[fern-api]

Changes

SDK regeneration from the latest Management API spec (Fern TypeScript generator 3.107.6).

Added

• Connections: passkey signup behavior (EA)

  • New optional signup_behavior property on ConnectionPasskeyAuthenticationMethod (options.authentication_methods.passkey.signup_behavior), typed as ConnectionSignupBehaviorEnum ("allow" | "block").
  • Controls whether the passkey enrollment prompt is shown during signup. Applies to database connections (strategy: auth0) only.
  • Available on create (POST /api/v2/connections) and update (PATCH /api/v2/connections/{id}) requests, and returned by get and list (GET /api/v2/connections, GET /api/v2/connections/{id}).
  • Reuses the existing ConnectionSignupBehaviorEnum (previously used only by ConnectionPasswordAuthenticationMethod); no new enum type.
  • Gated by a tenant feature flag. When the flag is off, the field is stripped from requests and responses, and setting it returns 400.

• ACUL / Prompts: new screen

  • New ScreenGroupNameEnum.PendingConsent = "pending-consent" (used by AculConfigsItem.screen).

Changed (documentation only, no type or shape changes)

• Clients: OIDC support: rewrote the JSDoc for ClientOidcSupport, ClientOidcSupportPatch, and ClientOidcSupportPost, and added per-field docs:
  • is_allowed: allows the client to use OIDC, including receiving ID tokens and calling the UserInfo endpoint.
  • allow_all_scopes: allows the client to request all supported OIDC scopes. Mutually exclusive with allowed_scopes.
  • allowed_scopes: OIDC scopes the client may request (profile, email, address, phone). Mutually exclusive with allow_all_scopes.
• Client Profiles: OIDC support defaults: updated the JSDoc for ClientProfileClientConfigurationOidcSupport and ClientProfileClientConfigurationOidcSupportDefaultValue (and its is_allowed, allow_all_scopes, allowed_scopes fields) to match the wording above.
• CSP policy: CspPolicyReporting.report_to_group now notes that only letters, digits, underscores, and hyphens are allowed (enforced server-side on write).

Tooling / dependencies (dev only)

• yarn.lock:
  • @typescript-eslint/*: 8.72.1 → 8.72.2
  • @babel/* (generator, helper-compilation-targets, helper-module-transforms, helpers, parser, traverse, types): 7.29.7–7.29.12 → 7.29.13
  • Minor transitive bumps: undici 7.30.1 → 7.30.2, ws 8.22.1 → 8.22.2, tough-cookie 6.0.2 → 6.1.0, graphql 16.14.2 → 16.15.0, ansi-regex 6.5.0 → 6.6.0, schema-utils 4.8.2 → 4.8.3, watchpack 2.6.3 → 2.6.4, @eslint-community/regexpp 4.12.2 → 4.12.3, caniuse-lite, electron-to-chromium
• .fern/replay.lock: updated by Fern replay.
• No package.json or runtime dependency changes.

Breaking changes

None. All changes are additive (a new optional property and a new enum member) or documentation-only.

Note for consumers: if you switch exhaustively over ScreenGroupNameEnum with a never check, the new "pending-consent" member will need a case.

References

• API Spec - SDK / CDT Requirements - Passkey Signup Behavior - EA

Testing

• yarn build
• yarn test
• yarn lint

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 89.47%. Comparing base (945e9d9) to head (c3546c8).

Additional details and impacted files

@@           Coverage Diff            @@
##           master    #1439    +/-   ##
========================================
  Coverage   89.47%   89.47%            
========================================
  Files         451      451            
  Lines       23092    23092            
  Branches    10993    11345   +352     
========================================
  Hits        20661    20661            
  Misses       2431     2431            

Flag	Coverage Δ
alltests	89.47% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.

Files with missing lines	Coverage Δ
src/management/api/types/types.ts	100.00% <ø> (ø)

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.