26.7 release-bug batch: api-gateway CORS, AM listing / IdP errors / conversions, authz system-actor#9

Closed

diffora wants to merge 8 commits into

mainfrom

Commits on Jul 17, 2026

fix(api-gateway): CORS-expose the ETag response header
diffora
committed
feat(account-management): support $orderby=status on the tenant children listing
diffora
committed
feat(account-management): classify IdP uniqueness and password-policy rejections
diffora
committed
fix(account-management): cancel pending conversion in the tenant soft-delete TX
diffora
committed
tech(account-management): post-review remediation for the gateway/listing/conversion fixes
diffora
committed
fix(account-management): platform-scope the user-groups cascade system actor
diffora
committed
cleanup: make change-rationale comments self-contained
diffora
committed
fix(resource-group): restore rg-namespace group resource type for PEP evaluation
diffora
committed