[repo-status] Weekly Status Report — Oct 11–17, 2026

[github-actions[bot]]

What a week for kongctl! 🚀 The team shipped a massive amount of work — 21 PRs merged, a landmark feature landed, and the declarative engine got a serious internal upgrade. Here's the full picture.

Highlights of the Week ✨

Kong Mesh integration is here! PR #2425 landed on Thursday, bringing core mesh commands, export, and inspection capabilities into kongctl. This is a major milestone toward kongctl becoming the single CLI for managing Kong Konnect, Gateway, and Mesh. A mesh prerelease build is already available.

Declarative engine overhaul continues at pace. An impressive run of 10+ refactoring PRs centralized field projections and lifecycle contracts across the declarative pipeline — Portal fields (#2472, #2470, #2476), API fields (#2501), control-plane fields (#2509), application auth config (#2513), DCR config policy (#2511), and more. This consolidation work is making the codebase dramatically more maintainable as new resource types come online.

Critical bug fixes shipped:

• Duplicate resource registrations are now properly rejected (fix(declarative): reject duplicate resource registrations #2523)
• Namespace defaults preserved correctly for external-only _deck sources (fix(declarative): preserve namespace defaults for external-only sources #2503)
• Canonical protection labels are honored during execution (fix(declarative): honor canonical protection labels during execution #2489)

Security updates applied: kin-openapi bumped to v0.149.0 (security patch, #2505) and golang.org/x/net updated to v0.60.0 (security, #2462). SDK upgraded to sdk-konnect-go v0.73.1 (#2493).

Merged PRs (21 this week) 📦

#	Title	Type
#2523	Reject duplicate resource registrations	fix
#2520	Separate indexed reconciliation from identity binding	refactor
#2514	Share organization team membership reconciliation	refactor
#2425	Integrate core mesh commands, export, and inspection	feat
#2513	Centralize application auth config projections	refactor
#2511	Centralize DCR config field policy	refactor
#2503	Preserve namespace defaults for external-only sources	fix
#2509	Centralize control-plane field projections	refactor
#2505	Update kin-openapi to v0.149.0 [security]	deps
#2508	Update jsdom to v30.1.2	deps
#2501	Centralize API field projections	refactor
#2500	Simplify protection checks and dashboard creation	refactor
#2499	Remove unused child and auth executor implementations	refactor
#2498	Update github-actions-ensure-sha-pinned-actions to v5.0.10	deps
#2490	Retire legacy Portal and API executor operations	refactor
#2493	Upgrade to patched sdk-konnect-go v0.73.1	task
#2489	Honor canonical protection labels during execution	fix
#2476	Consolidate Portal field projections and visibility contracts	refactor
#2472	Share Portal string field contracts across stages	refactor
#2475	Update Go version to 1.26.9	chore
#2473	Update @types/node to v24.19.1	deps

Active Work in Progress 🔧

Several exciting features are in-flight:

• AI Gateway federation (feat(declarative): support federated AI Gateway model ownership #2471, feat(declarative): share AI Gateway child ownership infrastructure #2492) — Federated model ownership and shared child ownership infrastructure for AI Gateway resources. These are high-priority items actively progressing.
• Metering & Billing (feat(konnect): add Metering & Billing feature management #2494, feat(konnect): support Metering & Billing meters #2491) — New feature management and meter support for Konnect's metering & billing platform. Both PRs are open and being iterated on.
• ACE compatibility (fix(declarative): reconcile API versions with ACE enabled #2512) — Fix for reconciling API versions when ACE (API Compliance Engine) is enabled.
• API child parent resolution (refactor(declarative): share API child parent resolution #2524) — Freshly opened refactoring to share parent resolution logic across API child resources.
• E2E coverage expansion (test(e2e): cover org team role execution and apply convergence #2522) — New test coverage for org team role execution and apply convergence.

Open Issues Snapshot 📋

High priority:

• declarative sync cannot transition an ACE-protected API to a version with removed operations #2510 — Declarative sync can't transition an ACE-protected API to a version with removed operations (bug)
• feat(declarative): track federated ownership across AI Gateway children #2485, feat(declarative): share AI Gateway child ownership and dependency planning #2486 — AI Gateway federated ownership tracking and dependency planning (feature)

Medium priority — Declarative code quality:

• refactor(declarative): centralize resource lifecycle reconciliation #2080 — Centralize resource lifecycle reconciliation
• refactor(declarative): make resource capabilities authoritative across the pipeline #2079 — Make resource capabilities authoritative across the pipeline
• refactor(declarative): unify field contracts across diffing, payload mapping, and dump #2081 — Unify field contracts across diffing, payload mapping, and dump
• refactor(declarative): compile configuration and reference bindings into explicit internal models #2082 — Compile configuration and reference bindings into explicit internal models
• refactor(declarative): unify API child planning and parent resolution #2517 — Unify API child planning and parent resolution

New this week:

• feat(declarative): track staged migration from labels to managed_by #2521 — Track staged migration from labels to managed_by (enhancement)
• [simplifier] Simplify fieldcontracts package and modernize proxy URL comparison #2519 — Simplify fieldcontracts package and modernize proxy URL comparison

Automation-generated e2e gaps: #2506, #2507, #2496, #2497 — The automated e2e scanner continues to find coverage opportunities for org resource rendering and role execution.

Releases 🏷️

• v1.20.2 (stable) — Published Oct 5. Current stable release.
• prerelease-mesh — Published Oct 14. Preview build with mesh integration for early testing.
• prerelease-aigw-federated-models — Published Oct 13. Preview for AI Gateway federated model support.

Issues Closed This Week ✅

• fix(declarative): reject duplicate resource capability registrations #2516 — Reject duplicate resource capability registrations
• refactor(declarative): separate indexed reconciliation from identity binding #2518 — Separate indexed reconciliation from identity binding
• Bug: namespace enforcement drops defaults for external-only _deck manifests #2502 — Namespace enforcement drops defaults for external-only _deck manifests
• Bug: _deck coordination is not idempotent #1376 — _deck coordination is not idempotent (long-standing bug, finally resolved! 🎉)

Looking Ahead 🔭

Recommendations for maintainers:

1. AI Gateway federation is the biggest in-flight feature — PRs feat(declarative): support federated AI Gateway model ownership #2471 and feat(declarative): share AI Gateway child ownership infrastructure #2492 are ready for attention. Landing these will unlock the remaining child resource types (feat(declarative): federate AI Gateway vaults consumers and runtime TLS #2488).
2. ACE bug declarative sync cannot transition an ACE-protected API to a version with removed operations #2510 is high-priority and has PR fix(declarative): reconcile API versions with ACE enabled #2512 in progress — worth prioritizing review to unblock users hitting this in production.
3. The declarative refactoring wave has been incredibly productive. The four foundational issues (refactor(declarative): make resource capabilities authoritative across the pipeline #2079–refactor(declarative): compile configuration and reference bindings into explicit internal models #2082) are steadily converging — great momentum to sustain.
4. Metering & Billing PRs are open and maturing — a new capability area for kongctl that will expand its reach.
5. Consider cutting a v1.21.0 release soon to ship the mesh integration and accumulated fixes to stable users.

---

This report covers repository activity from Oct 11–17, 2026. Keep up the great work, team! 💪

Generated by Weekly Repo Status · opus46 · 61.6 AIC · ⌖ 27.5 AIC · ⊞ 3.1K · ◷

_{Add this agentic workflow to your repo}

To install this agentic workflow, run

gh aw add githubnext/agentics/workflows/daily-repo-status.md@69b5e3ae5fa7f35fa555b0a22aee14c36ab57ebb

• expires on Nov 16, 2026, 9:30 PM UTC