## Python SDK Changes:

* `glean.client.collections.add_items()`:  `response.error.error_type.enum(corrupt_item)` **Added** (Breaking ⚠️)
* `glean.datasources.get_datasource_credential_status()`: **Added**
* `glean.datasources.rotate_datasource_credentials()`: **Added**
* `glean.client.collections.create()`: 
  *  `response.union(class (0)).error.error_code.enum(corrupt_item)` **Added**
  *  `error_code.enum(corrupt_item)` **Added**
* `glean.client.collections.delete()`:  `error_code.enum(corrupt_item)` **Added**
* `glean.client.collections.update()`: 
  *  `response` **Changed**
  *  `error_code.enum(corrupt_item)` **Added**
* `glean.client.collections.retrieve()`:  `response.error.error_code.enum(corrupt_item)` **Added**
* `glean.client.insights.retrieve()`:  `response.agents_response.top_use_cases_insights` **Added**
* `glean.client.search.retrieve_feed()`: 
  *  `request.categories[].enum(project_focus_block)` **Added**
  *  `response.results[]` **Changed**

Author: speakeasybot

.speakeasy/gen.lock

@@ -34,7 +34,7 @@ generation:
     generateNewTests: true
     skipResponseBodyAssertions: true
 python:
-  version: 0.12.24
+  version: 0.12.25
   additionalDependencies:
     dev: {}
     main: {}

.speakeasy/gen.yaml

@@ -2,7 +2,7 @@ openapi: 3.0.0
 info:
   version: 0.9.0
   title: Glean API
-  x-source-commit-sha: 0aa266469924048ad422bf6314104f79b477e46a
+  x-source-commit-sha: 0f17e336c8b3c8a1cd68eb6185f322d76ab069a6
   description: |
     # Introduction
     In addition to the data sources that Glean has built-in support for, Glean also provides a REST API that enables customers to put arbitrary content in the search index. This is useful, for example, for doing permissions-aware search over content in internal tools that reside on-prem as well as for searching over applications that Glean does not currently support first class. In addition these APIs allow the customer to push organization data (people info, organization structure etc) into Glean.
@@ -22,7 +22,7 @@ info:
     These API clients provide type-safe, idiomatic interfaces for working with Glean IndexingAPIs in your language of choice.
   x-logo:
     url: https://app.glean.com/images/glean-text2.svg
-  x-open-api-commit-sha: 122e22b59935f3ed61845da28a7c607ebc115c9b
+  x-open-api-commit-sha: e1ef611429506a30c94ec5cf589a2764eb7faa56
   x-speakeasy-name: 'Glean API'
 servers:
   - url: https://{instance}-be.glean.com
@@ -4014,6 +4014,95 @@ paths:
               schema:
                 $ref: '#/components/schemas/ErrorResponse'
       x-visibility: Preview
+  /rest/api/v1/configure/datasources/{datasourceId}/instances/{instanceId}/credentialstatus:
+    get:
+      operationId: getDatasourceCredentialStatus
+      summary: Get datasource instance credential status
+      description: |
+        Returns the current credential status for a datasource instance. Access is limited to callers with the ADMIN scope; the handler enforces this check.
+      tags:
+        - Datasources
+      security:
+        - APIToken: []
+      parameters:
+        - $ref: '#/components/parameters/datasourceId'
+        - $ref: '#/components/parameters/instanceId'
+      responses:
+        "200":
+          description: OK
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/DatasourceCredentialStatusResponse'
+        "400":
+          description: Invalid request
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/ErrorResponse'
+        "401":
+          description: Not authorized
+        "403":
+          description: Forbidden
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/ErrorResponse'
+        "404":
+          description: Datasource instance not found
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/ErrorResponse'
+      x-visibility: Preview
+  /rest/api/v1/configure/datasources/{datasourceId}/instances/{instanceId}/credentials:
+    post:
+      operationId: rotateDatasourceCredentials
+      summary: Rotate datasource instance credentials
+      description: |
+        Rotates the credentials that a datasource instance uses to connect to its upstream system. Replaces the active credential material with the supplied values and returns the credential status after rotation. Access is limited to callers with the ADMIN scope; the handler enforces this check.
+        Only keys recognized as credential material for the datasource type may be set in `credentials.values` (e.g. `clientSecret`, `apiToken`, `privateKey`, depending on the configured auth method). Unrecognized keys, or keys that correspond to non-credential configuration, cause a 400; other instance configuration must be updated via PATCH /configure/datasources/{datasourceId}/instances/{instanceId}.
+      tags:
+        - Datasources
+      security:
+        - APIToken: []
+      parameters:
+        - $ref: '#/components/parameters/datasourceId'
+        - $ref: '#/components/parameters/instanceId'
+      requestBody:
+        content:
+          application/json:
+            schema:
+              $ref: '#/components/schemas/RotateDatasourceCredentialsRequest'
+        required: true
+      responses:
+        "200":
+          description: OK
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/DatasourceCredentialStatusResponse'
+        "400":
+          description: Invalid request
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/ErrorResponse'
+        "401":
+          description: Not authorized
+        "403":
+          description: Forbidden
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/ErrorResponse'
+        "404":
+          description: Datasource instance not found
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/ErrorResponse'
+      x-visibility: Preview
   /rest/api/v1/chat#stream:
     post:
       tags:
@@ -8709,6 +8798,7 @@ components:
           type: string
           enum:
             - EXISTING_ITEM
+            - CORRUPT_ITEM
     AddCollectionItemsResponse:
       properties:
         collection:
@@ -8738,6 +8828,7 @@ components:
             - HEIGHT_VIOLATION
             - WIDTH_VIOLATION
             - NO_PERMISSIONS
+            - CORRUPT_ITEM
     CreateCollectionResponse:
       allOf:
         - type: object
@@ -9286,6 +9377,33 @@ components:
         downvoteCount:
           type: integer
           description: Total number of downvotes for this agent over the specified time period.
+    AgentUseCaseInsight:
+      properties:
+        useCase:
+          type: string
+          description: Use case name
+        runCount:
+          type: integer
+          description: Total number of runs for this use case over the specified time period.
+        trend:
+          type: number
+          format: float
+          description: Percentage change in runs compared to the previous equivalent time period.
+        topDepartments:
+          type: string
+          description: Comma-separated list of the top departments using this use case.
+        topAgentId:
+          type: string
+          description: ID of the most-used agent for this use case.
+        topAgentName:
+          type: string
+          description: Name of the most-used agent for this use case.
+        topAgentIcon:
+          $ref: "#/components/schemas/IconConfig"
+          description: Icon of the most-used agent for this use case.
+        topAgentIsDeleted:
+          type: boolean
+          description: Indicates whether the top agent has been deleted.
     AgentsUsageByDepartmentInsight:
       properties:
         department:
@@ -9375,6 +9493,10 @@ components:
               type: array
               items:
                 $ref: "#/components/schemas/PerAgentInsight"
+            topUseCasesInsights:
+              type: array
+              items:
+                $ref: "#/components/schemas/AgentUseCaseInsight"
             agentsUsageByDepartmentInsights:
               type: array
               items:
@@ -10196,6 +10318,7 @@ components:
               - FOLLOW_UP
               - MILESTONE_TIMELINE_CHECK
               - PROJECT_DISCUSSION_DIGEST
+              - PROJECT_FOCUS_BLOCK
               - PROJECT_NEXT_STEP
           description: Categories of content requested. An allowlist gives flexibility to request content separately or together.
         requestOptions:
@@ -10533,6 +10656,7 @@ components:
         - SHORTCUTS_TYPE
         - SLIDE_TYPE
         - SPREADSHEET_TYPE
+        - INLINE_HTML_TYPE
         - WORKFLOWS_TYPE
     FavoriteInfo:
       type: object
@@ -10706,6 +10830,7 @@ components:
             - FOLLOW_UP
             - MILESTONE_TIMELINE_CHECK
             - PROJECT_DISCUSSION_DIGEST
+            - PROJECT_FOCUS_BLOCK
             - PROJECT_NEXT_STEP
           description: Type of the justification.
         justification:
@@ -10789,6 +10914,7 @@ components:
             - FOLLOW_UP
             - MILESTONE_TIMELINE_CHECK
             - PROJECT_DISCUSSION_DIGEST
+            - PROJECT_FOCUS_BLOCK
             - PROJECT_NEXT_STEP
           description: Category of the result, one of the requested categories in incoming request.
         primaryEntry:
@@ -13841,6 +13967,46 @@ components:
         - configuration
       description: |
         Request to update greenlisted configuration values for a datasource instance. Only keys that are exposed via the public API greenlist may be set.
+    DatasourceCredentialStatus:
+      type: string
+      enum:
+        - VALID
+        - VALID_WITH_WARNINGS
+        - VALIDATING
+        - INVALID
+        - MISSING
+      description: |
+        Lifecycle state of the credentials installed for a datasource instance. Mirrors the internal admin Status enum so the handler can surface the same health signals already tracked today. EXPIRING_SOON is represented as VALID_WITH_WARNINGS (with detail in `message`); EXPIRED is surfaced as INVALID plus a non-null `expiresAt` in the past.
+    DatasourceCredentialStatusResponse:
+      type: object
+      properties:
+        status:
+          $ref: '#/components/schemas/DatasourceCredentialStatus'
+        lastRotatedAt:
+          type: string
+          format: date-time
+          description: When the credentials were last rotated. Omitted when not known.
+        expiresAt:
+          type: string
+          format: date-time
+          description: |
+            When the active credentials expire. Omitted when not known or not applicable to this credential type.
+        message:
+          type: string
+          description: Optional human-readable detail about the current credential status.
+      required:
+        - status
+      description: Status of the credentials currently installed for a datasource instance.
+    RotateDatasourceCredentialsRequest:
+      type: object
+      properties:
+        credentials:
+          $ref: '#/components/schemas/DatasourceInstanceConfiguration'
+      required:
+        - credentials
+      description: |
+        Request to rotate the credentials used by a datasource instance. Replaces the active credential material with the supplied values.
+        `credentials.values` must contain only keys recognized as credential material for the datasource type (for example `clientSecret` for OAuth, `apiToken` for API-token auth, `privateKey` for certificate auth). Unrecognized keys, or keys that correspond to non-credential configuration, cause a 400; use the configure endpoint to change non-credential config.
     ChatRequestStream:
       required:
         - messages

.speakeasy/glean-merged-spec.yaml

@@ -158494,3 +158494,49 @@ workflows:
               type: simple
       x-speakeasy-test-group: Datasources
       x-speakeasy-test-rebuild: true
+    - workflowId: getDatasourceCredentialStatus
+      steps:
+        - stepId: test
+          operationId: getDatasourceCredentialStatus
+          parameters:
+            - name: datasourceId
+              in: path
+              value: o365sharepoint
+            - name: instanceId
+              in: path
+              value: o365sharepoint_abc123
+          successCriteria:
+            - condition: $statusCode == 200
+            - condition: $response.header.Content-Type == application/json
+            - context: $response.body
+              condition: |
+                {"status":"VALID"}
+              type: simple
+      x-speakeasy-test-group: Datasources
+      x-speakeasy-test-rebuild: true
+    - workflowId: rotateDatasourceCredentials
+      steps:
+        - stepId: test
+          operationId: rotateDatasourceCredentials
+          parameters:
+            - name: datasourceId
+              in: path
+              value: o365sharepoint
+            - name: instanceId
+              in: path
+              value: o365sharepoint_abc123
+          requestBody:
+            contentType: application/json
+            payload:
+                credentials:
+                    values:
+                        key: {}
+          successCriteria:
+            - condition: $statusCode == 200
+            - condition: $response.header.Content-Type == application/json
+            - context: $response.body
+              condition: |
+                {"status":"MISSING"}
+              type: simple
+      x-speakeasy-test-group: Datasources
+      x-speakeasy-test-rebuild: true

.speakeasy/tests.arazzo.yaml

@@ -1,9 +1,9 @@
-speakeasyVersion: 1.761.8
+speakeasyVersion: 1.761.9
 sources:
     Glean API:
         sourceNamespace: glean-api-specs
-        sourceRevisionDigest: sha256:5fafd8224d41224b85cbb5f39c686e5da647fadcd8211bc9fae3c0834341dae6
-        sourceBlobDigest: sha256:884a6119e9d59c15d47e169eaa496571dae1c106d390990aee38a25cb51e42c3
+        sourceRevisionDigest: sha256:7d9fbaac1acd4b5473f600ac946f52f52a2f9942dd54f3e805f98e27defeaf06
+        sourceBlobDigest: sha256:05e3dc4b2665b13629f6b1f074b0188a74b365616d4651e9f41de44dbaa9db1a
         tags:
             - latest
     Glean Client API:
@@ -16,10 +16,10 @@ targets:
     glean:
         source: Glean API
         sourceNamespace: glean-api-specs
-        sourceRevisionDigest: sha256:5fafd8224d41224b85cbb5f39c686e5da647fadcd8211bc9fae3c0834341dae6
-        sourceBlobDigest: sha256:884a6119e9d59c15d47e169eaa496571dae1c106d390990aee38a25cb51e42c3
+        sourceRevisionDigest: sha256:7d9fbaac1acd4b5473f600ac946f52f52a2f9942dd54f3e805f98e27defeaf06
+        sourceBlobDigest: sha256:05e3dc4b2665b13629f6b1f074b0188a74b365616d4651e9f41de44dbaa9db1a
         codeSamplesNamespace: glean-api-specs-python-code-samples
-        codeSamplesRevisionDigest: sha256:15a4a6614d94c2111ddad680da00d4286330aadf586e4ceb4f5312fe92377032
+        codeSamplesRevisionDigest: sha256:6310665aa877f077003cbc64ef4a048644323424922c8546afbe33c1379dc728
 workflow:
     workflowVersion: 1.0.0
     speakeasyVersion: latest

.speakeasy/workflow.lock

@@ -474,6 +474,8 @@ For more information on obtaining the appropriate token type, please contact you
 
 * [get_datasource_instance_configuration](docs/sdks/datasources/README.md#get_datasource_instance_configuration) - Get datasource instance configuration
 * [update_datasource_instance_configuration](docs/sdks/datasources/README.md#update_datasource_instance_configuration) - Update datasource instance configuration
+* [get_datasource_credential_status](docs/sdks/datasources/README.md#get_datasource_credential_status) - Get datasource instance credential status
+* [rotate_datasource_credentials](docs/sdks/datasources/README.md#rotate_datasource_credentials) - Rotate datasource instance credentials
 
 ### [Governance](docs/sdks/governance/README.md)
 

README.md

@@ -738,4 +738,14 @@ Based on:
 ### Generated
 - [python v0.12.23] .
 ### Releases
-- [PyPI v0.12.23] https://pypi.org/project/glean-api-client/0.12.23 - .
+- [PyPI v0.12.23] https://pypi.org/project/glean-api-client/0.12.23 - .
+
+## 2026-04-23 22:04:34
+### Changes
+Based on:
+- OpenAPI Doc  
+- Speakeasy CLI 1.761.9 (2.881.4) https://github.com/speakeasy-api/speakeasy
+### Generated
+- [python v0.12.25] .
+### Releases
+- [PyPI v0.12.25] https://pypi.org/project/glean-api-client/0.12.25 - .

RELEASES.md

@@ -6,11 +6,14 @@
 from glean.api_client.models import AddCollectionItemsErrorErrorType
 
 value = AddCollectionItemsErrorErrorType.EXISTING_ITEM
+
+# Open enum: unrecognized values are captured as UnrecognizedStr
 ```
 
 
 ## Values
 
 | Name            | Value           |
 | --------------- | --------------- |
-| `EXISTING_ITEM` | EXISTING_ITEM   |
+| `EXISTING_ITEM` | EXISTING_ITEM   |
+| `CORRUPT_ITEM`  | CORRUPT_ITEM    |

docs/models/addcollectionitemserrorerrortype.md

@@ -12,6 +12,7 @@
 | `daily_active_user_timeseries`                                                             | [Optional[models.LabeledCountInfo]](../models/labeledcountinfo.md)                         | :heavy_minus_sign:                                                                         | N/A                                                                                        |
 | `shared_agents_count`                                                                      | *Optional[int]*                                                                            | :heavy_minus_sign:                                                                         | Total number of shared agents.                                                             |
 | `top_agents_insights`                                                                      | List[[models.PerAgentInsight](../models/peragentinsight.md)]                               | :heavy_minus_sign:                                                                         | N/A                                                                                        |
+| `top_use_cases_insights`                                                                   | List[[models.AgentUseCaseInsight](../models/agentusecaseinsight.md)]                       | :heavy_minus_sign:                                                                         | N/A                                                                                        |
 | `agents_usage_by_department_insights`                                                      | List[[models.AgentsUsageByDepartmentInsight](../models/agentsusagebydepartmentinsight.md)] | :heavy_minus_sign:                                                                         | N/A                                                                                        |
 | `agent_users_insights`                                                                     | List[[models.AgentUsersInsight](../models/agentusersinsight.md)]                           | :heavy_minus_sign:                                                                         | N/A                                                                                        |
 | `agents_time_saved_insights`                                                               | List[[models.AgentsTimeSavedInsight](../models/agentstimesavedinsight.md)]                 | :heavy_minus_sign:                                                                         | Insights for agents time saved over the specified time period.                             |