chore(deps): bump github.com/auth0/go-auth0/v3 from 3.7.0 to 3.8.0

[dependabot]

Bumps github.com/auth0/go-auth0/v3 from 3.7.0 to 3.8.0.

Release notes

Sourced from github.com/auth0/go-auth0/v3's releases.

v3.8.0

Breaking Changes

• Removed Experimentation.Experiments.UpdateStatus and Experimentation.FeatureFlags.UpdateStatus, along with the UpdateExperimentStatusRequestContent, UpdateExperimentStatusResponseContent, UpdateFeatureFlagStatusRequestContent, and UpdateFeatureFlagStatusResponseContent types. The status is now set through the update request using the Status field on Experiments.Update and FeatureFlags.Update #893 (fern-api[bot])
• Removed SearchOrganization.Metadata along with its getter and setter #893 (fern-api[bot])
• A0Stream on all EventStreamCloudEvent<Event>CloudEvent types is now optional, so the field changed from string to *string and SetA0Stream now takes a *string #893 (fern-api[bot])
• DisplayName on ConnectionResponseCommon and the ConnectionResponseContent<Strategy> types is now required, so the field changed from *string to string and SetDisplayName now takes a string. No endpoint returns these types, so client calls are not affected #893 (fern-api[bot])

Added

• feat: add Clients.Search for searching clients with SCIM or Lucene filter syntax, along with the SearchClientsRequestParameters (Q, Parser, Fields, IncludeFields, Take, From, Sort), SearchClientsResponseContent, ClientSearchResponse, and ClientSortFieldEnum (name, updated_at) types #893 (fern-api[bot])
• feat: add passwordless OTP on database connections to the Authentication API with Passwordless.ChallengeWithEmail, Passwordless.ChallengeWithPhoneNumber, and Passwordless.LoginWithOTPChallenge, along with the ChallengeWithEmailRequest, ChallengeWithPhoneNumberRequest, ChallengeResponse, and LoginWithOTPChallengeRequest types. authentication.Error also gains the ValidationErrors and MFARequirements fields with nil safe getters, along with the authentication.ValidationError, authentication.MFARequirements, and authentication.MFAFactor types #884 (developerkunal)
• feat: add option.WithTenantDomain and core.RequestOptions.TenantDomain, which set the default base URL to https://<tenantDomain>/api/v2 when passed to client.NewWithOptions without a custom base URL #889 (fern-api[bot])
• feat: add OidcSupport (ClientOidcSupportPatch) to UpdateClientRequestContent, EnforceAnonSessionTransferNetworkBinding (ClientAnonymousSessionTransferNetworkBindingEnum: asn, ip, none) to the client request and response types, and DpopStrictRefreshTokenBinding to the tenant settings types #889 (fern-api[bot])
• feat: add GetBody() to typed API errors #889 (fern-api[bot])
• feat: support Auth0-managed System Roles on Roles.List by passing auth0 as OwnerID, and add the RoleOwnerIDFilter and RoleOwnerID string aliases for OwnerID on the list parameters and role response types, along with the SystemRoleOwnerID type (SystemRoleOwnerIDAuth0) #893 (fern-api[bot])
• feat: add FormSubmissionMode (BruteForceProtectionFormSubmissionModeEnum: auto, manual) to the brute force protection settings request and response types #893 (fern-api[bot])
• feat: add GoogleWorkspace provisioning (ConnectionProfileProvisioningGoogleWorkspace with SyncUsers) to ConnectionProfileProvisioning and ConnectionProfileStrategyOverridesProvisioning, along with EnabledFeaturesEnumDirectorySync #893 (fern-api[bot])
• feat: add Status (SegmentStatusEnum: active, archived) to experimentation segments #893 (fern-api[bot])
• feat: add OrganizationMemberAccessLevel (none, readonly, limited, full) to the organization connection added and updated event stream objects #893 (fern-api[bot])

Changed

• Responses with Content-Encoding: gzip that the HTTP client did not decompress are now decompressed before decoding, and the wait between retries now stops when the context is cancelled #889 (fern-api[bot])

Fixed

• fix: preserve all SegmentMatchExpression variants (contains, starts_with, ends_with, and exists) on a JSON round trip. Previously every variant other than contains was dropped and serialized as {"contains":null}, which the API rejects with a 400 #889 (fern-api[bot])
• fix: honor option.WithoutRetries() when it is passed to the client constructor, and skip the retry wait after the final attempt #889 (fern-api[bot])
• fix: reject non-compact JWS serialization when validating ID tokens #885 (developerkunal)

Changelog

Sourced from github.com/auth0/go-auth0/v3's changelog.

v3.8.0 (2026-10-09)

Full Changelog

Breaking Changes

• Removed Experimentation.Experiments.UpdateStatus and Experimentation.FeatureFlags.UpdateStatus, along with the UpdateExperimentStatusRequestContent, UpdateExperimentStatusResponseContent, UpdateFeatureFlagStatusRequestContent, and UpdateFeatureFlagStatusResponseContent types. The status is now set through the update request using the Status field on Experiments.Update and FeatureFlags.Update #893 (fern-api[bot])
• Removed SearchOrganization.Metadata along with its getter and setter #893 (fern-api[bot])
• A0Stream on all EventStreamCloudEvent<Event>CloudEvent types is now optional, so the field changed from string to *string and SetA0Stream now takes a *string #893 (fern-api[bot])
• DisplayName on ConnectionResponseCommon and the ConnectionResponseContent<Strategy> types is now required, so the field changed from *string to string and SetDisplayName now takes a string. No endpoint returns these types, so client calls are not affected #893 (fern-api[bot])

Added

• feat: add Clients.Search for searching clients with SCIM or Lucene filter syntax, along with the SearchClientsRequestParameters (Q, Parser, Fields, IncludeFields, Take, From, Sort), SearchClientsResponseContent, ClientSearchResponse, and ClientSortFieldEnum (name, updated_at) types #893 (fern-api[bot])
• feat: add passwordless OTP on database connections to the Authentication API with Passwordless.ChallengeWithEmail, Passwordless.ChallengeWithPhoneNumber, and Passwordless.LoginWithOTPChallenge, along with the ChallengeWithEmailRequest, ChallengeWithPhoneNumberRequest, ChallengeResponse, and LoginWithOTPChallengeRequest types. authentication.Error also gains the ValidationErrors and MFARequirements fields with nil safe getters, along with the authentication.ValidationError, authentication.MFARequirements, and authentication.MFAFactor types #884 (developerkunal)
• feat: add option.WithTenantDomain and core.RequestOptions.TenantDomain, which set the default base URL to https://<tenantDomain>/api/v2 when passed to client.NewWithOptions without a custom base URL #889 (fern-api[bot])
• feat: add OidcSupport (ClientOidcSupportPatch) to UpdateClientRequestContent, EnforceAnonSessionTransferNetworkBinding (ClientAnonymousSessionTransferNetworkBindingEnum: asn, ip, none) to the client request and response types, and DpopStrictRefreshTokenBinding to the tenant settings types #889 (fern-api[bot])
• feat: add GetBody() to typed API errors #889 (fern-api[bot])
• feat: support Auth0-managed System Roles on Roles.List by passing auth0 as OwnerID, and add the RoleOwnerIDFilter and RoleOwnerID string aliases for OwnerID on the list parameters and role response types, along with the SystemRoleOwnerID type (SystemRoleOwnerIDAuth0) #893 (fern-api[bot])
• feat: add FormSubmissionMode (BruteForceProtectionFormSubmissionModeEnum: auto, manual) to the brute force protection settings request and response types #893 (fern-api[bot])
• feat: add GoogleWorkspace provisioning (ConnectionProfileProvisioningGoogleWorkspace with SyncUsers) to ConnectionProfileProvisioning and ConnectionProfileStrategyOverridesProvisioning, along with EnabledFeaturesEnumDirectorySync #893 (fern-api[bot])
• feat: add Status (SegmentStatusEnum: active, archived) to experimentation segments #893 (fern-api[bot])
• feat: add OrganizationMemberAccessLevel (none, readonly, limited, full) to the organization connection added and updated event stream objects #893 (fern-api[bot])

Changed

• Responses with Content-Encoding: gzip that the HTTP client did not decompress are now decompressed before decoding, and the wait between retries now stops when the context is cancelled #889 (fern-api[bot])

Fixed

• fix: preserve all SegmentMatchExpression variants (contains, starts_with, ends_with, and exists) on a JSON round trip. Previously every variant other than contains was dropped and serialized as {"contains":null}, which the API rejects with a 400 #889 (fern-api[bot])
• fix: honor option.WithoutRetries() when it is passed to the client constructor, and skip the retry wait after the final attempt #889 (fern-api[bot])
• fix: reject non-compact JWS serialization when validating ID tokens #885 (developerkunal)

Commits

• 6fb95bd Release v3.8.0 (#894)
• 9a789b4 feat!: add Clients.Search; move experiment status into Update (#893)
• 1222327 fix: preserve all SegmentMatchExpression variants on JSON round trip (#889)
• dec4500 feat: add passwordless OTP on database connections (#884)
• dcfcb9d fix: reject non-compact JWS serialization in ID token validation (#885)
• ae03cab ci: add API compatibility check for pull requests (#887)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)