---
title: "Snapshotted secret values in Pipes and SDK updates"
excerpt: "Pipes in Forward now snapshot secret values at deployment time. The TypeScript SDK added Kafka IAM auth fields and Data Source backfill skip support."
date: "2026-06-12"
---

# Secret values snapshotted in Pipes in Forward

Pipes that use secrets now snapshot the values when they're deployed, and continue to use the
snapshotted values even if the secrets change. For new secret values to take effect, a deployment
needs to be performed. Until now, a pipe that used a secret would evaluate its value on every
invocation, allowing changes without a deployment and breaking the mental model of Forward.

Each workspace will move to the new behaviour whenever they do the next deployment.

## Secrets in Materialized Pipes

Materialized pipes now allow using `tb_secret`. This unlocks encryption use-cases and more. We'll
blog about this soon, but you can contact us if this sounds interesting and we'll help you
build your use case and you'll help us iterate this feature.

## TypeScript SDK improvements

- Kafka connections now support IAM authentication fields in generated TypeScript and migration output.
- Data Sources now support the backfill skip option in the schema and generator.
- After successful deployment, previous deployment is deleted rather than sent to staging.

## Bug fixes and improvements

- [All]: NDJSON ingestion with `json:$` mappings now handles `Map` parsing correctly.
- [All]: Organization names can now be renamed from the UI. Go to your Organization's **Billing** page and open the **⋯** menu.
- [Forward]: The homepage now links back to Classic Workspaces.
- [Forward]: Fixed the **Open in Time Series** button on the Overview usage metrics page.
- [Forward]: Fixed the **Cancel query** button in Playgrounds.