Skip to content

Release v3.0.0

Latest
Latest

Choose a tag to compare

View all tags
@bartes bartes released this 08 Sep 08:35
v3.0.0
0d20717
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

3.0.0 (2026-09-08)

Features:

  • Add Lists API: CreateList, GetAllLists, GetList, UpdateList, DeleteList, QueryLists.
  • Add List items API: CreateListItem, GetListItem, UpdateListItem, QueryListItems, CountListItems, ArchiveListItem, UnarchiveListItem, CreateBatchListItems.
  • Add Privacy API: RequestUserData, DeleteUserData (POST / DELETE /v1/privacy/users).
  • Add Events API (enterprise): EventsSchema, QueryEvents, GroupEvents.
  • Add webhook signature verification: Castle.Webhook.Verify(body, signature) and Castle.Webhook.Verify(body, signature, apiSecret), validating the X-Castle-Signature header (HMAC-SHA256, Base64). Adds CastleWebhookVerificationException.
  • Add CastlePaymentRequiredException for HTTP 402.
  • Add ActionRequest.Expand for the expanded Event response.
  • Add typed expanded Event fields on RiskResponse (id, name, type, status, created_at, authenticated, endpoint, email, ip, user, metrics).

Maintenance:

  • Target net10.0, net8.0, netstandard2.0 and net48; drop the net461 and netcoreapp3.1 build configurations.
  • Remove the Sentry dependency; runtime/platform information is now resolved via System.Runtime.InteropServices.RuntimeInformation.
  • Bump Newtonsoft.Json to 13.0.4.
  • Build, test (across all target frameworks, including net48) and pack on GitHub Actions (checkout / setup-dotnet v5); add an .editorconfig.
  • Bump test packages within the same major: xunit 2.9.3, NSubstitute 5.3.0, FluentAssertions 6.12.2, Microsoft.NET.Test.Sdk 17.14.1, coverlet.msbuild 6.0.4.

BREAKING CHANGES:

  • Remove the legacy Authenticate and Track endpoints (CastleClient.Authenticate / Track and the matching Build*Request / Send*Request methods) and the Verdict response. Use Risk, Filter and Log instead.
  • Remove device-management endpoints: GetDevice, GetDevicesForUser, ApproveDevice, ReportDevice, ArchiveDevices (and the Device, DeviceList and User response models).
  • Remove impersonation endpoints: ImpersonateStart, ImpersonateEnd (and the ImpersonateStartRequest / ImpersonateEndRequest models).
  • Remove client-id extraction: Context.FromHttpRequest no longer reads the X-Castle-Client-ID header or __cid cookie, and RequestContext.ClientId and DeviceItem.IsCurrentDevice are removed. The default request context is headers, ip and library.
Assets 2
Loading