From dbf6eae1c9f7219843e4e636def32053f3425fd3 Mon Sep 17 00:00:00 2001 From: "keycard-sdk-release[bot]" <313094260+keycard-sdk-release[bot]@users.noreply.github.com> Date: Sat, 29 Aug 2026 00:35:08 +0000 Subject: [PATCH] =?UTF-8?q?bump:=20keycardai-oauth=20=E2=86=92=200.25.0?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Auto-bump for keycardai-oauth. --- packages/oauth/CHANGELOG.md | 23 +++++++++++++++++++++++ packages/oauth/pyproject.toml | 2 +- 2 files changed, 24 insertions(+), 1 deletion(-) diff --git a/packages/oauth/CHANGELOG.md b/packages/oauth/CHANGELOG.md index 218c645..5be0070 100644 --- a/packages/oauth/CHANGELOG.md +++ b/packages/oauth/CHANGELOG.md @@ -1,3 +1,26 @@ +## 0.25.0-keycardai-oauth (2026-08-29) + + +- feat(keycardai-oauth)!: multi-resource web-app flow (#245) +- * feat(keycardai-oauth)!: multi-resource web-app flow +- begin_authorization takes resources: list[str] | None and passes it straight +through to the authorize-URL builder, so several RFC 8707 resource +parameters can be requested in one authorization. AuthorizationRedirect +carries the resources so apps persist them with state and the verifier. +- complete_authorization no longer sends a resource parameter on the token +request: the authorization server derives the audience from the code, so +the parameter never affected redemption. +- resource_url survives one release as a deprecated keyword on both calls +(mapped to resources=[resource_url] on begin, a no-op on complete), and +raises when combined with resources. +- * feat(keycardai-oauth)!: remove resource_url outright, no deprecation window +- The web-app flow shipped days ago with one known consumer, so the +deprecation shims bought nothing. begin_authorization takes resources +only; complete_authorization takes no resource in any form. +- --------- +- Co-authored-by: devin-ai-keycard +Co-authored-by: GitHub Action + ## 0.24.0-keycardai-oauth (2026-08-27) diff --git a/packages/oauth/pyproject.toml b/packages/oauth/pyproject.toml index d3c408e..d010a53 100644 --- a/packages/oauth/pyproject.toml +++ b/packages/oauth/pyproject.toml @@ -117,7 +117,7 @@ dev = [ [tool.commitizen] name = "cz_customize" -version = "0.24.0" +version = "0.25.0" tag_format = "${version}-keycardai-oauth" ignored_tag_formats = ["${version}-*"] update_changelog_on_bump = true