Merge branch 'master' into docs/add-deepwiki-badge-1c997c24

Author: tanya732

.github/workflows/build-and-test.yml

@@ -10,7 +10,7 @@ jobs:
   gradle:
     runs-on:  ubuntu-latest
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v6
       - uses: actions/setup-java@v5
         with:
           distribution: temurin

.github/workflows/claude-code-review.yml

@@ -0,0 +1,11 @@
+name: Claude Code PR Review
+
+on:
+  issue_comment:
+    types: [ created ]
+  pull_request_review_comment:
+    types: [ created ]
+
+jobs:
+  claude-review:
+    uses: atko-cic/ai-pr-analyzer-gh-action/.github/workflows/claude-code-review.yml@main

.github/workflows/gradle-wrapper-validation.yml

@@ -6,5 +6,5 @@ jobs:
     name: "validation/gradlew"
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v6
       - uses: gradle/actions/wrapper-validation@v4

.github/workflows/java-release.yml

@@ -30,7 +30,7 @@ jobs:
 
     steps:
       # Checkout the code
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v6
         with:
           fetch-depth: 0
 

.github/workflows/rl-scanner.yml

@@ -31,7 +31,7 @@ jobs:
 
     steps:
       - name: Checkout code
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
 
       - name: Set up Java
         uses: actions/setup-java@v5

.github/workflows/snyk.yml

@@ -30,7 +30,7 @@ jobs:
       - if: github.actor == 'dependabot[bot]' || github.event_name == 'merge_group'
         run: exit 0 # Skip unnecessary test runs for dependabot and merge queues. Artifically flag as successful, as this is a required check for branch protection.
 
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v6
         with:
           ref: ${{ github.event.pull_request.head.sha || github.ref }}
 

.version

@@ -1 +1 @@
-2.25.0
+2.26.0

CHANGELOG.md

@@ -1,5 +1,12 @@
 # Change Log
 
+## [2.26.0](https://github.com/auth0/auth0-java/tree/2.26.0) (2025-10-24)
+[Full Changelog](https://github.com/auth0/auth0-java/compare/2.25.0...2.26.0)
+
+**Added**
+- Adenix/client is token endpoint id header trusted [\#782](https://github.com/auth0/auth0-java/pull/782) ([tanya732](https://github.com/tanya732))
+- Feat: add constructor to set clientId on Client creation [\#781](https://github.com/auth0/auth0-java/pull/781) ([tanya732](https://github.com/tanya732))
+
 ## [2.25.0](https://github.com/auth0/auth0-java/tree/2.25.0) (2025-09-30)
 [Full Changelog](https://github.com/auth0/auth0-java/compare/2.24.0...2.25.0)
 

README.md

@@ -35,14 +35,14 @@ Add the dependency via Maven:
 <dependency>
   <groupId>com.auth0</groupId>
   <artifactId>auth0</artifactId>
-  <version>2.25.0</version>
+  <version>2.26.0</version>
 </dependency>
 ```
 
 or Gradle:
 
 ```gradle
-implementation 'com.auth0:auth0:2.25.0'
+implementation 'com.auth0:auth0:2.26.0'
 ```
 
 ### Configure the SDK

src/main/java/com/auth0/json/mgmt/client/Client.java

@@ -31,6 +31,8 @@ public class Client {
     private String logoUri;
     @JsonProperty("is_first_party")
     private Boolean isFirstParty;
+    @JsonProperty("is_token_endpoint_ip_header_trusted")
+    private Boolean isTokenEndpointIpHeaderTrusted;
     @JsonProperty("oidc_conformant")
     private Boolean oidcConformant;
     @JsonProperty("callbacks")
@@ -154,6 +156,17 @@ public Client(@JsonProperty("name") String name) {
         this.name = name;
     }
 
+    /**
+     * Creates a new Application instance setting the name and client id properties.
+     *
+     * @param name of the application.
+     * @param clientId the client id of the application.
+     */
+    public Client(String name, String clientId) {
+        this.name = name;
+        this.clientId = clientId;
+    }
+
     /**
      * Getter for the name of the application.
      *
@@ -284,6 +297,26 @@ public void setIsFirstParty(Boolean isFirstParty) {
         this.isFirstParty = isFirstParty;
     }
 
+    /**
+     * Whether the token endpoint IP header is trusted for this application.
+     *
+     * @return true if the token endpoint IP header is trusted, false otherwise.
+     */
+    @JsonProperty("is_token_endpoint_ip_header_trusted")
+    public Boolean getIsTokenEndpointIpHeaderTrusted() {
+        return isTokenEndpointIpHeaderTrusted;
+    }
+
+    /**
+     * Setter for whether the token endpoint IP header is trusted for this application.
+     *
+     * @param isTokenEndpointIpHeaderTrusted whether the token endpoint IP header is trusted or not.
+     */
+    @JsonProperty("is_token_endpoint_ip_header_trusted")
+    public void setIsTokenEndpointIpHeaderTrusted(Boolean isTokenEndpointIpHeaderTrusted) {
+        this.isTokenEndpointIpHeaderTrusted = isTokenEndpointIpHeaderTrusted;
+    }
+
     /**
      * Whether this application will conform to strict Open ID Connect specifications or not.
      *