What svix/svix-webhooks shipped
Written by FoxPlug from the repository's own releases; not affiliated with Svix. Paste your own repository in the box below and FoxPlug writes the same weekly update for your product. This page is an automatic summary of the releases, pull requests and commits in github.com/svix/svix-webhooks; Svix did not write it and does not use or endorse FoxPlug. Every line links to the change it describes.
Get a weekly update like this for your product, free
Week of October 5, 2026
What shipped
- SDKs and CLI v2.8.0 shipped with CLI support for loading a request body from a file, cancellation-honoring retry waits in the C# library, and Ruby library changes. Release
- The CLI can now load a request body from a named file using cURL-style @filename syntax. Pull request #2685
- The C# library now waits between retries with Task.Delay so cancellation is honored instead of blocking the thread. Pull request #2689
- The JavaScript library now honors numRetries: 0 instead of falling back to the default and retrying. Pull request #2675
- The Go Application.GetOrCreate method uses the same method receiver style as other methods and has a corrected nil check. Pull request #2691
- The Ruby library now uses the bytes passed to Webhook.new_using_raw_bytes as the raw signing key instead of base64 encoding them. Pull request #2661
- The C# library now applies the configured TimeoutMilliseconds setting to the default transport for sync and async requests. Pull request #2679
- The Go module path now includes the v2 suffix so v2 releases are listed properly. Pull request #2681
- SDKs and CLI v2.7.0 shipped with rotate-secret methods returning the new secret and a C# TimeoutMilliseconds fix. Release
- SDKs and CLI v2.6.2 shipped with a Java and Kotlin fix for bodyless POST and PUT calls and a Go module path fix. Release
Why it matters
This week brought three SDK and CLI releases plus fixes across the JavaScript, C#, Ruby and Go libraries. Users get CLI file input, cancellation-aware retries in C#, correct retry counts, respected timeouts, a corrected Ruby signing key behavior and a Go module path that makes v2 releases appear properly.
Changelog entry
- SDKs and CLI v2.8.0 released. Release
- CLI can load a request body from a named file using @filename syntax. Pull request #2685
- C# library uses Task.Delay between retries so cancellation is honored. Pull request #2689
- JavaScript library honors numRetries: 0 instead of using the default. Pull request #2675
- Go Application.GetOrCreate fixed to use the standard method receiver style and corrected nil check. Pull request #2691
- Ruby library uses bytes passed to Webhook.new_using_raw_bytes as the raw signing key. Pull request #2661
- C# library applies the configured TimeoutMilliseconds to the default transport. Pull request #2679
- Go module path updated to include the v2 suffix. Pull request #2681
- SDKs and CLI v2.7.0 released. Release
- SDKs and CLI v2.6.2 released. Release
- CI generates MSRV-compatible lockfiles. Pull request #2683
- Codegen updated to the latest openapi.json. Pull request #2693
SDKs + CLI v2.8.0 is out. CLI can load a request body from a file with @filename. C# retries now honor cancellation. Also in this week: JavaScript numRetries: 0, Go Application.GetOrCreate, Ruby raw signing keys and the Go v2 module path.
SDKs + CLI v2.8.0 is out. The CLI can now populate a request body from a file with cURL-style @filename syntax. The C# library waits between retries with Task.Delay so cancellation is honored. Also this week: the JavaScript library honors numRetries: 0, C# respects TimeoutMilliseconds, Go Application.GetOrCreate is fixed along with the v2 module path, and the Ruby library uses bytes passed to Webhook.new_using_raw_bytes as the raw signing key. Earlier releases this week included v2.7.0, which returns the new secret from rotate-secret methods, and v2.6.2, which fixed bodyless POST and PUT calls in Java and Kotlin.
Week of September 28, 2026
What shipped
- Released SDKs + CLI v2.6.0 with PHP support for destination and stream APIs, AutoConfigConsumer for PHP, Python 3.9 end-of-life support dropped, and Rust AutoConfigConsumer breaking change reverted. Release
- Fixed Java and Kotlin SDKs to send empty bodies for POST, PUT and PATCH operations without request bodies instead of throwing IllegalArgumentException. Pull request #2678
- Fixed Ruby and PHP clients to strip trailing slashes from server URLs to prevent double-slash paths in API requests. Pull request #2663
- Released SDKs + CLI v2.6.1 with updated Svix Cloud spec. Release
- Updated Docker image with latest Debian version and applied security patches to fix CVEs. Pull request #2676
- Bumped openapi-codegen to latest version in preparation for cloud endpoint with optional typed body support. Pull request #2667
- Updated OpenAPI spec and regenerated SDK libraries. Pull request #2671
- Removed unused field from
api_extra.ronconfiguration. Pull request #2672
Why it matters
V2.6.0 and v2.6.1 releases bring expanded language support and fix critical SDK issues across multiple platforms. Bug fixes for Java, Kotlin, Ruby, and PHP prevent runtime errors and incorrect API requests that users could encounter in production.
Changelog entry
- SDKs + CLI v2.6.0: PHP destination and stream APIs, PHP AutoConfigConsumer, Python 3.9 EOL, Rust AutoConfigConsumer fix Release
- SDKs + CLI v2.6.1: Update to latest Svix Cloud spec Release
- Java and Kotlin: Fixed empty body handling for POST, PUT, PATCH operations Pull request #2678
- Ruby and PHP: Strip trailing slashes from server URLs Pull request #2663
- Rust: Reverted AutoConfigConsumer breaking change, restored &self methods with RwLock Pull request #2664
- SDK: Bumped openapi-codegen for cloud endpoint support Pull request #2667
- Updated OpenAPI spec and regenerated libraries Pull request #2671
- Docker: Updated Debian image and applied security patches Pull request #2676
Svix SDKs v2.6.0 and v2.6.1 shipped. PHP gets destination/stream APIs, Java/Kotlin fix empty body handling, Ruby/PHP fix URL formatting. Python 3.9 support dropped.
This week's Svix SDK releases (v2.6.0 and v2.6.1) address critical issues across multiple languages. Java and Kotlin SDKs now correctly handle POST/PUT/PATCH operations without request bodies. Ruby and PHP clients properly format server URLs. PHP SDK gains destination and stream API support. Python 3.9 support has reached end-of-life.
Week of September 14, 2026
What shipped
- PHP client library now supports struct enums, enabling type-safe API usage patterns like StreamSinkIn::create(StreamSinkInConfig::poller()). Pull request #2640
- PHP AutoConfigConsumer feature added, bringing PHP support to parity with other client libraries for destination configuration. Pull request #2649
- Server now sends log events to OpenTelemetry collectors, extending observability beyond traces and metrics to include application logs. Pull request #2521
- OpenAPI specification updated with corresponding changes to library code generation. Pull request #2646
- Security update: rustls dependency bumped to address RUSTSEC-2026-0285. Pull request #2645
- Client libraries regenerated for new endpoint stats API. Pull request #2654
- SDKs regenerated to resolve a silent merge conflict. Pull request #2653
Why it matters
PHP now has feature parity with other supported languages through struct enums and AutoConfigConsumer support. Server observability capabilities expanded to include log event routing through OpenTelemetry. Security dependency updated.
Changelog entry
- PHP: Added struct enums support to client library Pull request #2640
- PHP: Implemented AutoConfigConsumer for destination configuration Pull request #2649
- Server: Log events now sent to configured OpenTelemetry collector Pull request #2521
- Updated OpenAPI specification and regenerated client libraries Pull request #2646
- Security: Updated rustls dependency (RUSTSEC-2026-0285) Pull request #2645
- Regenerated client libraries for endpoint stats API Pull request #2654
PHP client now supports struct enums and AutoConfigConsumer. Server sends logs to OpenTelemetry collectors. Security update for rustls.
This week we brought PHP client library to feature parity with other languages by adding struct enums support and AutoConfigConsumer. The server now routes log events through OpenTelemetry collectors, giving users complete observability of their webhook infrastructure. We also addressed a security advisory with a rustls update.