[repo-status] Weekly Status: September 6–12, 2026

[github-actions[bot]]

Happy Friday, kongctl team! 🎉 This was a prolific week — the declarative engine got a major refactoring push, E2E replay coverage expanded significantly, and a new feature landed for the CLI. Here's the roundup.

📦 Latest Release: v1.15.1

Released on Sep 6, this patch brought Homebrew formula distribution with prebuilt bottles, release pipeline recovery mode, and security patches for golang.org/x/crypto and fast-uri. 527 downloads across platforms already — nice adoption!

Install or upgrade:

brew install --formula kong/kongctl/kongctl

🔀 Pull Requests — 22 Merged This Week

✨ Features

PR	Title
#2122	--no-trunc for full-width text tables — no more truncated output when you need every character

🔧 Declarative Engine Refactoring (7 PRs!)

The capabilities-registration initiative (#2079) is gaining serious momentum:

PR	What Changed
#2148	Register API child loading capabilities
#2143	Register Portal child loading capabilities
#2141	Register desired namespace selection
#2139	Share observation caching across all managed roots
#2137	Reuse publication records and simplify credential payloads
#2130	Share Portal and API observation caching
#2118	Register AI Gateway child loading capabilities

This systematic migration is making resource capabilities authoritative across the pipeline — a foundational step toward #2080 (centralized lifecycle reconciliation).

🐛 Bug Fixes

PR	Title
#2149	Distinguish auth variants in extended explain — fixed #2132 where explain ai_gateway.model_providers --extended advertised config.auth.aws but the loader rejected it

✅ E2E Test Coverage (7 PRs!)

The replay-backed PR validation prototype (#2058) is coming to life:

PR	Coverage Added
#2147	Portal visibility replay on PRs
#2142	Portal sync replay on PRs
#2140	Single-item event gateway coverage
#2136	User-defined team label in org sync
#2133	Reviewed control plane replay on PRs
#2131	Isolated control-plane scenario replay prototype
#2129	AI Gateway model name-only changes

🛡️ Code Quality & Simplification

PR	Title
#2146	Modernize namespace normalization (via Copilot)

📦 Dependencies (6 PRs)

• step-security/harden-runner → v2.21.1
• gh-aw-actions → v0.89.8
• golang.org/x/sync → v0.23.0
• Alpine Docker digest updated
• svgo → 4.1.0
• golangci-lint → v2.13.2

🚧 Open Pull Requests

PR	Status	Title
#2155	🟡 In Review	Register Event Gateway child loading capabilities
#2156	🟡 In Review	Reuse compatible Go caches on E2E dependency updates
#2150	🟡 Open	Native AI Gateway deployment skill — exciting new feature!

📋 Issues Closed: 2

• explain ai_gateway.model_providers --extended advertises config.auth.aws but the loader rejects it as an unknown field #2132: explain auth field mismatch for AI Gateway — fixed in fix(declarative): distinguish auth variants in extended explain #2149
• Add --no-trunc for full-width text table output #2121: --no-trunc feature request — shipped in feat(cmd): add no-trunc for full-width text tables #2122

🎯 Active Initiatives & What's Next

Declarative Capabilities Migration 🏗️

The big refactoring effort (#2079) is well underway with 7 capability registrations merged this week. Key remaining work:

• refactor(declarative): register Event Gateway child loading capabilities #2155 (open PR): Event Gateway child loading — the next piece
• refactor(declarative): centralize resource lifecycle reconciliation #2080: Centralize resource lifecycle reconciliation
• refactor(declarative): unify field contracts across diffing, payload mapping, and dump #2081: Unify field contracts across diffing, payload mapping, and dump
• refactor(declarative): compile configuration and reference bindings into explicit internal models #2082: Compile configuration and reference bindings into explicit internal models

E2E Replay Validation 🔄

Replay-backed PR scenario validation (#2058) is rapidly expanding. This week added Portal, control plane, event gateway, org sync, and AI Gateway replay coverage. Great progress toward reducing E2E latency (#2053).

Upcoming Milestones 📅

• task(homebrew): complete cask disablement on February 8, 2027 #2040: Homebrew cask disablement scheduled for February 8, 2027 — plenty of runway
• feat(skills): add native AI Gateway deployment skill #2150: AI Gateway deployment skill — a compelling new capability in development
• Declarative portal assets cannot be reset to platform defaults #2011: Portal assets reset to platform defaults — open bug worth tracking
• Feat: Default write-only secret fields in declarative dumps #1988: Default write-only secret fields in declarative dumps — enhancement on deck

👏 Contributor Shoutout

• @rspurgeon — drove the lion's share of this week's work across declarative refactoring, E2E expansion, features, and bug fixes
• @bartsmykla — updated KSAI workflows
• Copilot — contributed namespace modernization, event gateway test coverage, and org sync test improvements
• Renovate & Dependabot — keeping dependencies fresh and secure

💡 Recommendations

1. Prioritize merging refactor(declarative): register Event Gateway child loading capabilities #2155 — it continues the capabilities registration momentum and unblocks the next phase of refactor(declarative): make resource capabilities authoritative across the pipeline #2079
2. Review feat(skills): add native AI Gateway deployment skill #2150 (AI Gateway deployment skill) — this could be a headline feature for v1.16.0
3. Consider a v1.15.2 or v1.16.0 cut — substantial improvements have landed since v1.15.1

Keep up the great pace, team! 🚀

Generated by Weekly Repo Status · opus46 · 73.7 AIC · ⌖ 28.2 AIC · ⊞ 3.1K · ◷

_{Add this agentic workflow to your repo}

To install this agentic workflow, run

gh aw add githubnext/agentics/workflows/daily-repo-status.md@69b5e3ae5fa7f35fa555b0a22aee14c36ab57ebb

• expires on Oct 12, 2026, 9:30 PM UTC

[github-actions[bot]]

This discussion was automatically closed because it expired on 2026-10-12T21:30:07.610Z.

Closed by Workflow