From 44d6abd566331e2dd186fe41c46a21d5063d6f17 Mon Sep 17 00:00:00 2001
From: "github-actions[bot]"
 <41898282+github-actions[bot]@users.noreply.github.com>
Date: Thu, 8 Oct 2026 12:01:11 +0000
Subject: [PATCH] chore: update version and changelog

---
 .changeset/adapter-manifest.md |  9 ---------
 CHANGELOG.md                   | 10 ++++++++++
 package.json                   |  2 +-
 3 files changed, 11 insertions(+), 10 deletions(-)
 delete mode 100644 .changeset/adapter-manifest.md

diff --git a/.changeset/adapter-manifest.md b/.changeset/adapter-manifest.md
deleted file mode 100644
index 7e905c3..0000000
--- a/.changeset/adapter-manifest.md
+++ /dev/null
@@ -1,9 +0,0 @@
----
-'seamless-auth-api': minor
----
-
-Publish an adapter manifest so server adapters can be driven by data instead of a hand-maintained route list (#372).
-
-- `GET /.well-known/seamless-adapter.json` describes every route a server adapter exposes: which held token it sends (`none`, `preAuth`, `registration`, `access`, `refresh`), which tokens a response issues or clears, which body fields reach the browser under the adapter's cookie transport, and which routes support external message delivery. The same document is committed as `adapter-manifest.json` and regenerated by `npm run generate:api`.
-- Routes declare this with a new `adapter` option on `defineRoute`. Registration fails when a public route does not say whether adapters expose it, when an ephemeral route does not say which token it takes, or when a route that always returns a token does not say what it issues.
-- The four OTP send routes and the magic-link request now accept `POST`. They send a message, and a `GET` can be triggered cross-site without a CORS preflight. The `GET` forms still work and are marked deprecated.
diff --git a/CHANGELOG.md b/CHANGELOG.md
index b883e9a..f3ac6a1 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,5 +1,15 @@
 # seamless-auth-api
 
+## 0.18.0
+
+### Minor Changes
+
+- f0a7866: Publish an adapter manifest so server adapters can be driven by data instead of a hand-maintained route list (#372).
+
+  - `GET /.well-known/seamless-adapter.json` describes every route a server adapter exposes: which held token it sends (`none`, `preAuth`, `registration`, `access`, `refresh`), which tokens a response issues or clears, which body fields reach the browser under the adapter's cookie transport, and which routes support external message delivery. The same document is committed as `adapter-manifest.json` and regenerated by `npm run generate:api`.
+  - Routes declare this with a new `adapter` option on `defineRoute`. Registration fails when a public route does not say whether adapters expose it, when an ephemeral route does not say which token it takes, or when a route that always returns a token does not say what it issues.
+  - The four OTP send routes and the magic-link request now accept `POST`. They send a message, and a `GET` can be triggered cross-site without a CORS preflight. The `GET` forms still work and are marked deprecated.
+
 ## 0.17.0
 
 ### Minor Changes
diff --git a/package.json b/package.json
index 615fc83..f6e326a 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "seamless-auth-api",
-  "version": "0.17.0",
+  "version": "0.18.0",
   "description": "Seamless Auth API - A web application server for supporting a Seamless Auth server instance.",
   "main": "index.js",
   "type": "module",