Releasesby GlyphKafka cluster deletion protection
Opt-in safeguard that blocks deletion of a Kafka cluster until an authorized user disables it. Available via Console, CLI, REST API, or Terraform.
Also shipped Jul 9, 2026Confluent in July 2026 →
Change to default pipeline editor for workspaces with the compliance security profile enabled
The Lakeflow Pipelines Editor has been generally available since May 2026. In August, it will become the default editor for developing and debugging pipelines in workspaces with the compliance security profile enabled. At that time the legacy editor will be removed.
Strac connector (Beta)
The Strac connector is now available in Lakeflow Connect in Beta . Workspace admins can control access to this feature from the Previews page. The connector ingests data-security audit events from your Strac instance into Databricks. Authentication uses a Strac API key. See Strac connector .
Protobuf tensor input for custom model serving endpoints (Public Preview)
For custom model serving endpoints with a tensor-based input signature, you can now send the request body as a serialized KServe v2 ModelInferRequest with Content-Type: application/x-protobuf , instead of JSON. This feature is in Public Preview and is only available on endpoints deployed after July 9, 2026. See Protobuf tensor input .
Genie One enhancements
- Document citations : Documents now show citations that link content back to the data and sources Genie One used to generate the document. See View citations . Document version history : Documents now keep a version history so you can review earlier versions. See View version history .
Front-end Private Link for account-level Genie One (Beta)
You can now configure front-end Private Link for account-level Genie One. Turn on the Front-end Private Link for Custom URLs and Account preview to get started. See Configure inbound Private Link for account-level resources .
Dashboard enhancements and bug fixes
- Import BI files is in Public Preview : Importing Power BI and Tableau reports as AI/BI dashboards with Genie Code is in Public Preview. You can also start an import directly from the dashboard list page. See Import BI files using Genie Code .
More from Confluent CloudEvery Confluent Cloud release →
Confluent Gateway 1.3.0 adds centralized governance enforcement (Early Access)
Gateway validates messages and enforces data governance with Schema Registry, with four policy types (schema ID, deep validation, field-level and full-payload encryption) and per-topic overrides. Docker only during EA.
Confluent Gateway supports OAuth-to-OAuth authentication swapping
Gateway supports SASL/OAUTHBEARER as a client authentication mechanism for authentication swapping between two different identity providers.
Confluent Gateway supports CyberArk Conjur secret store
Confluent Cloud Gateway 1.3.0 supports CyberArk Conjur as a secret store provider.
Confluent Gateway processes fencing filter before auth swap
Gateway now processes fencing filter requests before the authentication swap filter, so fenced clients receive BROKER_NOT_AVAILABLE immediately.
Auto pool mapping for OAuth identity pools across Kafka, REST, Schema Registry, ksqlDB
Auto pool mapping makes the identity pool ID optional for Kafka clients 2.15+, Kafka REST API, Schema Registry clients and REST API, and ksqlDB REST API.
mTLS CRL size limit cut to 1.5 MB; public CAs no longer issue client certs
The mTLS certificate revocation list size limit drops from 10 MB to 1.5 MB per CRL, and public CAs no longer support issuing client certificates.
Google Cloud Spanner CDC Source (Debezium) connector available
The fully managed connector streams row-level inserts, updates, and deletes from Spanner change streams to Kafka topics in near-real time.
Snowflake Sink connector version 3.4.0
Version 3.4.0 of the fully managed Snowflake Sink connector exposes snowflake.streaming.max.client.lag to adjust flush frequency in streaming mode.