See DocuSign Support Center for Product Release Notes.
-
A PHP release patched for PHP2Shell is required. The minimum PHP version is raised from 7.4 to
"php": "~8.2.35 || ~8.3.36 || ~8.4.27 || >=8.5.12":- 8.2.35 or any later 8.2 release
- 8.3.36 or any later 8.3 release
- 8.4.27 or any later 8.4 release
- 8.5.12 or later
Composer refuses to install the SDK on PHP 7.4, 8.0 and 8.1 (end-of-life), and on releases affected by CVE-2026-109618 / CVE-2026-109619. See the PHP security advisory. If your Linux distribution has backported the fix but reports an older version number, install with
composer install --ignore-platform-req=php, and only after confirming that your PHP build includes the fix. -
JWT library changed to
firebase/php-jwt(^7.0), replacingadhocore/jwt(^1.1). The signatures ofrequestJWTUserToken()andrequestJWTApplicationToken()are unchanged. -
JWT Grant now requires an RSA private key of at least 2048 bits. A shorter key throws
DomainException: Provided key is too shortbefore any request is sent. To check your key size, runopenssl rsa -in private.key -noout -text | head -1. -
Response header names are now lowercased. The header arrays returned by the
*WithHttpInfomethods and byApiException::getResponseHeaders()use lowercase keys (for examplecontent-typeandcontent-disposition). Code that reads a header with its original casing, such as$headers['Content-Type'], must use the lowercase key instead.
- Removed the deprecated
utf8_decode()call from the Basic authorization header ingenerateAccessToken()andrefreshAccessToken(). On PHP 8.2 and later it raised a deprecation warning on every call. The header value is unchanged.
- Updated the README requirements and dependency list.
- Updated the SDK release version.
- 6 legacy classes (
CloneErrorDetails,Account,Link,OAuthToken,OrganizationandUserInfo) raise PHP deprecation warnings when loaded. Functionality is not affected. This will be fixed in a future release.- From PHP 8.1, 5 of them (
Account,Link,OAuthToken,OrganizationandUserInfo) implementArrayAccesswithout return types. - From PHP 8.4, all 6 have constructors that declare
array $data = nullinstead of an explicit nullable type.
- From PHP 8.1, 5 of them (
- Added support for version v2.1-26.1.1.00 of the DocuSign ESignature API.
- Updated the SDK release version.
- Added support for version v2.1-1.4.3 of the DocuSign Admin API.
- Updated the SDK release version.
- Added support for version v2.1-1.4.1 of the DocuSign Admin API.
- Updated the SDK release version.
- Added support for version v2.1-1.4.1 of the DocuSign Admin API.
- Updated the SDK release version.
API Changes (Click to expand)
Added new query parameter "include_ds_groups" to the API "/v2/organizations/{organizationId}/users":
- Added support for version v2.1-1.4.0 of the DocuSign Admin API.
- Updated the SDK release version.
- Adjusted the minimum required firebase/php-jwt package version to 6.0.
- Updated the SDK release version.
- Adjusted the minimum required firebase/php-jwt package version to 6.0.
forced $since_updated_date to be a nullable \DateType object
- Added support for version v2.1-1.3.0 of the DocuSign Admin API.
- Updated the SDK release version.
New endpoints:
GET /v1/organizations/{organizationId}/assetGroups/accountsGet asset group accounts for an organization.POST /v1/organizations/{organizationId}/assetGroups/accountCloneClone an existing DocuSign account.GET /v1/organizations/{organizationId}/assetGroups/accountClonesGets all asset group account clones for an organization.GET /v1/organizations/{organizationId}/assetGroups/{assetGroupId}/accountClones/{assetGroupWorkId}Gets information about a single cloned account.
- Added support for version v2.1-1.3.0 of the DocuSign Admin API.
- Updated the SDK release version.
New endpoints:
GET /v1/organizations/{organizationId}/assetGroups/accountsGet asset group accounts for an organization.POST /v1/organizations/{organizationId}/assetGroups/accountCloneClone an existing DocuSign account.GET /v1/organizations/{organizationId}/assetGroups/accountClonesGets all asset group account clones for an organization.GET /v1/organizations/{organizationId}/assetGroups/{assetGroupId}/accountClones/{assetGroupWorkId}Gets information about a single cloned account.
- Added support for version v2.1-1.2.0 of the DocuSign Admin API.
- Updated the SDK release version.
- Added support for version v2.1-1.2.0 of the DocuSign Admin API.
- Updated the SDK release version.
- Added support for version v2.1-1.1.1 of the DocuSign Admin API.
- Updated the SDK release version.
- Added support for version v2.1-1.1.0 of the DocuSign Admin API.
- Updated the SDK release version.
- Added support for version v2.1-1.0.0 of the DocuSign Admin API.
- Updated the SDK release version.
- First version of Admin API, supports DocuSign Admin