Releases 2026-10

[thegdsks]

Releases 2026-10

Quickstart · Docs · npm · Go · Stability

Release notes for theAuth, the open-source authentication and authorization library for AI agents, MCP servers and apps, in TypeScript and Go. This thread is kept up to date by the release workflows, and every release also has its own announcement with the full notes.

Upgrade: npm install @glinr/theauth@latest or go get github.com/glincker/theauth-go/v2@latest. Breaking changes only ship in a major version, see STABILITY.md.

Questions, bug reports and ideas are welcome: reply here, or start a new discussion.

theauth (TypeScript SDK)

v1.1.1 (2026-10-14)

First release on the 1.x line. The public API is the one documented in STABILITY.md and there are no API changes from the previous 0.x release. From here breaking changes only ship in a major.

npm install @glinr/theauth@1.1.1

v0.8.0 (2026-10-13)

Express, Fastify and NestJS adapters now rate limit requests in three tiers and reject cross-site writes made with a cookie session. New options on every adapter: rateLimit, trustedOrigins and csrf. Both checks ...

npm install @glinr/theauth@0.8.0

v0.7.2 (2026-10-11)

Fix the quick start snippet in the package README: enable the agent tables with agents: { enabled: true }, await createTheAuth, and create the owner row first.

npm install @glinr/theauth@0.7.2

v0.7.1 (2026-10-10)

Resolve the client IP through the trusted proxy helper.

npm install @glinr/theauth@0.7.1

v0.7.0 (2026-10-09)

Security: the framework adapters no longer serve the management routes anonymously. (details in the package changelog)

npm install @glinr/theauth@0.7.0

v0.6.0 (2026-10-07)

Remove the legacy KavachOS naming. The deprecated Kavach* and createKavach exports are gone: use TheAuth* and createTheAuth. Environment variables are now THEAUTH_*, webhook headers X-TheAuth-*, cookies an...

npm install @glinr/theauth@0.6.0

v0.5.0 (2026-10-07)

TheAuth is now the canonical naming across the SDK (TheAuthClient,

npm install @glinr/theauth@0.5.0

theauth-go

v2.10.0 (2026-10-14)

account lifecycle, step-up auth context, client compat, oidc presets and gin, echo, fiber adapters (#261) (3fa4995)

go get github.com/glincker/theauth-go/v2@v2.10.0

v2.9.0 (2026-10-10)

go get github.com/glincker/theauth-go/v2@v2.9.0

v2.8.0 (2026-10-09)

go get github.com/glincker/theauth-go/v2@v2.8.0

v2.7.1 (2026-10-07)

go get github.com/glincker/theauth-go/v2@v2.7.1

v2.7.0 (2026-10-05)

go get github.com/glincker/theauth-go/v2@v2.7.0

v2.6.0 (2026-10-05)

go get github.com/glincker/theauth-go/v2@v2.6.0