workos 9.0.0 → 9.2.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: '09d3066dd5295b0e1f4bad62901c5e3efce798c893163bd3041dd6c65c1cbd98'
-  data.tar.gz: 25cafd8df5cb61b6181ed4a9922911d1e740be5a106621b97ef7885d655636a8
+  metadata.gz: 9b74d5a5f47e335f1459829bde13242bdcaaf71abc8cbae6fd2566e6d7fe509d
+  data.tar.gz: 292c0b0b904b4717e390daf15f581fc66bd20952e27dde0e34b263d041763446
 SHA512:
-  metadata.gz: f9c151ad91db61f0587641043cf1b9e8c75831cb676b86ddcf04e40f0439b1a40aa6b5ea8a73d9819cba88a82a37d4469ac94403d5724a34116884be931a5802
-  data.tar.gz: 8e2c4bc8f9defea99d6d67f4de71d4d0750b286eb6c58300333e9e6a237eef76af20b8fe015acb7e799a88dd4492714c8cb74a58857b86660d823c60572d5b9e
+  metadata.gz: 93251d0f6167e4b4c84565d9ae73e533421129ecdacd6bae6a99110ae1e3f574be387487f831433144e102f3b9f9c2c5711ed6029df0961ab88e599944d3d8f5
+  data.tar.gz: 15fe047716b898b934652ecfc1b8e35e26de2785076f4cd24df210c1f17cccdb0e340ed88270fe2a2b59d0826fdfd222bb591cba46c538abd7c4f1e832a4128e

data/.github/workflows/ci.yml

@@ -21,8 +21,8 @@ jobs:
           - '3.4'
           - '4.0'
     steps:
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
-      - uses: ruby/setup-ruby@6aaa311d81eba98ae12eaffbcb63296ace0efcde # 1.307.0
+      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # 6.0.3
+      - uses: ruby/setup-ruby@12fd324f1d0b43274fdc8130f6980590a667c455 # 1.312.0
         with:
           ruby-version: ${{ matrix.ruby }}
           bundler-cache: true

data/.github/workflows/docs.yml

@@ -14,8 +14,8 @@ jobs:
     permissions:
       contents: read
     steps:
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
-      - uses: ruby/setup-ruby@6aaa311d81eba98ae12eaffbcb63296ace0efcde # 1.307.0
+      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # 6.0.3
+      - uses: ruby/setup-ruby@12fd324f1d0b43274fdc8130f6980590a667c455 # 1.312.0
         with:
           bundler-cache: true
       - run: ./script/docs

data/.github/workflows/lint.yml

@@ -15,8 +15,8 @@ jobs:
     name: Lint
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
-      - uses: ruby/setup-ruby@6aaa311d81eba98ae12eaffbcb63296ace0efcde # 1.307.0
+      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # 6.0.3
+      - uses: ruby/setup-ruby@12fd324f1d0b43274fdc8130f6980590a667c455 # 1.312.0
         with:
           bundler-cache: true
 

data/.github/workflows/release-please.yml

@@ -5,15 +5,29 @@ on:
     branches:
       - main
 
+concurrency:
+  group: release-please
+  cancel-in-progress: false
+
 permissions:
   contents: write
   pull-requests: write
 
 jobs:
+  # release-please owns tag + GitHub Release creation (no
+  # skip-github-release). Because it tags every release inside its own run
+  # — before it computes the next release PR — it always knows the previous
+  # release boundary, so it never regenerates the changelog from the start
+  # of history or proposes a spurious major bump. Creating the release with
+  # the app token also fires the `release: published` event that release.yml
+  # uses to publish to RubyGems. This job is kept minimal so nothing
+  # downstream (changelog enrichment, release notes) can fail it.
   release-please:
     runs-on: ubuntu-latest
     outputs:
       pr: ${{ steps.release.outputs.pr }}
+      release_created: ${{ steps.release.outputs.release_created }}
+      tag_name: ${{ steps.release.outputs.tag_name }}
     steps:
       - name: Generate token
         id: generate-token
@@ -22,22 +36,30 @@ jobs:
           app-id: ${{ vars.SDK_BOT_APP_ID }}
           private-key: ${{ secrets.SDK_BOT_PRIVATE_KEY }}
 
-      # skip-github-release means release-please opens/updates release
-      # PRs and updates CHANGELOG.md as usual, but does NOT tag or create
-      # the GitHub Release on merge. Those are owned by publish-release
-      # below so we can set the Release body from the rich CHANGELOG.md
-      # section instead of release-please's terse default rendering.
       - uses: googleapis/release-please-action@45996ed1f6d02564a971a2fa1b5860e934307cf7 # v5.0.0
         id: release
         with:
           token: ${{ steps.generate-token.outputs.token }}
-          skip-github-release: true
+
+  # While the release PR is open, enrich it before it merges. Runs as its
+  # own job (gated on the PR existing) so a failure here can never block the
+  # release or any publish that depends on release-please.
+  enrich-release-pr:
+    needs: release-please
+    if: needs.release-please.outputs.pr
+    runs-on: ubuntu-latest
+    steps:
+      - name: Generate token
+        id: generate-token
+        uses: actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1 # 3.2.0
+        with:
+          app-id: ${{ vars.SDK_BOT_APP_ID }}
+          private-key: ${{ secrets.SDK_BOT_PRIVATE_KEY }}
 
       - name: Checkout release PR branch
-        if: steps.release.outputs.pr
-        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # 6.0.3
         with:
-          ref: ${{ fromJSON(steps.release.outputs.pr).headBranchName }}
+          ref: ${{ fromJSON(needs.release-please.outputs.pr).headBranchName }}
           token: ${{ steps.generate-token.outputs.token }}
 
       # Inline pending changelog fragments under the version heading
@@ -48,9 +70,8 @@ jobs:
       # release-please wrote. Fragments are deleted in the same commit.
       # Idempotent: if no fragments exist, skip silently.
       - name: Inline rich changelog fragments
-        if: steps.release.outputs.pr
         env:
-          PR_JSON: ${{ steps.release.outputs.pr }}
+          PR_JSON: ${{ needs.release-please.outputs.pr }}
         run: |
           set -euo pipefail
           shopt -s nullglob
@@ -130,13 +151,11 @@ jobs:
           git push
 
       - name: Set up Ruby
-        if: steps.release.outputs.pr
-        uses: ruby/setup-ruby@6aaa311d81eba98ae12eaffbcb63296ace0efcde # 1.307.0
+        uses: ruby/setup-ruby@12fd324f1d0b43274fdc8130f6980590a667c455 # 1.312.0
         with:
           ruby-version: ruby
 
       - name: Bundle install and commit
-        if: steps.release.outputs.pr
         run: |
           bundle install
           if git diff --quiet Gemfile.lock; then
@@ -149,14 +168,14 @@ jobs:
             git push
           fi
 
-  # Detect when a release-please release PR has merged, then tag and
-  # create the GitHub Release whose body is extracted from CHANGELOG.md
-  # (now rich, after the inline step above). Runs on every push to main;
-  # the detect step gates everything else.
-  publish-release:
+  # After release-please tags the release and creates the GitHub Release,
+  # replace its body with the rich section from CHANGELOG.md (release-please
+  # writes only its terse default rendering). Cosmetic-only: never fails the
+  # release if the section can't be found.
+  update-release-notes:
+    needs: release-please
+    if: needs.release-please.outputs.release_created == 'true'
     runs-on: ubuntu-latest
-    permissions:
-      contents: write
     steps:
       - name: Generate token
         id: generate-token
@@ -165,60 +184,24 @@ jobs:
           app-id: ${{ vars.SDK_BOT_APP_ID }}
           private-key: ${{ secrets.SDK_BOT_PRIVATE_KEY }}
 
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # 6.0.3
         with:
-          fetch-depth: 0
           token: ${{ steps.generate-token.outputs.token }}
 
-      - name: Detect release PR merge
-        id: detect
-        run: |
-          set -euo pipefail
-          SUBJECT=$(git log -1 --format=%s)
-          # release-please's default release PR title:
-          #   chore(main): release X.Y.Z
-          if [[ "$SUBJECT" =~ ^chore\(.*\):[[:space:]]release[[:space:]]([0-9]+\.[0-9]+\.[0-9]+) ]]; then
-            VERSION="${BASH_REMATCH[1]}"
-            echo "is-release=true"  >> "$GITHUB_OUTPUT"
-            echo "version=$VERSION" >> "$GITHUB_OUTPUT"
-            echo "Detected release PR merge for v$VERSION"
-          else
-            echo "Not a release PR merge: $SUBJECT"
-            echo "is-release=false" >> "$GITHUB_OUTPUT"
-          fi
-
-      - name: Extract release notes from CHANGELOG.md
-        if: steps.detect.outputs.is-release == 'true'
+      - name: Set rich release notes from CHANGELOG.md
         env:
-          VERSION: ${{ steps.detect.outputs.version }}
+          GH_TOKEN: ${{ steps.generate-token.outputs.token }}
+          TAG: ${{ needs.release-please.outputs.tag_name }}
         run: |
           set -euo pipefail
+          VERSION="${TAG#v}"
           awk -v v="$VERSION" '
             $0 ~ ("^## \\[" v "\\]") { found=1; next }
             found && /^## \[/ { exit }
             found
           ' CHANGELOG.md > /tmp/release-notes.md
-          if [ ! -s /tmp/release-notes.md ]; then
-            echo "::error::CHANGELOG.md has no body for v$VERSION"
-            exit 1
-          fi
-
-      - name: Tag and create GitHub Release
-        if: steps.detect.outputs.is-release == 'true'
-        env:
-          GH_TOKEN: ${{ steps.generate-token.outputs.token }}
-          VERSION: ${{ steps.detect.outputs.version }}
-        run: |
-          set -euo pipefail
-          TAG="v$VERSION"
-          if gh release view "$TAG" >/dev/null 2>&1; then
-            echo "Release $TAG already exists; skipping."
-            exit 0
+          if [ -s /tmp/release-notes.md ]; then
+            gh release edit "$TAG" --notes-file /tmp/release-notes.md
+          else
+            echo "No CHANGELOG.md body for $TAG; keeping release-please default notes."
           fi
-          git config user.name "workos-sdk-automation[bot]"
-          git config user.email "255426317+workos-sdk-automation[bot]@users.noreply.github.com"
-          git tag -a "$TAG" -m "Release $TAG"
-          git push origin "$TAG"
-          gh release create "$TAG" \
-            --title "$TAG" \
-            --notes-file /tmp/release-notes.md

data/.github/workflows/release.yml

@@ -22,10 +22,10 @@ jobs:
           role-to-assume: rg_oidc_akr_fn8dx45asckvmsnd2kka
 
       - name: Checkout
-        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # 6.0.3
 
       - name: Setup Ruby
-        uses: ruby/setup-ruby@6aaa311d81eba98ae12eaffbcb63296ace0efcde # 1.307.0
+        uses: ruby/setup-ruby@12fd324f1d0b43274fdc8130f6980590a667c455 # 1.312.0
         with:
           bundler-cache: true
 

data/.last-synced-sha

@@ -1 +1 @@
-cb6857d51b453e3cbdb5bf3647d3ca229dd8af65
+b6a68da8bd60c1478e0a86ca97c75448677e8871

data/.oagen-manifest.json

@@ -1,7 +1,7 @@
 {
   "version": 2,
   "language": "ruby",
-  "generatedAt": "2026-05-26T15:39:28.792Z",
+  "generatedAt": "2026-06-17T21:06:29.872Z",
   "files": [
     "lib/workos.rb",
     "lib/workos/admin_portal.rb",
@@ -19,8 +19,13 @@
     "lib/workos/api_keys/api_key_revoked.rb",
     "lib/workos/api_keys/api_key_revoked_data.rb",
     "lib/workos/api_keys/api_key_revoked_data_owner.rb",
+    "lib/workos/api_keys/api_key_updated.rb",
+    "lib/workos/api_keys/api_key_updated_data.rb",
+    "lib/workos/api_keys/api_key_updated_data_owner.rb",
+    "lib/workos/api_keys/api_key_updated_data_previous_attribute.rb",
     "lib/workos/api_keys/api_key_validation_response.rb",
     "lib/workos/api_keys/create_organization_api_key.rb",
+    "lib/workos/api_keys/expire_api_key.rb",
     "lib/workos/api_keys/organization_api_key.rb",
     "lib/workos/api_keys/organization_api_key_owner.rb",
     "lib/workos/api_keys/organization_api_key_with_value.rb",
@@ -51,8 +56,13 @@
     "lib/workos/authorization/check_authorization.rb",
     "lib/workos/authorization/create_authorization_permission.rb",
     "lib/workos/authorization/create_authorization_resource.rb",
+    "lib/workos/authorization/create_group_role_assignment.rb",
     "lib/workos/authorization/create_organization_role.rb",
     "lib/workos/authorization/create_role.rb",
+    "lib/workos/authorization/delete_group_role_assignments_by_criteria.rb",
+    "lib/workos/authorization/group_role_assignment.rb",
+    "lib/workos/authorization/group_role_assignment_list.rb",
+    "lib/workos/authorization/group_role_assignment_resource.rb",
     "lib/workos/authorization/permission.rb",
     "lib/workos/authorization/permission_created.rb",
     "lib/workos/authorization/permission_created_data.rb",
@@ -61,6 +71,8 @@
     "lib/workos/authorization/permission_updated.rb",
     "lib/workos/authorization/permission_updated_data.rb",
     "lib/workos/authorization/remove_role.rb",
+    "lib/workos/authorization/replace_group_role_assignment_entry.rb",
+    "lib/workos/authorization/replace_group_role_assignments.rb",
     "lib/workos/authorization/role.rb",
     "lib/workos/authorization/role_created.rb",
     "lib/workos/authorization/role_created_data.rb",
@@ -75,10 +87,12 @@
     "lib/workos/authorization/update_authorization_resource.rb",
     "lib/workos/authorization/update_organization_role.rb",
     "lib/workos/authorization/update_role.rb",
-    "lib/workos/authorization/user_organization_membership_base_list_data.rb",
     "lib/workos/authorization/user_role_assignment.rb",
     "lib/workos/authorization/user_role_assignment_resource.rb",
     "lib/workos/client.rb",
+    "lib/workos/client_api.rb",
+    "lib/workos/client_api/client_api_token.rb",
+    "lib/workos/client_api/client_api_token_response.rb",
     "lib/workos/connect.rb",
     "lib/workos/connect/application_credentials_list_item.rb",
     "lib/workos/connect/connect_application.rb",
@@ -106,9 +120,6 @@
     "lib/workos/directory_sync/dsync_activated.rb",
     "lib/workos/directory_sync/dsync_activated_data.rb",
     "lib/workos/directory_sync/dsync_activated_data_domain.rb",
-    "lib/workos/directory_sync/dsync_deactivated.rb",
-    "lib/workos/directory_sync/dsync_deactivated_data.rb",
-    "lib/workos/directory_sync/dsync_deactivated_data_domain.rb",
     "lib/workos/directory_sync/dsync_deleted.rb",
     "lib/workos/directory_sync/dsync_deleted_data.rb",
     "lib/workos/directory_sync/dsync_group_created.rb",
@@ -119,6 +130,10 @@
     "lib/workos/directory_sync/dsync_group_user_added_data.rb",
     "lib/workos/directory_sync/dsync_group_user_removed.rb",
     "lib/workos/directory_sync/dsync_group_user_removed_data.rb",
+    "lib/workos/directory_sync/dsync_token_created.rb",
+    "lib/workos/directory_sync/dsync_token_created_data.rb",
+    "lib/workos/directory_sync/dsync_token_revoked.rb",
+    "lib/workos/directory_sync/dsync_token_revoked_data.rb",
     "lib/workos/directory_sync/dsync_user_created.rb",
     "lib/workos/directory_sync/dsync_user_deleted.rb",
     "lib/workos/directory_sync/dsync_user_updated.rb",
@@ -168,6 +183,7 @@
     "lib/workos/groups/create_group_membership.rb",
     "lib/workos/groups/group.rb",
     "lib/workos/groups/update_group.rb",
+    "lib/workos/groups/user_organization_membership_base_list_data.rb",
     "lib/workos/inflections.rb",
     "lib/workos/multi_factor_auth.rb",
     "lib/workos/multi_factor_auth/authentication_challenge.rb",
@@ -243,6 +259,11 @@
     "lib/workos/pipes/data_integrations_list_response.rb",
     "lib/workos/pipes/data_integrations_list_response_data.rb",
     "lib/workos/pipes/data_integrations_list_response_data_connected_account.rb",
+    "lib/workos/pipes_provider.rb",
+    "lib/workos/pipes_provider/configure_data_integration_body.rb",
+    "lib/workos/pipes_provider/data_integration_configuration_list_response.rb",
+    "lib/workos/pipes_provider/data_integration_configuration_response.rb",
+    "lib/workos/pipes_provider/data_integration_credentials.rb",
     "lib/workos/radar.rb",
     "lib/workos/radar/radar_list_entry_already_present_response.rb",
     "lib/workos/radar/radar_standalone_assess_request.rb",
@@ -309,6 +330,7 @@
     "lib/workos/types/authentication_factors_create_request_type.rb",
     "lib/workos/types/authentication_radar_risk_detected_data_action.rb",
     "lib/workos/types/authorization_assignment.rb",
+    "lib/workos/types/connected_account_auth_method.rb",
     "lib/workos/types/connected_account_state.rb",
     "lib/workos/types/connection_activated_data_connection_type.rb",
     "lib/workos/types/connection_activated_data_state.rb",
@@ -328,6 +350,9 @@
     "lib/workos/types/create_user_password_hash_type.rb",
     "lib/workos/types/create_webhook_endpoint_events.rb",
     "lib/workos/types/data_integration_access_token_response_error.rb",
+    "lib/workos/types/data_integration_credentials_credentials_type.rb",
+    "lib/workos/types/data_integrations_list_response_data_auth_methods.rb",
+    "lib/workos/types/data_integrations_list_response_data_connected_account_auth_method.rb",
     "lib/workos/types/data_integrations_list_response_data_connected_account_state.rb",
     "lib/workos/types/data_integrations_list_response_data_ownership.rb",
     "lib/workos/types/directory_state.rb",
@@ -336,8 +361,6 @@
     "lib/workos/types/directory_user_with_groups_state.rb",
     "lib/workos/types/dsync_activated_data_state.rb",
     "lib/workos/types/dsync_activated_data_type.rb",
-    "lib/workos/types/dsync_deactivated_data_state.rb",
-    "lib/workos/types/dsync_deactivated_data_type.rb",
     "lib/workos/types/dsync_deleted_data_state.rb",
     "lib/workos/types/dsync_deleted_data_type.rb",
     "lib/workos/types/dsync_user_updated_data_state.rb",
@@ -543,6 +566,7 @@
     "lib/workos/user_management/user_api_key_created_data_owner.rb",
     "lib/workos/user_management/user_api_key_owner.rb",
     "lib/workos/user_management/user_api_key_revoked_data_owner.rb",
+    "lib/workos/user_management/user_api_key_updated_data_owner.rb",
     "lib/workos/user_management/user_api_key_with_value.rb",
     "lib/workos/user_management/user_api_key_with_value_owner.rb",
     "lib/workos/user_management/user_created.rb",
@@ -562,7 +586,6 @@
     "lib/workos/vault/decrypt_request.rb",
     "lib/workos/vault/decrypt_response.rb",
     "lib/workos/vault/delete_object_response.rb",
-    "lib/workos/vault/object.rb",
     "lib/workos/vault/object_metadata.rb",
     "lib/workos/vault/object_summary.rb",
     "lib/workos/vault/object_version.rb",
@@ -591,6 +614,7 @@
     "lib/workos/vault/vault_metadata_read_data.rb",
     "lib/workos/vault/vault_names_listed.rb",
     "lib/workos/vault/vault_names_listed_data.rb",
+    "lib/workos/vault/vault_object.rb",
     "lib/workos/vault/version_list_response.rb",
     "lib/workos/webhooks.rb",
     "lib/workos/webhooks/create_webhook_endpoint.rb",
@@ -614,6 +638,10 @@
     "rbi/workos/api_key_revoked.rbi",
     "rbi/workos/api_key_revoked_data.rbi",
     "rbi/workos/api_key_revoked_data_owner.rbi",
+    "rbi/workos/api_key_updated.rbi",
+    "rbi/workos/api_key_updated_data.rbi",
+    "rbi/workos/api_key_updated_data_owner.rbi",
+    "rbi/workos/api_key_updated_data_previous_attribute.rbi",
     "rbi/workos/api_key_validation_response.rbi",
     "rbi/workos/api_keys.rbi",
     "rbi/workos/application_credentials_list_item.rbi",
@@ -705,6 +733,10 @@
     "rbi/workos/challenge_authentication_factor.rbi",
     "rbi/workos/check_authorization.rbi",
     "rbi/workos/client.rbi",
+    "rbi/workos/client_api.rbi",
+    "rbi/workos/client_api_token.rbi",
+    "rbi/workos/client_api_token_response.rbi",
+    "rbi/workos/configure_data_integration_body.rbi",
     "rbi/workos/confirm_email_change.rbi",
     "rbi/workos/connect.rbi",
     "rbi/workos/connect_application.rbi",
@@ -740,6 +772,7 @@
     "rbi/workos/create_data_key_response.rbi",
     "rbi/workos/create_group.rbi",
     "rbi/workos/create_group_membership.rbi",
+    "rbi/workos/create_group_role_assignment.rbi",
     "rbi/workos/create_m2m_application.rbi",
     "rbi/workos/create_magic_code_and_return.rbi",
     "rbi/workos/create_oauth_application.rbi",
@@ -759,6 +792,9 @@
     "rbi/workos/data_integration_access_token_response.rbi",
     "rbi/workos/data_integration_access_token_response_access_token.rbi",
     "rbi/workos/data_integration_authorize_url_response.rbi",
+    "rbi/workos/data_integration_configuration_list_response.rbi",
+    "rbi/workos/data_integration_configuration_response.rbi",
+    "rbi/workos/data_integration_credentials.rbi",
     "rbi/workos/data_integrations_get_data_integration_authorize_url_request.rbi",
     "rbi/workos/data_integrations_get_user_token_request.rbi",
     "rbi/workos/data_integrations_list_response.rbi",
@@ -766,6 +802,7 @@
     "rbi/workos/data_integrations_list_response_data_connected_account.rbi",
     "rbi/workos/decrypt_request.rbi",
     "rbi/workos/decrypt_response.rbi",
+    "rbi/workos/delete_group_role_assignments_by_criteria.rbi",
     "rbi/workos/delete_object_response.rbi",
     "rbi/workos/device_authorization_response.rbi",
     "rbi/workos/device_code_session_authenticate_request.rbi",
@@ -782,9 +819,6 @@
     "rbi/workos/dsync_activated.rbi",
     "rbi/workos/dsync_activated_data.rbi",
     "rbi/workos/dsync_activated_data_domain.rbi",
-    "rbi/workos/dsync_deactivated.rbi",
-    "rbi/workos/dsync_deactivated_data.rbi",
-    "rbi/workos/dsync_deactivated_data_domain.rbi",
     "rbi/workos/dsync_deleted.rbi",
     "rbi/workos/dsync_deleted_data.rbi",
     "rbi/workos/dsync_group_created.rbi",
@@ -795,6 +829,10 @@
     "rbi/workos/dsync_group_user_added_data.rbi",
     "rbi/workos/dsync_group_user_removed.rbi",
     "rbi/workos/dsync_group_user_removed_data.rbi",
+    "rbi/workos/dsync_token_created.rbi",
+    "rbi/workos/dsync_token_created_data.rbi",
+    "rbi/workos/dsync_token_revoked.rbi",
+    "rbi/workos/dsync_token_revoked_data.rbi",
     "rbi/workos/dsync_user_created.rbi",
     "rbi/workos/dsync_user_deleted.rbi",
     "rbi/workos/dsync_user_updated.rbi",
@@ -815,6 +853,7 @@
     "rbi/workos/event_list_list_metadata.rbi",
     "rbi/workos/event_schema.rbi",
     "rbi/workos/events.rbi",
+    "rbi/workos/expire_api_key.rbi",
     "rbi/workos/external_auth_complete_response.rbi",
     "rbi/workos/feature_flag.rbi",
     "rbi/workos/feature_flag_owner.rbi",
@@ -860,6 +899,8 @@
     "rbi/workos/group_member_added_data.rbi",
     "rbi/workos/group_member_removed.rbi",
     "rbi/workos/group_member_removed_data.rbi",
+    "rbi/workos/group_role_assignment.rbi",
+    "rbi/workos/group_role_assignment_resource.rbi",
     "rbi/workos/group_updated.rbi",
     "rbi/workos/groups.rbi",
     "rbi/workos/intent_options.rbi",
@@ -882,7 +923,6 @@
     "rbi/workos/mfa_totp_session_authenticate_request.rbi",
     "rbi/workos/multi_factor_auth.rbi",
     "rbi/workos/new_connect_application_secret.rbi",
-    "rbi/workos/object.rbi",
     "rbi/workos/object_metadata.rbi",
     "rbi/workos/object_summary.rbi",
     "rbi/workos/object_version.rbi",
@@ -951,6 +991,7 @@
     "rbi/workos/pipes_connected_account_connected.rbi",
     "rbi/workos/pipes_connected_account_disconnected.rbi",
     "rbi/workos/pipes_connected_account_reauthorization_needed.rbi",
+    "rbi/workos/pipes_provider.rbi",
     "rbi/workos/portal_link_response.rbi",
     "rbi/workos/profile.rbi",
     "rbi/workos/radar.rbi",
@@ -965,6 +1006,8 @@
     "rbi/workos/refresh_token_session_authenticate_request.rbi",
     "rbi/workos/rekey_request.rbi",
     "rbi/workos/remove_role.rbi",
+    "rbi/workos/replace_group_role_assignment_entry.rbi",
+    "rbi/workos/replace_group_role_assignments.rbi",
     "rbi/workos/resend_user_invite_options.rbi",
     "rbi/workos/reset_password_response.rbi",
     "rbi/workos/revoke_session.rbi",
@@ -1013,6 +1056,7 @@
     "rbi/workos/user_api_key_created_data_owner.rbi",
     "rbi/workos/user_api_key_owner.rbi",
     "rbi/workos/user_api_key_revoked_data_owner.rbi",
+    "rbi/workos/user_api_key_updated_data_owner.rbi",
     "rbi/workos/user_api_key_with_value.rbi",
     "rbi/workos/user_api_key_with_value_owner.rbi",
     "rbi/workos/user_authentication_factor_enroll_response.rbi",
@@ -1056,6 +1100,7 @@
     "rbi/workos/vault_metadata_read_data.rbi",
     "rbi/workos/vault_names_listed.rbi",
     "rbi/workos/vault_names_listed_data.rbi",
+    "rbi/workos/vault_object.rbi",
     "rbi/workos/verify_email_address.rbi",
     "rbi/workos/verify_email_response.rbi",
     "rbi/workos/waitlist_user.rbi",
@@ -1071,6 +1116,7 @@
     "test/workos/test_api_keys.rb",
     "test/workos/test_audit_logs.rb",
     "test/workos/test_authorization.rb",
+    "test/workos/test_client_api.rb",
     "test/workos/test_connect.rb",
     "test/workos/test_directory_sync.rb",
     "test/workos/test_events.rb",
@@ -1082,6 +1128,7 @@
     "test/workos/test_organization_membership_service.rb",
     "test/workos/test_organizations.rb",
     "test/workos/test_pipes.rb",
+    "test/workos/test_pipes_provider.rb",
     "test/workos/test_radar.rb",
     "test/workos/test_sso.rb",
     "test/workos/test_user_management.rb",
@@ -1114,6 +1161,30 @@
       "sdkMethod": "complete_oauth2",
       "service": "connect"
     },
+    "GET /authorization/groups/{group_id}/role_assignments": {
+      "sdkMethod": "list_group_role_assignments",
+      "service": "authorization"
+    },
+    "POST /authorization/groups/{group_id}/role_assignments": {
+      "sdkMethod": "create_group_role_assignment",
+      "service": "authorization"
+    },
+    "PUT /authorization/groups/{group_id}/role_assignments": {
+      "sdkMethod": "update_group_role_assignments",
+      "service": "authorization"
+    },
+    "DELETE /authorization/groups/{group_id}/role_assignments": {
+      "sdkMethod": "delete_group_role_assignments",
+      "service": "authorization"
+    },
+    "GET /authorization/groups/{group_id}/role_assignments/{role_assignment_id}": {
+      "sdkMethod": "get_group_role_assignment",
+      "service": "authorization"
+    },
+    "DELETE /authorization/groups/{group_id}/role_assignments/{role_assignment_id}": {
+      "sdkMethod": "delete_group_role_assignment",
+      "service": "authorization"
+    },
     "POST /authorization/organization_memberships/{organization_membership_id}/check": {
       "sdkMethod": "check",
       "service": "authorization"
@@ -1270,6 +1341,10 @@
       "sdkMethod": "delete_permission",
       "service": "authorization"
     },
+    "POST /client/token": {
+      "sdkMethod": "create_token",
+      "service": "client_api"
+    },
     "GET /connect/applications": {
       "sdkMethod": "list_applications",
       "service": "connect"
@@ -1326,8 +1401,8 @@
       "sdkMethod": "authorize_data_integration",
       "service": "pipes"
     },
-    "POST /data-integrations/{slug}/token": {
-      "sdkMethod": "create_data_integration_token",
+    "POST /data-integrations/{provider}/token": {
+      "sdkMethod": "get_access_token",
       "service": "pipes"
     },
     "GET /directories": {
@@ -1446,6 +1521,14 @@
       "sdkMethod": "create_organization_api_key",
       "service": "api_keys"
     },
+    "GET /organizations/{organizationId}/data_integration_configurations": {
+      "sdkMethod": "list_organization_data_integration_configurations",
+      "service": "pipes_provider"
+    },
+    "PUT /organizations/{organizationId}/data_integration_configurations/{slug}": {
+      "sdkMethod": "update_organization_data_integration_configuration",
+      "service": "pipes_provider"
+    },
     "GET /organizations/{organizationId}/feature-flags": {
       "sdkMethod": "list_organization_feature_flags",
       "service": "feature_flags"
@@ -1830,6 +1913,10 @@
       "sdkMethod": "delete_api_key",
       "service": "api_keys"
     },
+    "POST /api_keys/{id}/expire": {
+      "sdkMethod": "create_api_key_expire",
+      "service": "api_keys"
+    },
     "GET /user_management/users/{userId}/api_keys": {
       "sdkMethod": "list_user_api_keys",
       "service": "user_management"

data/.release-please-manifest.json

@@ -1,3 +1,3 @@
 {
-  ".": "9.0.0"
+  ".": "9.2.0"
 }

data/.ruby-version

@@ -1 +1 @@
-3.3.11
+3.4.9