[Snyk] Upgrade svix from 1.94.0 to 1.96.1

[BernardoSM]

Snyk has created this PR to upgrade svix from 1.94.0 to 1.96.1.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 5 versions ahead of your current version.

• The recommended version was released a month ago.

Breaking Change Risk

Notice: This assessment is enhanced by AI.

Release notes

Package name: svix

• 1.96.1 - 2026-06-25
  

  What's Changed

  • Libs/Java: Upgrade jackson dependency to v2.21.4
  • Libs/Rust: Make MessagePollerv2Consumer*Options public

  New Contributors

  • @ bharathkumar39293 made their first contribution in #2401

  Full Changelog: v1.96.0...v1.96.1

• 1.96.0 - 2026-06-18
  

  What's Changed

  • CLI (New): Add --token option to svix listen
  • Libs (New): AutoConfigConsumer SDK to consume Polling Endpoints
  • Libs/Csharp: Accept a valid signature when it is last in a multi-sig header (thanks [@ devteamaegis])
  • Libs/All: Stop sending with_content parameter to the backend, handle it client-side

  New Contributors

  • @ devteamaegis made their first contribution in #2393

  Full Changelog: v1.95.2...v1.96.0

• 1.95.2 - 2026-06-08
  

  What's Changed

  • Libs/Kotlin: Webhooks AutoConfig SDK
  • Libs: Add health.get to Go, Python and Rust SDK
    • It was previously missing from these SDKs for historical reasons
  • Libs/All: Add versions in user-agent header
  • Libs/Go: Add additional internal management APIs

  Full Changelog: v1.95.1...v1.95.2

• 1.95.1 - 2026-05-28
  

  What's Changed

  • Libs/Python: Fix release workflow (1.95.0 of the Python SDK failed publishing)

  Full Changelog: v1.95.0...v1.95.1

• 1.95.0 - 2026-05-28
  

  What's Changed

  • Libs/All: Enable server-side support of 'canceled' message-attempt status by default
    • If you were previously comparing attempt statuses against 'success', note that the
      result of the comparison will now change for messages canceled by a transformation script
  • Libs/Python: Move from setup.py to PEP-518-compliant pyproject.toml build system
  • Libs/Python: Clarify that the minimum-supported Python interpreter version is 3.8
  • Libs/Python: Actually run tests against all supported python versions
  • Libs/PHP: Fix deprecation warning for DateTimeImmutable construction from null (thanks @ VincentLanglet)

  Full Changelog: v1.94.0...v1.95.0

• 1.94.0 - 2026-05-19
  

  What's Changed

  • Libs (New): Webhooks AutoConfig SDK
  • Libs/Java: Restore compatibility with Java 1.8 in Webhooks verification

  Full Changelog: v1.93.0...v1.94.0

from svix GitHub release notes

---

Important

• Check the changes in this PR to ensure they won't cause issues with your project.
• This PR was automatically created by Snyk using the credentials of a real user.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

• 🧐 View latest project report
• 📜 Customise PR templates
• 🛠 Adjust upgrade PR settings
• 🔕 Ignore this dependency or unsubscribe from future upgrade PRs

[BernardoSM]

This is a minor version upgrade for the Svix library. The changes are primarily additive, introducing new features and SDKs. However, one change warrants attention.

Key Changes:

• v1.96.0: The library now handles the with_content parameter on the client-side instead of sending it to the backend. While intended as a non-breaking internal change, this modification in behavior could have unintended side effects and should be verified after the upgrade.
• v1.96.0: A new AutoConfigConsumer SDK has been added for consuming Polling Endpoints.
• v1.95.2: The health.get method was added to the Go, Python, and Rust SDKs.

Recommendation:
Given the change in how the with_content parameter is handled, it is recommended to test functionality related to message content retrieval to ensure there are no regressions.

Source: GitHub Releases

Notice 🤖: This content was augmented using artificial intelligence. AI-generated content may contain errors and should be reviewed for accuracy before use.

[BernardoSM]

⚠️ Snyk checks are incomplete.

Status	Scan Engine	Critical	High	Medium	Low	Total (0)
⚠️	Open Source Security	0	0	0	0	See details
⚠️	Licenses	0	0	0	0	See details
✅	Code Security	0	0	0	0	0 issues

💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse.

[ericviana]

Superseded by #66. Snyk edits package.json but cannot regenerate bun.lock, and every CI job installs with --frozen-lockfile, so this PR could never go green. #66 does the bump to svix 1.99.1 with the lockfile regenerated, plus the webhook signature verification tests this SDK was missing.