Add blog post for the 0.19.0 release

Signed-off-by: Sam Barker <sam@quadrocket.co.uk>

Author: SamBarker

_posts/2026-03-04-release-0_19_0.md

@@ -0,0 +1,43 @@
+---
+layout: post
+title: "Kroxylicious release 0.19.0"
+date: 2026-03-04 00:00:00 +0000
+author: "Sam Barker"
+author_url: "https://github.com/SamBarker"
+# noinspection YAMLSchemaValidation
+categories: blog kroxylicious-proxy releases
+tags: [ "releases", "kroxylicious-proxy" ]
+---
+
+We're excited to announce the release of [Kroxylicious 0.19.0](https://github.com/kroxylicious/kroxylicious/releases/tag/v0.19.0)! There's a lot to dig into — check out the full [Changelog](https://github.com/kroxylicious/kroxylicious/blob/main/CHANGELOG.md#0190) for everything including deprecations, changes, and removals.
+
+Here are the highlights:
+
+### Kafka 4.2 Support
+
+Hot off the press — Kroxylicious now supports Kafka 4.2! We're keeping pace with the upstream Kafka releases so you don't have to worry about being left behind.
+
+### Authorizer Filter: Transactional ID Support
+
+The Authorizer Filter just got more powerful. It now covers transactional ID authorization, so you can enforce `WRITE` and `DESCRIBE` operations with full parity to Apache Kafka's own ACL authorization.
+
+### Kubernetes Secrets as Trust Anchors
+
+Good news for Kubernetes users: you can now use Kubernetes Secrets in the `trustAnchorRef` field of `KafkaService` and `VirtualKafkaCluster` custom resources. One less thing to manage outside of your cluster.
+
+### Filter API: API Version in `onResponse`
+
+`ResponseFilter#onResponse` now receives API version information via a new five-argument form. The previous four-argument form is deprecated.
+
+### Kicking Out Idle Connections
+
+Ever wanted to clean up connections that have outstayed their welcome? Kroxylicious can now be configured with idle timeouts for client connections:
+- `unauthenticatedIdleTimeout` — for connections that haven't authenticated yet
+- `authenticatedIdleTimeout` — for authenticated connections
+
+Both use Go-style duration formats. And to help you keep an eye on things, a new metric `kroxylicious_client_to_proxy_disconnects_total` tracks why connections are closing — idle timeout, client-initiated, or server-initiated.
+
+### Feedback
+
+We'd love to hear from you! Whether you're kicking the tyres, running Kroxylicious in production, or just find the project interesting — drop by and say hello.
+You can reach us through [Slack](https://kroxylicious.slack.com), [GitHub](https://github.com/kroxylicious/kroxylicious/issues) or even [bsky](https://bsky.app/profile/kroxylicious.io)).