release: 0.119.0

[kernel-internal]

Automated Release PR

0.119.0 (2026-10-02)

Features

• Add managed auth provider to vault credential items (73817c0)

---

This pull request is managed by Stainless's GitHub App.

The semver version number is based on included commit messages. Alternatively, you can manually set the version number in the title of this pull request.

For a better experience, it is recommended to use either rebase-merge or squash-merge when merging this pull request.

🔗 Stainless website
📚 Read the docs
🙋 Reach out for help or questions

---

Note

Medium Risk
Adds a new vault credential path tied to managed auth connections and fill-time secret resolution, which is security-sensitive though largely generated API surface with no custom runtime logic in this repo.

Overview
Release 0.119.0 bumps package/docs versions and ships SDK support for a new managed_auth credential vault provider alongside existing Kernel-hosted and 1Password variants.

Vault credential items can now be created with provider: managed_auth and a connection_id pointing at a managed auth connection in the same project that already has a saved Kernel credential. The item stores no secret values; credentials are read at fill time from the connection, with ready/unavailable state, field metadata for fill bindings, and documented 409 behavior on PATCH (like 1Password). Unions, input helpers (CredentialVaultItemSpecInputParamOfManagedAuth), and fill/delete docs are extended accordingly; the vault upsert test now exercises a managed-auth credential instead of a card payload.

^{Reviewed by Cursor Bugbot for commit 481dc7f. Bugbot is set up for automated code reviews on this repo. Configure here.}

[kernel-internal]

🤖 Release is at https://github.com/kernel/kernel-go-sdk/releases/tag/v0.119.0 🌻