v2026.3.19

What's Changed

• AAP-58540 Remove the dispatcherd feature flag by @AlanCoding in #922
• [AAP-62105] Implement default JWT scope aap_controller_automation_job for OIDC workload identity by @melissalkelly in #923
• AAP-63560 Allow not checking permission of remote objects, and do check in service-index by @AlanCoding in #926
• [AAP-62657] Rename both CLAIM_LAUNCHED_BY_USER_NAME and CLAIM_LAUNCHED_BY_USER_ID… by @melissalkelly in #929
• [AAP-64481] Remove double logging by eliminating second_logger parameter by @jay-steurer in #930
• [AAP-43414] - Add Workload Identity Token serializers by @fincamd in #925
• [AAP-64480] Add audit logging for activity stream changes by @john-westcott-iv in #931
• AAP-65704 Define TOX_DOCKER_GATEWAY to fix failing CI checks by @zkayyali812 in #938
• AAP-65704 Do not run actions on push if not for a protected branch by @AlanCoding in #928
• Add workload identity API client library by @matoval in #924
• AAP-65260: feature flag restore by @zkayyali812 in #942
• AAP-65826 - Fallback for timeout if unset by @zkayyali812 in #943
• AAP-62534 Add get_target_claim_names_to_sub_stubs() classmethod to BaseWorkloadIdentityScope and AutomationControllerJobScope by @melissalkelly in #940
• AAP-64565 Remove fallback authentication by @bhavenst in #947
• AAP-64507: Fix workload identity client to include trailing slash by @PabloHiro in #949
• [AAP-65392] Fix OIDC issuer in discovery view by @dleehr in #948
• AAP-64919 Mask encrypted fields in audit log/activitystream by @bhavenst in #950
• [AAP-64920] Adds audit logging for AAPFlag by @huffmanca in #945
• [AAP-64918] Adds AuditableModel for Role*Assignment by @huffmanca in #956
• [AAP-63312] Add workload_ttl_seconds field to WorkloadIdentityTokenRequestSerializer by @arrestle in #952
• [AAP-63314] P4.4: Add workload_ttl_seconds to WorkloadIdentityClient by @arrestle in #954
• [AAP-66890] Re-order subject claim in workload identity token to be org->job by @melissalkelly in #960
• [AAP-67004] remove workload_identity serializers by @PabloHiro in #962
• feat(AAP-68132): Gateway OIDC User Identity by @zkayyali812 in #963
• AAP-67028 Move scope_registry to DAB by @melissalkelly in #964

New Contributors

• @melissalkelly made their first contribution in #923
• @fincamd made their first contribution in #925
• @matoval made their first contribution in #924

Full Changelog: 2026.1.26...2026.3.19