diff --git a/.release-please-manifest.json b/.release-please-manifest.json
index b7e1f86..1f573a8 100644
--- a/.release-please-manifest.json
+++ b/.release-please-manifest.json
@@ -1,3 +1,3 @@
 {
-  ".": "0.85.0"
+  ".": "0.86.0"
 }
diff --git a/.stats.yml b/.stats.yml
index e1475ca..f433e79 100644
--- a/.stats.yml
+++ b/.stats.yml
@@ -1,4 +1,4 @@
 configured_endpoints: 127
-openapi_spec_url: https://storage.googleapis.com/stainless-sdk-openapi-specs/kernel/kernel-7b03462454d6fa8390eaebc1b411d3e160501bf96abb93b75d38dfc382d4ce51.yml
-openapi_spec_hash: ba55400aafb4759cc06ec139fe528dfc
+openapi_spec_url: https://storage.googleapis.com/stainless-sdk-openapi-specs/kernel/kernel-3d361d4878b48802a1dc486fa597b6b01ce23099d6627bcf836a849f0080c0c7.yml
+openapi_spec_hash: f21df7b9241e2e8b8dc04fdae30a3e27
 config_hash: 77ee715aa17061166f9a02b264a21b8d
diff --git a/CHANGELOG.md b/CHANGELOG.md
index e467fc5..05f3b66 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,5 +1,19 @@
 # Changelog
 
+## 0.86.0 (2026-08-01)
+
+Full Changelog: [v0.85.0...v0.86.0](https://github.com/kernel/kernel-node-sdk/compare/v0.85.0...v0.86.0)
+
+### Features
+
+* Harden managed auth verification and login recovery ([cc82869](https://github.com/kernel/kernel-node-sdk/commit/cc8286943eff0537e3875d7bcc9bf9cd017f2656))
+* Report the unified concurrency ceiling from the org limits endpoint ([791aaa8](https://github.com/kernel/kernel-node-sdk/commit/791aaa802ad4d2037daf575826111d2711465907))
+
+
+### Bug Fixes
+
+* **stlc:** stop hand-edited CI workflows from blocking seals and builds ([1662249](https://github.com/kernel/kernel-node-sdk/commit/1662249ac1348575783e02ece590c371a1085097))
+
 ## 0.85.0 (2026-07-29)
 
 Full Changelog: [v0.84.0...v0.85.0](https://github.com/kernel/kernel-node-sdk/compare/v0.84.0...v0.85.0)
diff --git a/package.json b/package.json
index 556710c..7a3d660 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@onkernel/sdk",
-  "version": "0.85.0",
+  "version": "0.86.0",
   "description": "The official TypeScript library for the Kernel API",
   "author": "Kernel <>",
   "types": "dist/index.d.ts",
diff --git a/src/resources/auth/connections.ts b/src/resources/auth/connections.ts
index 145f9d1..d444b12 100644
--- a/src/resources/auth/connections.ts
+++ b/src/resources/auth/connections.ts
@@ -697,6 +697,12 @@ export namespace ManagedAuth {
      */
     observed_selector?: string | null;
 
+    /**
+     * Whether the submitted value must replace an existing credential after explicit
+     * rejection.
+     */
+    replace_existing?: boolean;
+
     /**
      * Whether this field is required.
      */
@@ -1482,6 +1488,12 @@ export namespace ConnectionFollowResponse {
        */
       observed_selector?: string | null;
 
+      /**
+       * Whether the submitted value must replace an existing credential after explicit
+       * rejection.
+       */
+      replace_existing?: boolean;
+
       /**
        * Whether this field is required.
        */
diff --git a/src/resources/projects/limits.ts b/src/resources/projects/limits.ts
index 8457373..ae16b9f 100644
--- a/src/resources/projects/limits.ts
+++ b/src/resources/projects/limits.ts
@@ -59,8 +59,7 @@ export interface ProjectLimits {
 
   /**
    * @deprecated Deprecated: pooled browsers now count toward
-   * `max_concurrent_sessions`. Always null once the unified concurrency limit is
-   * enabled for your organization.
+   * `max_concurrent_sessions`. Always null.
    */
   max_pooled_sessions?: number | null;
 }
@@ -81,8 +80,7 @@ export interface UpdateProjectLimitsRequest {
 
   /**
    * @deprecated Deprecated: pooled browsers now count toward
-   * `max_concurrent_sessions`. Requests that set this field are rejected with a 400
-   * once the unified concurrency limit is enabled for your organization.
+   * `max_concurrent_sessions`. Requests that set this field are rejected with a 400.
    */
   max_pooled_sessions?: number | null;
 }
@@ -103,8 +101,7 @@ export interface LimitUpdateParams {
 
   /**
    * @deprecated Deprecated: pooled browsers now count toward
-   * `max_concurrent_sessions`. Requests that set this field are rejected with a 400
-   * once the unified concurrency limit is enabled for your organization.
+   * `max_concurrent_sessions`. Requests that set this field are rejected with a 400.
    */
   max_pooled_sessions?: number | null;
 }
diff --git a/src/version.ts b/src/version.ts
index 2e21901..aefe211 100644
--- a/src/version.ts
+++ b/src/version.ts
@@ -1 +1 @@
-export const VERSION = '0.85.0'; // x-release-please-version
+export const VERSION = '0.86.0'; // x-release-please-version
diff --git a/yarn.lock b/yarn.lock
index a1f879c..4e6679d 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -1235,9 +1235,9 @@ baseline-browser-mapping@^2.9.0:
   integrity sha512-B0xUquLkiGLgHhpPBqvl7GWegWBUNuujQ6kXd/r1U38ElPT6Ok8KZ8e+FpUGEc2ZoRQUzq/aUnaKFc/svWUGSg==
 
 brace-expansion@^2.0.2:
-  version "2.1.3"
-  resolved "https://registry.yarnpkg.com/brace-expansion/-/brace-expansion-2.1.3.tgz#1bf69aacdf6a4380ca17c284d9f928d4aa6401bc"
-  integrity sha512-DRdx5neNsG/QXbniLFWi2YmC/68oeOOmKz6zOjVk6ZS1ZLXgLIKqVEc6hWsmkjBbgii0SwaBTcJ5XKj5gzY/4A==
+  version "2.1.4"
+  resolved "https://registry.yarnpkg.com/brace-expansion/-/brace-expansion-2.1.4.tgz#589dab11c0018d0366be64cd8bf12c8dbecc8326"
+  integrity sha512-hGfVzPxthbf3+2yjg/RBs60cB0FhqBS/zvdV/4wn4/BmN0bNMMHPc4V/BbFieqf1TKAGGAHnY4eSjajCl0f2Xg==
   dependencies:
     balanced-match "^1.0.0"