Skip to content

02 June 2026

Release date: 02 June 2026

  • UK Regional Support Enabled in Production: New capabilities added for API deployment, configuration updates, and routing logic in the UK region, ensuring end-to-end consumption flow validation.
  • Global Support Enabled: New capabilities added for API deployment, configuration updates, and routing logic in the Global region, ensuring end-to-end consumption flow validation.
  • Service Deletion Logic Improved for TTC APIs: Enhanced deletion process to prevent stale resource applications across multiple environments, ensuring consistency and independent deletion without failure.
  • DPoP Access Token Validation Enhanced: DPoP access tokens now require the DPoP proof header, ensuring proper authorization and preventing unintended acceptance as Bearer tokens.
  • Invite User Authorization Check Enforced on API Endpoint: Fixed an issue where unauthorized users could bypass UI restrictions and invite others via direct API calls. The API now correctly returns a 403 Forbidden status for unauthorized attempts.
  • DPoP Access Token Misuse Prevented: Resolved an issue where DPoP access tokens were accepted as Bearer tokens without the DPoP header, ensuring proper validation and returning 401 Unauthorized when required headers are missing.
  • Team Creation API Latency Issue Addressed: Optimized DynamoDB stream delay to improve performance and scalability for team creation operations.