Kong/kongctl v1.20.2

on GitHub

kongctl Release Highlights

v1.20.2 is a patch release focused on declarative engine reliability and a major expansion of end-to-end test coverage.

🐛 Fixes & Improvements

• External team membership sync — kongctl apply now correctly synchronizes external team memberships, fixing cases where team membership changes could be skipped during declarative apply. (#2403)

• Event gateway update idempotency — Repeated apply runs against an unchanged event gateway configuration no longer produce spurious updates. (#2386)

• MCP source delete ordering — MCP source resources are now deleted after listener detachment, preventing dependency-order errors during teardown. (#2366)

• Dependency updates — Non-major dependency bumps across Go modules and site tooling for security and compatibility. (#2407, #2368)

✨ Internal Quality

This release includes significant code simplification across the declarative engine — listener policy config comparisons, reference/environment tag handling, sensitive field redaction, AI Gateway deletion dependencies, and planner/logging checks have all been streamlined. These refactors reduce maintenance surface and make future feature work easier, with no behavior changes for users.

🧪 Test Coverage

Over 20 new end-to-end scenarios were added, substantially expanding coverage for:

• Control plane groups, auth types, proxy URLs, and group member updates
• Listener policies (idempotency, destination ID references, dump round-trips)
• Schema registry, TLS trust bundles, and backend cluster configurations
• PAT/SPAT automation output formats and system account name resolution
• Team roles with control plane entity references
• Sync dry-run safety, diff text output, apply execution reports
• API region isolation, nested implementations, and DCR provider adoption

🔗 Commit References

Fixes

• 32b92d0 fix(declarative): sync external team memberships and add E2E coverage (#2403)
• 8fee417 fix(deps): update all non-major dependencies with stable versions (#2407)
• 8b375b7 fix(declarative): preserve event gateway update idempotency (#2386)
• 2655671 fix(declarative): order MCP source deletes after listener detachment (#2366)
• 27464f3 fix(deps): update module github.com/kong/kongctl to v1.20.1 (#2368)

Other Changes

• d35f2d9 refactor(simplify): remove redundant planner and logging checks (#2423)
• 02c5a23 refactor(declarative): simplify listener policy config comparisons (#2424)
• ecf0924 test(e2e): strengthen sync-groups checks and stabilize recovery coverage (#2421)
• 6bd8192 test(e2e): cover control plane groups dump round-trip idempotency (#2422)
• f480bcc test(e2e): cover nested text diffs across command modes (#2404)
• 3982cfa test(e2e): cover team role control plane entity references (#2402)
• 2773eaa chore(deps): update kong/ksai-public action to v3.105.1 (#2406)
• 17be80f test(e2e): verify TLS trust bundle idempotency and dump round-trip (#2401)
• 25941b5 test(e2e): add backend cluster complex auth and TLS dump round-trip (#2400)
• 34d321e test(e2e): cover SPAT system account name resolution (#2398)
• f95d93b chore(deps): update dependency jsdom to v30.1.1 (#2399)
• d8e5617 test(e2e): cover PAT and SPAT automation output formats (#2397)
• 99a9ed0 test(e2e): add listener policy idempotency and dump round-trips (#2392)
• efb3595 refactor(simplify): simplify sensitive key and MCP source checks (#2390)
• 92001a1 test(e2e): cover control plane group member updates via apply (#2393)
• bf4b222 test(e2e): cover control plane auth type and proxy URL updates (#2394)
• bc14ffa test(e2e): add schema registry idempotency and dump round-trip (#2391)
• e35cee9 test(e2e): cover apply execution report files (#2383)
• 0d66133 chore(deps): update github/gh-aw-actions action to v0.90.3 (#2387)
• 17cf69e test(e2e): cover diff text output and full content (#2384)
• 65c26fe test(e2e): cover listener policy destination ID references (#2385)
• 5391fa5 test(e2e): assert nested API implementations in dump output (#2382)
• 8eb1342 test(e2e): expand API region isolation and lifecycle coverage (#2381)
• 58965c0 test(e2e): verify sync dry-run safety with pending mutations (#2380)
• ef75ec1 test(e2e): cover DCR provider and dashboard adoption (#2377)
• f6382b9 refactor(simplify): simplify AI Gateway deletion dependencies (#2376)
• d0a574e refactor(declarative): simplify reference and environment tag handling (#2378)
• f7cfaf3 refactor(simplify): simplify declarative redaction and sensitive fields (#2379)
• 7d799ad chore(deps): update dependency @types/node to v24.13.6 (#2367)
• 06024c3 build(deps): bump devalue from 5.9.2 to 5.9.4 in /site (#2375)
• 1f9309c chore(deps): update zgosalvez/github-actions-ensure-sha-pinned-actions action to v5.0.9 (#2370)

Full Changelog: v1.20.1...v1.20.2> Generated by Release · opus46 · 68.2 AIC · ⌖ 29.7 AIC · ⊞ 4.4K