v1.27.0

kongctl Release Highlights

This release introduces Kong Identity administration, fixes lint engine
error reporting, reorganizes the declarative configuration guide, and updates
dependencies and release automation.

✨ What's New

• Kong Identity administration — Adds read commands and declarative
  management for supported Identity resources, including directories,
  principals, identities (including Gateway consumer linking), groups,
  memberships, API keys, auth servers, scopes, claims, OAuth clients, and
  Token Vault configuration. Includes plan/diff/apply, saved plans, scoped
  sync/delete, dump/reload, adoption, external lookup, explain/scaffold,
  org-chart import, and private capture of generated credentials.
  (#2676)

# Plan identity resource changes
kongctl plan -f identity-manifest.yaml

# Apply identity configuration
kongctl apply -f identity-manifest.yaml

# Preview an organization-chart import
kongctl import id org-chart \
  --file org-chart.csv \
  --dry-run \
  --report-output-dir ./import-reports

Org-chart execution applies a complete roster and can deactivate previously
imported users absent from the file. Review the dry-run report before using
--execute.

🐛 Fixes & Improvements

• Lint engine failures now fail the command — Rule execution errors are
  reported instead of silently passing, even when severity filtering would
  otherwise allow success. Engine failures report diagnostics on stderr and
  produce no lint result on stdout.
  (#2741)

📚 Docs & DX

• Declarative guide restructured — Split the declarative configuration
  guide into an overview and focused topic pages.
  (#2729)
• Konnect SDK updated — Updated the patched Konnect SDK base from
  v0.82.2 to v0.83.0.
  (#2724)
• Expanded E2E coverage — Added publication, document, and execution
  report coverage, and fixed AI Gateway smoke-test namespace handling.
  (#2743,
  #2717,
  #2721)
• Updated dependencies and CI/release automation.

🔗 Commit References

Features

• 318f9d0 feat(konnect): add Kong Identity administration support (#2676)

Fixes

• f0964ea fix(deps): update all non-major dependencies with stable versions (#2742)
• 9c10a70 fix(lint): fail when rule execution encounters engine errors (#2741)
• 2882099 fix(deps): update dependency astro to v7.4.3 (#2740)
• b75e1f5 fix(deps): update module golang.org/x/sync to v0.25.0 (#2739)
• 181f9fb fix(deps): update module charm.land/bubbletea/v2 to v2.1.1 (#2738)
• 21396fc fix(ci): specify repository for ad-hoc prerelease cleanup (#2723)
• 91c656c fix(deps): update module github.com/kong/kongctl to v1.26.0 (#2719)
• b4784ec fix(deps): update module github.com/oapi-codegen/oapi-codegen/v2 to v2.8.1 (#2718)
• e4a72ee fix(e2e): scope AI Gateway smoke pruning to its namespace (#2721)
• bc6e3c0 fix(e2e): restore AI Gateway smoke child namespaces (#2717)

Other Changes

• 9537e52 test(e2e): expand publication, document, and execution report coverage (#2743)
• 83d08fc task(docs): split declarative configuration guide by topic (#2729)
• 8692bbe chore(deps): update step-security/harden-runner action to v2.22.3 (#2733)
• 96fa70b chore(deps): update node.js to v26 (#2734)
• a56d384 refactor(simplify): streamline auth strategy rendering and portal ID validation (#2730)
• 1559480 chore(deps): update github/gh-aw-actions action to v1.2.1 (#2668)
• e478b96 ci(ksai): upgrade KSAI to v5.0.2 (#2737)
• cd09000 ci(ksai): upgrade KSAI to v5.0.1 (#2728)
• 58679d8 task(ci): upgrade gh-aw and simplify GitHub authentication (#2725)
• d054f05 task(sdk): update patched Konnect SDK to v0.83.0 (#2724)
• 5d707b7 chore(deps): update zgosalvez/github-actions-ensure-sha-pinned-actions action to v5.0.11 (#2722)

---

Full Changelog: v1.26.0...v1.27.0

Generated by Release · claude · opus46 · ~103 AIC · ⌖ ~29 AIC · ⊞ 3.3K