release: 0.119.0

[kernel-internal]

Automated Release PR

0.119.0 (2026-10-02)

Features

• Add managed auth provider to vault credential items (795d824)

---

This pull request is managed by Stainless's GitHub App.

The semver version number is based on included commit messages. Alternatively, you can manually set the version number in the title of this pull request.

For a better experience, it is recommended to use either rebase-merge or squash-merge when merging this pull request.

🔗 Stainless website
📚 Read the docs
🙋 Reach out for help or questions

---

Note

Medium Risk
Adds a new credential provider that resolves live secrets from managed auth connections at fill time; SDK-only surface area but maps to security-sensitive vault/fill behavior.

Overview
Release 0.119.0 adds a third vault credential provider, managed_auth, alongside Kernel-hosted and 1Password credentials.

Clients can create credential items whose spec references a managed auth connection_id instead of storing login values. New generated types cover spec, state (ready / unavailable), and field metadata for fill bindings. CredentialVaultItemSpec, input params, and state unions are extended with the new discriminator.

Docs and type comments clarify managed-auth behavior: items are created ready (retrieve wait returns immediately), fill reads the connection’s saved credential at execution time (field names from state.fields on GET), updates return 409, deletion only removes the vault item (not the connection), version stays at 1, and available_operations is fill-only while ready.

^{Reviewed by Cursor Bugbot for commit e0ee655. Bugbot is set up for automated code reviews on this repo. Configure here.}

[kernel-internal]

🤖 Release is at https://github.com/kernel/kernel-python-sdk/releases/tag/v0.119.0 🌻