From 93a37bc4a658f1e4a2337009c7fa0d7845edb482 Mon Sep 17 00:00:00 2001
From: Justintime50 <39606064+Justintime50@users.noreply.github.com>
Date: Tue, 3 Nov 2026 12:06:57 -0700
Subject: [PATCH 1/4] feat: add delivery_evidence to Tracker

---
 CHANGELOG.md                    | 4 ++++
 src/models/delivery_evidence.ts | 9 +++++++++
 src/models/tracker.ts           | 2 ++
 test/services/tracker.test.ts   | 1 +
 4 files changed, 16 insertions(+)
 create mode 100644 src/models/delivery_evidence.ts

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 05eeb8581..4e052be63 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,5 +1,9 @@
 # CHANGELOG
 
+## Next Release
+
+- Adds `delivery_evidence` property and `DeliveryEvidence` model to `Tracker` object
+
 ## v9.1.0 (2026-10-29)
 
 - Adds `manufacturer_product_id` and `standardized_product_id` to the `CustomsItem` model and create parameters, including customs items nested in `CustomsInfo` create parameters
diff --git a/src/models/delivery_evidence.ts b/src/models/delivery_evidence.ts
new file mode 100644
index 000000000..61c27b239
--- /dev/null
+++ b/src/models/delivery_evidence.ts
@@ -0,0 +1,9 @@
+/**
+ * A DeliveryEvidence represents a proof of delivery image attached to a {@link Tracker}.
+ * `type` is `signature` or `delivery`, and `image` is a URL that expires after 30 days.
+ * @public
+ */
+export default class DeliveryEvidence {
+  declare type?: string | null;
+  declare image?: string | null;
+}
diff --git a/src/models/tracker.ts b/src/models/tracker.ts
index 1e1ff45dc..1eabbc0e9 100644
--- a/src/models/tracker.ts
+++ b/src/models/tracker.ts
@@ -1,3 +1,4 @@
+import DeliveryEvidence from './delivery_evidence';
 import EasyPostObject from './easypost_object';
 
 /**
@@ -8,6 +9,7 @@ import EasyPostObject from './easypost_object';
 export default class Tracker extends EasyPostObject {
   declare carrier_detail?: Record<string, unknown> | null;
   declare carrier?: string | null;
+  declare delivery_evidence?: DeliveryEvidence[] | null;
   declare est_delivery_date?: string | null;
   declare fees?: Record<string, unknown>[] | null;
   declare finalized?: boolean | null;
diff --git a/test/services/tracker.test.ts b/test/services/tracker.test.ts
index f6b29d611..b3fa8fb76 100644
--- a/test/services/tracker.test.ts
+++ b/test/services/tracker.test.ts
@@ -28,6 +28,7 @@ describe('Tracker Service', function () {
     expect(tracker).to.be.an.instanceOf(Tracker);
     expect(tracker.id).to.match(/^trk_/);
     expect(tracker.status).to.equal('pre_transit');
+    expect(tracker.delivery_evidence).to.deep.equal([]);
   });
 
   it('retrieves a tracker', async function () {

From acdaaf39016381d98ec9232312a80c0b29c98fc4 Mon Sep 17 00:00:00 2001
From: Justintime50 <39606064+Justintime50@users.noreply.github.com>
Date: Tue, 3 Nov 2026 12:16:50 -0700
Subject: [PATCH 2/4] chore: allowlist minimatch advisory GHSA-g3hv-75wg-m249
 in audit-ci

---
 audit-ci.jsonc | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/audit-ci.jsonc b/audit-ci.jsonc
index 622a50f18..780553a40 100644
--- a/audit-ci.jsonc
+++ b/audit-ci.jsonc
@@ -2,5 +2,5 @@
   "$schema": "https://github.com/IBM/audit-ci/raw/main/docs/schema.json",
   // Only fail the audit if there are critical vulnerabilities.
   "critical": true,
-  "allowlist": ["GHSA-4mjr-xmp4-gh2g", "GHSA-x5fp-wj9c-mxmx"],
+  "allowlist": ["GHSA-4mjr-xmp4-gh2g", "GHSA-x5fp-wj9c-mxmx", "GHSA-g3hv-75wg-m249"],
 }

From cf0278c6dd22ec1f543806924a851eb7bd9dceae Mon Sep 17 00:00:00 2001
From: Justintime50 <39606064+Justintime50@users.noreply.github.com>
Date: Tue, 3 Nov 2026 12:16:50 -0700
Subject: [PATCH 3/4] fix: make delivery_evidence image a plain string

---
 src/models/delivery_evidence.ts | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/models/delivery_evidence.ts b/src/models/delivery_evidence.ts
index 61c27b239..331f9ccc6 100644
--- a/src/models/delivery_evidence.ts
+++ b/src/models/delivery_evidence.ts
@@ -5,5 +5,5 @@
  */
 export default class DeliveryEvidence {
   declare type?: string | null;
-  declare image?: string | null;
+  declare image: string;
 }

From 0333a8917fb758ee3fe330d7e6177ccc7b201796 Mon Sep 17 00:00:00 2001
From: Justintime50 <39606064+Justintime50@users.noreply.github.com>
Date: Wed, 4 Nov 2026 15:35:30 -0700
Subject: [PATCH 4/4] docs: drop delivery evidence image expiry claim

---
 src/models/delivery_evidence.ts | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/src/models/delivery_evidence.ts b/src/models/delivery_evidence.ts
index 331f9ccc6..3276aa3b7 100644
--- a/src/models/delivery_evidence.ts
+++ b/src/models/delivery_evidence.ts
@@ -1,6 +1,7 @@
 /**
  * A DeliveryEvidence represents a proof of delivery image attached to a {@link Tracker}.
- * `type` is `signature` or `delivery`, and `image` is a URL that expires after 30 days.
+ * `type` is `signature` or `delivery`, and `image` is a URL to the image.
+ * Image URLs aren't guaranteed to remain available, so download and store any image you need to keep.
  * @public
  */
 export default class DeliveryEvidence {