Skip to main content

Box (2026-08-03)

Upgraded the Box SDK from box-node-sdk v3 to v10:

  • Migrated client initialization and all file, folder, user, upload, download, and webhook operations to the new SDK
  • Replaced webhook signature validation with a native, dependency-free implementation (HMAC-SHA256) that also rejects stale deliveries to guard against replay attacks
  • Fixed the Update Shared Link on File action, which was calling an incorrect URL and failing
  • Added example payloads for the shared link, delete, and webhook cleanup actions