Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jan 7, 2026

Bumps github.com/opentdf/platform/sdk from 0.10.1 to 0.11.0.

Release notes

Sourced from github.com/opentdf/platform/sdk's releases.

protocol/go: v0.11.0

0.11.0 (2025-09-18)

Features

  • authz: obligations protos within auth service (#2745) (41ee5a8)
  • policy: Return obligations from GetAttributeValue calls (#2742) (aa9b393)

service: v0.11.0

0.11.0 (2025-10-22)

Features

  • authz: add obligation fulfillment logic to obligation PDP (#2740) (2f8d30d)
  • authz: audit logs should properly handle obligations (#2824) (874ec7b)
  • authz: defer to request auth as decision/entitlements entity (#2789) (feb34d8)
  • authz: obligations protos within auth service (#2745) (41ee5a8)
  • authz: protovalidate tests for new authz obligations fields (#2747) (73e6319)
  • authz: service logic to use request auth as entity identifier in PDP decisions/entitlements (#2790) (6784e88)
  • authz: wire up obligations enforcement in auth service (#2756) (11b3ea9)
  • core: propagate token clientID on configured claim via interceptor into shared context metadata (#2760) (0f77246)
  • kas: Add required obligations to kao metadata.: (#2806) (16fb26c)
  • policy: add FQNs to obligation defs + vals (#2749) (fa2585c)
  • policy: Add obligation support to KAS (#2786) (bb1bca0)
  • policy: List obligation triggers rpc (#2823) (206abe3)
  • policy: namespace root certificates (#2771) (beaff21)
  • policy: Proto - root certificates by namespace (#2800) (0edb359)
  • policy: Protos List obligation triggers (#2803) (b32df81)
  • policy: Return built obligations fqns with triggers. (#2830) (e843018)
  • policy: Return obligations from GetAttributeValue calls (#2742) (aa9b393)

Bug Fixes

  • core: CORS (#2787) (a030ac6)
  • core: deprecate policy WithValue selector not utilized by RPC (#2794) (c573595)
  • core: deprecated stale protos and add better upgrade comments (#2793) (f2678cc)
  • core: Don't require known manager names (#2792) (8a56a96)
  • core: Fix mode negation and core mode (#2779) (de9807d)
  • core: resolve environment loading issues (#2827) (9af3184)
  • deps: bump github.com/opentdf/platform/lib/ocrypto from 0.6.0 to 0.7.0 in /service (#2812) (a6d180d)
  • deps: bump github.com/opentdf/platform/protocol/go from 0.12.0 to 0.13.0 in /service (#2814) (5e9c695)
  • deps: bump github.com/opentdf/platform/sdk from 0.7.0 to 0.9.0 in /service (#2798) (d6bc9a8)
  • deps: bump github.com/opentdf/platform/sdk from 0.9.0 to 0.10.0 in /service (#2831) (412dfd1)
  • ECC key loading (deprecated) (#2757) (49990eb)
  • policy: Change to nil (#2746) (a449434)

sdk: v0.11.0

... (truncated)

Commits
  • d527a09 chore(main): release sdk 0.11.0 (#2854)
  • 6fc9b46 fix(deps): bump github.com/opentdf/platform/lib/ocrypto from 0.7.0 to 0.8.0 i...
  • ef4b5b5 feat(sdk): JWK-based signature verification for assertions (#2985)
  • 4f6825e fix(policy): wrap SQL optional param type casts in null checks (#2977)
  • fedb5e9 fix(deps): bump google.golang.org/protobuf from 1.36.10 to 1.36.11 in /exampl...
  • be970db fix(deps): bump github.com/opentdf/platform/lib/ocrypto from 0.7.0 to 0.8.0 i...
  • 744e3aa fix(deps): bump github.com/opentdf/platform/lib/ocrypto from 0.7.0 to 0.8.0 i...
  • 457f380 chore(ci): SRE-5917 Use new gcp auth method (#2970)
  • fce65f8 fix(deps): bump the external group across 1 directory with 5 updates (#2917)
  • 6dc3bca fix(deps): bump the external group across 1 directory with 5 updates (#2950)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [github.com/opentdf/platform/sdk](https://github.com/opentdf/platform) from 0.10.1 to 0.11.0.
- [Release notes](https://github.com/opentdf/platform/releases)
- [Commits](sdk/v0.10.1...sdk/v0.11.0)

---
updated-dependencies:
- dependency-name: github.com/opentdf/platform/sdk
  dependency-version: 0.11.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Jan 7, 2026
@dependabot dependabot bot requested a review from a team as a code owner January 7, 2026 17:55
@dependabot dependabot bot added the go Pull requests that update Go code label Jan 7, 2026
@dependabot dependabot bot requested a review from a team as a code owner January 7, 2026 17:55
@github-actions github-actions bot added the size/s label Jan 7, 2026
@github-actions
Copy link
Contributor

github-actions bot commented Jan 7, 2026

Benchmark results, click to expand

Benchmark authorization.GetDecisions Results:

Metric Value
Approved Decision Requests 1000
Denied Decision Requests 0
Total Time 207.718568ms

Benchmark authorization.v2.GetMultiResourceDecision Results:

Metric Value
Approved Decision Requests 1000
Denied Decision Requests 0
Total Time 109.537425ms

Benchmark Statistics

Name № Requests Avg Duration Min Duration Max Duration

Bulk Benchmark Results

Metric Value
Total Decrypts 100
Successful Decrypts 100
Failed Decrypts 0
Total Time 364.454038ms
Throughput 274.38 requests/second

TDF3 Benchmark Results:

Metric Value
Total Requests 5000
Successful Requests 5000
Failed Requests 0
Concurrent Requests 50
Total Time 39.739378348s
Average Latency 395.883042ms
Throughput 125.82 requests/second

NANOTDF Benchmark Results:

Metric Value
Total Requests 5000
Successful Requests 5000
Failed Requests 0
Concurrent Requests 50
Total Time 28.266790813s
Average Latency 281.510836ms
Throughput 176.89 requests/second

@github-actions
Copy link
Contributor

github-actions bot commented Jan 7, 2026

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update Go code size/s

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant