHANGELOG.md) - [Commits](hashicorp/terraform-exec@v0.25.3...v0.26.0) --- updated-dependencies: - dependency-name: github.com/hashicorp/terraform-exec dependency-version: 0.26.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Ramya Anusri <62586490+ramya18101@users.noreply.github.com>
…ow (#1750) * Publish beta Homebrew and Scoop packages from the beta release workflow * Label beta Homebrew and Scoop PR templates as beta
ramya18101
approved these changes
Nov 5, 2026
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
🔧 Changes
Brings
betaup to date withmainthroughe5719fc2, sobetastays a superset ofmainwith the beta-only work still in place.main, including theauth0-betaHomebrew formula and Scoop manifest and the explicit artifact paths inrelease.yml.main(regexp21.12.0,terraform-exec0.26.0,terraform-json0.29.0), and thelogstail test uses thesyncBufferhelper frommain.auth0 universal-portals setupand its supporting helpers stay on beta.v1.33.0-beta.0andv1.33.0-beta.1sections, placed in version order belowv1.33.0.📚 References
main: Publish beta Homebrew and Scoop packages from the beta release workflow #1750betawithmain#1749🔬 Testing
Builds, lints, and runs the unit test suite. Generated command docs are unchanged after regeneration.
📝 Checklist