chore: update version and changelog

CHANGELOG.md

@@ -1,5 +1,13 @@
 # seamless-auth-api
 
+## 0.22.0
+
+### Minor Changes
+
+- ffa34ca: The API now owns which sessions a provider sign-in was made on. The provider service binds a session to a client with `POST /oidc/sessions/:id/bind`, presenting the user's own access token for that session, and the API answers account and auth context lookups, signs provider tokens, and accepts a session revoke only for bound sessions. Account notices need the same binding. Device-flow tokens no longer carry `amr` or `auth_time`, as they already did not carry `acr`.
+
+  This raises the provider service contract to version 3, so `seamless-auth-oidc-provider` must be upgraded with the API. Sessions signed in to provider clients before the upgrade need to sign in again to get new provider tokens.
+
 ## 0.21.1
 
 ### Patch Changes

adapter-manifest.json

@@ -1,6 +1,6 @@
 {
   "schemaVersion": 1,
-  "apiVersion": "0.21.1",
+  "apiVersion": "0.22.0",
   "session": {
     "subject": "sub",
     "token": "token",

openapi.json

@@ -1,6 +1,6 @@
 {
   "openapi": "3.0.3",
-  "info": { "title": "Seamless Auth API", "version": "0.21.1" },
+  "info": { "title": "Seamless Auth API", "version": "0.22.0" },
   "components": {
     "schemas": {},
     "parameters": {},

package.json

@@ -1,6 +1,6 @@
 {
   "name": "seamless-auth-api",
-  "version": "0.21.1",
+  "version": "0.22.0",
   "description": "Seamless Auth API - A web application server for supporting a Seamless Auth server instance.",
   "main": "index.js",
   "type": "module",