16 July 2026

Release date: 16 July 2026

Release Notes

FIPS Compliance for ALB: Enabled FIPS (Federal Information Processing Standards) compliance for APICloud resources in the Application Load Balancer (ALB).
DPoP Header Validation: Implemented strict enforcement of DPoP (Demonstrating Proof-of-Possession) header validations for access tokens to significantly boost API security.

Cloud Console Audit Logs: Introduced comprehensive audit logging for actions taken within the Cloud Console to improve visibility and tracking.

Guest Role Invitations: Updated role permissions to allow users with the Guest role to invite new members to their team within the console.

OpenAPI Specification Linting Banner: Added a new informational UI banner to highlight linting skills and requirements for OpenAPI specifications.
Product Scope Look & Feel: Upgraded the visual design and user interface for the Product Scope section. (Note: This feature is currently toggled off behind a feature flag).

Gateway Provisioner Optimisation: Completed a major refactoring of the gateway provisioner to improve architectural stability and performance.
No-Auth Submit Process: Refactored the “No-Auth Submit” workflow to mitigate the changes of the configurations getting skipped during step-function execution.
Resilient APIM Unit Scaling: Enhanced the system to allow scaling of APIM (API Management) units seamlessly, even during a partial or full APIM outage.

Access Control & Subscription Creation: Resolved an issue where Developer Console users who did not exist in the Cloud Console were blocked from creating subscriptions and consuming services as expected.
Path-Based Routing Case-Insensitivity: Fixed a routing bug to ensure path-based routing correctly handles URLs in a case-insensitive manner.
Throttling Policy Deployment: Corrected an issue where throttling could erroneously be enabled with null values after a deployment update. The system now enforces strict value validation.