service: v0.7.2

0.7.2 (2025-07-01)

Features

• core: Add the ability to configure the http server settings [backport to release/service/v0.7] (#2523) (2518049)

protocol/go: v0.5.1

0.5.1 (2025-06-26)

Bug Fixes

• core: Allow 521 curve to be used [backport to release/protocol/go/v0.5] (#2489) (403409c)

lib/ocrypto: v0.3.0

0.3.0 (2025-06-30)

Features

• sdk: Adds rsa:4096 support to ocrypto; fix larger curves (#2478) (44d800e)

service: v0.7.1

0.7.1 (2025-06-27)

Bug Fixes

• add back grants to listAttributesByDefOrValueFqns [backport to release/service/v0.7] (#2495) (3d7e7dd)

service: v0.7.0

0.7.0 (2025-06-24)

⚠ BREAKING CHANGES

• policy: disable kas grants in favor of key mappings (#2220)

Features

• authz: Add caching to keycloak ERS (#2466) (f5b0a06)
• authz: auth svc registered resource GetDecision support (#2392) (5405674)
• authz: authz v2 GetBulkDecision (#2448) (0da3363)
• authz: cache entitlement policy within authorization service (#2457) (c16361c)
• authz: ensure logging parity between authz v2 and v1 (#2443) (ef68586)
• core: add cache manager (#2449) (2b062c5)
• core: consume RPC interceptor request context metadata in logging (#2442) (2769c48)
• core: DSPX-609 - add cli-client to keycloak provisioning (#2396) (48e7489)
• core: ERS cache setup, fix cache initialization (#2458) (d0c6938)
• inject logger and cache manager to key managers (#2461) (9292162)
• kas: expose provider config from key details. (#2459) (0e7d39a)
• main: Add Close() method to cache manager (#2465) (32630d6)
• policy: disable kas grants in favor of key mappings (#2220) (30f8cf5)
• policy: Restrict deletion of pc with used key. (#2414) (3b40a46)
• sdk: allow Connect-Protocol-Version RPC header for cors (#2437) (4bf241e)

Bug Fixes

• core: remove generics on new platform cache manager and client (#2456) (98c3c16)
• core: replace opentdf-public client with cli-client (#2422) (fb18525)
• deps: bump github.com/casbin/casbin/v2 from 2.106.0 to 2.107.0 in /service in the external group (#2416) (43afd48)
• deps: bump github.com/opentdf/platform/protocol/go from 0.4.0 to 0.5.0 in /service (#2470) (3a73fc9)
• deps: bump github.com/opentdf/platform/sdk from 0.4.7 to 0.5.0 in /service (#2473) (ad37476)
• deps: bump the external group across 1 directory with 2 updates (#2450) (9d8d1f1)
• deps: bump the external group across 1 directory with 2 updates (#2472) (d45b3c8)
• only request a token when near expiration (#2370) (556d95e)
• policy: fix casing bug and get provider config on update. (#2403) (a52b8f9)
• policy: properly formatted pem in test fixtures (#2409) (54ffd23)

sdk: v0.5.0

0.5.0 (2025-06-23)

Features

• add system metadata assertions to TDFConfig (#2446) (4eb9fff)
• core: DSPX-608 - Deprecate public_client_id (#2185) (0f58efa)
• sdk: adds seeker interface to TDF Reader (#2385) (63ccd9a)
• sdk: Allow key splits with same algo (#2454) (7422b15)
• sdk: autoconfig kaos with kids (#2438) (c272016)
• sdk: Enable base key support. (#2425) (9ff3806)

Bug Fixes

• ci: Fix intermittent failures from auth tests (#2345) (395988a)
• deps: bump github.com/opentdf/platform/protocol/go from 0.3.6 to 0.4.0 in /sdk (#2397) (99e3aa4)
• deps: bump github.com/opentdf/platform/protocol/go from 0.4.0 to 0.5.0 in /sdk (#2471) (e8f97e0)
• deps: bump the external group across 1 directory with 5 updates (#2400) (0b7ea79)
• set consistent system metadata id and schema (#2451) (5db3cf2)

protocol/go: v0.5.0

0.5.0 (2025-06-23)

⚠ BREAKING CHANGES

• policy: disable kas grants in favor of key mappings (#2220)

Features

• policy: disable kas grants in favor of key mappings (#2220) (30f8cf5)

service: v0.6.0

0.6.0 (2025-06-06)

Features

• authz: DSPX-894 auth svc registered resource GetEntitlement support (#2358) (a199aa7)
• authz: improve v2 request proto validation (#2357) (f927b99)
• core: DSPX-608 - Deprecate public_client_id (#2185) (0f58efa)
• policy: Return Simple Kas Keys from non-Key RPCs (#2387) (5113e0e)
• policy: Unique name for the key provider. (#2391) (bb58b78)
• policy: Update simple kas key (#2378) (09d8239)

Bug Fixes

• deps: bump github.com/opentdf/platform/protocol/go from 0.3.6 to 0.4.0 in /service (#2399) (1c6fa75)
• deps: bump the external group across 1 directory with 21 updates (#2401) (3d0d4d1)
• policy: move action sub queries to CTE in sm list and match sql (#2369) (0fd6feb)
• policy: protovalidate deprecated action types and removal of gRPC gateway in subject mappings svc (#2377) (54a6de0)
• policy: remove gRPC gateway in policy except where needed (#2382) (1937acb)
• policy: remove support for creation/updation of SubjectMappings with deprecated proto actions (#2373) (3660200)

protocol/go: v0.4.0

0.4.0 (2025-06-05)

Features

• authz: improve v2 request proto validation (#2357) (f927b99)
• policy: cache SubjectConditionSet selectors in dedicated column maintained via trigger (#2320) (215791f)
• policy: Return Simple Kas Keys from non-Key RPCs (#2387) (5113e0e)
• policy: Update simple kas key (#2378) (09d8239)

Bug Fixes

• policy: protovalidate deprecated action types and removal of gRPC gateway in subject mappings svc (#2377) (54a6de0)
• policy: remove gRPC gateway in policy except where needed (#2382) (1937acb)

service: v0.5.5

0.5.5 (2025-05-30)

Features

• adds basic config root key manager (#2303) (dd0d22f)
• policy: cache SubjectConditionSet selectors in dedicated column maintained via trigger (#2320) (215791f)
• policy: map and merge grants and keys (#2324) (abf770f)

Bug Fixes

• deps: bump github.com/opentdf/platform/sdk from 0.4.5 to 0.4.7 in /service in the internal group (#2334) (7f5a182)
• deps: Updates to major ver of protovalidate (#2284) (39ad3c9)