Skip to content

chore(deps): bump github.com/auth0/go-auth0 from 1.45.0 to 1.46.0 - #1596

Merged
ramya18101 merged 1 commit into
mainfrom
dependabot/go_modules/github.com/auth0/go-auth0-1.46.0
Aug 10, 2026
Merged

chore(deps): bump github.com/auth0/go-auth0 from 1.45.0 to 1.46.0#1596
ramya18101 merged 1 commit into
mainfrom
dependabot/go_modules/github.com/auth0/go-auth0-1.46.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 4, 2026

Copy link
Copy Markdown
Contributor

Bumps github.com/auth0/go-auth0 from 1.45.0 to 1.46.0.

Release notes

Sourced from github.com/auth0/go-auth0's releases.

v1.46.0

Added

  • feat: add Cross-App Access resource application support with CrossAppAccessResourceApp on Connection, IdentityAssertionAuthorizationGrant on Client, and DiscoveryURL/OIDCMetadata on ConnectionOptionsSAML #839 (bkiran6398)
  • feat: add Cross-App Access requesting application support with CrossAppAccessRequestingApp on Connection #824 (KartikJha)
  • feat: add Auth0Managed curated blocklist support to NetworkACLRuleMatch #830 (KartikJha)
Changelog

Sourced from github.com/auth0/go-auth0's changelog.

v1.46.0 (2026-07-31)

Full Changelog

Added

  • feat: add Cross-App Access resource application support with CrossAppAccessResourceApp on Connection, IdentityAssertionAuthorizationGrant on Client, and DiscoveryURL/OIDCMetadata on ConnectionOptionsSAML #839 (bkiran6398)
  • feat: add Cross-App Access requesting application support with CrossAppAccessRequestingApp on Connection #824 (KartikJha)
  • feat: add Auth0Managed curated blocklist support to NetworkACLRuleMatch #830 (KartikJha)
Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [github.com/auth0/go-auth0](https://github.com/auth0/go-auth0) from 1.45.0 to 1.46.0.
- [Release notes](https://github.com/auth0/go-auth0/releases)
- [Changelog](https://github.com/auth0/go-auth0/blob/v1.46.0/CHANGELOG.md)
- [Commits](auth0/go-auth0@v1.45.0...v1.46.0)

---
updated-dependencies:
- dependency-name: github.com/auth0/go-auth0
  dependency-version: 1.46.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies One or more dependencies are being bumped go Pull requests that update Go code labels Aug 4, 2026
@dependabot
dependabot Bot requested a review from a team as a code owner August 4, 2026 07:52
@dependabot dependabot Bot added dependencies One or more dependencies are being bumped go Pull requests that update Go code labels Aug 4, 2026
@ramya18101
ramya18101 merged commit 3f54ee5 into main Aug 10, 2026
6 checks passed
@ramya18101
ramya18101 deleted the dependabot/go_modules/github.com/auth0/go-auth0-1.46.0 branch August 10, 2026 03:07
ramya18101 added a commit that referenced this pull request Aug 12, 2026
* docs: add beta installation instructions to README (#1576)

Add a collapsible "Installing the Beta" section covering Homebrew, cURL, Scoop, Powershell, Go, and manual install for the beta build.

* chore(deps): bump github.com/schollz/progressbar/v3 from 3.19.0 to 3.19.1 (#1572)

chore(deps): bump github.com/schollz/progressbar/v3

Bumps [github.com/schollz/progressbar/v3](https://github.com/schollz/progressbar) from 3.19.0 to 3.19.1.
- [Release notes](https://github.com/schollz/progressbar/releases)
- [Commits](schollz/progressbar@v3.19.0...v3.19.1)

---
updated-dependencies:
- dependency-name: github.com/schollz/progressbar/v3
  dependency-version: 3.19.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Ramya Anusri <62586490+ramya18101@users.noreply.github.com>

* docs: use official Homebrew core and Scoop main bucket for install (#1578)

The Auth0 CLI is now published to Homebrew core and the Scoop main bucket, so the custom tap and bucket are no longer required. Simplify the stable install commands and add migration notes for users on the old tap/bucket.

* fix(security): bump goldmark to v1.8.4 to resolve XSS (GO-2026-5320)   (#1586)

chore(deps): update goldmark to v1.8.4

* chore(deps): bump golang.org/x/text from 0.38.0 to 0.40.0 (#1584)

Bumps [golang.org/x/text](https://github.com/golang/text) from 0.38.0 to 0.40.0.
- [Release notes](https://github.com/golang/text/releases)
- [Commits](golang/text@v0.38.0...v0.40.0)

---
updated-dependencies:
- dependency-name: golang.org/x/text
  dependency-version: 0.40.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* chore(deps): bump golang.org/x/term from 0.44.0 to 0.45.0 (#1583)

Bumps [golang.org/x/term](https://github.com/golang/term) from 0.44.0 to 0.45.0.
- [Commits](golang/term@v0.44.0...v0.45.0)

---
updated-dependencies:
- dependency-name: golang.org/x/term
  dependency-version: 0.45.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* chore(deps): bump github.com/getsentry/sentry-go from 0.47.0 to 0.48.0 (#1589)

Bumps [github.com/getsentry/sentry-go](https://github.com/getsentry/sentry-go) from 0.47.0 to 0.48.0.
- [Release notes](https://github.com/getsentry/sentry-go/releases)
- [Changelog](https://github.com/getsentry/sentry-go/blob/master/CHANGELOG.md)
- [Commits](getsentry/sentry-go@v0.47.0...v0.48.0)

---
updated-dependencies:
- dependency-name: github.com/getsentry/sentry-go
  dependency-version: 0.48.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* docs: update Agent Integration for consolidated auth0 skill (#1580)

The standalone auth0-cli skill was folded into a single consolidated
`auth0` skill that routes across all Auth0 SDKs, features, and tooling
(including the CLI). Point install instructions at the official Claude
Code plugins marketplace and the correct skill directory.

Co-authored-by: Ramya Anusri <62586490+ramya18101@users.noreply.github.com>

* chore(deps): bump github.com/auth0/go-auth0 from 1.44.0 to 1.45.0 (#1591)

Bumps [github.com/auth0/go-auth0](https://github.com/auth0/go-auth0) from 1.44.0 to 1.45.0.
- [Release notes](https://github.com/auth0/go-auth0/releases)
- [Changelog](https://github.com/auth0/go-auth0/blob/v1.45.0/CHANGELOG.md)
- [Commits](auth0/go-auth0@v1.44.0...v1.45.0)

---
updated-dependencies:
- dependency-name: github.com/auth0/go-auth0
  dependency-version: 1.45.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* chore(deps): bump github.com/mattn/go-isatty from 0.0.22 to 0.0.23 (#1590)

Bumps [github.com/mattn/go-isatty](https://github.com/mattn/go-isatty) from 0.0.22 to 0.0.23.
- [Commits](mattn/go-isatty@v0.0.22...v0.0.23)

---
updated-dependencies:
- dependency-name: github.com/mattn/go-isatty
  dependency-version: 0.0.23
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* chore(deps): bump github.com/mattn/go-isatty from 0.0.23 to 0.0.24 (#1593)

Bumps [github.com/mattn/go-isatty](https://github.com/mattn/go-isatty) from 0.0.23 to 0.0.24.
- [Commits](mattn/go-isatty@v0.0.23...v0.0.24)

---
updated-dependencies:
- dependency-name: github.com/mattn/go-isatty
  dependency-version: 0.0.24
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* feat: add session-transfer delegation flags in apps (EA only) (#1587)

* feat(apps): add session-transfer delegation flags

- Add --delegation-allow-delegated-access and --delegation-enforce-device-binding
  flags to `apps session-transfer update`, surfacing the Early Access Custom Token
  Exchange impersonation settings (client.session_transfer.delegation).
- Send delegation only when a flag is set, so updates to legacy session-transfer
  settings leave it untouched for clients not using the feature.
- Validate --delegation-enforce-device-binding as 'ip' or 'asn' before any API
  call, matching the Management API enum (no 'none', unlike the parent field).
- Render delegation in `session-transfer show`/`update` output only when the
  client has it configured, keeping output unchanged for existing clients.
- Add display unit tests plus an integration case for the validation error, and
  regenerate the command docs.

* test(apps): revert integration test updates of delegation session-transfer

- Remove the integration test that exercised --delegation-enforce-device-binding
  and restore the original apps test-case numbering.
- Any delegation update sends a session_transfer.delegation payload, which the
  Management API rejects on tenants without the cte_session_transfer_token Early
  Access flag; the CI test tenant lacks it, so the case could not run reliably.
- Delegation rendering stays covered by display unit tests; the update path is
  verified manually against an EA-enabled tenant.

* refactor(apps): address review on delegation flags

- Add short forms -d and -b to the delegation-allow-delegated-access and
  delegation-enforce-device-binding flags, matching the sibling session-transfer
  flags which all expose a short form.
- Remove the client-side ip/asn check on the delegation device binding; invalid
  values now surface the Management API's validation error, consistent with the
  rest of the v1 command.
- Regenerate the command docs for the new short forms.

* docs(apps): mark delegation example as Early Access

- Move the delegation flags example to its own block under a
  "# Delegation (Early Access): impersonation via Session Transfer" comment
  on `apps session-transfer update`, so users can tell the EA feature apart
  from the generally-available session-transfer flags.
- Regenerate the command docs to reflect the annotated example.

* docs: add CLAUDE.md agent guidelines for auth0-cli (#1588)

* docs: add CLAUDE.md agent guidelines with references

Generate CLAUDE.md as the single source of truth for AI coding agents,
plus an AGENTS.md pointer and offloaded references/ files (commands,
testing, code-style, git-workflow, pitfalls, docs-update).

* docs: refine agent guidelines per PR feedback

- Shorten the verbose pointer line in AGENTS.md
- Add first-timer M2M setup guidance (AUTH0_DOMAIN/CLIENT_ID/SECRET) to references/testing.md
- Document --json-compact + jq output pattern in references/code-style.md
- Remove redundant docs blockquote in CLAUDE.md already covered by "Always Do" and docs-update.md

* docs: condense Your Role overview in CLAUDE.md to one sentence

* chore(deps): bump github.com/lestrrat-go/jwx/v3 from 3.1.1 to 3.2.0 (#1594)

Bumps [github.com/lestrrat-go/jwx/v3](https://github.com/lestrrat-go/jwx) from 3.1.1 to 3.2.0.
- [Release notes](https://github.com/lestrrat-go/jwx/releases)
- [Changelog](https://github.com/lestrrat-go/jwx/blob/v3.2.0/Changes)
- [Commits](lestrrat-go/jwx@v3.1.1...v3.2.0)

---
updated-dependencies:
- dependency-name: github.com/lestrrat-go/jwx/v3
  dependency-version: 3.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* chore(deps): bump github.com/auth0/go-auth0 from 1.45.0 to 1.46.0 (#1596)

Bumps [github.com/auth0/go-auth0](https://github.com/auth0/go-auth0) from 1.45.0 to 1.46.0.
- [Release notes](https://github.com/auth0/go-auth0/releases)
- [Changelog](https://github.com/auth0/go-auth0/blob/v1.46.0/CHANGELOG.md)
- [Commits](auth0/go-auth0@v1.45.0...v1.46.0)

---
updated-dependencies:
- dependency-name: github.com/auth0/go-auth0
  dependency-version: 1.46.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* feat(analytics): add `is_api` telemetry property for raw api command (#1602)

feat(analytics): add is_api telemetry property for raw api command

* refactor: migrate management SDK usage from go-auth0 v2 to v3 (#1597)

* refactor: migrate management SDK usage from go-auth0 v2 to v3

Update all go-auth0/v2 imports to go-auth0/v3 and rename the v2-flavored
identifiers (APIV2, apiv2, managementv2 alias, NewAPIV2,
initializeManagementClientV2) to their v3 equivalents. Regenerate the
phone-notification-template mock and drop go-auth0/v2 from go.mod. No
command surface or behavior changes; v3 is a near drop-in for v2 and none
of the tightened v3 types are referenced.

* update claude.md to v3

* fix conflicts

* docs: update installation instructions for Homebrew and Scoop

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: Kunal Dawar <35455566+developerkunal@users.noreply.github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: sanchitmehtagit <sanchit.mehta@okta.com>
Co-authored-by: KIRAN KUMAR B <bkiran6398@gmail.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies One or more dependencies are being bumped go Pull requests that update Go code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant