v7.8.0

Added

• Type declarations for more seamless integration into Typescript projects when used as a module [#485]

Security

• Updated Winston from 2.3.x to 3.3.0 which applies fix for theoretical prototype pollution vulnerability [#497]

v7.7.1

Added

• Deprecation warnings for now deprecated asset-specific exclusion configuration properties: AUTH0_EXCLUDED_RULES, AUTH0_EXCLUDED_CLIENTS, AUTH0_EXCLUDED_DATABASES, AUTH0_EXCLUDED_CONNECTIONS, AUTH0_EXCLUDED_RESOURCE_SERVERS, AUTH0_EXCLUDED_DEFAULTS. See Resource Exclusion Proposal for details. [#481]

Fixed

• Rules configs failing to update after regression prevented asset-specific overrides of Node Auth0 SDK methods [#482]
• Attack protection not replacing keywords [#478]

v7.7.0

Added

• Exclusion of entire resource types via the AUTH0_EXCLUDED configuration parameter. See Resource Exclusion Proposal for details. [#468]

Fixed

• idle_session_lifetime and session_lifetime values properly ignored on update if inheriting default tenant values.[#471]

v7.6.0

Added

• New branding template feature support [#438]

Fixed

• Colliding e parameter alias between export_ids and env. Thank you, @toddbaert! [#453]

v7.5.2

No functional changes in this version. This tag was a method of re-establishing v7.x.x as the latest tag in NPM.

v7.5.1

Fixed

• Updating dead link in logging output [#436]
• Fixing --env flag to properly dictate environment variable inheritance [#432]

v7.5.0

Added

• Support for attack protection configuration management #428

Fixed

• Excluded connection properties from getting deleted upon update #430
• Organizations in YAML format are skipped when not defined #388

v7.4.0

Added

• Allowing @@ array variable replacement to work when wrapped in quotes [#421]

Fixed

• Eliminated benign client_metadata warnings on import [#416]
• Fixing request abstraction from losing function scope, enabling Auth0 Node SDK updates [#412]

Security

• Updating Auth0 Node SDK to 2.40.0 which fixes minor dependency vulnerability

v7.3.7

Fixed

• Expose errors that may be silently missed in Actions [#408]

v7.3.6

Fixed

• Fix errors caused by incompatibilities introduced by new versions of Auth0 SDK [#406]