Sinch Community

What's Changed Build [dependency] Bump jackson.version to 2.21.5 to solve @JsonView bypass vulnerabilities in jackson-databind (CVE-2026-59889 and GHSA-mhm7-754m-9p8w). [dependency] Bump httpclient5.version to 5.6.2 to solve a denial-of-service vulnerability in the transitive httpcore5 dependency (CVE-2026-54399). ... View more

What's Changed   Build & CI [tech] Build across a Java version matrix ( 8 , 11 , 17 , 21 , 25 ) in GitHub Actions, replacing the single Java 21 build — unit tests run on 11 , 17 , 21 , and 25 , and artifacts are built on Java 8. [tech] e2e tests across a Java version matrix ( 8 , 11 , 17 , 21 , 25 ) in GitHub Actions, replacing the single Java 21 validation. [tech] Apply Spotless / Google Java Format per JDK via version-activated Maven profiles ( spotless-jdk8 , spotless-jdk11 , spotless-jdk17 , spotless-jdk21-plus ), keeping formatting working across the whole matrix. [tech] Enable -Dnet.bytebuddy.experimental=true for Surefire so Mockito/ByteBuddy run on Java 25. [dependency] Bump maven-compiler-plugin to 3.13.0 , Surefire and Failsafe to 3.5.6 , and Mockito to 5.23.0 . [dependency] Remove unused dependency on org.apache.maven:maven-model . [dependency] Bump jackson.version to 2.21.4 to solve a vulnerability in jackson-databind (CVE-2026-54513). Documentation [doc] README: document the supported Java versions ( 8 , 11 , 17 , 21 , 25 ) with per-version badges and download links, replacing the generic "Java 8+" badge. Tests [test] Remove DateUtilTest cases for unsupported timezone abbreviations ( MST , EST 😞 as of Java 25 the JDK no longer resolves legacy COMPAT timezone names (JDK-8325568). ... View more

What's Changed   Numbers Extend NumberSinchEvents class. [fix] EventTypeEnum : DEPROVISIONING_TO_VOICE_PLATFORM is deprecated and has to be replaced by DEPROVISIONING_FROM_VOICE_PLATFORM . [feature] Support new internalFailureCode field. [feature] Support new StatusEnum values: IN_REVIEW , BLOCKED , COMPLETED , REJECTED , EXPIRED . [feature] Support new EventTypeEnum value: NUMBER_ORDER_PROCESSING . Conversation [feature] Support Consents API: listIdentities and listAuditRecords endpoints Number Lookup [feature] Support Number Lookup API V2 SDK [feature] HTTP proxy support: configure an unauthenticated or authenticated (Basic) proxy via HttpProxyConfiguration [feature] SinchClient exposes a close() method to shut down the underlying HTTP connection pool and release all associated resources deterministically [fix] HttpClientApache : declare now headersToBeAdded as volatile to guarantee visibility across threads in concurrent usage [fix] HttpClientApache : wrap response-body Scanner in a try-with-resources block to prevent resource leaks; gracefully handle empty ( null ) response entities [fix] SinchClient : guard against a NullPointerException when java.vendor system property is absent while building the User-Agent auxiliary flag [fix] Configuration : correct copy-paste error in toString() and Javadoc — conversationContext label was incorrectly attributed to the Voice domain [doc] Improve README structure and content. Examples / Snippets [doc] Fix typos in conversation/conversations/Create and voice/applications/GetEventDestinations snippetsersation/conversations/Create and voice/applications/GetEventDestinations snippets ... View more

What's Changed   SDK Client [Feature] Add configurable SDK logging via the optional logger property on SinchClientParameters (WithLogger): provide a custom Logger, default to console, or pass logger: null to silence output; includes lazy message support, debug logging of failed HTTP responses, and routing of SDK warnings through the configured logger [Feature] Add FileData interface as the preferred return type for CSV downloads (fileName and data properties) [Deprecation] CSVFile is deprecated in favor of FileData [Tech] Bump form-data dependency from 4.0.4 to 4.0.6 Elastic SIP Trunking [Feature] Support Phone Numbers API: elasticSipTrunking.phoneNumbers.list() and get() [Feature] Support listing SIP trunks by access control list: accessControlList.listTrunks() [Tech] Call history export (calls.export()) now returns FileData instead of CSVFile [Bugfix] Allow updateTime to be null in PhoneNumber interface Fax [Feature] Support labels filter on fax list and export requests via FaxesFilterRequestData [Feature] Support exporting fax lists as CSV via faxes.exportList() [Deprecation] The fileFormat parameter on downloadContent is deprecated; call downloadContent without fileFormat Numbers [Feature] Add internalFailureCode property to CallbackPayload for campaign provisioning failure details Voice [Feature] Add ManagedCallSvamlRequestBody and ManagedCallSvamlAction types for managing ongoing calls via updateCall and manageCallWithCallLeg [Deprecation] SVAMLRequestBody is deprecated in favor of context-specific SVAML types (ManagedCallSvamlRequestBody, AceResponse, IceResponse, PieResponse) SDK Core Breaking: Domain packages no longer re-export @sinch/sdk-client. Import SDK client types and helpers from @sinch/sdk-client or @sinch/sdk-core instead. @sinch/sdk-core now explicitly re-exports @sinch/sdk-client as the single umbrella entry point. ... View more

What's Changed   SDK [feature] OAuth token requests are now automatically retried (up to 3 times, with exponential backoff and jitter) when the authentication service is rate-limited ( HTTP 429 ). [dependency] Set up minimum version for requests to >=2.0.0 to prevent pulling in versions with known vulnerabilities. [fix] Fixed a race condition in OAuth token creation and renewal under concurrent requests: TokenManagerBase now uses a lock with double-checked locking so the initial token is fetched exactly once, and a new refresh_auth_token(used_token) deduplicates concurrent renewals by only fetching when the stale token still matches the cached one. [refactor] HTTPTransport now prepares and authenticates requests in request() , so the new send_request(request_data) receives an already-prepared HttpRequest and acts as a pure I/O primitive, simplifying subclassing. [deprecation notice] HTTPTransport.send(endpoint) is deprecated in favour of send_request(request_data) ; the legacy method still works for backward compatibility, but will be removed in 3.0. [deprecation notice] TokenManagerBase.invalidate_expired_token() and handle_invalid_token() (and the TokenState.EXPIRED value) are deprecated and will be removed in 3.0, as token renewal now goes through refresh_auth_token() . [tech] Removed unused GitHub environment secrets from CI workflow and simplified test fixtures to use hardcoded test values. [refactor] Consolidated the duplicated per-domain BaseModelConfiguration classes into three shared base classes in sinch.core.models.internal ( BaseConfigModel , SnakeCaseExtrasModel , CamelCaseDumpModel ). [doc] Improve README structure and content. SMS [feature] SMS Groups API: create , list , get , update , replace , delete , and list_members operations, with full model, endpoint, and unit test coverage (see MIGRATION_GUIDE.md). [feature] SMS Inbounds API: get and list operations, with full model, endpoint, and unit test coverage (see MIGRATION_GUIDE.md). [design] SMS Sinch Events inbound payload models unified with the Inbounds API: MOTextSinchEvent , MOBinarySinchEvent , MOMediaSinchEvent , MediaBody , and MediaItem removed from sinch_events ; use InboundMessage (and its variants) from sinch.domains.sms.models.v1.types instead (see MIGRATION_GUIDE.md). Numbers [feature] NumberSinchEvent synchronized with the Numbers OAS spec: new internal_failure_code field, additional status values ( IN_REVIEW , BLOCKED , COMPLETED , REJECTED , EXPIRED ), a new NUMBER_ORDER_PROCESSING event type, and corrected event type DEPROVISIONING_FROM_VOICE_PLATFORM (previously DEPROVISIONING_TO_VOICE_PLATFORM ). ... View more

What's Changed   Conversation [feature] Support additional choice messages: Share Location + Calendar ... View more

What's Changed DEVEXP-1388: Refresh token harness by @asein-sinch in #244 New Contributors @Hurus111 made their first contribution in #243 Full Changelog:  v1.4.1...v1.4.2 ... View more

What's Changed SDK [design] Requires explicit  sms_region  and  conversation_region  on  SinchClient  before using SMS and Conversation APIs (no silent US/EU defaults); runtime failure if unset (#49, #110). [design] The v1 asynchronous client and httpx-based async stack were removed; only synchronous  SinchClient  is supported (#55). [feature] Automatic pagination via a shared  Paginator  pattern for paged list APIs (#46, #54). [doc] README and configuration tests clarify which credentials apply to each API (#48). Conversation [feature] Messages API refresh: convenience send methods ( send_text_message() ,  send_card_message() ,  send_carousel_message() ,  send_choice_message() ,  send_contact_info_message() ,  send_list_message() ,  send_location_message() ,  send_media_message() ,  send_template_message() ),  list()  as a paginator,  update() ,  event_destination_target  (wires  callback_url ), and a  sinch_client.conversation.sinch_events(...)  helper for inbound event handling (#109–#120). [feature] Conversation Sinch Events (webhooks) support (#122, #131, #132, #133). [design] Conversation webhook REST client removed; handle inbound traffic via Sinch Events (see MIGRATION_GUIDE.md) (#131, #132, #133). Numbers [feature] Flatter API ( rent ,  list ,  event_destinations , and related entry points),  event_destination_target , and a Numbers Sinch Events helper (#44, #53, #57, #58, #59, #62). [feature] Available Regions endpoint (#56). [feature] Webhook helper validates the signing secret in  validate_signature_header()  (#61). [tech] Numbers Events payloads are passed through without client-side pre-processing (#63). Number Lookup [feature] Number Lookup v1 (lookup API, models, snippets, and E2E coverage) (#99, #101, #104). SMS [design] SMS client configuration and authentication paths refactored for project vs service-plan credentials, including delivery-report flows (#90). [feature] SMS delivery reports models and pagination (#87).  groups  and  inbounds  are planned for a future release (see migration guide). [feature] SMS Sinch Events (webhooks) support (#103). [doc] SMS migration guide and Sinch events quickstart material (#107, #108). Verification [design] Verification V1 APIs are removed (#124). V2 Verification support is planned in a future release (see MIGRATION_GUIDE.md). Voice [design] Voice V1 APIs are removed (#124). V2 Voice support is planned in a future release (see MIGRATION_GUIDE.md). Others [dependency] Pydantic v2 ( pydantic = ">=2.0.0" ). [releasing] Ruff linter adoption (#84) and CI workflow updates (#121). [doc] Snippets and Getting Started live under  examples/  (#95, #98, #105, #106, #115, #118, #125, #127). [doc] Docstring updates across Numbers, SMS, and Conversation (#64, #65, #67, #96, #97). [refactor] Model, type, and class renames (#60, #70, #82). [tech] Conversation, Numbers, and SMS models and endpoints resynchronized with OpenAPI specification (#68, #75, #123, #128, #129, #134, #135). [test] E2E test infrastructure and refactoring (#45, #66, #102); SMS batches test coverage (#91, #93, #94). ... View more

What's Changed New API supported: Number Lookup v2 SDK Client [Bugfix] Fix token refresh concurrency issue Conversation [Deprecation notice] Deprecate Template V1 [Deprecation notice] Deprecate Viber channel support [Feature] Support Calendar Message and Share Location Message types [Feature] Support WhatsApp Card message properties [Feature] Support Consents (List identities and list audit records from consent list) [Feature] Support Project Settings [Feature] Support Identity conflicts listing [Feature] Support KakaoTalk commerce and carousel commerce messages in the channel-specific messages [Feature] Support Line notification template messages in the channel-specific messages [Feature] Support various payment buttons for whatsapp: payment link, dynamic pix and boleto [Feature] Support list last messages by channel identity Elastic SIP Trunking [Feature] Support add projects operation [Feature] Support export call history [Feature] Support Call Blocking Rules [Feature] Support Credential Lists Fax: [Deprecation] Fax API is not using regions anymore, only 1 single endpoint [Feature] Support cover pages [Bugfix] Fix pagination parameters Numbers: [Feature] Support emergency address for SIP numbers [Bugfix] Fix non-required parameters for listing rented numbers SMS: [Tech]: implemented E2E tests with servicePlanId authentication Verification: [Feature] Support WhatsApp verification Voice: [Feature] Support  streamingOptions  in the connectStream SVAML action Overvall: [Tech]: Lazy load a single ApiFetchClient instance for a given domain service [QoL]: List methods with only optional parameters accept no parameter, instead of a necessary empty object domain.sub.list({})  can now also be written  domain.sub.list() Full Changelog:  v1.3.0...v1.4.0 ... View more

What's Changed   Major breaking changes with major release see MIGRATION-GUIDE Chore [dependency] Updated maven-model dependency to 3.9.14 or more recent version to fix security vulnerabilities #8 Conversation [feature] Support Project Settings API [feature] Support Contacts Identity Conflicts API [feature] [Messages] Support new direction query parameter for MessagesListQueryParameters [feature] [Messages] Support listLastMessagesByChannelIdentity API [feature] [KakaoTalk] Support COMMERCE and CAROUSEL_COMMERCE channel specific message [feature] [LINE] Support NOTIFICATION_MESSAGE_TEMPLATE channel specific message [deprecation notice] [OrderDetailsSettings] PaymentSettings deprecated in favor of PaymentButtons Verification [feature] Support VerificationSmsDeliveredEvent webhook events FlashCall [feature] VerificationStartRequestFlashCall support interceptionTimeout and additionalProperties [feature] VerificationStartResponseFlashCall support additionalProperties [feature] VerificationRequestEventResponseFlashCall support interceptionTimeout and additionalProperties PhoneCall [feature] VerificationStartRequestPhoneCall support additionalProperties [feature] VerificationRequestEventResponsePhoneCall support additionalProperties SMS [feature] VerificationStartResponseSms support codeType and additionalProperties [feature] VerificationRequestEventResponseSms support codeType , expiry and additionalProperties WhatsApp [feature] [BETA] Support WhatsApp verification method Voice [feature] Support new DICE reason values ... View more

What's Changed   SMS [fix] Fixed API error response deserialization ... View more

What's Changed   Core [fix] Added SDK User-Agent header to authentication requests Conversation [fix] Fixed Webhooks deserialization containing unexpected properties ... View more

What's Changed [Bugfix]: Issue #273 : Fix NPE when handling 401 response without a token expired header ... View more

What's Changed   Conversation [deprecation notice] ListMessageRequest.MessageSource deprecated and to be replaced by field replace ListMessageRequest.MessagesSource (plural form) [feat] ConversationMessage support SenderId and ProcessingMode fields   Numbers [fix] Fix end of auto pagination detection based onto empty token [fix] Fix null value usage for types onto Regions.List [fix] Fix scheduled provisioning serialization/deserialization [feat] Support CallbackUrl field onto ActiveNumber and related requests [feat] Enhanced EventType values for Webhooks [feat] Provide Webhooks header validation ValidateAuthenticationHeader helper   SMS [fix] Fix end of auto pagination detection for Batches , DeliveryReport , Groups , InBounds   Verification [fix] Fix ReportFlashCallVerificationRequest serialization [feat] Provide Webhooks header validation ValidateAuthenticationHeader helper [feat] Provide generic GetById , GetByIdentity and GetByReference functions [feat] [BETA] Support WhatsApp verification. This is a beta feature, contact you account manager   Voice [fix] Fix QueryNumberResponse de-serilization [fix] Fix PlayFiles.Ids field type [feat] Provide Webhooks header validation ValidateAuthenticationHeader helper [feat] Support Webhooks AnsweredCallEvent.ApplicationKey field [feat] Support Webhooks DisconnectedCallEvent.ConferenceId field [feat] Support Webhooks IncomingCallEvent.ConferenceId field [feat] Support Webhooks PromptInputEvent.ConferenceId and PromptInputEvent.Custom fields   tests Added end to end tests onto CI ... View more

What's New [Feature] Webhooks: When parsing a webhook event, the method  parseEvent  now accepts the raw string input on top of the parsed object. What’s changed since v1.2.1 SMS SDK Highlights: [Feature] Support  mo_media  message type for inbounds and webhooks [Feature] Add  subject  property to  MediaBody  model [Feature] Add  client_reference ,  feedback_enabled ,  from_ton  and  from_npi  to  ApiUpdateBinaryMtMessage  model [Feature] Fix groups models. Request bodies become mandatory. [Feature] Support webhook signature validation [Feature] Fix channel-specific template model with new interface  ChannelSpecificTemplateReference  where the version is optional [Early deprecation notice] In the next major version the  conversationRegion  parameter will be required to use an endpoint from the Conversation API (no defaulting to  us  anymore) See full content here: SMS CHANGELOG.md Numbers SDK Highlights: [Feature] Details of an NotFound error have their own type  NotFoundErrorDetails[]  instead of a generic  object[] [Feature] Ordering rented number parameter defines its own enum  OrderByEnum See full content here: Numbers CHANGELOG.md Conversation SDK Highlights: [Feature] Fix  MediaProperties  model and support media property [Feature] Support latest API updates regarding WhatsApp messaging [Feature] Support Line Enterprise credentials [Early deprecation notice] In the next major version the  conversationRegion  parameter will be required to use an endpoint from the Conversation API (no defaulting to  us  anymore) See full content here: Conversation CHANGELOG.md Voice SDK Highlights: [Feature] Add enum values for properties previsously defined as  string [Feature] Support Voice ICE instruction  stopRecording [Feature] Support Voice PIE action  connectPstn [Feature] Support Voice ICE action  connectStream  (beta feature) See full content here: Voice CHANGELOG.md Verification SDK Highlights: [Feature] Support  VerificationSmsDeliveredEvent  as callback event See full content here: Verification CHANGELOG.md Fax SDK Highlights: [API breaking change]  faxToEmail  endpoints require a  serviceId  as mandatory path parameter [API breaking change] the  phoneNumbers  property for an  EmailRequest  is not a  string[]  anymore but a  NumberWithPermissions[] [Feature] Support  resolution ,  coverPageId ,  coverPageData  and  pagesSentSuccessfully  in a  Fax  object [Feature] Support  resolution ,  coverPageId  in a  Service  object [Deprecation notice]  emails  subdomain is deprecated, use  faxToEmail  instead See full content here: Fax CHANGELOG.md Elastic SIP Trunking SDK Highlights: [Feature] Support  RegisteredEndpoint  on top of  StaticEndpoint : a  SipEndpoint  is now the union of both models [Feature] Support  TLS  as a transport option [Feature] New properties from a  SipTrunk :  callForwardNumber  and  enableCallForward See full content here: Elastic SIP Trunking CHANGELOG.md ... View more