v10.9.0

10.9.0 (2026-07-30)

Features

• Add linkClaimAttemptToExternalUser to Agents module (#1652) (5e4813f)
• Add user API key methods (#1655) (17e41e0)
• Distinguish transient from terminal failures in CookieSession.refresh() (#1663) (2c570a5)

Bug Fixes

• totp on list-path AuthenticationFactor is now optional to match the API (#1665) (53a506b)
• delete requests drop query params passed via {query: ...} (#1668) (08a8a73)