twilio-ruby 7.11.1 → 7.11.3

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: a494d086870863ab1aae8748d515c63a504177246240a1c36e7eccfa95b9f92b
-  data.tar.gz: 25ec1e4bd56153220354de496f9311b29cfef4cbd6e990683e3df1a9bbd1380e
+  metadata.gz: 92782df8271f1b9a7f8ee80b10514048392c27dc6d58c3513e21a8fa2592a74e
+  data.tar.gz: 031343a9310ec971d5d015aaadd5df55ab781a9cacfd15b53dc6bf79b95fae05
 SHA512:
-  metadata.gz: 5fd59d61b2bb3c9be81748c577392314b8457d00c8242a7efdc380306143920cfe79d9b13abbb41e6bc2df0d5da9d6641c13004d61d286cdde87d1d2e0a3353b
-  data.tar.gz: a74fffeb54bd87ae9d78a78e012a0d782e7ae6acb63d5e00119333bfb69aefc29383b44c5be93b3fdd6ca8fd28aa2163e0c727d35ba6472b7a3789ade7b3eaa6
+  metadata.gz: cdcf4946f4391697754789328369c248036fc05a7217ee4d60a4bad9ef2e61f6e0ec4fbcaddbca51b141d7d771ce1fefc55dcba49bd775af43521b8b73a86e28
+  data.tar.gz: 170130144ac18fbe7dc463683ea7ddea4494ba27fc329f29a801a44f317fb4c19ba9fbeb72d0d506c4c94d50efe239cc46e78c157c425de0200186662a7fbd59

data/.github/workflows/test-and-deploy.yml

@@ -49,7 +49,19 @@ jobs:
       - run: bundle exec rake install
 
       - name: Run linter
-        run: bundle exec rubocop -d --cache true --parallel
+        # rubocop's ConfigStore path cache (config_store.rb) does a non-atomic
+        # `@path_cache[dir] ||= ...` read-modify-write. --parallel runs worker
+        # threads via Parallel.in_threads, and on JRuby (no GIL, true parallel
+        # threads) that race can hand a thread a nil config path, crashing with
+        # "no implicit conversion of nil into String" in File.absolute_path.
+        # CRuby's GIL happens to serialize the Hash access enough to avoid it.
+        # Run JRuby serially and uncached to sidestep the race.
+        run: |
+          if [[ "${{ matrix.ruby }}" == jruby-* ]]; then
+            bundle exec rubocop -d
+          else
+            bundle exec rubocop -d --cache true --parallel
+          fi
         if: ${{ matrix.ruby != '2.4'}}
 
       - name: Run Unit Tests

data/CHANGES.md

@@ -1,5 +1,422 @@
 twilio-ruby changelog
 =====================
+[2026-09-28] Version 7.11.3
+---------------------------
+**Library - Fix**
+- [PR #809](https://github.com/twilio/twilio-ruby/pull/809): validate webhook signatures on percent-encoded request paths. Thanks to [@manisha1997](https://github.com/manisha1997)!
+
+**Twiml**
+- Add `audio_format` and `sample_rate` to Stream for HDCodec
+
+**Api**
+- # API Changes
+- ## 2026-09-22
+- Simplified the `criteria` field description.
+- ## 2026-09-18
+- Moved `readOnly` on the snapshot count fields (`profileCount`, `partitionCount`) from the shared schema to the response usage sites, so the counts stay read-only in responses (no change for API consumers).
+- ## 2026-09-17
+- Renamed 3 `Get*` operations to `Fetch*` to match the operationId standard: `FetchCohort`, `FetchSnapshot`, `FetchOperation`.
+- Removed the unused `ExpressionId` schema and made the operation error example cohort-native, so no `aud_` identifiers remain in the spec.
+- Kept `libraryVisibility: hidden` across the whole surface (info, path items, and operations).
+- ## 2026-09-08
+- Removed the deprecated header-based-versioning unified specs, consolidating audiences onto the path-based `api.twilio.com/v1` surface.
+- ## 2026-08-31
+- Published the unified audiences spec at `api.twilio.com/v1`.
+- ## 2026-08-26
+- Fixed the Cohort operation response mapping in the unified audiences API.
+- ## 2026-08-19
+- Migrated the unified audiences spec to the Cohort surface (Audiences renamed to Cohorts).
+- Switched `downstreamServiceName` to `audiences-domain`.
+- ## 2026-08-05
+- Added the `api.unified.version.preview` beta feature.
+- Made the unified APIs available in prod us1.
+- ## 2026-07-30
+- Fixed example values.
+- ## 2026-07-29
+- Added the initial version of the audiences API to the unified APIs.
+- ## 2026-07-20
+- Deployed the audiences-domain OAS to the dev edge.
+- ## 2026-07-06
+- Added the prod-us1 realm to the audiences public API.
+- ## 2026-06-23
+- Changed the `storeType` enum from `MEMORA` to `TWILIO`.
+- ## 2026-05-04
+- Added the stage-us1 realm and `x-rate-limit` to the audiences API.
+- ## 2026-04-08
+- Added the initial audiences endpoints.
+- Add `TwimlProcessStatusCallbackEvents` parameter to CreateTwimlProcess endpoint
+- Add `twiml_process` resource alongside `twiml_session` (`twiml_session` is deprecated and will be removed in a future release)
+
+**Audiences**
+- ## 2026-09-14
+- Minor updates (formatting, metadata)
+- ## 2026-09-11
+- **Content updates**:
+- Updated summary for `AdminFetchRecord`
+- Updated summary for `AdminFetchCohort`
+- Updated summary for `AdminFetchCohortSnapshot`
+- Updated summary for `AdminFetchCohortOperation`
+- Updated schema description for `ResourceLabels`
+- ## 2026-09-22
+- **Content updates**:
+- Updated schema description for `Criteria`
+- ## 2026-09-18
+- Minor updates (formatting, metadata)
+- ## 2026-09-17
+- Minor updates (formatting, metadata)
+- ## 2026-09-17
+- **Content updates**:
+- Updated description for `CreateCohort`
+- Updated description for `ListCohortSnapshots`
+- Updated description for `CreateCohortSnapshot`
+- Updated description for `FetchCohortSnapshot`
+- Updated description for `ListCohortSnapshotProfiles`
+- Updated schema description for `Criteria`
+- Updated schema description for `Cohort`
+- Updated schema description for `CohortSnapshot`
+- Updated schema description for `CohortOperationResult`
+- Updated schema description for `CohortOperation`
+- ## 2026-09-15
+- Minor updates (formatting, metadata)
+- ## 2026-09-14
+- **Content updates**:
+- Updated summary for `FetchCohort`
+- Updated summary for `FetchCohortSnapshot`
+- Updated summary for `FetchCohortOperation`
+- Updated schema description for `ResourceLabels`
+
+**Capabilities**
+- Add a feature-gated preview endpoint to create Capabilities.
+
+**Conversations**
+- Add the feature-gated Capabilities list and create endpoints to Conversations v2.
+
+**Data-ingress**
+- ## 2026-09-07
+- Minor updates (formatting, metadata)
+- ## 2026-09-09
+- **Added 16 new path(s)**:
+- `/v1/DataSyncs/{syncId}` (FetchDataSync)
+- `/v1/CloudAppSources/{sourceId}/Objects` (ListCloudAppObjects)
+- `/v1/WarehouseSources/{sourceId}/Preview` (CreateWarehousePreview)
+- `/v1/WarehouseSources/{sourceId}/Preview/{operationId}` (FetchWarehousePreview)
+- `/v1/DataSample/{operationId}` (FetchDataSample)
+- `/v1/ControlPlane/CloudAppSources/{sourceId}` (FetchCloudAppSource, PatchCloudAppSource, DeleteCloudAppSource)
+- `/v1/ControlPlane/CloudAppSources/{sourceId}/Datasets` (ListCloudAppDatasets, CreateCloudAppDataset)
+- `/v1/ControlPlane/CloudAppSources/{sourceId}/Datasets/{datasetId}` (FetchCloudAppDataset, PatchCloudAppDataset, DeleteCloudAppDataset)
+- `/v1/ControlPlane/WarehouseSources/{sourceId}` (FetchWarehouseSource, PatchWarehouseSource, DeleteWarehouseSource)
+- `/v1/ControlPlane/WarehouseSources/{sourceId}/Datasets` (ListWarehouseDatasets, CreateWarehouseDataset)
+- ...and 6 more paths
+- **Removed 31 path(s)**:
+- `/v1/DataSyncs/{SyncId}` (FetchDataSync)
+- `/v1/CloudAppSources/{SourceId}/Objects` (ListCloudAppObjects)
+- `/v1/WarehouseSources/{SourceId}/Preview` (CreateWarehousePreview)
+- `/v1/WarehouseSources/{SourceId}/Preview/{OperationId}` (FetchWarehousePreview)
+- `/v1/DataSample/{OperationId}` (FetchDataSample)
+- `/v1/ControlPlane/CloudAppSources/{SourceId}` (FetchCloudAppSource, PatchCloudAppSource, DeleteCloudAppSource)
+- `/v1/ControlPlane/CloudAppSources/{SourceId}/Datasets` (ListCloudAppDatasets, CreateCloudAppDataset)
+- `/v1/ControlPlane/CloudAppSources/{SourceId}/Datasets/{DatasetId}` (FetchCloudAppDataset, PatchCloudAppDataset, DeleteCloudAppDataset)
+- `/v1/ControlPlane/WarehouseSources/{SourceId}` (FetchWarehouseSource, PatchWarehouseSource, DeleteWarehouseSource)
+- `/v1/ControlPlane/WarehouseSources/{SourceId}/Datasets` (ListWarehouseDatasets, CreateWarehouseDataset)
+- ...and 21 more paths
+
+**Destinations**
+- ## 2026-09-24
+- **Content updates**:
+- Removed `GET` from the `method` enum on the `webhook` destination type's config options
+- ## 2026-09-22
+- **Content updates**:
+- Added `CDP` to the `categories` enum on `DestinationType`
+- ## 2026-09-14
+- Enable admin APIs for stage-us1 and prod-ie1 realms
+- ## 2026-09-11
+- **Content updates**:
+- Updated description for `CreateDestination`
+- Updated description for `UpdateDestination`
+- Updated description for `DeleteDestination`
+- Updated schema description for `CredentialInput`
+- Updated schema description for `DestinationCredentialOptions`
+- ## 2026-09-11
+- **Content updates**:
+- Updated description for `ListDestinationTypes`
+- Updated description for `GetDestinationType`
+- Updated description for `CreateDestination`
+- Updated description for `UpdateDestination`
+- ## 2026-09-10
+- Made `ListDestinationTypes` and `GetDestinationType` unauthenticated (`security: []`).
+- Removed `iamOperation`, `addAuthorizationHeader`, and `betaFeature` from these operations.
+
+**Iam**
+- Removed user_context from the POST /v1/actions/post_login (PostLoginActionRequest) webhook payload; the login email is read from authentication_context.methods
+- Replaced acr and completed_factors with authentication_context (acr, amr, methods) on the POST /v1/actions/post_login (PostLoginActionRequest) webhook payload
+- Made request_context and request_context.ip_address required on the POST /v1/actions/post_login (PostLoginActionRequest) webhook payload
+
+**Intelligence**
+- Added optional `rule.operators[]` parameter override field to `POST /v3/RuleExecutions
+- Change Summary in `POST /v3/RuleExecutions`
+
+**Knowledge**
+- ## 2026-09-23
+- **Content updates**:
+- Added properties to `WebSourceDetails`: errors
+- **Routing updates**:
+- Changed `downstreamServiceName` from `memora-domain` to `enterprise-knowledge-domain` for all operations
+
+**Memory**
+- ## 2026-09-18
+- **Added 2 new path(s)**:
+- `/v1/ControlPlane/TraitExtractionStrategies` (AdminListTraitExtractionStrategies)
+- `/v1/ControlPlane/TraitExtractionStrategies/{traitStrategyId}` (AdminFetchTraitExtractionStrategy)
+- ## 2026-09-03
+- No path changes (schema description only)
+- Clarified the `DataMappingCore` description: the PATCH body requires at least one field.
+- ## 2026-09-10
+- **Added 2 new path(s)** for Observation Extraction Strategies:
+- `/v1/ControlPlane/ObservationExtractionStrategies` (ListObservationExtractionStrategies, CreateObservationExtractionStrategy)
+- `/v1/ControlPlane/ObservationExtractionStrategies/{observationExtractionStrategyId}` (FetchObservationExtractionStrategy, UpdateObservationExtractionStrategy, DeleteObservationExtractionStrategy)
+- **Content updates**:
+- Updated `CreateObservationExtractionStrategyInput` description to document that at least one of `allowedCategories`/`prohibitedCategories` must be provided with a non-empty list
+- ## 2026-09-07
+- **Added 1 new path(s)** for Profile:
+- `/v1/Stores/{storeId}/Profiles/BulkDeletions` (CreateProfilesBulkDeletion)
+- ## 2026-09-03
+- `UpdateStore`, `UpdateTraitGroup`, `UpdateDataMapping`, and `UpdateTraitExtractionStrategy` now require a body with at least one property. An empty `{}` gets a 400.
+
+**Routes**
+- Add `GET`/`POST` `/v3/ShortCodes/{isoCountryCode}/{shortCode}` to assign and fetch the Inbound Processing Region for short codes
+
+**Verify**
+- Add `aaguid` and `date_last_approved` to passkeys factors `metadata`.
+
+**Voice**
+- Add typed Recording AccountDefaultConfiguration public API endpoints.
+
+**Webhooks**
+- ## 2026-09-24
+- **Changed**: `GET /v1/Webhooks/Settings` now documents each item as the full `Setting` rather than `SettingSummary`, adding `auth`, `signature`, `connection` and `edgeZones` to the list response. The service already returned these fields; only the schema understated them. Additive for consumers — no field is removed or renamed. The now-unreferenced `SettingSummary` schema is removed.
+
+
+[2026-09-09] Version 7.11.2
+---------------------------
+**Library - Chore**
+- [PR #804](https://github.com/twilio/twilio-ruby/pull/804): Update RubyGems publishing steps in workflow. Thanks to [@manisha1997](https://github.com/manisha1997)!
+- [PR #803](https://github.com/twilio/twilio-ruby/pull/803): Update Rakefile. Thanks to [@manisha1997](https://github.com/manisha1997)!
+- [PR #799](https://github.com/twilio/twilio-ruby/pull/799): release gems. Thanks to [@manisha1997](https://github.com/manisha1997)!
+- [PR #798](https://github.com/twilio/twilio-ruby/pull/798): Remove docker push. Thanks to [@manisha1997](https://github.com/manisha1997)!
+- [PR #797](https://github.com/twilio/twilio-ruby/pull/797): version upgrade. Thanks to [@manisha1997](https://github.com/manisha1997)!
+- [PR #796](https://github.com/twilio/twilio-ruby/pull/796): change permission. Thanks to [@manisha1997](https://github.com/manisha1997)!
+
+**Audiences**
+- ## 2026-09-01
+- Backticked brace- and angle-bracket-bearing tokens in descriptions for MDX safety.
+- Updated a prose reference to the renamed `FetchCohortSnapshot` operation.
+- ## 2026-08-26
+- **Removed 5 path(s)**:
+- `/preview/Audiences` (AdminListAudiences)
+- `/preview/Audiences/{audienceId}` (AdminGetAudience)
+- `/preview/Snapshots` (AdminListSnapshots)
+- `/preview/Snapshots/{snapshotId}` (AdminGetSnapshot)
+- `/preview/Operations/{operationId}` (AdminGetOperation)
+- ## 2026-08-25
+- Minor updates (formatting, metadata)
+- ## 2026-08-24
+- **Added 1 new path(s)**:
+- `/preview/Snapshots/{cohortSnapshotId}/Operations` (AdminListSnapshotOperations)
+- **Removed 1 path(s)**:
+- `/preview/Snapshots/{snapshotId}/Operations` (ListAdminSnapshotOperations)
+- ## 2026-08-20
+- Renamed all 13 operations so the operationId keyword leads (`AdminGetCohort` -> `FetchAdminCohort`) to meet standard.
+- Set `info` `libraryVisibility` to `hidden` to exclude this admin spec from generation.
+- Added the standard `pageSize`/`pageToken` query parameters to `ListAdminSnapshotOperations`, the only list operation missing them.
+- ## 2026-08-19
+- **Added 5 new path(s)**:
+- `/preview/Cohorts` (AdminListCohorts)
+- `/preview/Cohorts/{cohortId}` (AdminGetCohort)
+- `/preview/CohortSnapshots` (AdminListCohortSnapshots)
+- `/preview/CohortSnapshots/{cohortSnapshotId}` (AdminGetCohortSnapshot)
+- `/preview/CohortOperations/{cohortOperationId}` (AdminGetCohortOperation)
+- ## 2026-09-01
+- Renamed 3 `Get*` operations to `Fetch*` to match the operationId standard: `FetchCohort`, `FetchCohortSnapshot`, `FetchCohortOperation`. The transpiler skips operations whose operationId does not start with a standard keyword, which had been dropping all three from generated output.
+- Set `libraryVisibility` to `private` (was `hidden`) so the spec is eligible for the private docs pipeline.
+- Backticked brace- and angle-bracket-bearing tokens in descriptions for MDX safety.
+- ## 2026-08-28
+- **Removed 6 path(s)**:
+- `/preview/Audiences` (ListAudiences, CreateAudience)
+- `/preview/Audiences/{audienceId}` (FetchAudience, UpdateAudience, DeleteAudience)
+- `/preview/Snapshots` (ListSnapshots, CreateSnapshot)
+- `/preview/Snapshots/{snapshotId}` (FetchSnapshot, DeleteSnapshot)
+- `/preview/Snapshots/{snapshotId}/Profiles` (ListSnapshotProfiles)
+- `/preview/Operations/{operationId}` (FetchOperation)
+- ## 2026-08-20
+- Renamed 6 `Get*` operations to `Fetch*` to match the operationId standard.
+- Hid the deprecated Audiences/Snapshots paths and `/preview/Operations/{operationId}`.
+- Backticked 11 brace-bearing tokens in descriptions for MDX safety.
+
+**Conversations**
+- Add PATCH support for partial updates to Configuration
+- Add `VIDEO` to the Conversations v2 Communication channel enum.
+
+**Data-ingress**
+- # API Changes
+- ## 2026-09-01
+- Minor updates (formatting, metadata)
+- ## 2026-08-12
+- Minor updates (formatting, metadata)
+- ## 2026-08-12
+- Initial release with 13 paths and 13 operations
+
+**Destinations**
+- ## 2026-09-08
+- Added `prod-ie1` to `supportedRealms` and `iamOperationEnabledRealms` for all endpoints
+- ## 2026-09-01
+- Removed the unused `admin-api` placeholder from `supportedRealms` on the public endpoints;
+- One Admin routes now live in `admin_openapi.yaml`.
+- **Added 6 new path(s)** (admin_openapi.yaml):
+- `/v1/ControlPlane/Destinations` (AdminListDestinations)
+- `/v1/ControlPlane/Destinations/{destinationId}` (AdminGetDestination)
+- `/v1/ControlPlane/Subscriptions` (AdminListSubscriptions)
+- `/v1/ControlPlane/Subscriptions/{subscriptionId}` (AdminGetSubscription)
+- `/v1/ControlPlane/Subscriptions/{subscriptionId}/EventTypes` (AdminListSubscribedEvents)
+- `/v1/ControlPlane/Subscriptions/{subscriptionId}/EventTypes/{eventType}` (AdminGetSubscribedEvent)
+- ## 2026-08-26
+- Minor updates (formatting, metadata)
+- ## 2026-08-26
+- Minor updates (formatting, metadata)
+- ## 2026-08-25
+- **Content updates**:
+- Updated description for `CreateDestination`
+- ## 2026-08-12
+- Minor updates (formatting, metadata)
+
+**Email**
+- # API Changes
+- ## 2026-09-02
+- **Added 1 new path(s)**:
+- `/v1/Sends/Cohorts` (sendCohort)
+- ## 2026-08-28
+- **Content updates**:
+- Updated summary for `sendTransactional`
+- Added parameter(s) to `sendTransactional`: X-Twilio-Version
+- Updated schema description for `SuppressionsGroup`
+- Added properties to `SuppressionsGroup`: type
+- Removed properties from `SuppressionsGroup`: mode
+- Updated schema description for `SuppressionsGlobal`
+- Added properties to `SuppressionsGlobal`: type
+- Removed properties from `SuppressionsGlobal`: mode
+- Updated schema description for `Suppressions`
+- Updated schema description for `LongRunningOperationResponse`
+- ## 2026-08-27
+- **Content updates**:
+- Updated description for `SendEmail`
+- Added parameter(s) to `SendEmail`: Content-Encoding, Idempotency-Key
+- Updated schema description for `Envelope`
+- Updated schema description for `SuppressionsGroup`
+- Updated schema description for `SuppressionsGlobal`
+
+**Iam**
+- Removed redirect_urls from the GET /v1/Account/AuthorizedApps/{consentSid} response
+- Added company_name, homepage_url, tos_url, and redirect_urls to the GET /v1/Account/AuthorizedApps/{consentSid} response
+- Added GET /v1/Account/AuthorizedApps/{consentSid} - fetch authorized app details, including allowed permissions, by consent identifier SID
+- added container-scoped entitlements endpoint (GET /v2/Container/{containerId}/Entitlements)
+
+**Instrumentation**
+- # API Changes
+- ## 2026-09-04
+- **Content updates**:
+- Added `IdempotencyKeyHeader` to Create/Patch/Delete `AutoInstrumentationRule`; corrected the shared header's description
+- Added `operationId`/`createdAt` to `LongRunningOperationResponse`; corrected example `status` from `RUNNING` to `PENDING`
+- Renamed `Signal.timestamp` → `occurredAt`, `HourlyStats.hourTimestamp` → `hourAt`; uppercased `Signal.type` and `ListSignals`' `signalType` enums to SCREAMING_SNAKE_CASE
+- Renamed `UserBehaviors` request/response fields to camelCase; added the `summaryDelivery` webhook callback
+- Reshaped `PaginationMeta` (added required `key`, corrected `pageSize` bounds) and all 6 list operations (`ListEventSources`, `ListEventSourceDatasets`, `ListEventSchemas`, `ListAutoInstrumentationRules`, `ListSignals`, `ListSignalStats`) to the `meta` envelope; added `ListSignalStats`' `500` response
+- Narrowed the domain's default `supportedRealms` to `dev-us1` only; `POST /v1/UserBehaviors` (`AnalyzeUserBehaviors`) keeps its own `dev-us1`/`stage-us1` override (prod withheld pending stage validation) — every other operation is now dev-only
+- ## 2026-08-31
+- **Content updates**:
+- Fixed stale `tdi_` TTID prefix throughout (path params, examples, transaction URLs) to `events_`; unified dataset/schema ID formats (`tdi_dat_`/`tdi_dataset_` → `events_dataset_`, `tdi_schema_` → `events_evsch_`); fixed rule-version examples to match the real `version: integer` field
+- Fixed `operationId` to use the domain-agnostic `proc_job_` TTID prefix; corrected the `OperationId` parameter's length constraint (`max=34` → `max=35`) and added a `pattern`
+- Fixed two length constraints hardcoded for the old `tdi_` prefix length: `IngestEventBatch`'s `sourceId` path parameter (`maxLength` 37 → 40); removed the stale, redundant `Twilio-Write-Key` header parameter
+- Added the missing `AutoInstrumentationRuleId` regex `pattern`
+- Fixed `info.title` ("Twilio Data Ingress - Instrumentation API" → "Events Domain - Instrumentation API")
+- **Added 1 new API path**:
+- `/v1/UserBehaviors` (AnalyzeUserBehaviors)
+- ## 2026-07-28
+- **Initial release** — 21 paths, 37 operations across three API surfaces:
+- **Control Plane** (`/v1/ControlPlane/…`):
+- `/v1/ControlPlane/EventSources` (CreateEventSource, ListEventSources)
+- `/v1/ControlPlane/EventSources/{sourceId}` (FetchEventSource, PatchEventSource, DeleteEventSource)
+- `/v1/ControlPlane/EventSources/{sourceId}/WriteKeys` (CreateWriteKey, ListWriteKeys)
+- `/v1/ControlPlane/EventSources/{sourceId}/WriteKeys/{writeKey}` (DeleteWriteKey)
+- `/v1/ControlPlane/EventSources/{sourceId}/Datasets` (CreateEventSourceDataset, ListEventSourceDatasets)
+- `/v1/ControlPlane/EventSources/{sourceId}/Datasets/{datasetId}` (FetchEventSourceDataset, PatchEventSourceDataset, DeleteEventSourceDataset)
+- `/v1/ControlPlane/EventSources/{sourceId}/EventSchemas` (CreateEventSchema, ListEventSchemas)
+- `/v1/ControlPlane/EventSources/{sourceId}/EventSchemas/{schemaId}` (FetchEventSchema, PatchEventSchema, DeleteEventSchema)
+- `/v1/ControlPlane/EventSources/{sourceId}/AutoInstrumentationRules` (CreateAutoInstrumentationRule, ListAutoInstrumentationRules)
+- `/v1/ControlPlane/EventSources/{sourceId}/AutoInstrumentationRules/{autoInstrumentationRuleId}` (FetchAutoInstrumentationRule, PatchAutoInstrumentationRule, DeleteAutoInstrumentationRule)
+- `/v1/ControlPlane/EventSources/{sourceId}/AutoInstrumentationRules/{autoInstrumentationRuleId}/Versions` (ListAutoInstrumentationRuleVersions)
+- `/v1/ControlPlane/EventSources/{sourceId}/AutoInstrumentationRules/{autoInstrumentationRuleId}/Versions/{version}` (FetchAutoInstrumentationRuleVersion)
+- `/v1/ControlPlane/Datasets` (ListDatasets)
+- `/v1/ControlPlane/Datasets/{datasetId}` (FetchDataset)
+- `/v1/ControlPlane/Operations/{operationId}` (FetchControlPlaneOperationStatus)
+- `/v1/ControlPlane/Datasets` (ListDatasets)
+- `/v1/ControlPlane/Datasets/{datasetId}` (FetchDataset)
+- **Event Ingestion** (`/v1/EventSources/…`):
+- `/v1/EventSources/{sourceId}/Batch` (IngestEventBatch)
+- `/v1/EventSources/{sourceId}/AutoInstrumentationRules/{autoInstrumentationRuleId}/Preview` (TriggerAutoInstrumentationPreview)
+- `/v1/EventSources/{sourceId}/AutoInstrumentationRules/{autoInstrumentationRuleId}/Preview/{operationId}` (GetAutoInstrumentationPreviewResult)
+- **Signal API** (`/v1/EventSources/…`):
+- `/v1/EventSources/{sourceId}/Signals` (IngestSignals, ListSignals)
+- `/v1/EventSources/{sourceId}/Signals/{signalKey}` (GetSignalBySignalKey)
+- `/v1/EventSources/{sourceId}/SignalStats` (ListSignalStats)
+
+**Memory**
+- ## 2026-08-18
+- **Breaking change**:
+- Removed the deprecated `CSV` and `DATASET` values from the `DataMappingType` enum.
+- `INGRESS`, `DATASET_CLOUDAPP`, and `DATASET_WAREHOUSE` are the only valid values now.
+- Removed the `DataMappingFromCSV` and `DataMappingFromDataSet` schemas and their
+- `oneOf`/discriminator entries on `DataMappingFromTypes`, along with the corresponding
+- `CSV`/`DATASET` discriminator mapping keys.
+- Any caller still sending `type: CSV` or `type: DATASET` on `AdminListDataMappings`
+- (filtering by those values) will get a 400.
+- ## 2026-08-27
+- **Added 2 new path(s)** for Trait Extraction Strategies:
+- `/v1/ControlPlane/TraitExtractionStrategies` (ListTraitExtractionStrategies, CreateTraitExtractionStrategy)
+- `/v1/ControlPlane/TraitExtractionStrategies/{traitStrategyId}` (FetchTraitExtractionStrategy, UpdateTraitExtractionStrategy, DeleteTraitExtractionStrategy)
+- ## 2026-08-18
+- **Breaking change**:
+- Removed the deprecated `CSV` and `DATASET` values from the `DataMappingType` enum.
+- `INGRESS`, `DATASET_CLOUDAPP`, and `DATASET_WAREHOUSE` are the only valid values now.
+- Removed the `DataMappingFromCSV` and `DataMappingFromDataSet` schemas and their
+- `oneOf`/discriminator entries on `DataMappingFromTypes`, along with the corresponding
+- `CSV`/`DATASET` discriminator mapping keys.
+- Any caller still sending `type: CSV` or `type: DATASET` on `CreateDataMapping` or
+- `UpdateDataMapping` (or filtering `ListDataMappings`/`ListDataMappingSuggestions` by
+- those values) will get a 400.
+
+**Messaging**
+- Add SenderIdentity, SenderType, and SenderRegion filter query parameters to list numbers and senders endpoint (beta)
+- Add capabilities field to the numbers and senders response (beta)
+- Remove the WhatsApp Senders v1 endpoints (`/v1/Channels/WhatsApp/Senders`) from RestProxy; the sender was routed to the sunsetting `messaging-whatsapp-k8s-orch` downstream. Use the Senders v2 API (`/v2/Channels/Senders`) instead.
+
+**Verify**
+- Add `Templates` optional parameter on Verification creation (a stringified JSON array of `sid`/`substitutions` entries). When provided, `Templates` takes precedence over `TemplateSid`.
+
+**Voice**
+- ## 2026-09-03
+- Added `links.conversation` to Transcription resources as the absolute Conversations API URL for the
+- transcript's `conversationId`. It is present once the transcript has been stored; the `links` object
+- is omitted otherwise.
+- ## 2026-09-01
+- Removed `mediaUrl` from `CreateRequestWithMediaUrl`'s required fields so a request with neither `sourceId` nor `mediaUrl` reaches the downstream service, which rejects it with the specific error code 17500 instead of a generic gateway 400
+- Set `additionalProperties: false` on both `CreateRequestWithSourceId` and `CreateRequestWithMediaUrl` so the two `oneOf` variants stay mutually exclusive: `sourceId` is undeclared on the media-URL variant and `mediaUrl` is undeclared on the source-ID variant, keeping every request shape resolvable to exactly one variant
+- ## 2026-08-05
+- Added GET /v3/Transcriptions to list and filter transcriptions (status, sourceId, languageCode, createdAfter/createdBefore) with pageSize/pageToken pagination. createdAfter is inclusive and createdBefore exclusive. Returns 422 (error code 17535) when a sourceId's historical item count exceeds the service scan cap
+
+**Webhooks**
+- # API Changes
+- ## 2026-08-24
+- **Changed**: Created Webhooks Config API ( https://docs.google.com/document/d/1zkAJD8a8MgoxWifdYDl_d465Az3W6CcD9fuCC2xlSXE/edit?tab=t.0#heading=h.u9e0ry6oe89j ), that includes 7 new resource(s)**: SharedKeys, AuthProfiles, Settings, Rules, Operations, Tests, EdgeZones in /v1/Webhooks referencing webhooks-config downstream.
+
+
 [2026-08-13] Version 7.11.1
 ---------------------------
 - chore: change permission

data/Gemfile.lock

@@ -1,7 +1,7 @@
 PATH
   remote: .
   specs:
-    twilio-ruby (7.11.1)
+    twilio-ruby (7.11.3)
       faraday (>= 2.0, < 3.0)
       jwt (>= 1.5, < 4.0)
       nokogiri (>= 1.6, < 2.0)
@@ -144,7 +144,7 @@ CHECKSUMS
   rubocop-ast (1.50.0) sha256=b9ca88300da0803ee222ad20cdb30494c0a784eed06fdc35d254b06d662788db
   ruby-progressbar (1.13.0) sha256=80fc9c47a9b640d6834e0dc7b3c94c9df37f08cb072b7761e4a71e22cff29b33
   simplecov (1.0.3) sha256=38ef0514f16ae7562f0d0f4df02610071115103d301b6de7dacbcc000082e39b
-  twilio-ruby (7.11.1)
+  twilio-ruby (7.11.3)
   unicode-display_width (3.2.0) sha256=0cdd96b5681a5949cdbc2c55e7b420facae74c4aaf9a9815eee1087cb1853c42
   unicode-emoji (4.2.0) sha256=519e69150f75652e40bf736106cfbc8f0f73aa3fb6a65afe62fefa7f80b0f80f
   uri (1.1.1) sha256=379fa58d27ffb1387eaada68c749d1426738bd0f654d812fcc07e7568f5c57c6

data/README.md

@@ -39,13 +39,13 @@ This library supports the following Ruby implementations:
 To install using [Bundler][bundler] grab the latest stable version:
 
 ```ruby
-gem 'twilio-ruby', '~> 7.11.1'
+gem 'twilio-ruby', '~> 7.11.3'
 ```
 
 To manually install `twilio-ruby` via [Rubygems][rubygems] simply gem install:
 
 ```bash
-gem install twilio-ruby -v 7.11.1
+gem install twilio-ruby -v 7.11.3
 ```
 
 To build and install the development branch yourself from the latest source:

data/githooks/pre-commit

@@ -1 +1,12 @@
+if git diff --cached --name-only | grep -q '^Gemfile\.lock$'; then
+  if grep -qE 'https://[^[:space:]]+/artifactory/api/gems/[^/[:space:]]+/?' Gemfile.lock; then
+    # A committed lockfile must only reference public registry hosts (enforced in CI by
+    # gems-lockfile-hygiene) - rewrite before it lands in the commit.
+    sed -E -i.bak 's#https://[^[:space:]]+/artifactory/api/gems/[^/[:space:]]+/?#https://rubygems.org/#' Gemfile.lock
+    rm -f Gemfile.lock.bak
+    git add Gemfile.lock
+    echo "pre-commit: rewrote internal registry URLs in Gemfile.lock to rubygems.org"
+  fi
+fi
+
 make test

data/lib/rack/twilio_webhook_authentication.rb

@@ -1,6 +1,7 @@
 # frozen_string_literal: true
 
 require 'rack/media_type'
+require 'rack/utils'
 
 module Rack
   # Middleware that authenticates webhooks from Twilio using the request
@@ -33,7 +34,7 @@ module Rack
     end
 
     def call(env)
-      return @app.call(env) unless env['PATH_INFO'].match(@path_regex)
+      return @app.call(env) unless protected_path?(env['PATH_INFO'])
       request = Rack::Request.new(env)
       original_url = request.url
       params = extract_params!(request)
@@ -51,6 +52,48 @@ module Rack
       end
     end
 
+    # Decide whether a request path needs its signature validated.
+    #
+    # PATH_INFO arrives percent-encoded, but the routers we sit in front of
+    # (Rails, Sinatra) decode and normalize the path before matching it against
+    # their routes. Comparing the configured patterns against the raw PATH_INFO
+    # alone therefore lets a request like `/%76oice` slip past this middleware
+    # unvalidated and still reach the `/voice` action.
+    #
+    # We compare against every form the path could take downstream and validate
+    # if any of them matches. Erring towards validating means a path we can't
+    # make sense of is still checked rather than waved through.
+    def protected_path?(path)
+      path = path.to_s
+      candidates = [path, decode(path)]
+      candidates << remove_dot_segments(candidates.last)
+      candidates.uniq.any? { |candidate| candidate.match(@path_regex) }
+    end
+
+    # Percent-decode a path the way a downstream router would. `unescape_path`
+    # (rather than `unescape`) leaves `+` alone, since a plus is a literal plus
+    # in a path and only means a space in a query string. Undecodable bytes are
+    # scrubbed, as matching a Regexp against invalid UTF-8 raises.
+    def decode(path)
+      decoded = Rack::Utils.unescape_path(path)
+      decoded.valid_encoding? ? decoded : decoded.scrub
+    rescue ArgumentError
+      path
+    end
+
+    # Collapse `.`, `..` and repeated slashes, so an anchored pattern such as
+    # %r{\A/voice\z} still recognizes `/sms/../voice`.
+    def remove_dot_segments(path)
+      segments = path.split('/').each_with_object([]) do |segment, resolved|
+        case segment
+        when '', '.' then next
+        when '..' then resolved.pop
+        else resolved << segment
+        end
+      end
+      "/#{segments.join('/')}"
+    end
+
     # Extract the params from the the request that we can use to determine the
     # signature. This _may_ modify the passed in request since it may read/rewind
     # the body.
@@ -67,6 +110,6 @@ module Rack
       end
     end
 
-    private :extract_params!
+    private :extract_params!, :protected_path?, :decode, :remove_dot_segments
   end
 end

data/lib/twilio-ruby/rest/accounts/v1/auth_token_promotion.rb

@@ -205,65 +205,6 @@ module Twilio
                     end
                 end
 
-                class AuthTokenPromotionPageMetadata < PageMetadata
-                    attr_reader :auth_token_promotion_page
-
-                    def initialize(version, response, solution, limit)
-                        super(version, response)
-                        @auth_token_promotion_page = []
-                        @limit = limit
-                        key = get_key(response.body)
-                        records = 0
-                        while( limit != :unset && records < limit )
-                            @auth_token_promotion_page << AuthTokenPromotionListResponse.new(version, @payload, key, limit - records)
-                            @payload = self.next_page
-                            break unless @payload
-                            records += (@payload.body[key] || []).size
-                        end
-                        # Path Solution
-                        @solution = solution
-                    end
-
-                    def each
-                        @auth_token_promotion_page.each do |record|
-                          yield record
-                        end
-                    end
-
-                    def to_s
-                      '<Twilio::REST::Accounts::V1PageMetadata>';
-                    end
-                end
-                class AuthTokenPromotionListResponse < InstanceListResource
-
-                    # @param [Array<AuthTokenPromotionInstance>] instance
-                    # @param [Hash{String => Object}] headers
-                    # @param [Integer] status_code
-                    def initialize(version, payload, key, limit = :unset)
-                      data_list = payload.body[key]  || []
-                      if limit != :unset
-                        data_list = data_list[0, limit]
-                      end
-                      @auth_token_promotion = data_list.map do |data|
-                        AuthTokenPromotionInstance.new(version, data)
-                      end
-                      @headers = payload.headers
-                      @status_code = payload.status_code
-                    end
-
-                    def auth_token_promotion
-                        @auth_token_promotion
-                    end
-
-                    def headers
-                      @headers
-                    end
-
-                    def status_code
-                      @status_code
-                    end
-                end
-
                 class AuthTokenPromotionInstance < InstanceResource
                     ##
                     # Initialize the AuthTokenPromotionInstance