workos 10.1.0 → 10.2.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 4ed7a1c92c327c1fe2a2f2a582be522670e33f085ca6b7b44f8cb3c968e231bf
-  data.tar.gz: d78826116d38974783cb835dd51890b7aa98dbb2fab67a4a9bc00b8e691c3f0b
+  metadata.gz: b7aff393f8f0d21fe3ff062ac8a0f835ad3d2f43bcfc300d55ec9f5a19688774
+  data.tar.gz: b94cd0e24ce40d7e61bc0c9d3578f14b1c627a4ebf935fdbad7d295584c75dec
 SHA512:
-  metadata.gz: fa5d2429aa5a63556852efadafb0c01cd2d9d26500513cbe520d4501fb8ade808423a7245f302726d295c24b4a9f7714c280a955964b5bf401bdc2d17be18b9e
-  data.tar.gz: 061b36f82c50b4a2e5c0f8ba94777f1dac191ceddc3206683d472f28775979a10161bd926cf902c618cfddb22bce50f5706bee986a7088dc7678af2dcfe6a59e
+  metadata.gz: 235bb3273c2b574dad6cd967b69d5b832cc0bbfbcb7f8389e0eb53e909f915a6698047f68abf7e6826196e7e62a94a43c73686207236439a44c608198be374eb
+  data.tar.gz: bdb237a96780cac60c5bbe0ab7f0bc41bea1d31f38928111ef7a470f3d0e21d7b15e35b6190b7f0588f63dd707d442846293630260c3cd29b8ccf2d9dee7dac6

data/.github/workflows/block-generated-edits.yml

@@ -8,6 +8,6 @@ on:
 
 jobs:
   block-generated-edits:
-    uses: workos/actions/.github/workflows/block-generated-edits.yml@main
+    uses: workos/actions/.github/workflows/block-generated-edits.yml@5c7450a04f5a182b346eae2d833b869e337b12bb # main
     secrets:
       SDK_BOT_PRIVATE_KEY: ${{ secrets.SDK_BOT_PRIVATE_KEY }}

data/.github/workflows/ci.yml

@@ -21,8 +21,8 @@ jobs:
           - '3.4'
           - '4.0'
     steps:
-      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # 6.0.3
-      - uses: ruby/setup-ruby@d45b1a4e94b71acab930e56e79c6aa188764e7f9 # 1.316.0
+      - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # 6.1.0
+      - uses: ruby/setup-ruby@95ef2b042f9d7a56d8268cba8559e2842e2ad01b # 1.321.0
         with:
           ruby-version: ${{ matrix.ruby }}
           bundler-cache: true

data/.github/workflows/docs.yml

@@ -14,8 +14,8 @@ jobs:
     permissions:
       contents: read
     steps:
-      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # 6.0.3
-      - uses: ruby/setup-ruby@d45b1a4e94b71acab930e56e79c6aa188764e7f9 # 1.316.0
+      - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # 6.1.0
+      - uses: ruby/setup-ruby@95ef2b042f9d7a56d8268cba8559e2842e2ad01b # 1.321.0
         with:
           bundler-cache: true
       - run: ./script/docs

data/.github/workflows/lint.yml

@@ -15,8 +15,8 @@ jobs:
     name: Lint
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # 6.0.3
-      - uses: ruby/setup-ruby@d45b1a4e94b71acab930e56e79c6aa188764e7f9 # 1.316.0
+      - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # 6.1.0
+      - uses: ruby/setup-ruby@95ef2b042f9d7a56d8268cba8559e2842e2ad01b # 1.321.0
         with:
           bundler-cache: true
 

data/.github/workflows/release-please.yml

@@ -61,7 +61,7 @@ jobs:
           permission-pull-requests: write
 
       - name: Checkout release PR branch
-        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # 6.0.3
+        uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # 6.1.0
         with:
           ref: ${{ fromJSON(needs.release-please.outputs.pr).headBranchName }}
           token: ${{ steps.generate-token.outputs.token }}
@@ -155,7 +155,7 @@ jobs:
           git push
 
       - name: Set up Ruby
-        uses: ruby/setup-ruby@d45b1a4e94b71acab930e56e79c6aa188764e7f9 # 1.316.0
+        uses: ruby/setup-ruby@95ef2b042f9d7a56d8268cba8559e2842e2ad01b # 1.321.0
         with:
           ruby-version: ruby
 
@@ -190,7 +190,7 @@ jobs:
           permission-contents: write
           permission-pull-requests: write
 
-      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # 6.0.3
+      - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # 6.1.0
         with:
           token: ${{ steps.generate-token.outputs.token }}
 

data/.github/workflows/release.yml

@@ -22,10 +22,10 @@ jobs:
           role-to-assume: rg_oidc_akr_fn8dx45asckvmsnd2kka
 
       - name: Checkout
-        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # 6.0.3
+        uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # 6.1.0
 
       - name: Setup Ruby
-        uses: ruby/setup-ruby@d45b1a4e94b71acab930e56e79c6aa188764e7f9 # 1.316.0
+        uses: ruby/setup-ruby@95ef2b042f9d7a56d8268cba8559e2842e2ad01b # 1.321.0
         with:
           bundler-cache: true
 

data/.last-synced-sha

@@ -1 +1 @@
-ae3ebbb08d9b4bf9b2391558e820b7eb6f511fb9
+a07d8e7988d035c2d727787f18f64d71b4b89a84

data/.oagen-manifest.json

@@ -279,6 +279,7 @@
     "lib/workos/pipes/data_integrations_list_response_data.rb",
     "lib/workos/pipes/data_integrations_list_response_data_connected_account.rb",
     "lib/workos/pipes/data_integrations_upsert_api_key_request.rb",
+    "lib/workos/pipes/data_integrations_upsert_client_credentials_request.rb",
     "lib/workos/pipes/data_integrations_vend_credentials_request.rb",
     "lib/workos/pipes/update_custom_provider_definition.rb",
     "lib/workos/pipes/update_data_integration.rb",
@@ -312,6 +313,8 @@
     "lib/workos/shared/agent_registration_expired_data.rb",
     "lib/workos/shared/agent_registration_organization_switched.rb",
     "lib/workos/shared/agent_registration_organization_switched_data.rb",
+    "lib/workos/shared/agent_registration_refreshed.rb",
+    "lib/workos/shared/agent_registration_refreshed_data.rb",
     "lib/workos/shared/agent_registration_revoked.rb",
     "lib/workos/shared/agent_registration_revoked_data.rb",
     "lib/workos/shared/auth_method_mismatch_error.rb",
@@ -405,6 +408,7 @@
     "lib/workos/types/create_data_integration_auth_methods.rb",
     "lib/workos/types/create_user_invite_options_locale.rb",
     "lib/workos/types/create_user_password_hash_type.rb",
+    "lib/workos/types/create_user_password_salt_position.rb",
     "lib/workos/types/create_webhook_endpoint_events.rb",
     "lib/workos/types/custom_provider_definition_authenticate_via.rb",
     "lib/workos/types/data_integration_access_token_response_error.rb",
@@ -484,6 +488,7 @@
     "lib/workos/types/sso_provider.rb",
     "lib/workos/types/update_custom_provider_definition_authenticate_via.rb",
     "lib/workos/types/update_user_password_hash_type.rb",
+    "lib/workos/types/update_user_password_salt_position.rb",
     "lib/workos/types/update_webhook_endpoint_events.rb",
     "lib/workos/types/update_webhook_endpoint_status.rb",
     "lib/workos/types/user_identities_get_item_provider.rb",
@@ -732,6 +737,8 @@
     "rbi/workos/agent_registration_expired_data.rbi",
     "rbi/workos/agent_registration_organization_switched.rbi",
     "rbi/workos/agent_registration_organization_switched_data.rbi",
+    "rbi/workos/agent_registration_refreshed.rbi",
+    "rbi/workos/agent_registration_refreshed_data.rbi",
     "rbi/workos/agent_registration_revoked.rbi",
     "rbi/workos/agent_registration_revoked_data.rbi",
     "rbi/workos/agents.rbi",
@@ -921,6 +928,7 @@
     "rbi/workos/data_integrations_list_response_data.rbi",
     "rbi/workos/data_integrations_list_response_data_connected_account.rbi",
     "rbi/workos/data_integrations_upsert_api_key_request.rbi",
+    "rbi/workos/data_integrations_upsert_client_credentials_request.rbi",
     "rbi/workos/data_integrations_vend_credentials_request.rbi",
     "rbi/workos/decrypt_request.rbi",
     "rbi/workos/decrypt_response.rbi",
@@ -2186,6 +2194,10 @@
     "GET /audit_logs/exports/{auditLogExportId}": {
       "sdkMethod": "get_export",
       "service": "audit_logs"
+    },
+    "PUT /data-integrations/{slug}/client-credentials": {
+      "sdkMethod": "update_data_integration_client_credentials",
+      "service": "pipes"
     }
   }
 }

data/.release-please-manifest.json

@@ -1,3 +1,3 @@
 {
-  ".": "10.1.0"
+  ".": "10.2.1"
 }

data/CHANGELOG.md

@@ -1,5 +1,68 @@
 # Changelog
 
+## [10.2.1](https://github.com/workos/workos-ruby/compare/v10.2.0...v10.2.1) (2026-08-20)
+
+
+### Bug Fixes
+
+* explicitly evict connections if request does not complete as success ([e792414](https://github.com/workos/workos-ruby/commit/e79241473e9cb0e8898632723200a7e23682ff24))
+
+## [10.2.0](https://github.com/workos/workos-ruby/compare/v10.1.0...v10.2.0) (2026-08-11)
+
+* [#533](https://github.com/workos/workos-ruby/pull/533) feat(generated)!: regenerate from spec (2 changes)
+
+  **⚠️ Breaking**
+  * **[events](https://workos.com/docs/reference/events)**:
+    * Changed required status for parameter `Events.list.events`
+
+  **Features**
+  * **[groups](https://workos.com/docs/reference/groups)**:
+    * Added parameter `Groups.list.search`
+  * **[connect](https://workos.com/docs/reference/workos-connect/standalone)**:
+    * Added `client_id` to `ConnectedAccount`
+    * Added `client_secret_last_4` to `ConnectedAccount`
+    * Added `config` to `ConnectedAccount`
+  * **[pipes](https://workos.com/docs/reference/pipes)**:
+    * Added `client_id` to `DataIntegrationsListResponseDataConnectedAccount`
+    * Added `client_secret_last_4` to `DataIntegrationsListResponseDataConnectedAccount`
+    * Added `config` to `DataIntegrationsListResponseDataConnectedAccount`
+    * Changed errors for endpoint `POST /data-integrations/{slug}/credentials`
+    * Made `CustomProviderDefinition.authorization_url` optional
+    * Made `CustomProviderDefinition.token_url` optional
+    * Added model `DataIntegrationsUpsertClientCredentialsRequest`
+    * Added `client_credentials` to `CreateDataIntegrationAuthMethods`
+    * Added endpoint `PUT /data-integrations/{slug}/client-credentials`
+  * **[sso](https://workos.com/docs/reference/sso)**:
+    * Added `XOAuth` to `ConnectionType`
+    * Added `XOAuth` to `ProfileConnectionType`
+    * Added `XOAuth` to `ConnectionsConnectionType`
+    * Added `GrokOAuth` to `ConnectionType`
+    * Added `GrokOAuth` to `ProfileConnectionType`
+    * Added `GrokOAuth` to `ConnectionsConnectionType`
+  * **[user_management](https://workos.com/docs/reference/authkit/user)**:
+    * Changed errors for endpoint `DELETE /user_management/users/{id}`
+    * Added `password_salt_position` to `CreateUser`
+    * Added `password_salt_position` to `UpdateUser`
+    * Made `RadarSmsChallengeCodeSessionAuthenticateRequest.verification_id` optional
+    * Made `RadarSmsChallengeCodeSessionAuthenticateRequest.phone_number` optional
+    * Added enum `CreateUserPasswordSaltPosition`
+    * Added enum `UpdateUserPasswordSaltPosition`
+    * Added `XOAuth` to `AuthenticateResponseAuthenticationMethod`
+    * Added `XOAuth` to `UserIdentitiesGetItemProvider`
+    * Added `GrokOAuth` to `AuthenticateResponseAuthenticationMethod`
+    * Added `GrokOAuth` to `UserIdentitiesGetItemProvider`
+  * **[webhooks](https://workos.com/docs/reference/webhooks)**:
+    * Added `agent.registration.refreshed` to `CreateWebhookEndpointEvents`
+    * Added `agent.registration.refreshed` to `UpdateWebhookEndpointEvents`
+
+  **Fixes**
+  * **[pipes](https://workos.com/docs/reference/pipes)**:
+    * Changed the type of `DataIntegration.credentials`
+  * **[user_management](https://workos.com/docs/reference/authkit/user)**:
+    * Changed errors for endpoint `POST /user_management/authenticate`
+    * Changed errors for endpoint `POST /user_management/users`
+    * Changed errors for endpoint `PUT /user_management/users/{id}`
+
 ## [10.1.0](https://github.com/workos/workos-ruby/compare/v10.0.0...v10.1.0) (2026-07-28)
 
 ### Features

data/Gemfile.lock

@@ -1,7 +1,7 @@
 PATH
   remote: .
   specs:
-    workos (10.1.0)
+    workos (10.2.1)
       jwt (~> 3.1)
       logger (~> 1.7)
       zeitwerk (~> 2.6)
@@ -153,7 +153,7 @@ CHECKSUMS
   unicode-emoji (4.2.0) sha256=519e69150f75652e40bf736106cfbc8f0f73aa3fb6a65afe62fefa7f80b0f80f
   webmock (3.26.2) sha256=774556f2ea6371846cca68c01769b2eac0d134492d21f6d0ab5dd643965a4c90
   webrick (1.9.2) sha256=beb4a15fc474defed24a3bda4ffd88a490d517c9e4e6118c3edce59e45864131
-  workos (10.1.0)
+  workos (10.2.1)
   yard (0.9.44) sha256=eb087e9b631ccd887b049f303d489963945452d5e2a7eb49a5a74a7cf6887f28
   yard-markdown (0.7.1) sha256=06c378632dfe7ba053be9ba469eb4701aa0470e36bcf7e5546f353eb90c1bfd1
   zeitwerk (2.7.5) sha256=d8da92128c09ea6ec62c949011b00ed4a20242b255293dd66bf41545398f73dd

data/lib/workos/base_client.rb

@@ -137,7 +137,20 @@ module WorkOS
         loggable_path = redact_path(request.path)
         log(:debug, "request start", method: request.method, path: loggable_path, attempt: attempt + 1)
         http = connection_for(base, timeout)
-        response = http.request(request)
+        request_completed = false
+        begin
+          response = http.request(request)
+          request_completed = true
+        ensure
+          # Any exit from #request other than a returned response can leave
+          # the socket mid-stream: a connection error the rescue below knows
+          # about, one it doesn't (OpenSSL::SSL::SSLError,
+          # Net::HTTPBadResponse), or a non-local exit such as an
+          # application-level Timeout.timeout or Thread#kill. A half-read
+          # socket handed back to the pool desyncs the *next* request on this
+          # thread, so drop it here rather than in the rescue.
+          evict_connection(base) unless request_completed
+        end
         return response if response.is_a?(Net::HTTPSuccess)
 
         if attempt < retries && retryable?(response)

data/lib/workos/connect.rb

@@ -135,7 +135,7 @@ module WorkOS
       result
     end
 
-    # Create oauth application.
+    # Create OAuth application.
     # @param name [String]
     # @param is_first_party [Boolean]
     # @param description [String, nil]
@@ -175,7 +175,7 @@ module WorkOS
       WorkOS::ConnectApplication.new(response.body)
     end
 
-    # Create m2m application.
+    # Create M2M application.
     # @param name [String]
     # @param organization_id [String]
     # @param description [String, nil]

data/lib/workos/events.rb

@@ -15,18 +15,18 @@ module WorkOS
     # @param after [String, nil] An object ID that defines your place in the list. When the ID is not present, you are at the end of the list. For example, if you make a list request and receive 100 objects, ending with `"obj_123"`, your subsequent call can include `after="obj_123"` to fetch a new batch of objects after `"obj_123"`.
     # @param limit [Integer, nil] Upper limit on the number of objects to return, between `1` and `100`.
     # @param order [WorkOS::Types::PaginationOrder, nil] Order the results by the creation time. Supported values are `"asc"` (ascending), `"desc"` (descending), and `"normal"` (descending with reversed cursor semantics where `before` fetches older records and `after` fetches newer records).
-    # @param events [Array<String>, nil] Filter events by one or more event types (e.g. `dsync.user.created`).
+    # @param events [Array<String>] Filter events by one or more event types (e.g. `dsync.user.created`).
     # @param range_start [String, nil] ISO-8601 date string to filter events created after this date.
     # @param range_end [String, nil] ISO-8601 date string to filter events created before this date.
     # @param organization_id [String, nil] Filter events by the [Organization](https://workos.com/docs/reference/organization) that the event is associated with.
     # @param request_options [Hash] (see WorkOS::Types::RequestOptions)
     # @return [WorkOS::Types::ListStruct<WorkOS::EventSchema>]
     def list_events(
+      events:,
       before: nil,
       after: nil,
       limit: 10,
       order: "desc",
-      events: nil,
       range_start: nil,
       range_end: nil,
       organization_id: nil,

data/lib/workos/groups.rb

@@ -16,6 +16,7 @@ module WorkOS
     # @param after [String, nil] An object ID that defines your place in the list. When the ID is not present, you are at the end of the list. For example, if you make a list request and receive 100 objects, ending with `"obj_123"`, your subsequent call can include `after="obj_123"` to fetch a new batch of objects after `"obj_123"`.
     # @param limit [Integer, nil] Upper limit on the number of objects to return, between `1` and `100`.
     # @param order [WorkOS::Types::PaginationOrder, nil] Order the results by the creation time. Supported values are `"asc"` (ascending), `"desc"` (descending), and `"normal"` (descending with reversed cursor semantics where `before` fetches older records and `after` fetches newer records).
+    # @param search [String, nil] Search groups by name or by group ID.
     # @param request_options [Hash] (see WorkOS::Types::RequestOptions)
     # @return [WorkOS::Types::ListStruct<WorkOS::Group>]
     def list_organization_groups(
@@ -24,13 +25,15 @@ module WorkOS
       after: nil,
       limit: 10,
       order: "desc",
+      search: nil,
       request_options: {}
     )
       params = {
         "before" => before,
         "after" => after,
         "limit" => limit,
-        "order" => order
+        "order" => order,
+        "search" => search
       }.compact
       response = @client.request(
         method: :get,
@@ -46,13 +49,14 @@ module WorkOS
           after: cursor,
           limit: limit,
           order: order,
+          search: search,
           request_options: request_options
         )
       }
       WorkOS::Types::ListStruct.from_response(
         response,
         model: WorkOS::Group,
-        filters: {organization_id: organization_id, before: before, limit: limit, order: order},
+        filters: {organization_id: organization_id, before: before, limit: limit, order: order, search: search},
         fetch_next: fetch_next
       )
     end

data/lib/workos/pipes/connected_account.rb

@@ -12,6 +12,9 @@ module WorkOS
       scopes: :scopes,
       auth_method: :auth_method,
       api_key_last_4: :api_key_last_4,
+      client_id: :client_id,
+      client_secret_last_4: :client_secret_last_4,
+      config: :config,
       state: :state,
       created_at: :created_at,
       updated_at: :updated_at
@@ -25,6 +28,9 @@ module WorkOS
       :scopes,
       :auth_method,
       :api_key_last_4,
+      :client_id,
+      :client_secret_last_4,
+      :config,
       :state,
       :created_at,
       :updated_at
@@ -38,6 +44,9 @@ module WorkOS
       @scopes = hash[:scopes] || []
       @auth_method = hash[:auth_method]
       @api_key_last_4 = hash[:api_key_last_4]
+      @client_id = hash[:client_id]
+      @client_secret_last_4 = hash[:client_secret_last_4]
+      @config = hash[:config] || {}
       @state = hash[:state]
       @created_at = hash[:created_at]
       @updated_at = hash[:updated_at]

data/lib/workos/pipes/data_integrations_list_response_data_connected_account.rb

@@ -12,6 +12,9 @@ module WorkOS
       scopes: :scopes,
       auth_method: :auth_method,
       api_key_last_4: :api_key_last_4,
+      client_id: :client_id,
+      client_secret_last_4: :client_secret_last_4,
+      config: :config,
       state: :state,
       created_at: :created_at,
       updated_at: :updated_at,
@@ -29,6 +32,9 @@ module WorkOS
       :scopes,
       :auth_method,
       :api_key_last_4,
+      :client_id,
+      :client_secret_last_4,
+      :config,
       :state,
       :created_at,
       :updated_at
@@ -49,6 +55,9 @@ module WorkOS
       @scopes = hash[:scopes] || []
       @auth_method = hash[:auth_method]
       @api_key_last_4 = hash[:api_key_last_4]
+      @client_id = hash[:client_id]
+      @client_secret_last_4 = hash[:client_secret_last_4]
+      @config = hash[:config] || {}
       @state = hash[:state]
       @created_at = hash[:created_at]
       @updated_at = hash[:updated_at]

data/lib/workos/pipes/data_integrations_upsert_client_credentials_request.rb

@@ -0,0 +1,31 @@
+# frozen_string_literal: true
+
+# This file is auto-generated by oagen. Do not edit.
+
+module WorkOS
+  class DataIntegrationsUpsertClientCredentialsRequest < WorkOS::Types::BaseModel
+    HASH_ATTRS = {
+      user_id: :user_id,
+      organization_id: :organization_id,
+      client_id: :client_id,
+      client_secret: :client_secret,
+      config: :config
+    }.freeze
+
+    attr_accessor \
+      :user_id,
+      :organization_id,
+      :client_id,
+      :client_secret,
+      :config
+
+    def initialize(json)
+      hash = self.class.normalize(json)
+      @user_id = hash[:user_id]
+      @organization_id = hash[:organization_id]
+      @client_id = hash[:client_id]
+      @client_secret = hash[:client_secret]
+      @config = hash[:config] || {}
+    end
+  end
+end

data/lib/workos/pipes.rb

@@ -59,8 +59,8 @@ module WorkOS
     # @param description [String, nil] An optional description of the Data Integration.
     # @param enabled [Boolean, nil] Whether the Data Integration is enabled. Defaults to `false`.
     # @param scopes [Array<String>, nil] The OAuth scopes to request for the Data Integration. Defaults to the provider's configured scopes when omitted.
-    # @param auth_methods [Array<WorkOS::Types::CreateDataIntegrationAuthMethods>, nil] How accounts authenticate with the provider. Defaults to `["oauth"]`. Use `["api_key"]` to declare an API key integration; `credentials` is then not required and keys are supplied per-tenant (optionally via `api_key` on this request).
-    # @param config [Hash{String => String}, nil] Provider-specific config values (e.g. a Snowflake `account_identifier`), keyed by the config field. Only fields the built-in provider declares are accepted.
+    # @param auth_methods [Array<WorkOS::Types::CreateDataIntegrationAuthMethods>, nil] How accounts authenticate with the provider. Defaults to `["oauth"]`. Use `["api_key"]` to declare an API key integration; `credentials` is then not required and keys are supplied per-tenant (optionally via `api_key` on this request). Use `["client_credentials"]` to declare a client-credentials integration; `credentials` is likewise not required and client credentials are supplied per-tenant.
+    # @param config [Hash{String => String}, nil] Provider-specific config values (e.g. a Snowflake `account`), keyed by the config field. Only fields the built-in provider declares are accepted.
     # @param credentials [WorkOS::DataIntegrationCredentialsInput, nil] The OAuth credentials to configure for the Data Integration. Required for OAuth integrations; omit when `auth_methods` is `["api_key"]`.
     # @param api_key [WorkOS::ApiKeyInstallation, nil] An optional API key to install for the first tenant on an `api_key` integration. Omit to declare a keyless integration; tenants can be added later via the per-installation API key path.
     # @param custom_provider [WorkOS::CustomProviderDefinition, nil] The OAuth definition for a custom provider. Supply this to define a custom provider; omit it to create an integration for a built-in provider.
@@ -242,6 +242,43 @@ module WorkOS
       result
     end
 
+    # Upsert client credentials for a connected account
+    # @param slug [String] The identifier of the integration.
+    # @param user_id [String] A [User](https://workos.com/docs/reference/authkit/user) identifier.
+    # @param organization_id [String, nil] An [Organization](https://workos.com/docs/reference/organization) identifier. Optional parameter to scope the connection to a specific organization.
+    # @param client_id [String] The OAuth client ID to store for this integration.
+    # @param client_secret [String] The OAuth client secret to store for this integration.
+    # @param config [Hash{String => String}, nil] Provider-specific configuration values collected for this installation, keyed by the provider's config field descriptors.
+    # @param request_options [Hash] (see WorkOS::Types::RequestOptions)
+    # @return [WorkOS::ConnectedAccount]
+    def update_data_integration_client_credentials(
+      slug:,
+      user_id:,
+      client_id:,
+      client_secret:,
+      organization_id: nil,
+      config: nil,
+      request_options: {}
+    )
+      body = {
+        "user_id" => user_id,
+        "organization_id" => organization_id,
+        "client_id" => client_id,
+        "client_secret" => client_secret,
+        "config" => config
+      }.compact
+      response = @client.request(
+        method: :put,
+        path: "/data-integrations/#{WorkOS::Util.encode_path(slug)}/client-credentials",
+        auth: true,
+        body: body,
+        request_options: request_options
+      )
+      result = WorkOS::ConnectedAccount.new(response.body)
+      result.last_response = WorkOS::Types::ApiResponse.new(http_status: response.code.to_i, http_headers: response.each_header.to_h, request_id: response["x-request-id"])
+      result
+    end
+
     # Vend credentials for a connected account
     # @param slug [String] The identifier of the integration.
     # @param user_id [String] A [User](https://workos.com/docs/reference/authkit/user) identifier.

data/lib/workos/shared/agent_registration_refreshed.rb

@@ -0,0 +1,34 @@
+# frozen_string_literal: true
+
+# This file is auto-generated by oagen. Do not edit.
+
+module WorkOS
+  class AgentRegistrationRefreshed < WorkOS::Types::BaseModel
+    HASH_ATTRS = {
+      object: :object,
+      id: :id,
+      event: :event,
+      data: :data,
+      created_at: :created_at,
+      context: :context
+    }.freeze
+
+    attr_accessor \
+      :object,
+      :id,
+      :event,
+      :data,
+      :created_at,
+      :context
+
+    def initialize(json)
+      hash = self.class.normalize(json)
+      @object = hash[:object]
+      @id = hash[:id]
+      @event = hash[:event]
+      @data = hash[:data] ? WorkOS::AgentRegistrationRefreshedData.new(hash[:data]) : nil
+      @created_at = hash[:created_at]
+      @context = hash[:context] ? WorkOS::EventContext.new(hash[:context]) : nil
+    end
+  end
+end

data/lib/workos/shared/agent_registration_refreshed_data.rb

@@ -0,0 +1,7 @@
+# frozen_string_literal: true
+
+# This file is auto-generated by oagen. Do not edit.
+
+module WorkOS
+  AgentRegistrationRefreshedData = AgentRegistrationDeletedData
+end

data/lib/workos/shared/waitlist_user.rb

@@ -10,6 +10,7 @@ module WorkOS
       email: :email,
       state: :state,
       approved_at: :approved_at,
+      waitlist_id: :waitlist_id,
       created_at: :created_at,
       updated_at: :updated_at
     }.freeze
@@ -20,6 +21,7 @@ module WorkOS
       :email,
       :state,
       :approved_at,
+      :waitlist_id,
       :created_at,
       :updated_at
 
@@ -30,6 +32,7 @@ module WorkOS
       @email = hash[:email]
       @state = hash[:state]
       @approved_at = hash[:approved_at]
+      @waitlist_id = hash[:waitlist_id]
       @created_at = hash[:created_at]
       @updated_at = hash[:updated_at]
     end

data/lib/workos/types/authenticate_response_authentication_method.rb

@@ -16,6 +16,8 @@ module WorkOS
       GIT_HUB_OAUTH = "GitHubOAuth"
       GIT_LAB_OAUTH = "GitLabOAuth"
       GOOGLE_OAUTH = "GoogleOAuth"
+      GROK_OAUTH = "GrokOAuth"
+      XO_AUTH = "XOAuth"
       INTUIT_OAUTH = "IntuitOAuth"
       LINKED_IN_OAUTH = "LinkedInOAuth"
       MICROSOFT_OAUTH = "MicrosoftOAuth"
@@ -27,7 +29,7 @@ module WorkOS
       MAGIC_AUTH = "MagicAuth"
       IMPERSONATION = "Impersonation"
       MIGRATED_SESSION = "MigratedSession"
-      ALL = [SSO, PASSWORD, PASSKEY, APPLE_OAUTH, BITBUCKET_OAUTH, CROSS_APP_AUTH, DISCORD_OAUTH, EXTERNAL_AUTH, GIT_HUB_OAUTH, GIT_LAB_OAUTH, GOOGLE_OAUTH, INTUIT_OAUTH, LINKED_IN_OAUTH, MICROSOFT_OAUTH, SALESFORCE_OAUTH, SLACK_OAUTH, VERCEL_MARKETPLACE_OAUTH, VERCEL_OAUTH, XERO_OAUTH, MAGIC_AUTH, IMPERSONATION, MIGRATED_SESSION].freeze
+      ALL = [SSO, PASSWORD, PASSKEY, APPLE_OAUTH, BITBUCKET_OAUTH, CROSS_APP_AUTH, DISCORD_OAUTH, EXTERNAL_AUTH, GIT_HUB_OAUTH, GIT_LAB_OAUTH, GOOGLE_OAUTH, GROK_OAUTH, XO_AUTH, INTUIT_OAUTH, LINKED_IN_OAUTH, MICROSOFT_OAUTH, SALESFORCE_OAUTH, SLACK_OAUTH, VERCEL_MARKETPLACE_OAUTH, VERCEL_OAUTH, XERO_OAUTH, MAGIC_AUTH, IMPERSONATION, MIGRATED_SESSION].freeze
     end
   end
 end

data/lib/workos/types/connection_activated_data_connection_type.rb

@@ -27,6 +27,8 @@ module WorkOS
       GOOGLE_OAUTH = "GoogleOAuth"
       GOOGLE_OIDC = "GoogleOIDC"
       GOOGLE_SAML = "GoogleSAML"
+      GROK_OAUTH = "GrokOAuth"
+      XO_AUTH = "XOAuth"
       INTUIT_OAUTH = "IntuitOAuth"
       JUMP_CLOUD_SAML = "JumpCloudSAML"
       KEYCLOAK_SAML = "KeycloakSAML"
@@ -55,7 +57,7 @@ module WorkOS
       VERCEL_OAUTH = "VercelOAuth"
       V_MWARE_SAML = "VMwareSAML"
       XERO_OAUTH = "XeroOAuth"
-      ALL = [ADFSSAML, ADP_OIDC, APPLE_OAUTH, AUTH_0_MIGRATION, AUTH_0_SAML, AZURE_SAML, BITBUCKET_OAUTH, CAS_SAML, CLASS_LINK_SAML, CLEVER_OIDC, CLOUDFLARE_SAML, CYBER_ARK_SAML, DISCORD_OAUTH, DUO_SAML, ENTRA_ID_OIDC, GENERIC_OIDC, GENERIC_SAML, GIT_HUB_OAUTH, GIT_LAB_OAUTH, GOOGLE_OAUTH, GOOGLE_OIDC, GOOGLE_SAML, INTUIT_OAUTH, JUMP_CLOUD_SAML, KEYCLOAK_SAML, LAST_PASS_SAML, LINKED_IN_OAUTH, LOGIN_GOV_OIDC, MAGIC_LINK, MICROSOFT_OAUTH, MINI_ORANGE_SAML, NET_IQ_SAML, OKTA_OIDC, OKTA_SAML, ONE_LOGIN_SAML, ORACLE_SAML, PING_FEDERATE_SAML, PING_ONE_SAML, RIPPLING_SAML, SALESFORCE_SAML, SHIBBOLETH_GENERIC_SAML, SHIBBOLETH_SAML, SIMPLE_SAML_PHP_SAML, SALESFORCE_OAUTH, SLACK_OAUTH, TEST_IDP, VERCEL_MARKETPLACE_OAUTH, VERCEL_OAUTH, V_MWARE_SAML, XERO_OAUTH].freeze
+      ALL = [ADFSSAML, ADP_OIDC, APPLE_OAUTH, AUTH_0_MIGRATION, AUTH_0_SAML, AZURE_SAML, BITBUCKET_OAUTH, CAS_SAML, CLASS_LINK_SAML, CLEVER_OIDC, CLOUDFLARE_SAML, CYBER_ARK_SAML, DISCORD_OAUTH, DUO_SAML, ENTRA_ID_OIDC, GENERIC_OIDC, GENERIC_SAML, GIT_HUB_OAUTH, GIT_LAB_OAUTH, GOOGLE_OAUTH, GOOGLE_OIDC, GOOGLE_SAML, GROK_OAUTH, XO_AUTH, INTUIT_OAUTH, JUMP_CLOUD_SAML, KEYCLOAK_SAML, LAST_PASS_SAML, LINKED_IN_OAUTH, LOGIN_GOV_OIDC, MAGIC_LINK, MICROSOFT_OAUTH, MINI_ORANGE_SAML, NET_IQ_SAML, OKTA_OIDC, OKTA_SAML, ONE_LOGIN_SAML, ORACLE_SAML, PING_FEDERATE_SAML, PING_ONE_SAML, RIPPLING_SAML, SALESFORCE_SAML, SHIBBOLETH_GENERIC_SAML, SHIBBOLETH_SAML, SIMPLE_SAML_PHP_SAML, SALESFORCE_OAUTH, SLACK_OAUTH, TEST_IDP, VERCEL_MARKETPLACE_OAUTH, VERCEL_OAUTH, V_MWARE_SAML, XERO_OAUTH].freeze
     end
   end
 end

data/lib/workos/types/connection_type.rb

@@ -28,6 +28,8 @@ module WorkOS
       GOOGLE_OAUTH = "GoogleOAuth"
       GOOGLE_OIDC = "GoogleOIDC"
       GOOGLE_SAML = "GoogleSAML"
+      GROK_OAUTH = "GrokOAuth"
+      XO_AUTH = "XOAuth"
       INTUIT_OAUTH = "IntuitOAuth"
       JUMP_CLOUD_SAML = "JumpCloudSAML"
       KEYCLOAK_SAML = "KeycloakSAML"
@@ -56,7 +58,7 @@ module WorkOS
       VERCEL_OAUTH = "VercelOAuth"
       V_MWARE_SAML = "VMwareSAML"
       XERO_OAUTH = "XeroOAuth"
-      ALL = [PENDING, ADFSSAML, ADP_OIDC, APPLE_OAUTH, AUTH_0_MIGRATION, AUTH_0_SAML, AZURE_SAML, BITBUCKET_OAUTH, CAS_SAML, CLASS_LINK_SAML, CLEVER_OIDC, CLOUDFLARE_SAML, CYBER_ARK_SAML, DISCORD_OAUTH, DUO_SAML, ENTRA_ID_OIDC, GENERIC_OIDC, GENERIC_SAML, GIT_HUB_OAUTH, GIT_LAB_OAUTH, GOOGLE_OAUTH, GOOGLE_OIDC, GOOGLE_SAML, INTUIT_OAUTH, JUMP_CLOUD_SAML, KEYCLOAK_SAML, LAST_PASS_SAML, LINKED_IN_OAUTH, LOGIN_GOV_OIDC, MAGIC_LINK, MICROSOFT_OAUTH, MINI_ORANGE_SAML, NET_IQ_SAML, OKTA_OIDC, OKTA_SAML, ONE_LOGIN_SAML, ORACLE_SAML, PING_FEDERATE_SAML, PING_ONE_SAML, RIPPLING_SAML, SALESFORCE_SAML, SHIBBOLETH_GENERIC_SAML, SHIBBOLETH_SAML, SIMPLE_SAML_PHP_SAML, SALESFORCE_OAUTH, SLACK_OAUTH, TEST_IDP, VERCEL_MARKETPLACE_OAUTH, VERCEL_OAUTH, V_MWARE_SAML, XERO_OAUTH].freeze
+      ALL = [PENDING, ADFSSAML, ADP_OIDC, APPLE_OAUTH, AUTH_0_MIGRATION, AUTH_0_SAML, AZURE_SAML, BITBUCKET_OAUTH, CAS_SAML, CLASS_LINK_SAML, CLEVER_OIDC, CLOUDFLARE_SAML, CYBER_ARK_SAML, DISCORD_OAUTH, DUO_SAML, ENTRA_ID_OIDC, GENERIC_OIDC, GENERIC_SAML, GIT_HUB_OAUTH, GIT_LAB_OAUTH, GOOGLE_OAUTH, GOOGLE_OIDC, GOOGLE_SAML, GROK_OAUTH, XO_AUTH, INTUIT_OAUTH, JUMP_CLOUD_SAML, KEYCLOAK_SAML, LAST_PASS_SAML, LINKED_IN_OAUTH, LOGIN_GOV_OIDC, MAGIC_LINK, MICROSOFT_OAUTH, MINI_ORANGE_SAML, NET_IQ_SAML, OKTA_OIDC, OKTA_SAML, ONE_LOGIN_SAML, ORACLE_SAML, PING_FEDERATE_SAML, PING_ONE_SAML, RIPPLING_SAML, SALESFORCE_SAML, SHIBBOLETH_GENERIC_SAML, SHIBBOLETH_SAML, SIMPLE_SAML_PHP_SAML, SALESFORCE_OAUTH, SLACK_OAUTH, TEST_IDP, VERCEL_MARKETPLACE_OAUTH, VERCEL_OAUTH, V_MWARE_SAML, XERO_OAUTH].freeze
     end
   end
 end