Go SDK

​

3.22.0

​

New

• Add AzureActions and AzureDataActions to Azure Cloud Integrations and their setup parameters: the exact permissions Formal’s custom role grants, derived from the enabled capabilities

​

Changed

• AzureRoleDefinitions is deprecated in favor of AzureActions and AzureDataActions

​

3.21.0

​

New

• Add OAuthService to register OAuth clients with a static client ID. Client secrets are only returned on creation
• Extend Resource OAuth settings to HTTP, gRPC, and LLM Resources, with an optional issuer

​

Changed

• upstream_oauth_mode now defaults to "formal", and no longer accepts "auto" or "cimd"
• Drop the dependency on github.com/formalco/typeid

​

3.20.0

​

New

• Add AIAssessmentService to manage AI assessment settings, labels, and criteria
• Add oidc.File, a token source that rereads a JWT file on every call, so rotated Kubernetes service account tokens are picked up
• Assign MCP servers to a Space with space_id
• Support the gcp_connectgateway dial method

​

Changed

• The oidc/aws token source now leaves the token lifetime to AWS STS

​

3.19.0

​

New

• Add the oidc/gcp package to authenticate with Google Cloud ambient credentials
• Add ApprovalService.CreateAccessRequest and ListAccessRequests
• Support the pre_registered and none upstream OAuth modes

​

Removed

• Remove ResourceService.UpdateResourceOAuthSettings. Resource OAuth settings are now set at creation

​

3.18.1

​

New

• Manage Resource OAuth settings from ResourceService
• Publish the SDK under the Apache-2.0 license

​

Removed

• Remove ApprovalService.CreateApprovalRequest and the scope filter of ListApprovalRequests. Upgrade to this version or later before calling ListApprovalRequests

​

3.18.0

​

Changed

• Rename log rewrites to log schemas: CreateLogSchema, GetLogSchema, ListLogSchemas, UpdateLogSchema, and DeleteLogSchema

​

3.17.0

​

New

• Add ApprovalService to create, list, and review approval requests for new MCP servers, policy suspensions, MCP registry access, and custom policy access
• Add the Mosyle MDM integration
• Add azure.NewDefaultTokenSourceWithHTTPClient

​

Changed

• ListSessionsV2 now requires start and end timestamps, and CreateUser requires a user type

​

Removed

• Remove McpService.CreateMcpRequest in favor of ApprovalService

​

3.16.0

​

New

• Add GroupService.GetUserGroupLink

​

3.15.0

​

New

• Add the oidc/cursor and oidc/devin token sources for Cursor and Devin cloud agents
• Tag Policies, and filter them by tag

​

Removed

• Remove CreateRegoCodeFromNaturalLanguage and CreateWorkflowCodeFromNaturalLanguage
• Remove the ast and managed fields from Policy

​

3.14.1

​

Changed

• Update connectrpc.com/connect to v1.21.0

​

3.14.0

​

New

• Add McpService.CreateMcpRequest to request a new MCP server