v4.6.0

v4.6.0 [2026-05-27]

What's New:

• Added AWS STS JWT federation provider via GetWebIdentityToken.
• Added broker scan and scheduled scan support for access broker resource types.
• Added secret rotation support for secrets manager.
• Added policy prioritization support for access broker profiles.

Enhancements:

• Added federation_providers.aws_sts_jwt for OIDC-based AWS federation using STS web identity tokens.
• Added access_broker.resources.types.[scan|get_scan_settings] for on-demand broker scans.
• Added access_broker.resources.types.[get_scheduled_scan_service|create_scheduled_scan|list_scheduled_scans|enable_scheduled_scans|disable_scheduled_scans|delete_scheduled_scan] for scheduled scan management.
• Added secrets_manager.secrets.[metadata|rotation_details|update_rotation|rotate|rotation_history|versions] for secret rotation and version management.
• Added access_broker.profiles.policy_prioritization.[enable|disable|reorder] for profile policy evaluation ordering.

Bug Fixes:

• None

Dependencies:

• None

Other:

• None

v4.5.0

v4.5.0 [2026-01-26]

What's New:

• Added functionality for My Resources dynamic resources.
• Added support for custom headers for My Access, My Resources, My Secrets.
• Added support for service identity impersonation.
• Added support for AI service identity type.
• Added python3.14 support.
• Dropped python3.9 support, EOL 2025-10-31.

Enhancements:

• Added my_resources.[build|delete|list_dynamic_parameters] for dynamic resources usage.
• Added headers param for [my_access|my_resources|my_secrets] methods.
• Added impersonation to access_broker.profiles.[create|update] for service identity impersonation.
• Added identity_management.ai_identities for AI service identity type.

Bug Fixes:

• Trailing slash in url affects python3.14+.
• Identity types is a requirement, updates to identity_management.identity_attributes.[create|identity_types]
• Updated update_fields_to_keep for application_managment.profiles.update due to API error.
• access_broker.resources.types.update requires name in payload to avoid name update error.

Dependencies:

• python3.14 dependency bumps: [requests>=2.32.5, jmespath>=1.1.0]

Other:

• Updated documentation for GCP federation provider doc string.
• Various test fixes and adjustments

v4.5.0rc2

v4.5.0rc1 [2025-11-21]

What's New:

• First draft of on behalf of (OBO) support

Enhancements:

• None

Bug Fixes:

• Properly pass headers to self.credentials

Dependencies:

• None

Other:

• None

v4.5.0rc1

v4.5.0rc1 [2025-11-21]

What's New:

• First draft of on behalf of (OBO) support

Enhancements:

• None

Bug Fixes:

• None

Dependencies:

• None

Other:

• None

v4.4.0

v4.4.0 [2025-10-24]

What's New:

• Added Manager Approval support to [application_management|secrets_manager|system].
• Added GCP Federation Provider.

Enhancements:

• Added manager_condition parameter to [application_management.profiles|secrets_manager|system].policies.build.
• Drop socket usage to speed up response times in specific scenarios, e.g., Windows DNS in WSL environments.

Bug Fixes:

• None

Dependencies:

• None

Other:

• Test naming convention updates.

v4.3.2

v4.3.2 [2025-09-04]

What's New:

• None

Enhancements:

• Added org_scan_only parameter to application_management.[applications|scans].scan allowing organization only scans of Azure and GCP.

Bug Fixes:

• None

Dependencies:

• None

Other:

• None

v4.3.1

v4.3.1 [2025-08-14]

What's New:

• None

Enhancements:

• None

Bug Fixes:

• Fixed unbound variable error when check_response_for_error is run against generic HTTP error.

Dependencies:

• None

Other:

• None

v4.3.0

v4.3.0 [2025-07-08]

What's New:

• Added security.active_sessions functionality to allow administrative session management.

Enhancements:

• None

Bug Fixes:

• None

Dependencies:

• None

Other:

• None

v4.2.0

v4.2.0 [2025-05-30]

What's New:

• Added advanced_settings functionality to:
  • application_management
  • application_management.profiles
  • access_broker.profiles
• Added global_settings.itsm functionality.

Enhancements:

• Added missing params for secrets_manager.[secrets|vaults] and file updates.

Bug Fixes:

• None

Dependencies:

• None

Other:

• Updated tests to use uniform naming convention.
• Refactored application_management.profiles to break out classes for added clarity.

v4.1.3

v4.1.3 [2025-03-07]

What's New:

• None

Enhancements:

• None

Bug Fixes:

• Upload check[in|out]_file content for access_broker.resources.permissions.[create|update] to avoid requests injected headers.

Dependencies:

• None

Other:

• None