From 5e434bff3c63800d0b0116132f5acd714df47544 Mon Sep 17 00:00:00 2001
From: "github-actions[bot]"
 <41898282+github-actions[bot]@users.noreply.github.com>
Date: Sun, 1 Nov 2026 23:30:29 +0000
Subject: [PATCH] chore: update version and changelog

---
 .changeset/oidc-session-bind.md | 7 -------
 CHANGELOG.md                    | 8 ++++++++
 adapter-manifest.json           | 2 +-
 openapi.json                    | 2 +-
 package.json                    | 2 +-
 5 files changed, 11 insertions(+), 10 deletions(-)
 delete mode 100644 .changeset/oidc-session-bind.md

diff --git a/.changeset/oidc-session-bind.md b/.changeset/oidc-session-bind.md
deleted file mode 100644
index b5ffea86..00000000
--- a/.changeset/oidc-session-bind.md
+++ /dev/null
@@ -1,7 +0,0 @@
----
-'seamless-auth-api': minor
----
-
-The API now owns which sessions a provider sign-in was made on. The provider service binds a session to a client with `POST /oidc/sessions/:id/bind`, presenting the user's own access token for that session, and the API answers account and auth context lookups, signs provider tokens, and accepts a session revoke only for bound sessions. Account notices need the same binding. Device-flow tokens no longer carry `amr` or `auth_time`, as they already did not carry `acr`.
-
-This raises the provider service contract to version 3, so `seamless-auth-oidc-provider` must be upgraded with the API. Sessions signed in to provider clients before the upgrade need to sign in again to get new provider tokens.
diff --git a/CHANGELOG.md b/CHANGELOG.md
index 8eb290a0..8372370a 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,5 +1,13 @@
 # seamless-auth-api
 
+## 0.22.0
+
+### Minor Changes
+
+- ffa34ca: The API now owns which sessions a provider sign-in was made on. The provider service binds a session to a client with `POST /oidc/sessions/:id/bind`, presenting the user's own access token for that session, and the API answers account and auth context lookups, signs provider tokens, and accepts a session revoke only for bound sessions. Account notices need the same binding. Device-flow tokens no longer carry `amr` or `auth_time`, as they already did not carry `acr`.
+
+  This raises the provider service contract to version 3, so `seamless-auth-oidc-provider` must be upgraded with the API. Sessions signed in to provider clients before the upgrade need to sign in again to get new provider tokens.
+
 ## 0.21.1
 
 ### Patch Changes
diff --git a/adapter-manifest.json b/adapter-manifest.json
index 05919e84..f8ccb498 100644
--- a/adapter-manifest.json
+++ b/adapter-manifest.json
@@ -1,6 +1,6 @@
 {
   "schemaVersion": 1,
-  "apiVersion": "0.21.1",
+  "apiVersion": "0.22.0",
   "session": {
     "subject": "sub",
     "token": "token",
diff --git a/openapi.json b/openapi.json
index 0dd2578e..146a720c 100644
--- a/openapi.json
+++ b/openapi.json
@@ -1,6 +1,6 @@
 {
   "openapi": "3.0.3",
-  "info": { "title": "Seamless Auth API", "version": "0.21.1" },
+  "info": { "title": "Seamless Auth API", "version": "0.22.0" },
   "components": {
     "schemas": {},
     "parameters": {},
diff --git a/package.json b/package.json
index 515dff5a..e2bfd944 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "seamless-auth-api",
-  "version": "0.21.1",
+  "version": "0.22.0",
   "description": "Seamless Auth API - A web application server for supporting a Seamless Auth server instance.",
   "main": "index.js",
   "type": "module",