workos 9.0.0 → 9.1.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: '09d3066dd5295b0e1f4bad62901c5e3efce798c893163bd3041dd6c65c1cbd98'
-  data.tar.gz: 25cafd8df5cb61b6181ed4a9922911d1e740be5a106621b97ef7885d655636a8
+  metadata.gz: d5bf8d039e74032934018104dfea6d320879461dba4c31f31bbf598b2f31eda6
+  data.tar.gz: 3d3fcf304a78be2a804cab6965e31560296f1d21c2c3e66cc5f106651e759baf
 SHA512:
-  metadata.gz: f9c151ad91db61f0587641043cf1b9e8c75831cb676b86ddcf04e40f0439b1a40aa6b5ea8a73d9819cba88a82a37d4469ac94403d5724a34116884be931a5802
-  data.tar.gz: 8e2c4bc8f9defea99d6d67f4de71d4d0750b286eb6c58300333e9e6a237eef76af20b8fe015acb7e799a88dd4492714c8cb74a58857b86660d823c60572d5b9e
+  metadata.gz: 688d93035a70deb0779be44d0185e44cf7fd53ad5e5143157f5c29321d84d88f04bc696d6a65a2b050d86eec6a9cdea807418ae2360936b046648a1e8e77854c
+  data.tar.gz: 28e078a1307dc71956d840ec6925946aaca7b70ea7cf60b8cbb16caee9db25afbc11c28863155a82c92f62e81fb4c5937490237af4859ce7dd1f2b5012fce8a4

data/.github/workflows/ci.yml

@@ -21,8 +21,8 @@ jobs:
           - '3.4'
           - '4.0'
     steps:
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
-      - uses: ruby/setup-ruby@6aaa311d81eba98ae12eaffbcb63296ace0efcde # 1.307.0
+      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # 6.0.3
+      - uses: ruby/setup-ruby@12fd324f1d0b43274fdc8130f6980590a667c455 # 1.312.0
         with:
           ruby-version: ${{ matrix.ruby }}
           bundler-cache: true

data/.github/workflows/docs.yml

@@ -14,8 +14,8 @@ jobs:
     permissions:
       contents: read
     steps:
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
-      - uses: ruby/setup-ruby@6aaa311d81eba98ae12eaffbcb63296ace0efcde # 1.307.0
+      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # 6.0.3
+      - uses: ruby/setup-ruby@12fd324f1d0b43274fdc8130f6980590a667c455 # 1.312.0
         with:
           bundler-cache: true
       - run: ./script/docs

data/.github/workflows/lint.yml

@@ -15,8 +15,8 @@ jobs:
     name: Lint
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
-      - uses: ruby/setup-ruby@6aaa311d81eba98ae12eaffbcb63296ace0efcde # 1.307.0
+      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # 6.0.3
+      - uses: ruby/setup-ruby@12fd324f1d0b43274fdc8130f6980590a667c455 # 1.312.0
         with:
           bundler-cache: true
 

data/.github/workflows/release-please.yml

@@ -5,12 +5,18 @@ on:
     branches:
       - main
 
+concurrency:
+  group: release-please
+  cancel-in-progress: false
+
 permissions:
   contents: write
   pull-requests: write
 
 jobs:
   release-please:
+    needs: publish-release
+    if: needs.publish-release.outputs.is-release != 'true'
     runs-on: ubuntu-latest
     outputs:
       pr: ${{ steps.release.outputs.pr }}
@@ -35,7 +41,7 @@ jobs:
 
       - name: Checkout release PR branch
         if: steps.release.outputs.pr
-        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # 6.0.3
         with:
           ref: ${{ fromJSON(steps.release.outputs.pr).headBranchName }}
           token: ${{ steps.generate-token.outputs.token }}
@@ -131,7 +137,7 @@ jobs:
 
       - name: Set up Ruby
         if: steps.release.outputs.pr
-        uses: ruby/setup-ruby@6aaa311d81eba98ae12eaffbcb63296ace0efcde # 1.307.0
+        uses: ruby/setup-ruby@12fd324f1d0b43274fdc8130f6980590a667c455 # 1.312.0
         with:
           ruby-version: ruby
 
@@ -157,6 +163,10 @@ jobs:
     runs-on: ubuntu-latest
     permissions:
       contents: write
+      pull-requests: write
+    outputs:
+      is-release: ${{ steps.detect.outputs.is-release }}
+      version: ${{ steps.detect.outputs.version }}
     steps:
       - name: Generate token
         id: generate-token
@@ -165,7 +175,7 @@ jobs:
           app-id: ${{ vars.SDK_BOT_APP_ID }}
           private-key: ${{ secrets.SDK_BOT_PRIVATE_KEY }}
 
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # 6.0.3
         with:
           fetch-depth: 0
           token: ${{ steps.generate-token.outputs.token }}
@@ -181,6 +191,9 @@ jobs:
             VERSION="${BASH_REMATCH[1]}"
             echo "is-release=true"  >> "$GITHUB_OUTPUT"
             echo "version=$VERSION" >> "$GITHUB_OUTPUT"
+            if [[ "$SUBJECT" =~ \#([0-9]+) ]]; then
+              echo "pr-number=${BASH_REMATCH[1]}" >> "$GITHUB_OUTPUT"
+            fi
             echo "Detected release PR merge for v$VERSION"
           else
             echo "Not a release PR merge: $SUBJECT"
@@ -222,3 +235,14 @@ jobs:
           gh release create "$TAG" \
             --title "$TAG" \
             --notes-file /tmp/release-notes.md
+
+      - name: Mark release PR as tagged
+        if: steps.detect.outputs.is-release == 'true' && steps.detect.outputs['pr-number']
+        env:
+          GH_TOKEN: ${{ steps.generate-token.outputs.token }}
+          PR_NUMBER: ${{ steps.detect.outputs['pr-number'] }}
+        run: |
+          set -euo pipefail
+          gh pr edit "$PR_NUMBER" \
+            --remove-label "autorelease: pending" \
+            --add-label "autorelease: tagged"

data/.github/workflows/release.yml

@@ -22,10 +22,10 @@ jobs:
           role-to-assume: rg_oidc_akr_fn8dx45asckvmsnd2kka
 
       - name: Checkout
-        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # 6.0.3
 
       - name: Setup Ruby
-        uses: ruby/setup-ruby@6aaa311d81eba98ae12eaffbcb63296ace0efcde # 1.307.0
+        uses: ruby/setup-ruby@12fd324f1d0b43274fdc8130f6980590a667c455 # 1.312.0
         with:
           bundler-cache: true
 

data/.last-synced-sha

@@ -1 +1 @@
-cb6857d51b453e3cbdb5bf3647d3ca229dd8af65
+d8c5a7de598792b1cee18d4a9842825110e5c74a

data/.oagen-manifest.json

@@ -1,7 +1,7 @@
 {
   "version": 2,
   "language": "ruby",
-  "generatedAt": "2026-05-26T15:39:28.792Z",
+  "generatedAt": "2026-06-03T19:20:02.984Z",
   "files": [
     "lib/workos.rb",
     "lib/workos/admin_portal.rb",
@@ -19,8 +19,13 @@
     "lib/workos/api_keys/api_key_revoked.rb",
     "lib/workos/api_keys/api_key_revoked_data.rb",
     "lib/workos/api_keys/api_key_revoked_data_owner.rb",
+    "lib/workos/api_keys/api_key_updated.rb",
+    "lib/workos/api_keys/api_key_updated_data.rb",
+    "lib/workos/api_keys/api_key_updated_data_owner.rb",
+    "lib/workos/api_keys/api_key_updated_data_previous_attribute.rb",
     "lib/workos/api_keys/api_key_validation_response.rb",
     "lib/workos/api_keys/create_organization_api_key.rb",
+    "lib/workos/api_keys/expire_api_key.rb",
     "lib/workos/api_keys/organization_api_key.rb",
     "lib/workos/api_keys/organization_api_key_owner.rb",
     "lib/workos/api_keys/organization_api_key_with_value.rb",
@@ -75,7 +80,6 @@
     "lib/workos/authorization/update_authorization_resource.rb",
     "lib/workos/authorization/update_organization_role.rb",
     "lib/workos/authorization/update_role.rb",
-    "lib/workos/authorization/user_organization_membership_base_list_data.rb",
     "lib/workos/authorization/user_role_assignment.rb",
     "lib/workos/authorization/user_role_assignment_resource.rb",
     "lib/workos/client.rb",
@@ -106,9 +110,6 @@
     "lib/workos/directory_sync/dsync_activated.rb",
     "lib/workos/directory_sync/dsync_activated_data.rb",
     "lib/workos/directory_sync/dsync_activated_data_domain.rb",
-    "lib/workos/directory_sync/dsync_deactivated.rb",
-    "lib/workos/directory_sync/dsync_deactivated_data.rb",
-    "lib/workos/directory_sync/dsync_deactivated_data_domain.rb",
     "lib/workos/directory_sync/dsync_deleted.rb",
     "lib/workos/directory_sync/dsync_deleted_data.rb",
     "lib/workos/directory_sync/dsync_group_created.rb",
@@ -119,6 +120,10 @@
     "lib/workos/directory_sync/dsync_group_user_added_data.rb",
     "lib/workos/directory_sync/dsync_group_user_removed.rb",
     "lib/workos/directory_sync/dsync_group_user_removed_data.rb",
+    "lib/workos/directory_sync/dsync_token_created.rb",
+    "lib/workos/directory_sync/dsync_token_created_data.rb",
+    "lib/workos/directory_sync/dsync_token_revoked.rb",
+    "lib/workos/directory_sync/dsync_token_revoked_data.rb",
     "lib/workos/directory_sync/dsync_user_created.rb",
     "lib/workos/directory_sync/dsync_user_deleted.rb",
     "lib/workos/directory_sync/dsync_user_updated.rb",
@@ -168,6 +173,7 @@
     "lib/workos/groups/create_group_membership.rb",
     "lib/workos/groups/group.rb",
     "lib/workos/groups/update_group.rb",
+    "lib/workos/groups/user_organization_membership_base_list_data.rb",
     "lib/workos/inflections.rb",
     "lib/workos/multi_factor_auth.rb",
     "lib/workos/multi_factor_auth/authentication_challenge.rb",
@@ -336,8 +342,6 @@
     "lib/workos/types/directory_user_with_groups_state.rb",
     "lib/workos/types/dsync_activated_data_state.rb",
     "lib/workos/types/dsync_activated_data_type.rb",
-    "lib/workos/types/dsync_deactivated_data_state.rb",
-    "lib/workos/types/dsync_deactivated_data_type.rb",
     "lib/workos/types/dsync_deleted_data_state.rb",
     "lib/workos/types/dsync_deleted_data_type.rb",
     "lib/workos/types/dsync_user_updated_data_state.rb",
@@ -543,6 +547,7 @@
     "lib/workos/user_management/user_api_key_created_data_owner.rb",
     "lib/workos/user_management/user_api_key_owner.rb",
     "lib/workos/user_management/user_api_key_revoked_data_owner.rb",
+    "lib/workos/user_management/user_api_key_updated_data_owner.rb",
     "lib/workos/user_management/user_api_key_with_value.rb",
     "lib/workos/user_management/user_api_key_with_value_owner.rb",
     "lib/workos/user_management/user_created.rb",
@@ -562,7 +567,6 @@
     "lib/workos/vault/decrypt_request.rb",
     "lib/workos/vault/decrypt_response.rb",
     "lib/workos/vault/delete_object_response.rb",
-    "lib/workos/vault/object.rb",
     "lib/workos/vault/object_metadata.rb",
     "lib/workos/vault/object_summary.rb",
     "lib/workos/vault/object_version.rb",
@@ -591,6 +595,7 @@
     "lib/workos/vault/vault_metadata_read_data.rb",
     "lib/workos/vault/vault_names_listed.rb",
     "lib/workos/vault/vault_names_listed_data.rb",
+    "lib/workos/vault/vault_object.rb",
     "lib/workos/vault/version_list_response.rb",
     "lib/workos/webhooks.rb",
     "lib/workos/webhooks/create_webhook_endpoint.rb",
@@ -614,6 +619,10 @@
     "rbi/workos/api_key_revoked.rbi",
     "rbi/workos/api_key_revoked_data.rbi",
     "rbi/workos/api_key_revoked_data_owner.rbi",
+    "rbi/workos/api_key_updated.rbi",
+    "rbi/workos/api_key_updated_data.rbi",
+    "rbi/workos/api_key_updated_data_owner.rbi",
+    "rbi/workos/api_key_updated_data_previous_attribute.rbi",
     "rbi/workos/api_key_validation_response.rbi",
     "rbi/workos/api_keys.rbi",
     "rbi/workos/application_credentials_list_item.rbi",
@@ -782,9 +791,6 @@
     "rbi/workos/dsync_activated.rbi",
     "rbi/workos/dsync_activated_data.rbi",
     "rbi/workos/dsync_activated_data_domain.rbi",
-    "rbi/workos/dsync_deactivated.rbi",
-    "rbi/workos/dsync_deactivated_data.rbi",
-    "rbi/workos/dsync_deactivated_data_domain.rbi",
     "rbi/workos/dsync_deleted.rbi",
     "rbi/workos/dsync_deleted_data.rbi",
     "rbi/workos/dsync_group_created.rbi",
@@ -795,6 +801,10 @@
     "rbi/workos/dsync_group_user_added_data.rbi",
     "rbi/workos/dsync_group_user_removed.rbi",
     "rbi/workos/dsync_group_user_removed_data.rbi",
+    "rbi/workos/dsync_token_created.rbi",
+    "rbi/workos/dsync_token_created_data.rbi",
+    "rbi/workos/dsync_token_revoked.rbi",
+    "rbi/workos/dsync_token_revoked_data.rbi",
     "rbi/workos/dsync_user_created.rbi",
     "rbi/workos/dsync_user_deleted.rbi",
     "rbi/workos/dsync_user_updated.rbi",
@@ -815,6 +825,7 @@
     "rbi/workos/event_list_list_metadata.rbi",
     "rbi/workos/event_schema.rbi",
     "rbi/workos/events.rbi",
+    "rbi/workos/expire_api_key.rbi",
     "rbi/workos/external_auth_complete_response.rbi",
     "rbi/workos/feature_flag.rbi",
     "rbi/workos/feature_flag_owner.rbi",
@@ -882,7 +893,6 @@
     "rbi/workos/mfa_totp_session_authenticate_request.rbi",
     "rbi/workos/multi_factor_auth.rbi",
     "rbi/workos/new_connect_application_secret.rbi",
-    "rbi/workos/object.rbi",
     "rbi/workos/object_metadata.rbi",
     "rbi/workos/object_summary.rbi",
     "rbi/workos/object_version.rbi",
@@ -1013,6 +1023,7 @@
     "rbi/workos/user_api_key_created_data_owner.rbi",
     "rbi/workos/user_api_key_owner.rbi",
     "rbi/workos/user_api_key_revoked_data_owner.rbi",
+    "rbi/workos/user_api_key_updated_data_owner.rbi",
     "rbi/workos/user_api_key_with_value.rbi",
     "rbi/workos/user_api_key_with_value_owner.rbi",
     "rbi/workos/user_authentication_factor_enroll_response.rbi",
@@ -1056,6 +1067,7 @@
     "rbi/workos/vault_metadata_read_data.rbi",
     "rbi/workos/vault_names_listed.rbi",
     "rbi/workos/vault_names_listed_data.rbi",
+    "rbi/workos/vault_object.rbi",
     "rbi/workos/verify_email_address.rbi",
     "rbi/workos/verify_email_response.rbi",
     "rbi/workos/waitlist_user.rbi",
@@ -1830,6 +1842,10 @@
       "sdkMethod": "delete_api_key",
       "service": "api_keys"
     },
+    "POST /api_keys/{id}/expire": {
+      "sdkMethod": "create_api_key_expire",
+      "service": "api_keys"
+    },
     "GET /user_management/users/{userId}/api_keys": {
       "sdkMethod": "list_user_api_keys",
       "service": "user_management"

data/.release-please-manifest.json

@@ -1,3 +1,3 @@
 {
-  ".": "9.0.0"
+  ".": "9.1.0"
 }

data/.ruby-version

@@ -1 +1 @@
-3.3.11
+3.4.9

data/CHANGELOG.md

@@ -1,5 +1,38 @@
 # Changelog
 
+## [9.1.0](https://github.com/workos/workos-ruby/compare/v9.0.0...v9.1.0) (2026-06-17)
+
+### Bug Fixes
+
+* **renovate:** explicitly enable minor and patch updates ([#493](https://github.com/workos/workos-ruby/issues/493)) ([c6da3f3](https://github.com/workos/workos-ruby/commit/c6da3f3acdf4dd7a6a65b3ae6463102ff0c024e1))
+* Use Thread.current[] instead of Fiber[] for connection cache ([#499](https://github.com/workos/workos-ruby/issues/499)) ([a44d650](https://github.com/workos/workos-ruby/commit/a44d6500b29d05fe7a5a0ac7449d1a4bee88fd38))
+
+- [#495](https://github.com/workos/workos-ruby/pull/495) feat(generated): regenerate from spec (8 changes)
+
+  **Features**
+  - **[api_keys](https://workos.com/docs/reference/authkit/api-keys)**:
+    - Added model `ExpireApiKey`
+    - Added model `ApiKeyUpdated`
+    - Added model `ApiKeyUpdatedData`
+    - Added model `ApiKeyUpdatedDataOwner`
+    - Added model `UserApiKeyUpdatedDataOwner`
+    - Added model `ApiKeyUpdatedDataPreviousAttribute`
+    - Added endpoint `POST /api_keys/{id}/expire`
+  - **[audit_logs](https://workos.com/docs/reference/audit-logs)**:
+    - Added `Snowflake` to `AuditLogConfigurationLogStreamType`
+  - **[connect](https://workos.com/docs/reference/workos-connect/standalone)**:
+    - Added `name` to `UserObject`
+  - **[directory_sync](https://workos.com/docs/reference/directory-sync)**:
+    - Added model `DsyncTokenCreated`
+    - Added model `DsyncTokenCreatedData`
+    - Added model `DsyncTokenRevoked`
+    - Added model `DsyncTokenRevokedData`
+  - **[user_management](https://workos.com/docs/reference/authkit/user)**:
+    - Added `name` to user management models
+  - **[webhooks](https://workos.com/docs/reference/webhooks)**:
+    - Added `api_key.updated` to `CreateWebhookEndpointEvents`
+    - Added `api_key.updated` to `UpdateWebhookEndpointEvents`
+
 ## [9.0.0](https://github.com/workos/workos-ruby/compare/v8.0.1...v9.0.0) (2026-05-26)
 
 ### Bug Fixes

data/Gemfile.lock

@@ -1,7 +1,7 @@
 PATH
   remote: .
   specs:
-    workos (9.0.0)
+    workos (9.1.0)
       jwt (~> 3.1)
       logger (~> 1.7)
       zeitwerk (~> 2.6)
@@ -90,7 +90,7 @@ GEM
       crack (>= 0.3.2)
       hashdiff (>= 0.4.0, < 2.0.0)
     webrick (1.9.2)
-    yard (0.9.43)
+    yard (0.9.44)
     yard-markdown (0.7.1)
       csv
       rdoc
@@ -153,8 +153,8 @@ CHECKSUMS
   unicode-emoji (4.2.0) sha256=519e69150f75652e40bf736106cfbc8f0f73aa3fb6a65afe62fefa7f80b0f80f
   webmock (3.26.2) sha256=774556f2ea6371846cca68c01769b2eac0d134492d21f6d0ab5dd643965a4c90
   webrick (1.9.2) sha256=beb4a15fc474defed24a3bda4ffd88a490d517c9e4e6118c3edce59e45864131
-  workos (9.0.0)
-  yard (0.9.43) sha256=cf8733a8f0485df2a162927e9b5f182215a61f6d22de096b8f402c726a1c5821
+  workos (9.1.0)
+  yard (0.9.44) sha256=eb087e9b631ccd887b049f303d489963945452d5e2a7eb49a5a74a7cf6887f28
   yard-markdown (0.7.1) sha256=06c378632dfe7ba053be9ba469eb4701aa0470e36bcf7e5546f353eb90c1bfd1
   zeitwerk (2.7.5) sha256=d8da92128c09ea6ec62c949011b00ed4a20242b255293dd66bf41545398f73dd
 

data/lib/workos/{directory_sync/dsync_deactivated.rb → api_keys/api_key_updated.rb}

@@ -3,7 +3,7 @@
 # This file is auto-generated by oagen. Do not edit.
 
 module WorkOS
-  class DsyncDeactivated < WorkOS::Types::BaseModel
+  class ApiKeyUpdated < WorkOS::Types::BaseModel
     HASH_ATTRS = {
       object: :object,
       id: :id,
@@ -26,7 +26,7 @@ module WorkOS
       @object = hash[:object]
       @id = hash[:id]
       @event = hash[:event]
-      @data = hash[:data] ? WorkOS::DsyncDeactivatedData.new(hash[:data]) : nil
+      @data = hash[:data] ? WorkOS::ApiKeyUpdatedData.new(hash[:data]) : nil
       @created_at = hash[:created_at]
       @context = hash[:context] ? WorkOS::EventContext.new(hash[:context]) : nil
     end

data/lib/workos/api_keys/api_key_updated_data.rb

@@ -0,0 +1,49 @@
+# frozen_string_literal: true
+
+# This file is auto-generated by oagen. Do not edit.
+
+module WorkOS
+  class ApiKeyUpdatedData < WorkOS::Types::BaseModel
+    HASH_ATTRS = {
+      object: :object,
+      id: :id,
+      owner: :owner,
+      name: :name,
+      obfuscated_value: :obfuscated_value,
+      last_used_at: :last_used_at,
+      expires_at: :expires_at,
+      permissions: :permissions,
+      created_at: :created_at,
+      updated_at: :updated_at,
+      previous_attributes: :previous_attributes
+    }.freeze
+
+    attr_accessor \
+      :object,
+      :id,
+      :owner,
+      :name,
+      :obfuscated_value,
+      :last_used_at,
+      :expires_at,
+      :permissions,
+      :created_at,
+      :updated_at,
+      :previous_attributes
+
+    def initialize(json)
+      hash = self.class.normalize(json)
+      @object = hash[:object]
+      @id = hash[:id]
+      @owner = hash[:owner] ? (case hash[:owner][:type] when "organization" then WorkOS::ApiKeyUpdatedDataOwner.new(hash[:owner]) when "user" then WorkOS::UserApiKeyUpdatedDataOwner.new(hash[:owner]) else hash[:owner] end) : nil
+      @name = hash[:name]
+      @obfuscated_value = hash[:obfuscated_value]
+      @last_used_at = hash[:last_used_at]
+      @expires_at = hash[:expires_at]
+      @permissions = hash[:permissions] || []
+      @created_at = hash[:created_at]
+      @updated_at = hash[:updated_at]
+      @previous_attributes = hash[:previous_attributes] ? WorkOS::ApiKeyUpdatedDataPreviousAttribute.new(hash[:previous_attributes]) : nil
+    end
+  end
+end

data/lib/workos/{directory_sync/dsync_deactivated_data_domain.rb → api_keys/api_key_updated_data_owner.rb}

@@ -3,5 +3,5 @@
 # This file is auto-generated by oagen. Do not edit.
 
 module WorkOS
-  DsyncDeactivatedDataDomain = DsyncActivatedDataDomain
+  ApiKeyUpdatedDataOwner = ApiKeyCreatedDataOwner
 end

data/lib/workos/api_keys/api_key_updated_data_previous_attribute.rb

@@ -0,0 +1,18 @@
+# frozen_string_literal: true
+
+# This file is auto-generated by oagen. Do not edit.
+
+module WorkOS
+  class ApiKeyUpdatedDataPreviousAttribute < WorkOS::Types::BaseModel
+    HASH_ATTRS = {
+      expires_at: :expires_at
+    }.freeze
+
+    attr_accessor :expires_at
+
+    def initialize(json)
+      hash = self.class.normalize(json)
+      @expires_at = hash[:expires_at]
+    end
+  end
+end

data/lib/workos/api_keys/expire_api_key.rb

@@ -0,0 +1,18 @@
+# frozen_string_literal: true
+
+# This file is auto-generated by oagen. Do not edit.
+
+module WorkOS
+  class ExpireApiKey < WorkOS::Types::BaseModel
+    HASH_ATTRS = {
+      expires_at: :expires_at
+    }.freeze
+
+    attr_accessor :expires_at
+
+    def initialize(json)
+      hash = self.class.normalize(json)
+      @expires_at = hash[:expires_at]
+    end
+  end
+end

data/lib/workos/api_keys.rb

@@ -127,5 +127,30 @@ module WorkOS
       )
       nil
     end
+
+    # Expire an API key
+    # @param id [String] The unique ID of the API key.
+    # @param expires_at [String, nil] When the API key should expire. If omitted or in the past, the key expires immediately. Use null to clear a scheduled future expiration.
+    # @param request_options [Hash] (see WorkOS::Types::RequestOptions)
+    # @return [WorkOS::ApiKey]
+    def create_api_key_expire(
+      id:,
+      expires_at: nil,
+      request_options: {}
+    )
+      body = {
+        "expires_at" => expires_at
+      }.compact
+      response = @client.request(
+        method: :post,
+        path: "/api_keys/#{WorkOS::Util.encode_path(id)}/expire",
+        auth: true,
+        body: body,
+        request_options: request_options
+      )
+      result = WorkOS::ApiKey.new(response.body)
+      result.last_response = WorkOS::Types::ApiResponse.new(http_status: response.code.to_i, http_headers: response.each_header.to_h, request_id: response["x-request-id"])
+      result
+    end
   end
 end

data/lib/workos/authorization.rb

@@ -93,7 +93,7 @@ module WorkOS
     # @param before [String, nil] An object ID that defines your place in the list. When the ID is not present, you are at the end of the list. For example, if you make a list request and receive 100 objects, ending with `"obj_123"`, your subsequent call can include `before="obj_123"` to fetch a new batch of objects before `"obj_123"`.
     # @param after [String, nil] An object ID that defines your place in the list. When the ID is not present, you are at the end of the list. For example, if you make a list request and receive 100 objects, ending with `"obj_123"`, your subsequent call can include `after="obj_123"` to fetch a new batch of objects after `"obj_123"`.
     # @param limit [Integer, nil] Upper limit on the number of objects to return, between `1` and `100`.
-    # @param order [WorkOS::Types::PaginationOrder, nil] Order the results by the creation time. Supported values are `"asc"` (ascending), `"desc"` (descending), and `"normal"` (descending with reversed cursor semantics where `before` fetches older records and `after` fetches newer records). Defaults to descending.
+    # @param order [WorkOS::Types::PaginationOrder, nil] Order the results by the creation time. Supported values are `"asc"` (ascending), `"desc"` (descending), and `"normal"` (descending with reversed cursor semantics where `before` fetches older records and `after` fetches newer records).
     # @param permission_slug [String] The permission slug to filter by. Only child resources where the organization membership has this permission are returned.
     # @param parent_resource [WorkOS::Authorization::ParentResourceById, WorkOS::Authorization::ParentResourceByExternalId] Identifies the parent resource.
     # @param request_options [Hash] (see WorkOS::Types::RequestOptions)
@@ -157,7 +157,7 @@ module WorkOS
     # @param before [String, nil] An object ID that defines your place in the list. When the ID is not present, you are at the end of the list. For example, if you make a list request and receive 100 objects, ending with `"obj_123"`, your subsequent call can include `before="obj_123"` to fetch a new batch of objects before `"obj_123"`.
     # @param after [String, nil] An object ID that defines your place in the list. When the ID is not present, you are at the end of the list. For example, if you make a list request and receive 100 objects, ending with `"obj_123"`, your subsequent call can include `after="obj_123"` to fetch a new batch of objects after `"obj_123"`.
     # @param limit [Integer, nil] Upper limit on the number of objects to return, between `1` and `100`.
-    # @param order [WorkOS::Types::PaginationOrder, nil] Order the results by the creation time. Supported values are `"asc"` (ascending), `"desc"` (descending), and `"normal"` (descending with reversed cursor semantics where `before` fetches older records and `after` fetches newer records). Defaults to descending.
+    # @param order [WorkOS::Types::PaginationOrder, nil] Order the results by the creation time. Supported values are `"asc"` (ascending), `"desc"` (descending), and `"normal"` (descending with reversed cursor semantics where `before` fetches older records and `after` fetches newer records).
     # @param request_options [Hash] (see WorkOS::Types::RequestOptions)
     # @return [WorkOS::Types::ListStruct<WorkOS::AuthorizationPermission>]
     def list_effective_permissions(
@@ -208,7 +208,7 @@ module WorkOS
     # @param before [String, nil] An object ID that defines your place in the list. When the ID is not present, you are at the end of the list. For example, if you make a list request and receive 100 objects, ending with `"obj_123"`, your subsequent call can include `before="obj_123"` to fetch a new batch of objects before `"obj_123"`.
     # @param after [String, nil] An object ID that defines your place in the list. When the ID is not present, you are at the end of the list. For example, if you make a list request and receive 100 objects, ending with `"obj_123"`, your subsequent call can include `after="obj_123"` to fetch a new batch of objects after `"obj_123"`.
     # @param limit [Integer, nil] Upper limit on the number of objects to return, between `1` and `100`.
-    # @param order [WorkOS::Types::PaginationOrder, nil] Order the results by the creation time. Supported values are `"asc"` (ascending), `"desc"` (descending), and `"normal"` (descending with reversed cursor semantics where `before` fetches older records and `after` fetches newer records). Defaults to descending.
+    # @param order [WorkOS::Types::PaginationOrder, nil] Order the results by the creation time. Supported values are `"asc"` (ascending), `"desc"` (descending), and `"normal"` (descending with reversed cursor semantics where `before` fetches older records and `after` fetches newer records).
     # @param request_options [Hash] (see WorkOS::Types::RequestOptions)
     # @return [WorkOS::Types::ListStruct<WorkOS::AuthorizationPermission>]
     def list_effective_permissions_by_external_id(
@@ -259,7 +259,7 @@ module WorkOS
     # @param before [String, nil] An object ID that defines your place in the list. When the ID is not present, you are at the end of the list. For example, if you make a list request and receive 100 objects, ending with `"obj_123"`, your subsequent call can include `before="obj_123"` to fetch a new batch of objects before `"obj_123"`.
     # @param after [String, nil] An object ID that defines your place in the list. When the ID is not present, you are at the end of the list. For example, if you make a list request and receive 100 objects, ending with `"obj_123"`, your subsequent call can include `after="obj_123"` to fetch a new batch of objects after `"obj_123"`.
     # @param limit [Integer, nil] Upper limit on the number of objects to return, between `1` and `100`.
-    # @param order [WorkOS::Types::PaginationOrder, nil] Order the results by the creation time. Supported values are `"asc"` (ascending), `"desc"` (descending), and `"normal"` (descending with reversed cursor semantics where `before` fetches older records and `after` fetches newer records). Defaults to descending.
+    # @param order [WorkOS::Types::PaginationOrder, nil] Order the results by the creation time. Supported values are `"asc"` (ascending), `"desc"` (descending), and `"normal"` (descending with reversed cursor semantics where `before` fetches older records and `after` fetches newer records).
     # @param resource_id [String, nil] Filter assignments by the ID of the resource.
     # @param resource_external_id [String, nil] Filter assignments by the external ID of the resource.
     # @param resource_type_slug [String, nil] Filter assignments by the slug of the resource type.
@@ -706,7 +706,7 @@ module WorkOS
     # @param before [String, nil] An object ID that defines your place in the list. When the ID is not present, you are at the end of the list. For example, if you make a list request and receive 100 objects, ending with `"obj_123"`, your subsequent call can include `before="obj_123"` to fetch a new batch of objects before `"obj_123"`.
     # @param after [String, nil] An object ID that defines your place in the list. When the ID is not present, you are at the end of the list. For example, if you make a list request and receive 100 objects, ending with `"obj_123"`, your subsequent call can include `after="obj_123"` to fetch a new batch of objects after `"obj_123"`.
     # @param limit [Integer, nil] Upper limit on the number of objects to return, between `1` and `100`.
-    # @param order [WorkOS::Types::PaginationOrder, nil] Order the results by the creation time. Supported values are `"asc"` (ascending), `"desc"` (descending), and `"normal"` (descending with reversed cursor semantics where `before` fetches older records and `after` fetches newer records). Defaults to descending.
+    # @param order [WorkOS::Types::PaginationOrder, nil] Order the results by the creation time. Supported values are `"asc"` (ascending), `"desc"` (descending), and `"normal"` (descending with reversed cursor semantics where `before` fetches older records and `after` fetches newer records).
     # @param permission_slug [String] The permission slug to filter by. Only users with this permission on the resource are returned.
     # @param assignment [WorkOS::Types::AuthorizationAssignment, nil] Filter by assignment type. Use "direct" for direct assignments only, or "indirect" to include inherited assignments.
     # @param request_options [Hash] (see WorkOS::Types::RequestOptions)
@@ -767,7 +767,7 @@ module WorkOS
     # @param before [String, nil] An object ID that defines your place in the list. When the ID is not present, you are at the end of the list. For example, if you make a list request and receive 100 objects, ending with `"obj_123"`, your subsequent call can include `before="obj_123"` to fetch a new batch of objects before `"obj_123"`.
     # @param after [String, nil] An object ID that defines your place in the list. When the ID is not present, you are at the end of the list. For example, if you make a list request and receive 100 objects, ending with `"obj_123"`, your subsequent call can include `after="obj_123"` to fetch a new batch of objects after `"obj_123"`.
     # @param limit [Integer, nil] Upper limit on the number of objects to return, between `1` and `100`.
-    # @param order [WorkOS::Types::PaginationOrder, nil] Order the results by the creation time. Supported values are `"asc"` (ascending), `"desc"` (descending), and `"normal"` (descending with reversed cursor semantics where `before` fetches older records and `after` fetches newer records). Defaults to descending.
+    # @param order [WorkOS::Types::PaginationOrder, nil] Order the results by the creation time. Supported values are `"asc"` (ascending), `"desc"` (descending), and `"normal"` (descending with reversed cursor semantics where `before` fetches older records and `after` fetches newer records).
     # @param role_slug [String, nil] Filter assignments by the slug of the role.
     # @param request_options [Hash] (see WorkOS::Types::RequestOptions)
     # @return [WorkOS::Types::ListStruct<WorkOS::UserRoleAssignment>]
@@ -821,7 +821,7 @@ module WorkOS
     # @param before [String, nil] An object ID that defines your place in the list. When the ID is not present, you are at the end of the list. For example, if you make a list request and receive 100 objects, ending with `"obj_123"`, your subsequent call can include `before="obj_123"` to fetch a new batch of objects before `"obj_123"`.
     # @param after [String, nil] An object ID that defines your place in the list. When the ID is not present, you are at the end of the list. For example, if you make a list request and receive 100 objects, ending with `"obj_123"`, your subsequent call can include `after="obj_123"` to fetch a new batch of objects after `"obj_123"`.
     # @param limit [Integer, nil] Upper limit on the number of objects to return, between `1` and `100`.
-    # @param order [WorkOS::Types::PaginationOrder, nil] Order the results by the creation time. Supported values are `"asc"` (ascending), `"desc"` (descending), and `"normal"` (descending with reversed cursor semantics where `before` fetches older records and `after` fetches newer records). Defaults to descending.
+    # @param order [WorkOS::Types::PaginationOrder, nil] Order the results by the creation time. Supported values are `"asc"` (ascending), `"desc"` (descending), and `"normal"` (descending with reversed cursor semantics where `before` fetches older records and `after` fetches newer records).
     # @param organization_id [String, nil] Filter resources by organization ID.
     # @param resource_type_slug [String, nil] Filter resources by resource type slug.
     # @param resource_external_id [String, nil] Filter resources by external ID.
@@ -1023,7 +1023,7 @@ module WorkOS
     # @param before [String, nil] An object ID that defines your place in the list. When the ID is not present, you are at the end of the list. For example, if you make a list request and receive 100 objects, ending with `"obj_123"`, your subsequent call can include `before="obj_123"` to fetch a new batch of objects before `"obj_123"`.
     # @param after [String, nil] An object ID that defines your place in the list. When the ID is not present, you are at the end of the list. For example, if you make a list request and receive 100 objects, ending with `"obj_123"`, your subsequent call can include `after="obj_123"` to fetch a new batch of objects after `"obj_123"`.
     # @param limit [Integer, nil] Upper limit on the number of objects to return, between `1` and `100`.
-    # @param order [WorkOS::Types::PaginationOrder, nil] Order the results by the creation time. Supported values are `"asc"` (ascending), `"desc"` (descending), and `"normal"` (descending with reversed cursor semantics where `before` fetches older records and `after` fetches newer records). Defaults to descending.
+    # @param order [WorkOS::Types::PaginationOrder, nil] Order the results by the creation time. Supported values are `"asc"` (ascending), `"desc"` (descending), and `"normal"` (descending with reversed cursor semantics where `before` fetches older records and `after` fetches newer records).
     # @param permission_slug [String] The permission slug to filter by. Only users with this permission on the resource are returned.
     # @param assignment [WorkOS::Types::AuthorizationAssignment, nil] Filter by assignment type. Use `direct` for direct assignments only, or `indirect` to include inherited assignments.
     # @param request_options [Hash] (see WorkOS::Types::RequestOptions)
@@ -1078,7 +1078,7 @@ module WorkOS
     # @param before [String, nil] An object ID that defines your place in the list. When the ID is not present, you are at the end of the list. For example, if you make a list request and receive 100 objects, ending with `"obj_123"`, your subsequent call can include `before="obj_123"` to fetch a new batch of objects before `"obj_123"`.
     # @param after [String, nil] An object ID that defines your place in the list. When the ID is not present, you are at the end of the list. For example, if you make a list request and receive 100 objects, ending with `"obj_123"`, your subsequent call can include `after="obj_123"` to fetch a new batch of objects after `"obj_123"`.
     # @param limit [Integer, nil] Upper limit on the number of objects to return, between `1` and `100`.
-    # @param order [WorkOS::Types::PaginationOrder, nil] Order the results by the creation time. Supported values are `"asc"` (ascending), `"desc"` (descending), and `"normal"` (descending with reversed cursor semantics where `before` fetches older records and `after` fetches newer records). Defaults to descending.
+    # @param order [WorkOS::Types::PaginationOrder, nil] Order the results by the creation time. Supported values are `"asc"` (ascending), `"desc"` (descending), and `"normal"` (descending with reversed cursor semantics where `before` fetches older records and `after` fetches newer records).
     # @param role_slug [String, nil] Filter assignments by the slug of the role.
     # @param request_options [Hash] (see WorkOS::Types::RequestOptions)
     # @return [WorkOS::Types::ListStruct<WorkOS::UserRoleAssignment>]
@@ -1272,7 +1272,7 @@ module WorkOS
     # @param before [String, nil] An object ID that defines your place in the list. When the ID is not present, you are at the end of the list. For example, if you make a list request and receive 100 objects, ending with `"obj_123"`, your subsequent call can include `before="obj_123"` to fetch a new batch of objects before `"obj_123"`.
     # @param after [String, nil] An object ID that defines your place in the list. When the ID is not present, you are at the end of the list. For example, if you make a list request and receive 100 objects, ending with `"obj_123"`, your subsequent call can include `after="obj_123"` to fetch a new batch of objects after `"obj_123"`.
     # @param limit [Integer, nil] Upper limit on the number of objects to return, between `1` and `100`.
-    # @param order [WorkOS::Types::PaginationOrder, nil] Order the results by the creation time. Supported values are `"asc"` (ascending), `"desc"` (descending), and `"normal"` (descending with reversed cursor semantics where `before` fetches older records and `after` fetches newer records). Defaults to descending.
+    # @param order [WorkOS::Types::PaginationOrder, nil] Order the results by the creation time. Supported values are `"asc"` (ascending), `"desc"` (descending), and `"normal"` (descending with reversed cursor semantics where `before` fetches older records and `after` fetches newer records).
     # @param request_options [Hash] (see WorkOS::Types::RequestOptions)
     # @return [WorkOS::Types::ListStruct<WorkOS::AuthorizationPermission>]
     def list_permissions(