Generator: Update SDK /services/kms (#8964)

* Generate kms

* chore(kms): Add changelog

Signed-off-by: Alexander Dahmen <alexander.dahmen@inovex.de>

---------

Signed-off-by: Alexander Dahmen <alexander.dahmen@inovex.de>
Co-authored-by: Alexander Dahmen <alexander.dahmen@inovex.de>

Author: stackit-pipeline

CHANGELOG.md

@@ -1,3 +1,10 @@
+## Release (2026-MM-DD)
+
+- `kms`:
+  - [v0.13.0](services/kms/CHANGELOG.md#v0130)
+    - **Breaking Change:** Remove enum `Protection`
+    - **Breaking Change:** Change type of `protection` attribute from `Protection` to `str` in `CreateKeyPayload`, `CreateWrappingKeyPayload`, `Key` and `WrappingKey` model
+
 ## Release (2026-08-25)
 
 - `core`:

services/kms/CHANGELOG.md

@@ -1,3 +1,7 @@
+## v0.13.0
+- **Breaking Change:** Remove enum `Protection`
+- **Breaking Change:** Change type of `protection` attribute from `Protection` to `str` in `CreateKeyPayload`, `CreateWrappingKeyPayload`, `Key` and `WrappingKey` model
+
 ## v0.12.0
 - **Feature:** Add `HSM` as allowed value to `Protection` class.
 

services/kms/oas_commit

@@ -1 +1 @@
-c09e232a83532c75ca1041153e3ebc7ce2d50eb6
+da4701b7dbe20e984aef89711bb9ba716e19fcba

services/kms/pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "stackit-kms"
-version = "v0.12.0"
+version = "v0.13.0"
 description = "STACKIT Key Management Service API"
 authors = [{ name = "STACKIT Developer Tools", email = "developer-tools@stackit.cloud" }]
 requires-python = ">=3.10,<4.0"

services/kms/src/stackit/kms/__init__.py

@@ -42,7 +42,6 @@
     "KeyList",
     "KeyRing",
     "KeyRingList",
-    "Protection",
     "Purpose",
     "SignPayload",
     "SignedData",
@@ -90,7 +89,6 @@
 from stackit.kms.models.key_list import KeyList as KeyList
 from stackit.kms.models.key_ring import KeyRing as KeyRing
 from stackit.kms.models.key_ring_list import KeyRingList as KeyRingList
-from stackit.kms.models.protection import Protection as Protection
 from stackit.kms.models.purpose import Purpose as Purpose
 from stackit.kms.models.sign_payload import SignPayload as SignPayload
 from stackit.kms.models.signed_data import SignedData as SignedData

services/kms/src/stackit/kms/models/__init__.py

@@ -28,7 +28,6 @@
 from stackit.kms.models.key_list import KeyList
 from stackit.kms.models.key_ring import KeyRing
 from stackit.kms.models.key_ring_list import KeyRingList
-from stackit.kms.models.protection import Protection
 from stackit.kms.models.purpose import Purpose
 from stackit.kms.models.sign_payload import SignPayload
 from stackit.kms.models.signed_data import SignedData

services/kms/src/stackit/kms/models/create_key_payload.py

@@ -31,7 +31,6 @@
 
 from stackit.kms.models.access_scope import AccessScope
 from stackit.kms.models.algorithm import Algorithm
-from stackit.kms.models.protection import Protection
 from stackit.kms.models.purpose import Purpose
 
 
@@ -52,7 +51,9 @@ class CreateKeyPayload(BaseModel):
     import_only: Optional[StrictBool] = Field(
         default=False, description="States whether versions can be created or only imported.", alias="importOnly"
     )
-    protection: Protection
+    protection: StrictStr = Field(
+        description='The underlying system that is responsible for protecting the key material. Possible values are "software" or "hsm"'
+    )
     purpose: Purpose
     __properties: ClassVar[List[str]] = [
         "access_scope",

services/kms/src/stackit/kms/models/create_wrapping_key_payload.py

@@ -23,7 +23,6 @@
 from typing_extensions import Annotated, Self
 
 from stackit.kms.models.access_scope import AccessScope
-from stackit.kms.models.protection import Protection
 from stackit.kms.models.wrapping_algorithm import WrappingAlgorithm
 from stackit.kms.models.wrapping_purpose import WrappingPurpose
 
@@ -42,7 +41,9 @@ class CreateWrappingKeyPayload(BaseModel):
         description="The display name to distinguish multiple wrapping keys. Valid characters: letters, digits, underscores and hyphens.",
         alias="displayName",
     )
-    protection: Protection
+    protection: StrictStr = Field(
+        description='The underlying system that is responsible for protecting the key material. Possible values are "software" or "hsm"'
+    )
     purpose: WrappingPurpose
     __properties: ClassVar[List[str]] = [
         "access_scope",

services/kms/src/stackit/kms/models/key.py

@@ -33,7 +33,6 @@
 
 from stackit.kms.models.access_scope import AccessScope
 from stackit.kms.models.algorithm import Algorithm
-from stackit.kms.models.protection import Protection
 from stackit.kms.models.purpose import Purpose
 
 
@@ -63,7 +62,9 @@ class Key(BaseModel):
         description="States whether versions can be created or only imported.", alias="importOnly"
     )
     key_ring_id: UUID = Field(description="The unique id of the key ring this key is assigned to.", alias="keyRingId")
-    protection: Protection
+    protection: StrictStr = Field(
+        description='The underlying system that is responsible for protecting the key material. Possible values are "software" or "hsm"'
+    )
     purpose: Purpose
     state: StrictStr = Field(description="The current state of the key.")
     __properties: ClassVar[List[str]] = [