chore(main): release 10.3.0

[workos-sdk-automation]

🤖 I have created a release beep boop

10.3.0 (2026-09-01)

Features

• agents: Add blueprint, instance, and session endpoints (#546) (9c5d7c8)
• api_keys: Alias ValidateApiKey and CreatePasswordResetToken to deduplicated models (#546) (9c5d7c8)
• audit_logs: Replace retention_period_in_days keyword with retention union supporting retention periods (#546) (9c5d7c8)
• generated: Agents (batch 13ebc8c1) (#549) (c5c5bb3)
• organizations: Add IT contacts endpoints (#546) (9c5d7c8)
• platform_teams: Add Platform Teams service (#546) (9c5d7c8)
• sso: Add connection management and SAML certificate endpoints (#546) (9c5d7c8)
• user_management: Add email-completion grant and waitlist endpoints (#546) (9c5d7c8)
• webhooks: Add agent instance and blueprint webhook event types (#546) (9c5d7c8)

Bug Fixes

• sso: Remove DiscordOAuth, GrokOAuth, and XOAuth from connection type enums (#546) (9c5d7c8)

---

This PR was generated with Release Please. See documentation.

[greptile-apps]

Greptile Summary

The PR prepares the 10.3.0 SDK release.

• Publishes the pending generated changelog entries.
• Updates the release manifest, lockfile package metadata, and WorkOS version constant to 10.3.0.

Confidence Score: 5/5

The PR appears safe to merge.

No blocking failure remains.

Important Files Changed

Filename	Overview
CHANGELOG.md	Adds the generated 10.3.0 release notes.
.release-please-manifest.json	Advances the release manifest from 10.2.1 to 10.3.0.
Gemfile.lock	Synchronizes the local WorkOS gem version with the release.
lib/workos/version.rb	Sets the SDK version constant to 10.3.0.

_{Reviews (2): Last reviewed commit: "chore: update Gemfile.lock" | Re-trigger Greptile}

[greptile-apps]

Contradictory SSO migration notes

The 10.3.0 notes say that SSO.token changed from TokenBody to TokenQuery and then state the opposite direction, leaving consumers unable to determine the released request model and potentially guiding migrations toward the nonexistent TokenBody model.

Prompt To Fix With AI

This is a comment left during a code review.
Path: CHANGELOG.md
Line: 125-135

Comment:
**Contradictory SSO migration notes**

The 10.3.0 notes say that `SSO.token` changed from `TokenBody` to `TokenQuery` and then state the opposite direction, leaving consumers unable to determine the released request model and potentially guiding migrations toward the nonexistent `TokenBody` model.

---

For each issue above, determine whether it is valid and should be fixed. If so, fix it directly.

[workos-sdk-automation]

🤖 Created releases:

• v10.3.0

🌻