chore(main): release 10.9.0

[workos-sdk-automation]

🤖 I have created a release beep boop

10.9.0 (2026-07-30)

Features

• Add linkClaimAttemptToExternalUser to Agents module (#1652) (5e4813f)
• Add user API key methods (#1655) (17e41e0)
• Distinguish transient from terminal failures in CookieSession.refresh() (#1663) (2c570a5)

Bug Fixes

• totp on list-path AuthenticationFactor is now optional to match the API (#1665) (53a506b)
• delete requests drop query params passed via {query: ...} (#1668) (08a8a73)

---

This PR was generated with Release Please. See documentation.

[greptile-apps]

Greptile Summary

This is an automated release PR generated by Release Please, bumping the @workos-inc/node SDK from 10.8.0 to 10.9.0. All changes are version metadata updates with no logic changes.

• Version bump: package.json, package-lock.json, and .release-please-manifest.json all updated to 10.9.0.
• Changelog: Three new feature entries (linkClaimAttemptToExternalUser, user API key methods, transient/terminal session refresh distinction) and two bug fixes (totp optional field, DELETE query params) are documented, all referencing their originating PRs.

Confidence Score: 5/5

Safe to merge — all changes are automated version metadata updates with no logic modifications.

The diff is purely a Release Please automation output: version strings in package.json, package-lock.json, and the manifest file, plus a prepended CHANGELOG section. No production code, configuration, or dependencies were altered.

Files Needing Attention: No files require special attention.

Important Files Changed

Filename	Overview
package.json	Version bumped from 10.8.0 to 10.9.0; no other changes.
package-lock.json	Lockfile version field updated to match package.json bump; no dependency changes.
CHANGELOG.md	10.9.0 release section prepended with correct links to all three feature PRs and two bug fix PRs.
.release-please-manifest.json	Manifest version updated from 10.8.0 to 10.9.0 as expected for this release.

Flowchart

%%{init: {'theme': 'neutral'}}%%
flowchart TD
    A[Release Please Bot] --> B[Bump version 10.8.0 → 10.9.0]
    B --> C[package.json]
    B --> D[package-lock.json]
    B --> E[.release-please-manifest.json]
    B --> F[CHANGELOG.md]
    F --> G[Feature: linkClaimAttemptToExternalUser]
    F --> H[Feature: User API key methods]
    F --> I[Feature: CookieSession.refresh transient/terminal distinction]
    F --> J[Fix: totp optional on AuthenticationFactor]
    F --> K[Fix: DELETE query params preserved]

Loading

_{Reviews (6): Last reviewed commit: "chore(main): release 10.9.0" | Re-trigger Greptile}

[workos-sdk-automation]

🤖 Created releases:

• v10.9.0

🌻