From 58d9ca7b78058aefe1c03aa0f17b5fb7083198e5 Mon Sep 17 00:00:00 2001
From: "github-actions[bot]"
 <41898282+github-actions[bot]@users.noreply.github.com>
Date: Tue, 3 Nov 2026 14:18:29 +0000
Subject: [PATCH] chore: version packages

---
 .changeset/conformance-transport-header.md | 7 -------
 .changeset/types-0-35-0.md                 | 5 -----
 CHANGELOG.md                               | 9 +++++++++
 package.json                               | 2 +-
 4 files changed, 10 insertions(+), 13 deletions(-)
 delete mode 100644 .changeset/conformance-transport-header.md
 delete mode 100644 .changeset/types-0-35-0.md

diff --git a/.changeset/conformance-transport-header.md b/.changeset/conformance-transport-header.md
deleted file mode 100644
index 202d96a..0000000
--- a/.changeset/conformance-transport-header.md
+++ /dev/null
@@ -1,7 +0,0 @@
----
-'seamless-cli': patch
----
-
-The adapter conformance suite now sends `x-seamless-auth-transport: cookie` on its cookie-transport requests, as `@seamless-auth/client` does, so body-less `POST` and `DELETE` calls pass the content-type gate server adapters add in v0.23 (fells-code/seamless-auth-api#558). Two new cases hold adapters to the request guards: a cross-site unsafe request answers `403 cross_site_request_blocked` and leaves the session alone, and a body-less form-encoded `POST /auth/recovery-codes` without the transport header answers `415 unsupported_media_type`. The 415 case is a pending contract: it is skipped unless `SEAMLESS_VERIFY_CONTRACTS=content-type-gate` (or `all`) is set, so an adapter that has not released the gate yet keeps passing. `verify/CONFORMANCE.md` lists pending contracts. The conformance grid no longer counts a skipped case as a failure.
-
-Requests that ask for external delivery (`x-seamless-auth-delivery-mode: external`) now carry a service token with the `seamless-auth-external-delivery` subject, as the server adapters send it, so the suite keeps passing once the API requires that subject (fells-code/seamless-auth-api#556).
diff --git a/.changeset/types-0-35-0.md b/.changeset/types-0-35-0.md
deleted file mode 100644
index fd1b69a..0000000
--- a/.changeset/types-0-35-0.md
+++ /dev/null
@@ -1,5 +0,0 @@
----
-"seamless-cli": patch
----
-
-Depend on `@seamless-auth/types` `^0.35.0`, which adds the OpenID Provider session binding contract.
diff --git a/CHANGELOG.md b/CHANGELOG.md
index c524e22..49a34e7 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,5 +1,14 @@
 # seamless-cli
 
+## 0.27.2
+
+### Patch Changes
+
+- 3890db9: The adapter conformance suite now sends `x-seamless-auth-transport: cookie` on its cookie-transport requests, as `@seamless-auth/client` does, so body-less `POST` and `DELETE` calls pass the content-type gate server adapters add in v0.23 (fells-code/seamless-auth-api#558). Two new cases hold adapters to the request guards: a cross-site unsafe request answers `403 cross_site_request_blocked` and leaves the session alone, and a body-less form-encoded `POST /auth/recovery-codes` without the transport header answers `415 unsupported_media_type`. The 415 case is a pending contract: it is skipped unless `SEAMLESS_VERIFY_CONTRACTS=content-type-gate` (or `all`) is set, so an adapter that has not released the gate yet keeps passing. `verify/CONFORMANCE.md` lists pending contracts. The conformance grid no longer counts a skipped case as a failure.
+  
+  Requests that ask for external delivery (`x-seamless-auth-delivery-mode: external`) now carry a service token with the `seamless-auth-external-delivery` subject, as the server adapters send it, so the suite keeps passing once the API requires that subject (fells-code/seamless-auth-api#556).
+- ba479f2: Depend on `@seamless-auth/types` `^0.35.0`, which adds the OpenID Provider session binding contract.
+
 ## 0.27.1
 
 ### Patch Changes
diff --git a/package.json b/package.json
index 62d0beb..a6be6b1 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "seamless-cli",
-  "version": "0.27.1",
+  "version": "0.27.2",
   "description": "The CLI for Seamless Auth, open source passwordless auth",
   "keywords": [
     "seamless-auth",