From 5bc024c981411bbb81bdaffb07e83436d61b4ff7 Mon Sep 17 00:00:00 2001 From: Mahesh Vagicherla Date: Thu, 5 Nov 2026 11:39:32 +0530 Subject: [PATCH 1/2] docs: add backend v1.31.0 changelog --- changelog/backend.mdx | 48 ++++++++++++++++++++++++++++++++++++++++++- 1 file changed, 47 insertions(+), 1 deletion(-) diff --git a/changelog/backend.mdx b/changelog/backend.mdx index 1f222021..ae7dc0a2 100644 --- a/changelog/backend.mdx +++ b/changelog/backend.mdx @@ -1,6 +1,6 @@ --- title: "Backend" -sidebarTitle: "Backend [1.30.0]" +sidebarTitle: "Backend [1.31.0]" rss: true --- @@ -8,6 +8,52 @@ rss: true Discuss how Portkey's AI Gateway can enhance your organization's AI infrastructure + + +## v1.31.0 +--- + +### JWT & Authentication +- **`jwt_settings` enforcement**: Control-plane JWT authentication now applies an organisation's `jwt_settings` (algorithms, `aud`, `iss`, clock tolerance, required claims, claim values, extracted claims), matching the gateway. ES, PS and RS algorithms and non-RSA JWKs are accepted. `algorithms` is limited to asymmetric algorithms (plus EdDSA), and `claim_values` regexes are validated when saved +- **Start hooks**: Organisation-level `start_hooks` apply to JWT-authenticated requests +- **Workspace name**: JWT-authenticated requests include the workspace name in the workspace details + - [Documentation](/product/enterprise-offering/org-management/jwt) + +### MCP Gateway +- **ID-JAG auth type**: MCP integrations accept the `id_jag` auth type, configured under `configurations.id_jag` (issuer, client ID, client secret or `secret_mappings` entry, resource, scopes). Requires `ID_JAG_ENABLED=true`. Admin reads mask the client secret + - [Documentation](/product/mcp-gateway) + +### Guardrails +- **Bedrock `failOnError`**: Set `failOnError` on the Bedrock guardrail to fail the check when the Bedrock request errors or times out. Default is `false` + - [Documentation](/integrations/guardrails/bedrock-guardrails) +- **Detail summary target**: The guardrail detail summary APIs return the actual hook target (`input` or `output` type) instead of always reporting the LLM target + - [Documentation](/product/guardrails) + +### Organisation Admin API +- **New scopes**: `organisation_auth`, `organisation_security` and `organisation_enforcements` (each with `read` and `update`) can be granted to organisation service API keys and are available to owners and admins + - [Documentation](/product/enterprise-offering/org-management/api-keys-authn-and-authz) + +### Providers +- **Bedrock**: Bedrock integrations accept `bedrock_map_metadata` (boolean, default `false`) + - [Documentation](/integrations/llms/bedrock/aws-bedrock) + +### Configs +- **`auto_caching`**: The config schema accepts the `auto_caching` boolean + - [Documentation](/product/ai-gateway/configs) + +### Fixes and Improvements +- **Integrations**: Creating an integration with null custom headers no longer fails + - [Documentation](/integrations/llms) +- **Access policies**: Writes that land while an access policy bundle is building now trigger a rebuild instead of being lost + - [Documentation](/product/enterprise-offering/access-control-management) +- **API keys**: Fixed an unhandled exception when fetching API key details + - [Documentation](/product/enterprise-offering/org-management/api-keys-authn-and-authz) +- **Configs**: Config fetches read only the latest version instead of joining all versions, and an index on `config_versions` speeds version listing + - [Documentation](/product/ai-gateway/configs) +- Updated dependencies to patch security vulnerabilities. + + + ## v1.30.0 From 408b699b14ce362e257ffe786b25c439b3b46d80 Mon Sep 17 00:00:00 2001 From: Mahesh Vagicherla Date: Fri, 6 Nov 2026 12:11:02 +0530 Subject: [PATCH 2/2] docs: drop ID-JAG from backend v1.31.0 changelog --- changelog/backend.mdx | 4 ---- 1 file changed, 4 deletions(-) diff --git a/changelog/backend.mdx b/changelog/backend.mdx index ae7dc0a2..88e3bce2 100644 --- a/changelog/backend.mdx +++ b/changelog/backend.mdx @@ -19,10 +19,6 @@ Discuss how Portkey's AI Gateway can enhance your organization's AI infrastructu - **Workspace name**: JWT-authenticated requests include the workspace name in the workspace details - [Documentation](/product/enterprise-offering/org-management/jwt) -### MCP Gateway -- **ID-JAG auth type**: MCP integrations accept the `id_jag` auth type, configured under `configurations.id_jag` (issuer, client ID, client secret or `secret_mappings` entry, resource, scopes). Requires `ID_JAG_ENABLED=true`. Admin reads mask the client secret - - [Documentation](/product/mcp-gateway) - ### Guardrails - **Bedrock `failOnError`**: Set `failOnError` on the Bedrock guardrail to fail the check when the Bedrock request errors or times out. Default is `false` - [Documentation](/integrations/guardrails/bedrock-guardrails)