chore(main): release 9.4.0

[workos-sdk-automation]

🤖 I have created a release beep boop

9.4.0 (2026-09-18)

Features

• Add optional issuer check to SessionManager authenticate (#440) (47e8606)
• agents: Add parameter AgentsSessions.list.organization_id (#443) (526711a)
• generated: Pipes (batch 8ad8e447) (#438) (42d6bb1)
• pipes: Update Pipes API surface (#443) (526711a)
• user_management: Add user management API surface (#443) (526711a)

Bug Fixes

• multi_factor_auth: Change errors for endpoint POST /auth/factors/{id}/challenge (#445) (8a76fa5)
• multi_factor_auth: Change errors for endpoint POST /auth/factors/{id}/challenge (#446) (02a2fd2)
• passwordless: encode session IDs in send URLs (#441) (6b83721)
• pipes: Move organization connected-account operations onto Pipes (#446) (02a2fd2)
• pipes: Remove unused types left behind by earlier renames (#446) (02a2fd2)
• pipes: Update Pipes API surface (#443) (526711a)
• session: require valid JWT expiration (#442) (717b3cf)

Miscellaneous Chores

• deps: update actions/deploy-pages action to v5.0.1 (#444) (7282b2c)

---

This PR was generated with Release Please. See documentation.

[greptile-apps]

Confidence Score: 5/5

The PR appears safe to merge because its release metadata and changelog consistently identify version 9.4.0 and no actionable issue remains in the current changeset.

Summary

This release PR prepares version 9.4.0 by updating the release manifest and SDK version constant, consolidating pending entries into the changelog, and removing the consumed pending changelog files.

• Updates release metadata consistently to 9.4.0.
• Documents the features, fixes, and maintenance changes included in the release.
• Removes pending changelog fragments after incorporating their contents.

_{Reviews (7) · Last reviewed commit: "chore: inline release notes from .change..."}

[workos-sdk-automation]

🤖 Created releases:

• v9.4.0

🌻