2.30.4
(fix): The generated WebhooksHelper now consumes algorithm-header from api.settings.webhook-signature:
a request-level verifyRequest helper reads the configured signature header first (missing or empty
fails early with “could not run: missing signature header”), then the algorithm-selection header
(e.g. X-Twilio-Webhook-Signature-Settings: <key_id>;HMAC_SHA256) to pick the HMAC algorithm from
the configured wire values and hand the key ID to an application-supplied secret resolver. When the
header is absent the configured default algorithm and the plain secret are used, so legacy
auth-token flows keep working. The lower-level verifySignature is unchanged and still returns
false without throwing.
2.30.3
(fix): Fix the generated OAuthTokenProvider so that it compiles under phpstan (level max) when the
token endpoint’s access_token / expires_in response properties are optional or nullable
(e.g. OpenAPI specs that do not list them as required). The provider now throws the SDK’s
base exception when the response carries no access token, and only computes expiresAt when
expires_in is present.