service: v0.11.1

0.11.1 (2025-10-29)

Features

• core: Actually use KeyManager ProviderConfig [backport to release/service/v0.11] (#2842) (da1c0b1)

Bug Fixes

• authz: handle individual resource edge cases in decisions [backport to release/service/v0.11] (#2846) (a4ad9dd)
• policy: Return the correct total during list responses. [backport to release/service/v0.11] (#2843) (ebe6469)

service: v0.11.0

0.11.0 (2025-10-22)

Features

• authz: add obligation fulfillment logic to obligation PDP (#2740) (2f8d30d)
• authz: audit logs should properly handle obligations (#2824) (874ec7b)
• authz: defer to request auth as decision/entitlements entity (#2789) (feb34d8)
• authz: obligations protos within auth service (#2745) (41ee5a8)
• authz: protovalidate tests for new authz obligations fields (#2747) (73e6319)
• authz: service logic to use request auth as entity identifier in PDP decisions/entitlements (#2790) (6784e88)
• authz: wire up obligations enforcement in auth service (#2756) (11b3ea9)
• core: propagate token clientID on configured claim via interceptor into shared context metadata (#2760) (0f77246)
• kas: Add required obligations to kao metadata.: (#2806) (16fb26c)
• policy: add FQNs to obligation defs + vals (#2749) (fa2585c)
• policy: Add obligation support to KAS (#2786) (bb1bca0)
• policy: List obligation triggers rpc (#2823) (206abe3)
• policy: namespace root certificates (#2771) (beaff21)
• policy: Proto - root certificates by namespace (#2800) (0edb359)
• policy: Protos List obligation triggers (#2803) (b32df81)
• policy: Return built obligations fqns with triggers. (#2830) (e843018)
• policy: Return obligations from GetAttributeValue calls (#2742) (aa9b393)

Bug Fixes

• core: CORS (#2787) (a030ac6)
• core: deprecate policy WithValue selector not utilized by RPC (#2794) (c573595)
• core: deprecated stale protos and add better upgrade comments (#2793) (f2678cc)
• core: Don't require known manager names (#2792) (8a56a96)
• core: Fix mode negation and core mode (#2779) (de9807d)
• core: resolve environment loading issues (#2827) (9af3184)
• deps: bump github.com/opentdf/platform/lib/ocrypto from 0.6.0 to 0.7.0 in /service (#2812) (a6d180d)
• deps: bump github.com/opentdf/platform/protocol/go from 0.12.0 to 0.13.0 in /service (#2814) (5e9c695)
• deps: bump github.com/opentdf/platform/sdk from 0.7.0 to 0.9.0 in /service (#2798) (d6bc9a8)
• deps: bump github.com/opentdf/platform/sdk from 0.9.0 to 0.10.0 in /service (#2831) (412dfd1)
• ECC key loading (deprecated) (#2757) (49990eb)
• policy: Change to nil (#2746) (a449434)

sdk: v0.10.0

0.10.0 (2025-10-21)

Features

• policy: Proto - root certificates by namespace (#2800) (0edb359)
• policy: Protos List obligation triggers (#2803) (b32df81)
• sdk: Add obligations support. (#2759) (3cccfd2)
• sdk: Call init if obligations are empty. (#2825) (14191e4)

Bug Fixes

• deps: bump github.com/opentdf/platform/lib/ocrypto from 0.6.0 to 0.7.0 in /sdk (#2810) (1c5cf5f)
• deps: bump github.com/opentdf/platform/protocol/go from 0.12.0 to 0.13.0 in /sdk (#2813) (1643ed2)
• sdk: Fix the bug in ResourceLocator serialization logic (#2791) (01329d6)

service: v0.10.1

0.10.1 (2025-10-17)

Bug Fixes

• core: Don't require known manager names [backport to release/service/v0.10] (#2815) (cf87419)

protocol/go: v0.13.0

0.13.0 (2025-10-16)

Features

• policy: Protos List obligation triggers (#2803) (b32df81)

lib/ocrypto: v0.7.0

0.7.0 (2025-10-15)

Features

• core: Adds helper KeyType method (#2735) (7147c4b)
• use public AES protected key from lib/ocrypto (#2600) (75d7590)

protocol/go: v0.12.0

0.12.0 (2025-10-14)

Features

• authz: defer to request auth as decision/entitlements entity (#2789) (feb34d8)
• policy: Proto - root certificates by namespace (#2800) (0edb359)

Bug Fixes

• core: deprecated stale protos and add better upgrade comments (#2793) (f2678cc)

sdk: v0.9.0

0.9.0 (2025-10-09)

Features

• sdk: DSPX-1465 refactor TDF architecture with streaming support and segment-based writing (#2785) (ea9b278)
• sdk: Experimental zipstream lib, add segment-based streaming ZIP writer, ZIP64 modes (#2782) (b381179)
• sdk: sdk should optionally take in a logger (#2754) (f40d05f)

Bug Fixes

• core: deprecate policy WithValue selector not utilized by RPC (#2794) (c573595)

lib/identifier: v0.2.0

0.2.0 (2025-09-26)

Features

• core: add FullyQualifiedObligation implementation (#2761) (279bacd)

sdk: v0.8.0

0.8.0 (2025-09-19)

Features

• policy: obligations + values CRUD (#2545) (c194e35)

Bug Fixes

• deps: bump github.com/opentdf/platform/lib/ocrypto from 0.3.0 to 0.5.0 in /sdk (#2693) (b511048)
• deps: bump github.com/opentdf/platform/lib/ocrypto from 0.5.0 to 0.6.0 in /sdk (#2712) (74956bf)
• deps: bump github.com/opentdf/platform/protocol/go from 0.7.0 to 0.8.0 in /sdk (#2692) (fac2ef2)
• deps: bump github.com/opentdf/platform/protocol/go from 0.8.0 to 0.9.0 in /sdk (#2724) (e07cc91)
• deps: bump github.com/opentdf/platform/protocol/go from 0.9.0 to 0.10.0 in /sdk (#2737) (f4a8d1d)
• sdk: newGranter nil check (#2729) (a1bebc5)