sdk: v0.11.0

0.11.0 (2026-01-06)

Features

• crypto.Signer in assertion signing (#2956) (ab36c3a)
• sdk: adds configurable max manifest sizes (#2906) (e418a4b)
• sdk: Expose policy binding hash from Nano. (#2857) (5221cf4)
• sdk: JWK-based signature verification for assertions (#2985) (ef4b5b5)
• Update Go toolchain version to 1.24.11 across all modules (#2943) (a960eca)

Bug Fixes

• deps: bump github.com/opentdf/platform/lib/fixtures from 0.3.0 to 0.4.0 in /sdk (#2962) (fbb5985)
• deps: bump github.com/opentdf/platform/lib/ocrypto from 0.7.0 to 0.8.0 in /sdk (#2975) (6fc9b46)
• deps: bump github.com/opentdf/platform/protocol/go from 0.13.0 to 0.14.0 in /sdk (#2963) (3606421)
• deps: bump the external group across 1 directory with 5 updates (#2950) (6dc3bca)
• deps: bump toolchain to go1.24.9 for CVEs found by govulncheck (#2849) (23f76c0)
• sdk: more efficient encryption in experiment TDF Writer (#2904) (3ec0518)
• sdk: uses kas sessions key (#2940) (736f250)

protocol/go: v0.14.0

0.14.0 (2025-12-19)

Features

• Update Go toolchain version to 1.24.11 across all modules (#2943) (a960eca)

Bug Fixes

• deps: bump toolchain to go1.24.9 for CVEs found by govulncheck (#2849) (23f76c0)
• kas: document rewrap proto fields used in bulk flow (#2826) (32a7e91)

lib/ocrypto: v0.8.0

0.8.0 (2025-12-19)

Features

• Update Go toolchain version to 1.24.11 across all modules (#2943) (a960eca)

Bug Fixes

• deps: bump toolchain to go1.24.9 for CVEs found by govulncheck (#2849) (23f76c0)
• sdk: more efficient encryption in experiment TDF Writer (#2904) (3ec0518)

lib/fixtures: v0.4.0

0.4.0 (2025-12-19)

Features

• Update Go toolchain version to 1.24.11 across all modules (#2943) (a960eca)

Bug Fixes

• deps: bump toolchain to go1.24.9 for CVEs found by govulncheck (#2849) (23f76c0)

service: v0.8.2

0.8.2 (2025-11-21)

Bug Fixes

• kas: Ensure root key is not logged. [backport to release/service/v0.8] (#2928) (64c9c20)

service: v0.11.6

0.11.6 (2025-11-19)

Bug Fixes

• kas: Ensure root key is not logged. [backport to release/service/v0.11] (#2919) (2374a51)

service: v0.11.5

0.11.5 (2025-11-17)

Bug Fixes

• kas: Do not log index object [backport to release/service/v0.11] (#2914) (a3639f9)

service: v0.11.4

0.11.4 (2025-11-14)

Features

• kas: add configurable SRT skew tolerance and diagnostics [backport to release/service/v0.11] (#2913) (cac20cd)

Bug Fixes

• authz: deny resources granularly when attribute value FQNs not found [backport to release/service/v0.11] (#2897) (225627d)
• core: add obligations X-Rewrap-Additional-Context to default CORS allowed headers [backport to release/service/v0.11] (#2902) (b9586b4)

service: v0.11.3

0.11.3 (2025-11-07)

Features

• kas: Add nano policy binding to rewrap audit. [backport to release/service/v0.11] (#2880) (d8558f3)

Bug Fixes

• authz: if entity identifier results in multiple representations, treat with AND in resource decision results [backport to release/service/v0.11] (#2887) (f772064)
• kas: populate rewrap audit log [backport to release/service/v0.11] (#2867) (f460972)

sdk: v0.10.1

0.10.1 (2025-11-04)

Features

• sdk: Expose policy binding hash from Nano. [backport to release/sdk/v0.10] (#2869) (556a0e2)

Bug Fixes

• deps: bump toolchain to go1.24.9 for CVEs found by govulncheck [backport to release/sdk/v0.10] (#2872) (fbda5d1)