release: 0.17.0

[stainless-app]

Automated Release PR

0.17.0 (2026-08-25)

Full Changelog: v0.16.0...v0.17.0

⚠ BREAKING CHANGES

• retire POST /organizations/{id}/token

Features

• ACC-709: application assignees + expose role assignments (6a76dbf)
• add external_id_claim to provider openid protocol (9ea5e49)
• applications: allow unified-gateway and mcp-server traits (ECO-128) (414ac68)
• CX-782: paginate + search application dependencies (02e6bde)
• CX-860: paginate application provided-resources endpoint (aac9e86)
• CX-862: remove legacy traits[]/traits[all] aliases (23984b7)
• filter users by identifier in management list (147af02)
• ID-365: support additional SSO provider configuration options (526b229)
• ID-456: groups API create + get (976fbbd)
• ID-478: zones.external_sync_enabled column and update API (fd4134c)
• ID-480: external_sync_tokens table and management APIs (0e04c06)
• providers: add filter[id] to list endpoint (ID-547) (20da67a)
• providers: store brand icon_url in provider metadata (f298c38)
• resources: add filter[owner_type] to the resource list (ECO-225) (ede883a)
• resources: add search, sort, and filter[id] to the paginated resource list (ca1681d)
• resources: filter the resource list by trait (6cab4f0)
• retire POST /organizations/{id}/token (8a65582)
• sdk: generate a client for the existing /policy/bundle endpoint (518c473)
• stlc: configurable CI runner and private-production-repo support in workflow templates (1c22f7e)

Bug Fixes

• ACC-613: preserve source order of policies in draft/convert cedar_json (6d27d21)
• ci: resolve Stainless error diagnostics and enforce fail_on: error (8a01934)
• deps: close critical Dependabot alerts (fe31508)
• exact-match identifier filter on resources management list (846f24e)
• ID-448: keyset cursor drops same-millisecond rows (precision mismatch) (dad9ddb)
• internal: resolve build failures (15cb317)
• sdk: generate /policy/bundle body as raw binary, not multipart (d516a7f)

Chores

• de-dup and align types across API specs (bf16103)
• Fixes found during Terraform work (8389f30)

---

This pull request is managed by Stainless's GitHub App.

The semver version number is based on included commit messages. Alternatively, you can manually set the version number in the title of this pull request.

For a better experience, it is recommended to use either rebase-merge or squash-merge when merging this pull request.

🔗 Stainless website
📚 Read the docs
🙋 Reach out for help or questions

[stainless-app]

🧪 Testing

To try out this version of the SDK:

pip install 'https://pkg.stainless.com/s/keycard-api-python/fe315084c22655d49d199b33a0cb16c17e4bbbb1/keycardai_api-0.16.0-py3-none-any.whl'

Expires at: Thu, 24 Sep 2026 00:11:33 GMT
Updated at: Tue, 25 Aug 2026 00:11:33 GMT