Releasesby Glyphconsumer_lag_offsets metric reports lag for recently empty groups
The metric now reports lag for any group in the EMPTY state for less than one day, rolling out through late August 2026.
Also shipped Jul 6, 2026Confluent in July 2026 →
Budgets are now generally available
Budgets, including budgets for Unity Gateway, are now generally available. Budgets let admins define spending thresholds. For requests managed through Unity Gateway, including Genie interactions, admins can set additional per-user thresholds and overrides, with configurable actions such as email alerting and usage blocking.
Private Link for account-level resources (Beta)
You can now use Private Link to privately connect to Databricks account-level resources, such as the account console, through a VPC interface endpoint instead of the public internet. See Configure inbound Private Link for account-level resources .
July 6, 2026
This serverless compute release includes updates from Databricks Runtime 18 . New features Spark Declarative Pipelines on Lakeflow streaming query ID : Spark Declarative Pipelines on Lakeflow can now set the streaming query ID on demand.
You can use Gemini in Spanner Studio to fix errors in your SQL queries
You can use Gemini in Spanner Studio to fix errors in your SQL queries. When you run a query that contains an error, you can click Fix to view a line-by-line comparison of your query and a recommended correction, along with an explanation of the change. This feature is available in Preview .
Modeling
- Added support for agent-specific AI context via the omni_agent Mustache namespace, allowing you to customize AI behavior on a per-agent basis. See Optimize models for Omni AI for more information.
Self-serve identity provider changes
- New: Users with the Owner role can switch their tailnet's identity provider from the admin console for supported providers ( beta ).
More from Confluent CloudEvery Confluent Cloud release →
Auto pool mapping for OAuth identity pools across Kafka, REST, Schema Registry, ksqlDB
Auto pool mapping makes the identity pool ID optional for Kafka clients 2.15+, Kafka REST API, Schema Registry clients and REST API, and ksqlDB REST API.
mTLS CRL size limit cut to 1.5 MB; public CAs no longer issue client certs
The mTLS certificate revocation list size limit drops from 10 MB to 1.5 MB per CRL, and public CAs no longer support issuing client certificates.
Google Cloud Spanner CDC Source (Debezium) connector available
The fully managed connector streams row-level inserts, updates, and deletes from Spanner change streams to Kafka topics in near-real time.
Snowflake Sink connector version 3.4.0
Version 3.4.0 of the fully managed Snowflake Sink connector exposes snowflake.streaming.max.client.lag to adjust flush frequency in streaming mode.
Kafka cluster deletion protection
Opt-in safeguard that blocks deletion of a Kafka cluster until an authorized user disables it. Available via Console, CLI, REST API, or Terraform.
Confluent Gateway 1.3.0 adds centralized governance enforcement (Early Access)
Gateway validates messages and enforces data governance with Schema Registry, with four policy types (schema ID, deep validation, field-level and full-payload encryption) and per-topic overrides. Docker only during EA.
Confluent Gateway supports OAuth-to-OAuth authentication swapping
Gateway supports SASL/OAUTHBEARER as a client authentication mechanism for authentication swapping between two different identity providers.
Confluent Gateway supports CyberArk Conjur secret store
Confluent Cloud Gateway 1.3.0 supports CyberArk Conjur as a secret store provider.