Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Oct 13, 2025

Bumps github.com/opentdf/platform/sdk from 0.7.0 to 0.9.0.

Release notes

Sourced from github.com/opentdf/platform/sdk's releases.

service: v0.9.0

0.9.0 (2025-08-27)

Features

  • core: add multi-strategy ERS to support ldap and sql (#2596) (855611d)
  • policy: Add legacy keys. (#2613) (57370b0)
  • policy: add values to CreateObligationRequest (#2614) (94535cc)
  • policy: Modify KAS indexer to support legacy keys. (#2616) (ba96c18)

Bug Fixes

  • deps: bump github.com/docker/docker from 28.2.2+incompatible to 28.3.3+incompatible in /service (#2598) (3c392aa)
  • deps: bump github.com/go-viper/mapstructure/v2 from 2.3.0 to 2.4.0 in /service (#2649) (b838bbc)
  • deps: bump github.com/opentdf/platform/sdk from 0.5.0 to 0.7.0 in /service (#2660) (2c998ac)
  • kas: Allow admin to set registered kas uri (#2624) (6203fba)
  • updated generated sqlc (#2609) (e44a569)

protocol/go: v0.9.0

0.9.0 (2025-09-11)

Features

  • policy: add FQN of obligation definitions/values to protos (#2703) (45ded0e)
  • policy: Add obligation triggers (#2675) (22d0837)
  • policy: Allow creation and update of triggers on Obligation Values (#2691) (b1e7ba1)
  • policy: Allow for additional context to be added to obligation triggers (#2705) (7025599)
  • policy: obligations + values CRUD (#2545) (c194e35)

Bug Fixes

  • deps: update protovalidate to v0.14.2 to use new buf validate MessageOneofRule (#2698) (1cae18e)

sdk: v0.9.0

0.9.0 (2025-10-09)

Features

  • sdk: DSPX-1465 refactor TDF architecture with streaming support and segment-based writing (#2785) (ea9b278)
  • sdk: Experimental zipstream lib, add segment-based streaming ZIP writer, ZIP64 modes (#2782) (b381179)
  • sdk: sdk should optionally take in a logger (#2754) (f40d05f)

Bug Fixes

... (truncated)

Commits
  • 8058b82 chore(main): release sdk 0.9.0 (#2766)
  • ea9b278 feat(sdk): DSPX-1465 refactor TDF architecture with streaming support and seg...
  • f2678cc fix(core): deprecated stale protos and add better upgrade comments (#2793)
  • c573595 fix(core): deprecate policy WithValue selector not utilized by RPC (#2794)
  • 7147c4b feat(core): Adds helper KeyType method (#2735)
  • a030ac6 fix(core): CORS (#2787)
  • bb1bca0 feat(policy): Add obligation support to KAS (#2786)
  • b9c188c chore(docs): Fix unrenamed field in docs (#2784)
  • b381179 feat(sdk): Experimental zipstream lib, add segment-based streaming ZIP writer...
  • 11b3ea9 feat(authz): wire up obligations enforcement in auth service (#2756)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot dependabot bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Oct 13, 2025
@dependabot dependabot bot requested review from a team as code owners October 13, 2025 17:30
@dependabot dependabot bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Oct 13, 2025
@github-actions
Copy link
Contributor

Benchmark results, click to expand

Benchmark authorization.GetDecisions Results:

Metric Value
Approved Decision Requests 1000
Denied Decision Requests 0
Total Time 167.834124ms

Benchmark authorization.v2.GetMultiResourceDecision Results:

Metric Value
Approved Decision Requests 1000
Denied Decision Requests 0
Total Time 99.712224ms

Standard Benchmark Metrics Skipped or Failed

Bulk Benchmark Results

Metric Value
Total Decrypts 100
Successful Decrypts 100
Failed Decrypts 0
Total Time 390.196322ms
Throughput 256.28 requests/second

TDF3 Benchmark Results:

Metric Value
Total Requests 5000
Successful Requests 5000
Failed Requests 0
Concurrent Requests 50
Total Time 38.802886108s
Average Latency 386.690516ms
Throughput 128.86 requests/second

NANOTDF Benchmark Results:

Metric Value
Total Requests 5000
Successful Requests 5000
Failed Requests 0
Concurrent Requests 50
Total Time 27.171641769s
Average Latency 270.430323ms
Throughput 184.02 requests/second

@dependabot dependabot bot force-pushed the dependabot/go_modules/service/github.com/opentdf/platform/sdk-0.9.0 branch from ba20649 to 1c5bc26 Compare October 14, 2025 22:11
@github-actions
Copy link
Contributor

Benchmark results, click to expand

Benchmark authorization.GetDecisions Results:

Metric Value
Approved Decision Requests 1000
Denied Decision Requests 0
Total Time 193.957103ms

Benchmark authorization.v2.GetMultiResourceDecision Results:

Metric Value
Approved Decision Requests 1000
Denied Decision Requests 0
Total Time 101.092633ms

Standard Benchmark Metrics Skipped or Failed

Bulk Benchmark Results

Metric Value
Total Decrypts 100
Successful Decrypts 100
Failed Decrypts 0
Total Time 374.963471ms
Throughput 266.69 requests/second

TDF3 Benchmark Results:

Metric Value
Total Requests 5000
Successful Requests 5000
Failed Requests 0
Concurrent Requests 50
Total Time 39.054601429s
Average Latency 388.580796ms
Throughput 128.03 requests/second

NANOTDF Benchmark Results:

Metric Value
Total Requests 5000
Successful Requests 5000
Failed Requests 0
Concurrent Requests 50
Total Time 27.684741103s
Average Latency 275.931671ms
Throughput 180.60 requests/second

@dependabot dependabot bot force-pushed the dependabot/go_modules/service/github.com/opentdf/platform/sdk-0.9.0 branch from 1c5bc26 to c8dcdcb Compare October 16, 2025 18:35
@github-actions
Copy link
Contributor

Benchmark results, click to expand

Benchmark authorization.GetDecisions Results:

Metric Value
Approved Decision Requests 1000
Denied Decision Requests 0
Total Time 173.342298ms

Benchmark authorization.v2.GetMultiResourceDecision Results:

Metric Value
Approved Decision Requests 1000
Denied Decision Requests 0
Total Time 102.072875ms

Standard Benchmark Metrics Skipped or Failed

Bulk Benchmark Results

Metric Value
Total Decrypts 100
Successful Decrypts 100
Failed Decrypts 0
Total Time 354.354755ms
Throughput 282.20 requests/second

TDF3 Benchmark Results:

Metric Value
Total Requests 5000
Successful Requests 5000
Failed Requests 0
Concurrent Requests 50
Total Time 38.302369123s
Average Latency 381.267451ms
Throughput 130.54 requests/second

NANOTDF Benchmark Results:

Metric Value
Total Requests 5000
Successful Requests 5000
Failed Requests 0
Concurrent Requests 50
Total Time 26.990022406s
Average Latency 269.117399ms
Throughput 185.25 requests/second

@dependabot dependabot bot force-pushed the dependabot/go_modules/service/github.com/opentdf/platform/sdk-0.9.0 branch from c8dcdcb to e86d05f Compare October 16, 2025 20:27
Bumps [github.com/opentdf/platform/sdk](https://github.com/opentdf/platform) from 0.7.0 to 0.9.0.
- [Release notes](https://github.com/opentdf/platform/releases)
- [Commits](sdk/v0.7.0...sdk/v0.9.0)

---
updated-dependencies:
- dependency-name: github.com/opentdf/platform/sdk
  dependency-version: 0.9.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot force-pushed the dependabot/go_modules/service/github.com/opentdf/platform/sdk-0.9.0 branch from e86d05f to d42929a Compare October 16, 2025 20:28
@github-actions
Copy link
Contributor

Benchmark results, click to expand

Benchmark authorization.GetDecisions Results:

Metric Value
Approved Decision Requests 1000
Denied Decision Requests 0
Total Time 167.788601ms

Benchmark authorization.v2.GetMultiResourceDecision Results:

Metric Value
Approved Decision Requests 1000
Denied Decision Requests 0
Total Time 104.436448ms

Standard Benchmark Metrics Skipped or Failed

Bulk Benchmark Results

Metric Value
Total Decrypts 100
Successful Decrypts 100
Failed Decrypts 0
Total Time 369.586586ms
Throughput 270.57 requests/second

TDF3 Benchmark Results:

Metric Value
Total Requests 5000
Successful Requests 5000
Failed Requests 0
Concurrent Requests 50
Total Time 39.136696811s
Average Latency 388.963035ms
Throughput 127.76 requests/second

NANOTDF Benchmark Results:

Metric Value
Total Requests 5000
Successful Requests 5000
Failed Requests 0
Concurrent Requests 50
Total Time 27.277324371s
Average Latency 271.984597ms
Throughput 183.30 requests/second

@github-actions
Copy link
Contributor

Benchmark results, click to expand

Benchmark authorization.GetDecisions Results:

Metric Value
Approved Decision Requests 1000
Denied Decision Requests 0
Total Time 170.5816ms

Benchmark authorization.v2.GetMultiResourceDecision Results:

Metric Value
Approved Decision Requests 1000
Denied Decision Requests 0
Total Time 101.143891ms

Standard Benchmark Metrics Skipped or Failed

Bulk Benchmark Results

Metric Value
Total Decrypts 100
Successful Decrypts 100
Failed Decrypts 0
Total Time 365.864992ms
Throughput 273.32 requests/second

TDF3 Benchmark Results:

Metric Value
Total Requests 5000
Successful Requests 5000
Failed Requests 0
Concurrent Requests 50
Total Time 39.147179029s
Average Latency 390.30758ms
Throughput 127.72 requests/second

NANOTDF Benchmark Results:

Metric Value
Total Requests 5000
Successful Requests 5000
Failed Requests 0
Concurrent Requests 50
Total Time 27.608243383s
Average Latency 275.268984ms
Throughput 181.11 requests/second

@dmihalcik-virtru dmihalcik-virtru added this pull request to the merge queue Oct 17, 2025
Merged via the queue into main with commit d6bc9a8 Oct 17, 2025
50 of 52 checks passed
@dmihalcik-virtru dmihalcik-virtru deleted the dependabot/go_modules/service/github.com/opentdf/platform/sdk-0.9.0 branch October 17, 2025 11:33
github-merge-queue bot pushed a commit that referenced this pull request Oct 22, 2025
🤖 I have created a release *beep* *boop*
---


##
[0.11.0](service/v0.10.0...service/v0.11.0)
(2025-10-22)


### Features

* **authz:** add obligation fulfillment logic to obligation PDP
([#2740](#2740))
([2f8d30d](2f8d30d))
* **authz:** audit logs should properly handle obligations
([#2824](#2824))
([874ec7b](874ec7b))
* **authz:** defer to request auth as decision/entitlements entity
([#2789](#2789))
([feb34d8](feb34d8))
* **authz:** obligations protos within auth service
([#2745](#2745))
([41ee5a8](41ee5a8))
* **authz:** protovalidate tests for new authz obligations fields
([#2747](#2747))
([73e6319](73e6319))
* **authz:** service logic to use request auth as entity identifier in
PDP decisions/entitlements
([#2790](#2790))
([6784e88](6784e88))
* **authz:** wire up obligations enforcement in auth service
([#2756](#2756))
([11b3ea9](11b3ea9))
* **core:** propagate token clientID on configured claim via interceptor
into shared context metadata
([#2760](#2760))
([0f77246](0f77246))
* **kas:** Add required obligations to kao metadata.:
([#2806](#2806))
([16fb26c](16fb26c))
* **policy:** add FQNs to obligation defs + vals
([#2749](#2749))
([fa2585c](fa2585c))
* **policy:** Add obligation support to KAS
([#2786](#2786))
([bb1bca0](bb1bca0))
* **policy:** List obligation triggers rpc
([#2823](#2823))
([206abe3](206abe3))
* **policy:** namespace root certificates
([#2771](#2771))
([beaff21](beaff21))
* **policy:** Proto - root certificates by namespace
([#2800](#2800))
([0edb359](0edb359))
* **policy:** Protos List obligation triggers
([#2803](#2803))
([b32df81](b32df81))
* **policy:** Return built obligations fqns with triggers.
([#2830](#2830))
([e843018](e843018))
* **policy:** Return obligations from GetAttributeValue calls
([#2742](#2742))
([aa9b393](aa9b393))


### Bug Fixes

* **core:** CORS
([#2787](#2787))
([a030ac6](a030ac6))
* **core:** deprecate policy WithValue selector not utilized by RPC
([#2794](#2794))
([c573595](c573595))
* **core:** deprecated stale protos and add better upgrade comments
([#2793](#2793))
([f2678cc](f2678cc))
* **core:** Don't require known manager names
([#2792](#2792))
([8a56a96](8a56a96))
* **core:** Fix mode negation and core mode
([#2779](#2779))
([de9807d](de9807d))
* **core:** resolve environment loading issues
([#2827](#2827))
([9af3184](9af3184))
* **deps:** bump github.com/opentdf/platform/lib/ocrypto from 0.6.0 to
0.7.0 in /service
([#2812](#2812))
([a6d180d](a6d180d))
* **deps:** bump github.com/opentdf/platform/protocol/go from 0.12.0 to
0.13.0 in /service
([#2814](#2814))
([5e9c695](5e9c695))
* **deps:** bump github.com/opentdf/platform/sdk from 0.7.0 to 0.9.0 in
/service ([#2798](#2798))
([d6bc9a8](d6bc9a8))
* **deps:** bump github.com/opentdf/platform/sdk from 0.9.0 to 0.10.0 in
/service ([#2831](#2831))
([412dfd1](412dfd1))
* ECC key loading (deprecated)
([#2757](#2757))
([49990eb](49990eb))
* **policy:** Change to nil
([#2746](#2746))
([a449434](a449434))

---
This PR was generated with [Release
Please](https://github.com/googleapis/release-please). See
[documentation](https://github.com/googleapis/release-please#release-please).

Co-authored-by: opentdf-automation[bot] <149537512+opentdf-automation[bot]@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update Go code size/xs

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant