Node.js SDK

10.5.0 (2026-06-24)

Features

• Add signalsId to user management APIs (#1618) (b6e7944)

10.4.1 (2026-06-23)

Bug Fixes

• events: Add resourceTypeSlug to RoleEvent deserialization (#1638) (d478595)

10.4.0 (2026-06-18)

Features

• user-management: Add invitationToken to getAuthorizationUrl options (#1612) (a2d516f)

10.3.0 (2026-06-17)

Features

• authorization: Add group role assignment endpoints (#1619) (df60af3)

10.2.1 (2026-06-16)

Bug Fixes

• Prevent handleParseError from double-reading response body (#1622) (e1cdb7f)

10.2.0 (2026-06-02)

Features

• authkit: Add Radar challenge completion and error handling (#1606) (420e739)

Bug Fixes

• migrate Widgets API to oagen work (#1605) (19c1de6)

10.1.0 (2026-06-02)

Features

• Add name field to Profile, User, and Actions interfaces (#1602) (df3ecbd)
• authkit: Add Radar fields to headless AuthKit methods (#1603) (4f34f01)

Bug Fixes

• connect: Serialize pagination options for auto-pagination (#1601) (c8333f4)

10.0.0 (2026-05-27)

⚠ BREAKING CHANGES

• remove search param from listResources (#1591)
• groups: Group.createdAt and Group.updatedAt now deserialize as Date objects
• vault: listObjects now returns an auto-paginatable object summary collection instead of the previous list digest shape
• vault: generated Vault response types now use SDK-shaped camelCase fields for key and object responses
• webhooks: Webhooks constructor signature changed from constructor(cryptoProvider: CryptoProvider) to constructor(workos: WorkOS) (#1592)

Features

• Add Radar to Node SDK (#1596) (6330961)
• connect: Add Connect module (#1597) (4011dd0)
• groups: Regenerate Groups module via oagen (a3c14b3)
• remove search param from listResources (#1591) (9ebc818)
• vault: Add generated Vault serializers and types, including rekey support, object list filters, and delete version checks (a3c14b3)
• webhooks: Add webhook endpoint CRUD (#1592) (3b226d7)

Bug Fixes

• renovate: explicitly enable minor and patch updates (#1598) (ad48448)

9.3.1 (2026-05-19)

Bug Fixes

• set canonical User-Agent header format (#1576) (4169434)
• webhooks: accept raw request bytes for signature verification (#1578) (112b261)

9.3.0 (2026-05-13)

Features

• Add resource and role_slug filter params to list role assignments (#1585) (4f32a83)

9.2.0 (2026-05-04)

Features

• Add resource role assignments methods (#1580) (ec8dd0f)

--- This PR was generated with Release Please. See documentation.

9.1.1 (2026-04-24)

Bug Fixes

• Correctly handle all isAuthenticationErrorData cases (#1573) (b572431)
• Fix incorrect url for listEffectivePermissionsByExternalId (#1574) (8f8fc81)
• restore typed data on AuthenticationErrorData (#1570) (a7a1e6d)
• revert "Rename Authorization methods to match oagen hints" (7ab0380)

9.1.0 (2026-04-21)

Features

• add support for role_slug in invitation schema (#1567) (ba29409)

9.0.0 (2026-04-21)

⚠ BREAKING CHANGES

• rename portal to adminPortal (#1562)
• standardize authorization list endpoint pagination (#1553)
• Drop Node.js v20 support, require v22.11+ (#1560)
• Remove legacy FGA package (#1559)

Features

• Add groups endpoints and group event types (#1564) (cb0c46d)
• adding three new conection types to node SDK connection type enums (#1389) (c11cfd6)
• standardize authorization list endpoint pagination (#1553) (7a91d74)
• Update Node SDK to include auditlogs.listSchemas (#1457) (c31736d)

Bug Fixes

• add JSDoc docstrings from OpenAPI spec to all resource methods (#1565) (562a57a)
• errors: type server/auth errors and restore type compatibility (#1561) (e149152)
• Export ConflictException and add code (#1563) (a5524f8)
• Normalize GithubOAuth to GitHubOAuth in identity deserialization (#1566) (61f54a5)
• Remove extractVersion from matchUpdateTypes rules (#1557) (f6272ea)
• rename portal to adminPortal (#1562) (80614d4)

Code Refactoring

• Drop Node.js v20 support, require v22.11+ (#1560) (24609a7)
• Remove legacy FGA package (#1559) (8cdd668)

Read the V9_MIGRATION_GUIDE.md for more information.

8.13.0 (2026-04-13)

Features

• Add resource_type_slug to createOrganizationRole to create resource-scoped custom roles (#1549) (36fb14a)

8.12.1 (2026-04-07)

Bug Fixes

• events: handle domain verification failed (#1543) (0f3f1ce)

8.12.0 (2026-04-06)

Features

• Add vault.byok_key.verification_completed event interface (#1544) (5b29d3c)

8.11.1 (2026-04-04)

Bug Fixes

• replace node:events with eventemitter3 in runtime client (#1540) (e293be1)

8.11.0 (2026-04-02)

Features

• Adds feature flags runtime client with local evaluation (#1511) (581c618)

Bug Fixes

• security: resolve miniflare and undici vulnerabilities (#1500) (cd6ddd0)

8.10.0 (2026-03-25)

Features

• add vault events (#1531) (a5e619f)

Bug Fixes

• correct typecheck issues (#1526) (5e52f6c)
• CreateAuthorizationResourceOptions type definition (#1530) (be2ec40)
• events: add missing order parameter to listEvents (#1524) (2f3dcb4)
• vault: forward order and before params in listObjects (#1527) (2f9c2f1)

8.9.0 (2026-03-12)

Features

• user-management: add claimNonce to getAuthorizationUrl (#1518) (19e4a20)
• user-management: add directoryManaged to OrganizationMembership (#1512) (4594f4e)

Bug Fixes

• Bump minimatch from 3.1.2 to 3.1.5 (#1507) (fe74c33)
• preserve sso context in authentication event deserialisation (#1487) (2bad11c)
• preserve verification_prefix in organization domain deserialization (#1486) (640f0e4)

8.8.0 (2026-03-03)

Features

• add missing auth methods (#1509) (3a5ce41)

Bug Fixes

• export CookieSession from package root (#1504) (29048e9)

8.7.0 (2026-02-26)

Features

• add resourceTypeSlug to permissions, environment and organization roles (#1502) (74dadc6)
• Add deserialisation support for feature flag events (#1494) (3621424)

Bug Fixes

• update release-please manifest to match actual version 8.6.0 (#1503) (6814a5c)

• Add BYOK intent to Admin Portal

What's Changed

• Add dedicated event types for organisation role deserialisation by @smorimoto in #1485
• Version bump to 8.4.1 by @csrbarber in #1489
• chore(deps): update actions/setup-node action to v6 by @renovate[bot] in #1444
• chore(deps): update actions/checkout action to v6 by @renovate[bot] in #1390
• v8.5.0 by @nicknisi in #1493

Full Changelog: v8.4.0...v8.5.0

What's Changed

• Added: Authorization Resource support by @swaroopAkkineniWorkos in #1479
• Added: Role support by @swaroopAkkineniWorkos in #1479
• Deprecated: FGA by @swaroopAkkineniWorkos in #1479

What's Changed

• Rename api_key.deleted event type to api_key.revoked by @smorimoto in #1476

New Contributors

• @smorimoto made their first contribution in #1476

Full Changelog: v8.3.0...v8.3.1

What's Changed

• Organization role and permission events support by @csrbarber in #1469

Full Changelog: v8.2.0...v8.3.0

What's Changed

• feat: Add environment role support by @csrbarber in #1454
• feat: Add organization role support by @csrbarber in #1455
• Bump to 8.2.0 by @csrbarber in #1466

Full Changelog: v8.1.0...v8.2.0

What's Changed

• docs: fix inconsistencies in V8 migration guide by @nicknisi in #1449
• Add custom_attributes field to OrganizationMembership by @ajworkos in #1458
• feat: Add locale param to send/resend invitation methods by @jasonbarry in #1460
• fix: exclude organizationId from autoPagination params in listOrganizationFeatureFlags by @gjtorikian in #1461
• Release v8.1.0 by @gjtorikian in #1462

New Contributors

• @jasonbarry made their first contribution in #1460
• @gjtorikian made their first contribution in #1461

Full Changelog: v8.0.0...v8.1.0