Releasesby GlyphBrute Force Protection for Passwordless Notifications
To improve the end-user experience and mitigate message spam, Brute Force Protection now proactively prevents the sending of passwordless email and SMS codes to users who are already blocked.
Also shipped Mar 3, 2026Okta in March 2026 →
Deploy Preview screenshots in agent runs
Starting today, all completed agent runs show a screenshot of your Deploy Preview. This makes it easier to quickly see the result of an agent run and keep track of agent run sessions without opening the full preview.
Gemini 3.1 Flash-Lite Preview now available in AI Gateway
Google’s Gemini 3.1 Flash-Lite Preview is now available through AI Gateway. You can call this model from Netlify Functions without configuring API keys; the AI Gateway provides the connection to Google for you.
Modal 1.3.5
- We've added a modal changelog CLI for retrieving changelog entries with a flexible query interface (e.g. modal changelog --since=1.2, modal changelog --since=2025-12-01, modal changelog --newer). We expect that this will be a useful way to surface information about new features to coding agents.
Workflows, Workers - Workflows step limit increased to 25,000 steps per instance
Each Workflow on Workers Paid now supports 10,000 steps by default, configurable up to 25,000 steps in your wrangler.jsonc file: { "workflows" : [ { "name" : "my-workflow" , "binding" : "MY_WORKFLOW" , "class_name" : "MyWorkflow" , "limits" : { "steps" : 25000 } } ] } Previously, each instance was limited to 1,024 steps.
Agents - Real-time file watching in Sandboxes
Sandboxes now support real-time filesystem watching via sandbox.watch() . The method returns a Server-Sent Events ↗ stream backed by native inotify, so your Worker receives create , modify , delete , and move events as they happen inside the container. sandbox.watch(path, options) Pass a directory path and optional filters.
More from Auth0Every Auth0 release →
Actions - Transaction Metadata - GA
We are excited to announce that __Actions Transaction Metadata__ is now GA. This feature allows you to set, share, and access, custom data between Actions run in the same `post-login` execution.
Forms - HTTP Vault Connection New Options
We’re excited to announce that we added new options for __Forms HTTP Vault Connections__! This new set of options allows you to configure different authorization methods for your HTTP Request Flow Actions.
Real-time API & Rate Limit Metrics Streaming (Beta)
You can now stream real-time metrics for Auth0 Management API usage and rate limit events directly to your observability platform. These new metric streams give you detailed telemetry on every API request, including success/failure status, specific failure reasons like rate limits, and diagnostic data such as Client ID and request path.
Actions - Modules - EA
We are excited to announce that __Actions Modules__ is now available in [__Early Access__](https://auth0.com/docs/troubleshoot/product-lifecycle/product-release-stages#early-access "Early Access"). This feature allows you to create, manage, and share reusable code across different Actions within your Auth0 Tenant.
Native to Web SSO is now Generally Available
### Description Native to Web SSO enables seamless single sign-on from native mobile applications to web applications. Users authenticated in a native mobile app can now transition to web content without re-authenticating, providing a frictionless cross-platform experience.
Customize RPID values for Passkeys EA
Boost Passkey adoption by enabling shared enrollment across subdomains. You can now customize the RP ID to allow a single Passkey to authenticate users across multiple applications under the same root domain.Currently in EA Learn more about customizing RP ID for Passkeys: [Configure Passkey Policy...
Sender constrained tokens using DPoP is now Generally Available on Enterprise plans
Support for sender constraining tokens using Demonstrating Proof of Possession (DPoP) is now generally available on Enterprise plans. Demonstrating Proof of Possession (DPoP) as defined in RFC9449, is an application level mechanism for binding tokens issued by Auth0 to the client application that requested that token.
Google Workspace Directory Sync for Groups - Now in Early Access
We’re excited to announce that __Google Workspace Directory Sync for Groups__ is now available in Early Access (EA)! This enhancement enables the automatic and reliable sync of group structures and memberships from Google Workspace directly into Auth0 Enterprise Groups.