Skip to content
Merged
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
84 changes: 83 additions & 1 deletion changelog/enterprise.mdx
Original file line number Diff line number Diff line change
@@ -1,13 +1,95 @@
---
title: "Enterprise Gateway"
sidebarTitle: "Enterprise Gateway [2.10.0]"
sidebarTitle: "Enterprise Gateway [2.11.0]"
rss: true
---

<Card title="Schedule Call" href="https://portkey.sh/demo-21" icon="calendar" horizontal>
Discuss how Portkey's AI Gateway can enhance your organization's AI infrastructure
</Card>

<Update label="2.11.0" description="2026-06-10">

## v2.11.0
---

### MiniMax Provider

New `minimax` provider for chat completions with MiniMax's hosted models.

[Providers Documentation](/integrations/llms)

### Modal: Embeddings

The Modal integration now supports `/v1/embeddings` alongside chat completions, so embedding workloads on Modal-hosted models route through the unified gateway.

[Modal Documentation](/integrations/llms/modal)

### Anthropic: Context Management

Anthropic chat completions now pass `context_management` through to the upstream API, enabling memory tools and managed-context workflows on Claude models.

[Anthropic Documentation](/integrations/llms/anthropic)

### Anthropic Skills: File Download Fix

`GET /v1/files/{file_id}` and `GET /v1/files/{file_id}/content` now route correctly for Anthropic, and binary responses (e.g., PPTX generated via Skills + Code Execution) pass through untouched. Previously these requests fell back to list-route behavior and corrupted binary downloads.

[Anthropic Files Documentation](/integrations/llms/anthropic/files)

### Claude Code OAuth

When a request from Claude Code/CLI uses an OAuth bearer token, the gateway now forwards `Authorization` to Anthropic instead of injecting `x-api-key`. This unblocks Claude Code's in the newer versions of Claude Code.

[Claude Code Documentation](/integrations/libraries/claude-code-anthropic)

### Responses API: Anthropic Thinking Blocks in Streaming

Streaming Responses API responses for Anthropic models now include reasoning summary blocks. The streaming transform was dropping `thinking` content blocks, so reasoning never reached clients on streamed requests.

[Responses API Documentation](/product/ai-gateway/responses-api)

### Enforce Inline Config

A new flag rejects requests that pass an inline `config` JSON object instead of a saved config slug. Use it to require all routing decisions to flow through governed, named configs.

[Enforce Default Config Documentation](/product/administration/enforce-default-config)

### SSRF Hardening (continued)

Builds on the v2.10.0 SSRF work with broader coverage of edge cases.

- `TRUSTED_CUSTOM_HOSTS` now matches subdomains of allowlisted hosts
- Provider URL header validation (custom host headers, forward headers) and per-request URL validation extended to Fireworks and Cohere
- Batch output URLs validated before download; concurrency on outbound URL validation capped at 5
- improvements to`customHost` header lookup
- SSRF hardening improvements

[Custom Hosts Documentation](/product/ai-gateway/custom-hosts)

### JWT Authentication

- **JWT auth**: Control plane requests now forward the actual JWT instead of the gateway's effective auth token, fixing MCP gateway failures behind JWT auth
- **Local JWT scopes**: Locally injected JWT scopes are honored for upstream MCP authorization decisions

[MCP JWT Authentication Documentation](/product/mcp-gateway/authentication/jwt)
[JWT Authentication Documentation](/product/enterprise-offering/org-management/jwt)

### Provider Updates

- **Amazon Bedrock**: Image URL handling refactored to support S3 URIs for image, video, and document inputs on Amazon Nova models
- **Amazon Bedrock**: Fixes to assumed-role authentication for Bedrock models.
- **Azure OpenAI**: Fixes to cost attribution for Azure video create requests.

[Providers Documentation](/integrations/llms)

### Fixes and Improvements

- **`notNull` guardrail**: Skip the null-content check when the response carries tool calls, so tool-only assistant turns no longer trip the guardrail
- Updated dependencies to patch security vulnerabilities

</Update>

<Update label="2.10.0" description="2026-05-30">

## v2.10.0
Expand Down