Skip to content

CHANGELOG.md

Latest commit

 

History

History
1315 lines (875 loc) · 150 KB

CHANGELOG.md

File metadata and controls

1315 lines (875 loc) · 150 KB
Raw

Changelog

0.21.0 (2026-07-21)

Features

  • core: Update fixtures (#3766) (9ac1640)
  • policy: add entitleable namespace field and narrow-read-API doc corrections (#3727) (0fc2f01)
  • policy: Add name and manager lookup (#3753) (bfbc65d)
  • policy: Add UnsafeUpdateKey rpc. (#3728) (c89b193)
  • policy: create subject mappings with attribute values (#3741) (718320b)
  • policy: deprecate GetAttributeValuesByFqns in favor of narrow read APIs (#3745) (baba709)
  • policy: dynamic attribute value entitlement mappings (#3568) (21e95e0)
  • policy: populate entitleable definition namespace (#3737) (3f32839)

Bug Fixes

  • authz: use standard Keycloak token exchange (#3754) (de9ae0d)
  • core: Pass the platform logger to the authz role provider factory (#3732) (9c32554)

0.20.0 (2026-07-07)

⚠ BREAKING CHANGES

  • policy: undo subject mapping operator decomposition (#3685)

Features

  • policy: add narrow attribute read API protos and generated code (#3634) (5726720)
  • policy: implement narrow attribute read APIs (#3697) (eaee9b2)
  • policy: undo subject mapping operator decomposition (#3685) (84f3b92)

Bug Fixes

  • deps: bump protocol/go to 0.37.0 and sdk to 0.26.0 in /service (#3721) (95d7aa4)
  • policy: include attribute value fqn in subject mapping lookup (#3720) (8b63934)

0.19.0 (2026-06-30)

Features

  • authz: Authz-v2 docs (#3670) (4ab7fe8)
  • authz: move DPoP enforcement into dpop.enforce config (DSPX-3397) (#3666) (daebade)
  • core: add global audit config and add configured JWT claims to audit logs (#3429) (03021fa)
  • kas: Adds FIPS-203 wrap with ML-KEM-768/1024 (#3652) (06f30ef)
  • policy: Add kas_uri dimenstion to ListKeys. (#3663) (41cee41)

Bug Fixes

  • authz: Add default role for every req. (#3664) (2a7095a)
  • authz: emit WWW-Authenticate DPoP on all proof rejections (DSPX-3397) (#3665) (d7caacd)
  • deps: bump github.com/opentdf/platform/sdk from 0.24.0 to 0.25.0 in /service (#3687) (0b7f77a)
  • kas: verify rewrap SRT with its actual JWS algorithm (#3691) (1f073b6)
  • policy: undo Condition.operator deprecation (#3668) (917f66a)

0.18.0 (2026-06-23)

⚠ BREAKING CHANGES

  • core: conform hybrid PQ/T key formats to IETF drafts (#3563)
  • core: Add min_len to search term. (#3604)

Features

  • authz: enrich casbin authorization (#3614) (8702ac1)
  • core: Add search term information to protos. (#3547) (40f35df)
  • core: Add statement timeout parameter. (#3544) (0ec99ee)
  • core: Adds comprehensive DPoP (RFC 9449) support (#3582) (8a00646)
  • core: conform hybrid PQ/T key formats to IETF drafts (#3563) (dc18568)
  • policy: Add the ability to do substring search (#3551) (33b6fd7)
  • policy: DSPX-2754 DynamicValueMapping protos + generated code (#3580) (090c0f6)
  • policy: DSPX-2998 optionally namespace resource mappings (#3567) (2b6d54c)

Bug Fixes

  • core: Add min_len to search term. (#3604) (09e22dc)
  • core: log at debug instead of error for expected IPC missing client id state (#3636) (fe7f787)
  • deps: bump github.com/opentdf/platform/sdk from 0.21.0 to 0.22.0 in /service (#3618) (23b639a)
  • deps: Update to latest sdk, protos, ocrypto. (#3658) (a47b3f1)

0.17.0 (2026-06-11)

⚠ BREAKING CHANGES

  • policy: DSPX-2998 add namespace fields to resource mapping protos (#3565)

Features

  • authz: make v2 request limits configurable (#3508) (9d16f80)
  • authz: split connect token claims and enforcement (#3592) (2e82aa0)
  • kas: emit INFO log of supported mechanisms at startup (DSPX-3456) (#3564) (c2b4816)
  • policy: DSPX-2998 add namespace fields to resource mapping protos (#3565) (e4a04ed)

Bug Fixes

0.16.0 (2026-06-01)

Features

  • core: add hybrid NIST EC + ML-KEM key wrapping support (#3276) (1209acc)
  • policy: Add FQN to RegisteredResourceValues (#3446) (3199583)
  • policy: Add resource mapping group FQNs (#3447) (6a0b3c6)

Bug Fixes

  • core: remove deprecated grpc-gateway (#3479) (a4230a2)
  • deps: bump github.com/opentdf/platform/lib/ocrypto from 0.10.0 to 0.12.0 in /service (#3524) (9836404)
  • deps: bump github.com/opentdf/platform/protocol/go from 0.30.0 to 0.31.0 in /service (#3497) (a29f108)
  • deps: bump github.com/opentdf/platform/protocol/go from 0.31.0 to 0.32.0 in /service (#3523) (5f316f0)
  • deps: bump github.com/opentdf/platform/sdk from 0.19.0 to 0.20.0 in /service (#3467) (7045d6e)
  • deps: bump github.com/opentdf/platform/sdk from 0.20.0 to 0.21.0 in /service (#3548) (09fff7f)
  • deps: bump module protocol/go to v0.30.0 throughout (#3459) (8eaa502)
  • policy: include action_attribute_values in GetRegisteredResource response (#3472) (29eff55)

0.15.0 (2026-05-06)

Features

  • core: pass access token verifier down to registered services (#3428) (b8abf17)
  • policy: add sort support to listkaskeys (#3344) (de1fe92)
  • policy: support inline obligation triggers on attribute value create (#3432) (876f512)

Bug Fixes

  • core: infer JWT algorithms for JWKS keys without alg (#3434) (83285e7)
  • deps: bump github.com/Azure/go-ntlmssp from 0.0.0-20221128193559-754e69321358 to 0.1.1 in /service (#3388) (ef79989)
  • deps: bump github.com/jackc/pgx/v5 from 5.9.0 to 5.9.2 in /service (#3371) (ab0974b)
  • deps: bump github.com/opentdf/platform/lib/identifier from 0.3.0 to 0.4.0 in /service (#3366) (4650e9b)
  • deps: bump github.com/opentdf/platform/protocol/go from 0.25.0 to 0.26.0 in /service (#3381) (ebc65f6)
  • deps: bump github.com/opentdf/platform/protocol/go from 0.26.0 to 0.27.0 in /service (#3392) (0c36cfa)
  • deps: bump github.com/opentdf/platform/protocol/go from 0.27.0 to 0.28.0 in /service (#3416) (bc137f6)
  • deps: bump github.com/opentdf/platform/sdk from 0.16.0 to 0.17.0 in /service (#3395) (0382742)
  • deps: bump github.com/opentdf/platform/sdk from 0.17.0 to 0.19.0 in /service (#3423) (969ac33)

0.14.0 (2026-04-21)

⚠ BREAKING CHANGES

  • sdk: reclassify KAS 400 errors — distinguish tamper from misconfiguration (#3166)
  • policy: optional namespace for RRs (#3165)
  • policy: Namespace subject mappings and subject condition sets. (#3143)
  • policy: Optional namespace on actions protos, NamespacedPolicy feature flag (#3155)
  • policy: add namespaced actions schema and namespace-aware action queries (#3154)
  • policy: only require namespace on GetAction if no id provided (#3144)
  • policy: add namespace field to Actions proto (#3130)
  • policy: namespace Registered Resources (#3111)
  • policy: add namespace field to RegisteredResource proto (#3110)

Features

  • authz: Namespaced policy in decisioning (#3226) (0355934)
  • cli: migrate otdfctl into platform monorepo (#3205) (5177bec)
  • fix tracing (#3242) (57e5680)
  • policy: add GetObligationTrigger RPC (#3318) (d68e39d)
  • policy: add namespace field to Actions proto (#3130) (bedc9b3)
  • policy: add namespace field to RegisteredResource proto (#3110) (04fd85d)
  • policy: add namespaced actions schema and namespace-aware action queries (#3154) (c0443f1)
  • policy: add sort ListSubjectMappings API (#3255) (9d5d757)
  • policy: Add sort support listregisteredresources api (#3312) (91a3ff3)
  • policy: add sort support to ListAttributes API (#3223) (ec3312f)
  • policy: add sort support to ListKeyAccessServer (#3287) (7fae2d7)
  • policy: Add sort support to ListNamespaces API (#3192) (aac86cd)
  • policy: add sort support to listobligations api (#3300) (9221cac)
  • policy: add sort support to ListSubjectConditionSets API (#3272) (9010f12)
  • policy: add SortField proto and update PageRequest for sort support (#3187) (6cf1862)
  • policy: Enforce same namespace when actions referenced downstream (#3206) (4b5463a)
  • policy: namespace Registered Resources (#3111) (6db1883)
  • policy: Namespace subject mappings and condition sets (#3172) (6deed50)
  • policy: Namespace subject mappings and subject condition sets. (#3143) (3006780)
  • policy: optional namespace for RRs (#3165) (8948018)
  • policy: rollback migration strategy for namespaced actions (#3235) (f7e5e01)
  • policy: Seed existing namespaces with standard actions (#3228) (12136b0)
  • policy: Seed namespaces with standard actions on creation + namespaced actions for obligation triggers (#3161) (984d76b)

Bug Fixes

  • ci: Upgrade toolchain version to 1.25.8 (#3116) (e1b7882)
  • core: do not concat slashes directly in url/file paths (#3290) (114c2a7)
  • deps: bump github.com/jackc/pgx/v5 from 5.7.5 to 5.9.0 in /service (#3316) (017362e)
  • deps: bump github.com/opentdf/platform/lib/identifier from 0.2.0 to 0.3.0 in /service (#3162) (8bc5dcd)
  • deps: bump github.com/opentdf/platform/protocol/go from 0.16.0 to 0.17.0 in /service (#3125) (29fec61)
  • deps: bump github.com/opentdf/platform/protocol/go from 0.17.0 to 0.21.0 in /service (#3220) (e63add2)
  • deps: bump github.com/opentdf/platform/protocol/go from 0.21.0 to 0.22.0 in /service (#3248) (1ebce73)
  • deps: bump github.com/opentdf/platform/protocol/go from 0.22.0 to 0.23.0 in /service (#3271) (3338b8e)
  • deps: bump github.com/opentdf/platform/protocol/go from 0.23.0 to 0.24.0 in /service (#3321) (78e6022)
  • deps: bump github.com/opentdf/platform/protocol/go from 0.24.0 to 0.25.0 in /service (#3333) (3940bf8)
  • deps: bump github.com/opentdf/platform/sdk from 0.13.0 to 0.16.0 in /service (#3356) (5617077)
  • deps: bump go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp from 1.42.0 to 1.43.0 in /service (#3282) (046374a)
  • deps: bump go.opentelemetry.io/otel/sdk from 1.42.0 to 1.43.0 in /service (#3281) (56b33f2)
  • deps: bump google.golang.org/grpc from 1.77.0 to 1.79.3 in /service (#3176) (3289502)
  • deps: remove direct github.com/docker/docker dependency (#3229) (2becb27)
  • deps: upgrade testcontainers-go to resolve vulns (#3299) (72c6f9b)
  • ers: include standard JWT claims in claims mode entity resolution (#3196) (6d50da1)
  • ers: ldap multi-strategy ers (#3117) (d3aaf1a)
  • policy: deprecate ListAttributeValues in favor of existing GetAttribute (#3108) (7e17c2d)
  • policy: make obligation trigger uniqueness client-aware (#3114) (9265bc3)
  • policy: omit empty attribute values from create responses (#3193) (d298378)
  • policy: only require namespace on GetAction if no id provided (#3144) (10d0c0f)
  • policy: Optional namespace on actions protos, NamespacedPolicy feature flag (#3155) (c20f039)
  • policy: order List* results by created_at (#3088) (ea90ac2)
  • sdk: normalize issuer URL before OIDC discovery (#3261) (61f98c9)
  • sdk: reclassify KAS 400 errors — distinguish tamper from misconfiguration (#3166) (f04a385)
  • sdk: remove testcontainers from consumer dependency graph (#3129) (f17dcdd)

0.13.0 (2026-02-18)

⚠ BREAKING CHANGES

  • policy: remove namespace certificate feature (#3051)

Features

Bug Fixes

  • deps: bump github.com/opentdf/platform/lib/fixtures from 0.4.0 to 0.5.0 in /service (#3034) (66b61b1)
  • deps: bump github.com/opentdf/platform/lib/ocrypto from 0.9.0 to 0.10.0 in /service (#3080) (49582f0)
  • deps: bump github.com/opentdf/platform/protocol/go from 0.15.0 to 0.16.0 in /service (#3083) (a332f95)
  • deps: vulnerability fix in connect-rpc validate and ristretto (#3065) (8860fed)
  • Go 1.25 (#3053) (65eb7c3)
  • kas: dont hardcode P-256 curve (#3073) (826d857)
  • kas: Fix EC P-521 typo (#3075) (abc088d)
  • policy: reject unencrypted private keys for modes 1/2 (#3072) (e2dc6d8)

Code Refactoring

  • policy: remove namespace certificate feature (#3051) (48abb81)

0.12.0 (2026-01-27)

⚠ BREAKING CHANGES

  • remove nanotdf support (#3013)
  • core: DSPX-2090 Removes unnamed key mgrs (#2952)

Features

  • core: Actually use KeyManager ProviderConfig (#2837) (65ba2e0)
  • core: add additive CORS configuration fields (#2941) (d45a34b)
  • core: add direct entitlement support (#2630) (cc8337a)
  • deps: Bump ocrypto to v0.9.0 (#3024) (cd79950)
  • kas: add configurable SRT skew tolerance and diagnostics (#2886) (1a57227)
  • kas: Add nano policy binding to rewrap audit. (#2870) (a12d1d4)
  • policy: add allow_traversal to attribute definitions (#3014) (bbbe21b)
  • policy: Create/Update scs to use transaction. (#2882) (7493941)
  • policy: Return definition when attr value is missing (#3012) (3967377)
  • Update Go toolchain version to 1.24.11 across all modules (#2943) (a960eca)

Bug Fixes

  • authz: deny resources granularly when attribute value FQNs not found (#2896) (802db02)
  • authz: handle individual resource edge cases in decisions (#2835) (fad4437)
  • authz: if entity identifier results in multiple representations, treat with AND in resource decision results (#2860) (e869b35)
  • authz: obligations should be logged to audit but not returned when not entitled (#2847) (35da5e3)
  • Connect RPC v1.19.1 (#3009) (c354fd3)
  • core: add obligations X-Rewrap-Additional-Context to default CORS allowed headers (#2901) (d86868d)
  • core: Add stderr log output option (#2989) (7e01b2b)
  • core: DSPX-1944 Fix service negation for extra services (#2905) (b07a4fe)
  • core: DSPX-2090 Removes unnamed key mgrs (#2952) (ddd98db)
  • core: Let default basic keymanager work again (#2858) (fb0b99d)
  • core: remove duplicate root-level trace configuration (#2944) (d323e85)
  • core: Support audit and warn log levels (#2996) (e789a64)
  • core: Updates audit events when cancelled (#2954) (808457e)
  • deps: bump github.com/opentdf/platform/lib/fixtures from 0.3.0 to 0.4.0 in /service (#2964) (58512e2)
  • deps: bump github.com/opentdf/platform/lib/ocrypto from 0.7.0 to 0.8.0 in /service (#2976) (be970db)
  • deps: bump github.com/opentdf/platform/protocol/go from 0.13.0 to 0.14.0 in /service (#2965) (6672550)
  • deps: bump the external group across 1 directory with 5 updates (#2950) (6dc3bca)
  • deps: bump toolchain to go1.24.9 for CVEs found by govulncheck (#2849) (23f76c0)
  • ers: Do not use auth header jwt in MultiStrategy ERS (#2862) (dd6256e)
  • kas: Do not log index object (#2910) (4f9b8b9)
  • kas: document rewrap proto fields used in bulk flow (#2826) (32a7e91)
  • kas: Ensure root key is not logged. (#2918) (de9a76e)
  • kas: Fix kas panics on bad requests (#2916) (182b463)
  • kas: populate rewrap audit log (#2861) (4fe97fd)
  • policy: ListKeys 404 on missing KAS (#3001) (65a228b)
  • policy: Return the correct total during list responses. (#2836) (5c1ec9c)
  • policy: wrap SQL optional param type casts in null checks (#2977) (4f6825e)
  • remove lingering kas info endpoint definition (#2997) (b7e7a66)
  • remove nanotdf support (#3013) (90ff7ce)

0.11.0 (2025-10-22)

Features

  • authz: add obligation fulfillment logic to obligation PDP (#2740) (2f8d30d)
  • authz: audit logs should properly handle obligations (#2824) (874ec7b)
  • authz: defer to request auth as decision/entitlements entity (#2789) (feb34d8)
  • authz: obligations protos within auth service (#2745) (41ee5a8)
  • authz: protovalidate tests for new authz obligations fields (#2747) (73e6319)
  • authz: service logic to use request auth as entity identifier in PDP decisions/entitlements (#2790) (6784e88)
  • authz: wire up obligations enforcement in auth service (#2756) (11b3ea9)
  • core: propagate token clientID on configured claim via interceptor into shared context metadata (#2760) (0f77246)
  • kas: Add required obligations to kao metadata.: (#2806) (16fb26c)
  • policy: add FQNs to obligation defs + vals (#2749) (fa2585c)
  • policy: Add obligation support to KAS (#2786) (bb1bca0)
  • policy: List obligation triggers rpc (#2823) (206abe3)
  • policy: namespace root certificates (#2771) (beaff21)
  • policy: Proto - root certificates by namespace (#2800) (0edb359)
  • policy: Protos List obligation triggers (#2803) (b32df81)
  • policy: Return built obligations fqns with triggers. (#2830) (e843018)
  • policy: Return obligations from GetAttributeValue calls (#2742) (aa9b393)

Bug Fixes

  • core: CORS (#2787) (a030ac6)
  • core: deprecate policy WithValue selector not utilized by RPC (#2794) (c573595)
  • core: deprecated stale protos and add better upgrade comments (#2793) (f2678cc)
  • core: Don't require known manager names (#2792) (8a56a96)
  • core: Fix mode negation and core mode (#2779) (de9807d)
  • core: resolve environment loading issues (#2827) (9af3184)
  • deps: bump github.com/opentdf/platform/lib/ocrypto from 0.6.0 to 0.7.0 in /service (#2812) (a6d180d)
  • deps: bump github.com/opentdf/platform/protocol/go from 0.12.0 to 0.13.0 in /service (#2814) (5e9c695)
  • deps: bump github.com/opentdf/platform/sdk from 0.7.0 to 0.9.0 in /service (#2798) (d6bc9a8)
  • deps: bump github.com/opentdf/platform/sdk from 0.9.0 to 0.10.0 in /service (#2831) (412dfd1)
  • ECC key loading (deprecated) (#2757) (49990eb)
  • policy: Change to nil (#2746) (a449434)

0.10.0 (2025-09-17)

⚠ BREAKING CHANGES

  • policy: Add manager column to provider configuration for multi-instance support (#2601)

Features

  • authz: add obligation policy decision point (#2706) (bb2a4f8)
  • core: add service negation for op mode (#2680) (029db8c)
  • core: Bump default write timeout. (#2671) (6a233c1)
  • core: Encapsulate>Encrypt (#2676) (3c5a614)
  • core: Lets key manager factory take context (#2715) (8d70993)
  • policy: add FQN of obligation definitions/values to protos (#2703) (45ded0e)
  • policy: Add manager column to provider configuration for multi-instance support (#2601) (a5fc994)
  • policy: Add obligation triggers (#2675) (22d0837)
  • policy: add protovalidate for obligation defs + vals (#2699) (af5c049)
  • policy: Allow creation and update of triggers on Obligation Values (#2691) (b1e7ba1)
  • policy: Allow for additional context to be added to obligation triggers (#2705) (7025599)
  • policy: Include Triggers in GET/LISTable reqs (#2704) (b4381d1)
  • policy: obligations + values CRUD (#2545) (c194e35)
  • use public AES protected key from lib/ocrypto (#2600) (75d7590)

Bug Fixes

  • core: remove extraneous comment (#2741) (ada8da6)
  • core: return services in the order they were registered (#2733) (1d661db)
  • deps: bump github.com/opentdf/platform/lib/ocrypto from 0.3.0 to 0.6.0 in /service (#2714) (00354b3)
  • deps: bump github.com/opentdf/platform/protocol/go from 0.7.0 to 0.9.0 in /service (#2726) (9004368)
  • deps: bump protocol/go to 0.10.0 in service (#2734) (11e6201)
  • deps: update protovalidate to v0.14.2 to use new buf validate MessageOneofRule (#2698) (1cae18e)
  • policy: Registered Resources should consider actions correctly within Decision Requests (#2681) (cf264a2)
  • sanitize db schema identifiers (#2682) (0d3dd94)

0.9.0 (2025-08-27)

Features

  • core: add multi-strategy ERS to support ldap and sql (#2596) (855611d)
  • policy: Add legacy keys. (#2613) (57370b0)
  • policy: add values to CreateObligationRequest (#2614) (94535cc)
  • policy: Modify KAS indexer to support legacy keys. (#2616) (ba96c18)

Bug Fixes

  • deps: bump github.com/docker/docker from 28.2.2+incompatible to 28.3.3+incompatible in /service (#2598) (3c392aa)
  • deps: bump github.com/go-viper/mapstructure/v2 from 2.3.0 to 2.4.0 in /service (#2649) (b838bbc)
  • deps: bump github.com/opentdf/platform/sdk from 0.5.0 to 0.7.0 in /service (#2660) (2c998ac)
  • kas: Allow admin to set registered kas uri (#2624) (6203fba)
  • updated generated sqlc (#2609) (e44a569)

0.8.0 (2025-07-29)

Features

Bug Fixes

  • add back grants to listAttributesByDefOrValueFqns (#2493) (2b47095)
  • authz: access pdp should use proto getter (#2530) (f856212)
  • core: Allow 521 curve to be used (#2485) (aaf43dc)
  • core: resolve 'built-in' typos (#2548) (ccdfa96)
  • deps: bump github.com/opentdf/platform/lib/ocrypto from 0.2.0 to 0.3.0 in /service (#2504) (a9cc4dd)
  • sdk: Prefer KID and Algorithm selection from key maps (#2475) (98fd392)

0.7.0 (2025-06-24)

⚠ BREAKING CHANGES

  • policy: disable kas grants in favor of key mappings (#2220)

Features

  • authz: Add caching to keycloak ERS (#2466) (f5b0a06)
  • authz: auth svc registered resource GetDecision support (#2392) (5405674)
  • authz: authz v2 GetBulkDecision (#2448) (0da3363)
  • authz: cache entitlement policy within authorization service (#2457) (c16361c)
  • authz: ensure logging parity between authz v2 and v1 (#2443) (ef68586)
  • core: add cache manager (#2449) (2b062c5)
  • core: consume RPC interceptor request context metadata in logging (#2442) (2769c48)
  • core: DSPX-609 - add cli-client to keycloak provisioning (#2396) (48e7489)
  • core: ERS cache setup, fix cache initialization (#2458) (d0c6938)
  • inject logger and cache manager to key managers (#2461) (9292162)
  • kas: expose provider config from key details. (#2459) (0e7d39a)
  • main: Add Close() method to cache manager (#2465) (32630d6)
  • policy: disable kas grants in favor of key mappings (#2220) (30f8cf5)
  • policy: Restrict deletion of pc with used key. (#2414) (3b40a46)
  • sdk: allow Connect-Protocol-Version RPC header for cors (#2437) (4bf241e)

Bug Fixes

  • core: remove generics on new platform cache manager and client (#2456) (98c3c16)
  • core: replace opentdf-public client with cli-client (#2422) (fb18525)
  • deps: bump github.com/casbin/casbin/v2 from 2.106.0 to 2.107.0 in /service in the external group (#2416) (43afd48)
  • deps: bump github.com/opentdf/platform/protocol/go from 0.4.0 to 0.5.0 in /service (#2470) (3a73fc9)
  • deps: bump github.com/opentdf/platform/sdk from 0.4.7 to 0.5.0 in /service (#2473) (ad37476)
  • deps: bump the external group across 1 directory with 2 updates (#2450) (9d8d1f1)
  • deps: bump the external group across 1 directory with 2 updates (#2472) (d45b3c8)
  • only request a token when near expiration (#2370) (556d95e)
  • policy: fix casing bug and get provider config on update. (#2403) (a52b8f9)
  • policy: properly formatted pem in test fixtures (#2409) (54ffd23)

0.6.0 (2025-06-06)

Features

  • authz: DSPX-894 auth svc registered resource GetEntitlement support (#2358) (a199aa7)
  • authz: improve v2 request proto validation (#2357) (f927b99)
  • core: DSPX-608 - Deprecate public_client_id (#2185) (0f58efa)
  • policy: Return Simple Kas Keys from non-Key RPCs (#2387) (5113e0e)
  • policy: Unique name for the key provider. (#2391) (bb58b78)
  • policy: Update simple kas key (#2378) (09d8239)

Bug Fixes

  • deps: bump github.com/opentdf/platform/protocol/go from 0.3.6 to 0.4.0 in /service (#2399) (1c6fa75)
  • deps: bump the external group across 1 directory with 21 updates (#2401) (3d0d4d1)
  • policy: move action sub queries to CTE in sm list and match sql (#2369) (0fd6feb)
  • policy: protovalidate deprecated action types and removal of gRPC gateway in subject mappings svc (#2377) (54a6de0)
  • policy: remove gRPC gateway in policy except where needed (#2382) (1937acb)
  • policy: remove support for creation/updation of SubjectMappings with deprecated proto actions (#2373) (3660200)

0.5.5 (2025-05-30)

Features

  • adds basic config root key manager (#2303) (dd0d22f)
  • policy: cache SubjectConditionSet selectors in dedicated column maintained via trigger (#2320) (215791f)
  • policy: map and merge grants and keys (#2324) (abf770f)

Bug Fixes

  • deps: bump github.com/opentdf/platform/sdk from 0.4.5 to 0.4.7 in /service in the internal group (#2334) (7f5a182)
  • deps: Updates to major ver of protovalidate (#2284) (39ad3c9)

0.5.4 (2025-05-29)

Features

  • authz: access pdp v2 with actions (#2264) (7afefb7)
  • authz: logic for authz v2 (actions within ABAC decisioning) (#2146) (0fdc259)
  • policy: Default Platform Keys (#2254) (d7447fe)
  • policy: Update key status's and UpdateKey rpc. (#2315) (7908db9)

Bug Fixes

  • policy: DSPX-1151 update of registered resource value always clears existing action attribute values (#2325) (ca94425)
  • policy: Ensure non active keys cannot be assigned. (#2321) (207d10d)

0.5.3 (2025-05-22)

Features

  • authz: authz v2 versioning implementation (#2173) (557fc21)
  • authz: authz v2, ers v2 protos and gencode for ABAC with actions & registered resource (#2124) (ea7992a)
  • authz: export entity id prefix constant from entity instead of authorization service v1 (#2261) (94079a9)
  • authz: subject mapping plugin support for ABAC with actions (#2223) (d08b939)
  • bulk keycloak provisioning (#2205) (59e4485)
  • core: add otel to opentdf services (#1858) (53a7aa0)
  • core: Adds EC withSalt options (#2126) (67b6fb8)
  • core: enhance db configuration options (#2285) (ed9ff59)
  • core: New Key Index and Manager Plugin SPI (#2095) (eb446fc)
  • core: support onConfigUpdate hook when registering services (#1992) (366d4dc)
  • core: v2 ERS with proto updates (#2210) (a161ef8)
  • policy: actions crud service endpoints and proto validation (#2037) (e933fa9)
  • policy: actions service RPCs should actually hit storage layer CRUD (#2063) (da4faf5)
  • policy: add enhanced standard/custom actions protos (#2020) (bbac53f)
  • policy: Add platform key indexer. (#2189) (861ef8d)
  • policy: consume lib/identifier parse function (#2181) (1cef22b)
  • policy: DSPX-1018 NDR retrieval by FQN support (#2131) (0001041)
  • policy: DSPX-1057 registered resource action attribute values (DB + Service implementation) (#2191) (6bf1b2e)
  • policy: DSPX-1057 registered resource action attribute values (protos only) (#2217) (6375596)
  • policy: DSPX-893 NDR define crud protos (#2056) (55a5c27)
  • policy: DSPX-898 NDR database schema (#2055) (2a10a6a)
  • policy: DSPX-901 NDR database crud (#2071) (20e0a5f)
  • policy: DSPX-902 NDR service crud implementation (2/2) (#2066) (030ad33)
  • policy: DSPX-902 NDR service crud protos only (1/2) (#2092) (24b6cb5)
  • policy: Finish resource mapping groups (#2224) (5ff754e)
  • policy: GetMatchedSubjectMappings should provide value FQN (#2151) (ad80044)
  • policy: key management crud (#2110) (4c3d53d)
  • policy: Key management proto (#2115) (561f853)
  • policy: Modify get request to search for keys by kasid with keyid. (#2147) (780d2e4)
  • policy: Restrict KAS deletion when tied to Key (#2144) (4c4ab13)
  • policy: Return KAS Key structure (#2172) (7f97b99)
  • policy: rotate keys rpc (#2180) (0d00743)
  • policy: stored enhanced actions database migration, CRUD queries, SM updates (#2040) (e6b7c79)
  • sdk: Add a KAS allowlist (#2085) (d7cfdf3)
  • sdk: add nanotdf plaintext policy (#2182) (e5c56db)
  • sdk: Use ConnectRPC in the go client (#2200) (fc34ee6)

Bug Fixes

  • core: access pdp cleanup before actions in ABAC decisioning (#2123) (9b38a3c)
  • core: Autobump service (#2080) (006c724)
  • core: Autobump service (#2104) (1f72cc7)
  • core: Autobump service (#2108) (be5b7d7)
  • core: bump to go 1.24 and bump service proto module dependencies (#2064) (94891a0)
  • core: Fix DPoP with grpc-gateway (#2044) (4483ef2)
  • core: fix service go.mod (#2141) (3b98f6d)
  • core: Improves errors when under heavy load (#2132) (4490a14)
  • core: Let legacy KAOs use new trust plugins (#2218) (5aa6916)
  • core: migrate from mitchellh/mapstructure to go-viper/mapstructure (#2087) (0a3a82e)
  • core: update viper to 1.20.1 (#2088) (09099e9)
  • core: Updates vulnerable dep go/x/net (#2072) (11c02cd)
  • deps: bump github.com/creasty/defaults from 1.7.0 to 1.8.0 in /service (#2242) (86a9b46)
  • deps: bump github.com/jackc/pgx/v5 from 5.5.5 to 5.7.5 in /service (#2249) (d8f3b67)
  • deps: bump the internal group across 1 directory with 2 updates (#2296) (7f92c70)
  • deps: bump toolchain in /lib/fixtures and /examples to resolve CVE GO-2025-3563 (#2061) (9c16843)
  • handle empty private and public key ctx structs (#2272) (f3fc647)
  • policy: remove predefined rules in actions protos (#2069) (060f059)
  • policy: return kas uri on keys for definition, namespace and values (#2186) (6c55fb8)
  • update key_mode to provide more context (#2226) (44d0805)

0.5.2 (2025-04-01)

Bug Fixes

0.5.1 (2025-03-31)

Bug Fixes

0.5.0 (2025-03-28)

⚠ BREAKING CHANGES

  • core: update GRPC Gateway to use IPC (#2005)
  • core: Require go 1.23+ (#1979)

Features

Bug Fixes

0.4.40 (2025-03-10)

Bug Fixes

0.4.39 (2025-02-27)

Features

  • add ability to retrieve policy resources by id or name (#1901) (deb4455)
  • core: EXPERIMENTAL: EC-wrapped key support (#1902) (652266f)
  • policy: adds new public keys table (#1836) (cad5048)

Bug Fixes

0.4.38 (2025-01-21)

Features

  • core: adds bulk rewrap to sdk and service (#1835) (11698ae)

Bug Fixes

0.4.37 (2025-01-09)

Features

Bug Fixes

  • core: Correct length of GetDecision response array (#1839) (85ce9b6)
  • core: Return deny decision for empty entity chains (#1846) (1e8b6a5)

0.4.36 (2025-01-03)

Bug Fixes

  • core: GetDecisions should handle empty string and non-existent attributes (#1832) (dc89678)
  • core: reduces GetEntitlements calls in GetDecisions (#1822) (8bb5744)

0.4.35 (2024-12-18)

Features

Bug Fixes

  • core: Update fixtures and flattening in sdk and service (#1827) (d6d6a7a)

0.4.34 (2024-12-11)

Bug Fixes

  • core: properly chain grpc-gateway middleware order (#1820) (5b9f054)

0.4.33 (2024-12-06)

Bug Fixes

  • core: Allow more users to rewrap (#1813) (4d47475)
  • core: Handle multiple modes including entityresolution mode (#1816) (32d6938)

0.4.32 (2024-12-04)

Features

  • policy: 1660 transition Policy FQN indexing to a transaction rather than an unmonitored side effect (#1782) (7c4c74f)

Bug Fixes

0.4.31 (2024-12-02)

Features

  • kas: collect metrics (#1702) (def28d1)
  • policy: 1500 Attribute create with Values (one RPC Call) should employ a db transaction (#1778) (90edbde)

Bug Fixes

  • core: move auth interceptor to top of chain (#1790) (f9f5a75)
  • policy: return fqns in list subject mappings (#1796) (c0a9dda)

0.4.30 (2024-11-27)

Features

  • core: Introduce ERS mode, ability to connect to remote ERS (#1735) (a118316)
  • policy: limit/offset throughout LIST service RPCs/db (#1669) (ec46a3a), closes #55

Bug Fixes

  • core: Autobump service (#1789) (ff7c6f3)
  • core: Set token endpoint manually if client creds provided in server sdk_config (#1780) (07a1dbd)
  • properly set casbin authz policy (#1776) (d4b501c)

0.4.29 (2024-11-18)

Features

  • core: programmatic setting of authz policy (#1769) (dff34ff)

0.4.28 (2024-11-15)

Features

Bug Fixes

0.4.27 (2024-11-14)

Features

  • authz: JWT ERS that just returns claims (#1630) (316b5be)
  • authz: Remove org-admin role, move privileges to admin role (#1740) (ae931d0)
  • backend migration to connect-rpc (#1733) (d10ba3c)
  • connectrpc realip interceptor (#1728) (292fca0)
  • docs: add policy ADR for LIST limit and pagination (#1557) (069f939)
  • move from fasthttp in-memory listener to memhttp implementation (#1709) (70518ff)
  • policy: 1603 policy improve upsertattrfqn (#1679) (cd17a44)
  • policy: 1651 move GetAttributesByValueFqns RPC request validation to protovalidate (#1657) (c7d6b15)
  • policy: 1659 spike on transactions support (#1678) (a6fea11)
  • policy: add optional name field to registered KASes in policy (#1636) (f1382c1)
  • policy: add optional name field to registered KASes in policy (#1641) (b277ab4)
  • policy: limit/offset throughout LIST protos/gencode (#1668) (7de6cce)
  • policy: SPIKE transactions support (#1663) (866f4f3)
  • policy: subject condition sets prune protos/gencode (#1687) (a627e02)
  • policy: subject condition sets prune service/db (#1688) (3cdd1b2), closes #1178
  • update service registry in preperation for connectrpc migration (#1715) (ce289a4)

Bug Fixes

0.4.26 (2024-10-17)

Bug Fixes

  • use the right service namespace and update the tests (#1665) (72ce62b)

0.4.25 (2024-10-15)

Features

  • authz: Add name to entity id when retrieved from token (#1616) (5304204)
  • core: Add entity category to audit logs (#1614) (871878c)
  • core: Change log level from Debug to Trace for readiness checks (#1544) (0af1269), closes #1545
  • policy: 1004 add audit support for unsafe actions (#1620) (4b64e5b)
  • policy: 1357 policy GetAttributeByFqn db query should employ fewer roundtrips (#1633) (0bdb7e5), closes #1357
  • policy: 1421 tech debt migrate Resource Mappings object queries to sqlc (#1422) (cd74bcf)
  • policy: 1426 tech debt migrate Namespace object queries to sqlc - PART 2 (#1617) (b914350)
  • policy: 1434 tech debt migrate attribute value object queries to sqlc (#1444) (0a7998e), closes #1434
  • policy: 1435 tech debt migrate attribute definition object queries to sqlc (#1450) (c36624c)
  • policy: 1436 tech debt migrate subject mapping and condition set object queries to sqlc (#1606) (ec60c9f)
  • policy: 1438 tech debt migrate attribute fqn indexing queries to sqlc (#1445) (617aa91), closes #1438
  • policy: 1580 Resource Mappings GET/LIST should provide attribute value FQNs in response (#1622) (e33bcc0), closes #1580
  • policy: 1618 update KAS CRUD to align with ADR decisions (#1619) (379f980), closes #1618
  • policy: DSP-51 - deprecate PublicKey local field (#1590) (e3ed0b5)
  • sdk: Improve KAS key lookup and caching (#1556) (fb6c47a)

Bug Fixes

0.4.24 (2024-10-01)

Features

  • ci: run otdfctl e2e tests within platform (#1526) (8240645), closes #1528
  • core: Ability to add namespace level loggers (#1537) (bd57070)
  • policy: 1370 add audit support for Resource Mapping Groups (#1418) (57dc217), closes #1370
  • policy: 1398 add metadata support to Resource Mapping Groups (#1412) (87b7b2f)
  • policy: 1426 tech debt migrate Namespace object queries to sqlc (#1432) (6bde0ab), closes #1426
  • policy: 1509 add readme on arch decisions of policy service (#1508) (71b49ec), closes #1509
  • policy: 1552 implement recommended changes to audit process (#1588) (aabc5cb)
  • policy: generate policy ERD (#1525) (8eb322b)

Bug Fixes

0.4.23 (2024-08-27)

Bug Fixes

  • core: Fix flake in nano rewrap (#1457) (45b0f90)
  • main: Fix deadlock when registering config with duplicate namespace (#1462) (6266998), closes #1461

0.4.22 (2024-08-26)

Bug Fixes

0.4.21 (2024-08-23)

Features

  • core: KID in NanoTDF KAS ResourceLocator borrowed from Protocol (#1222) (e5ee4ef)

Bug Fixes

0.4.20 (2024-08-22)

Bug Fixes

0.4.19 (2024-08-20)

Features

  • core: add RPCs to namespaces service to handle assignment/removal of KAS grants (#1344) (ee47d6c)
  • core: Adds key ids to kas registry (#1347) (e6c76ee)
  • core: further support in policy for namespace grants (#1334) (d56231e)
  • core: support grants to namespaces, definitions, and values in GetAttributeByValueFqns (#1353) (42a3d74)
  • core: validate kas uri (#1351) (2b70931)
  • policy: 1277 protos and service methods for Resource Mapping Groups operations (#1343) (570f402)
  • sdk: Load KAS keys from policy service (#1346) (fe628a0)
  • sdk: public client and other enhancements to well-known SDK functionality (#1365) (3be50a4)

Bug Fixes

0.4.18 (2024-08-12)

Features

  • authz: Remove external ers configuration from authorization (#1265) (aa925a8)
  • authz: Typed Entities (#1249) (cfab3ad)
  • core: ability to run a set of isolated services (#1245) (aa5636a)
  • core: improve entitlements performance (#1271) (f6a1b26)
  • core: policy support for LIST of kas grants (protos/db) (#1317) (599fc56)
  • core: Simplifies support for kidless clients (#1272) (dedeb32)
  • policy: 1256 resource mapping groups db support (#1270) (c020e9b)
  • policy: 1277 add Resource Mapping Group to objects proto (#1309) (514f1b8), closes #1277

Bug Fixes

  • core: Autobump service (#1322) (9460fb5)
  • core: casbin policy should support assign/remove/deactivate rpc naming (#1298) (288921b), closes #1303
  • core: put back proto breaking change detection in CI (#1292) (9921962), closes #1293
  • core: Update casbin policy for rewrap with unknown role (#1305) (de5be3c)
  • policy: deprecates and reserves value members from value object in protos (#1151) (07fcc9e)

0.4.17 (2024-08-06)

Features

  • authz: Move ERS call out of rego and include all entities in requests (#1228) (cdcca79)
  • core: MIC-934 Moves logger out of internal folder (#1219) (0576813)
  • policy: add support for sqlc within policy db queries (#1185) (5aef245), closes #561

Bug Fixes

  • core: Autobump service (#1202) (98d6d8b)
  • core: bump github.com/docker/docker from 25.0.5+incompatible to 26.1.4+incompatible in /service (#1223) (937c967)
  • core: drop unused/deprecated resources table & add comments to policy DB (#1258) (bb084aa)
  • core: improve casbin ExtendDefaultPolicy and add test (#1234) (cc15f25)
  • core: policy subject mapping integration test addition for 'contains' operator (#1244) (f8becb8)

0.4.16 (2024-07-25)

Bug Fixes

0.4.15 (2024-07-24)

Bug Fixes

  • core: set more reasonable message sizes via config (#1207) (3e08cba)

0.4.14 (2024-07-24)

Bug Fixes

  • core: increase internal grpc message size limit (#1205) (1442b59)

0.4.13 (2024-07-22)

Features

Bug Fixes

0.4.12 (2024-07-14)

Bug Fixes

0.4.11 (2024-07-11)

Features

  • authz: Keycloak ERS ability to handle clients, users, and emails that dont exist (#1113) (4a17f18)
  • core: GetEntitlements with_comprehensive_hierarchy (#1121) (ac85bf7), closes #1054
  • sdk: Support custom key splits (#1038) (685d8b5)

Bug Fixes

0.4.10 (2024-07-09)

Features

Bug Fixes

  • authz: move opa out of startup call (#1048) (3a0e71a)
  • core: Autobump service (#1119) (bce17e0)
  • policy: ensure get requests of attributes and values contain any KAS grants (#1101) (87172c9)

0.4.9 (2024-07-03)

Features

  • policy: add support for key access grants returned (#1077) (06050a5)

Bug Fixes

  • core: Autobump service (#1099) (d4e1aa2)
  • policy: unsafe service attribute update should allow empty names for PATCH-style API (#1094) (3c56d0f)

0.4.8 (2024-07-02)

Features

  • policy: add index to fqn column in attribute_fqns table (#1035) (1b0cf38), closes #1053
  • policy: add unsafe attribute RPC db connectivity (#1022) (fbc02f3)
  • policy: attribute values unsafe actions db connectivity (#1030) (4a30426)
  • policy: register unsafe service in platform (#1066) (b7796cd)

Bug Fixes

  • authz: Return deny on GetDecision if resource attribute lookup returns not found (#962) (7dea640)
  • core: Autobump service (#1072) (409df67)
  • core: Autobump service (#1079) (10138d2)
  • core: Autobump service (#1084) (968883e)
  • core: database clients pooling improvements (#1047) (8193cec)
  • core: swap out internal issuer for external issuer endpoint (#1027) (c3828d0)
  • core: update casbin policy to allow authorization service (#1041) (552e970)
  • policy: provide ns and val fqns back on list attributes response (#1050) (1be04f6), closes #1052
  • policy: rename unsafe rpcs for aligned casbin action determination (#1067) (7861e4a)
  • policy: run migrations on db only once for all policy services (#1040) (db4f06f)

0.4.7 (2024-06-24)

Features

  • add dev_mode flag (#985) (8da2436)
  • adds new trace log level (#989) (25f699e)
  • Audit GetDecisions (#976) (55bdfeb)
  • authz: Use flattened entity representations in subject mapping evaluation (#1007) (b80443f)
  • core: add doublestar for public routes (#998) (1c70c16)
  • core: New cryptoProvider config (#939) (8150623)
  • policy: add unsafe service protos and unsafe service proto Go gencode (#1003) (55cc045)
  • policy: policy unsafe namespace RPCs wired up to database (#1018) (239d9fa)
  • policy: service stubs and registration for unsafe service (#1009) (9145491)

Bug Fixes

0.4.6 (2024-06-11)

Features

  • core: Rewrap and Policy CRUD Audit Events (#889) (d909a5e)

Bug Fixes

  • core: Autobump service (#960) (6b96fee)
  • core: remove /health from casbin default policy (#943) (cb3d8df), closes #905
  • core: remove public routes from casbin default policy (#951) (57c2a45)
  • core: Return 404 if public key not found (#888) (8b110f0)
  • sdk: convert platform endpoint to grpc dial format (#941) (3a72a54)

0.4.5 (2024-06-04)

Features

  • authz: Subject mapping OPA builtin for condition evaluation and jq selection (#568) (5379611)
  • sdk: leverage platform wellknown configuration endpoint (#895) (53b3f42)
  • sdk: Support for ECDSA policy binding on both KAS and SDK (#877) (7baf039)

Bug Fixes

0.4.4 (2024-05-30)

Features

Bug Fixes

  • kas: lowercase config mapstructure for kas key paths (#891) (b205926), closes #890
  • policy: downgrade policy SQL statement info level logs to debug (#853) (771abd6), closes #845
  • core: bump sdk version in service module (#892) (d66ce92)

0.4.3 (2024-05-22)

Features

  • authz: Allow un-scoped GetEntitlements calls (#833) (9146947)
  • authz: Handle jwts as entity chains in decision requests (#759) (65612e0)
  • ci: Add e2e roundtrip tests for different attribute combinations (#790) (1b0ec23)
  • core: Adds opentdf.hsm build constraint (#830) (e13e52a)
  • core: audit logging (#774) (ea58b3c)

Bug Fixes

  • authz: Populate fqn field in attribute values returned from GetAttributeValuesByFqns (#816) (0ac8390)
  • authz: Typo in client secret config (#835) (7cad1f1)
  • bump internal versions (#840) (8f45f18)
  • core: bump sdk deps to 0.2.3 (#848) (ca8b9f7)
  • policy: fix policy fqn-reindex command schema suffix (#818) (aff9850), closes #817
  • policy: GetAttributeValuesByFqns and MatchSubjectMappings should not return deactivated policy objects (#813) (41ca82d), closes #494
  • policy: make resource-mappings update patch instead of put in RESTful gateway (#824) (1878bb5), closes #313

0.4.2 (2024-05-15)

Features

  • docs: improve serviceregistry doc annotations (#799) (df8a504)

Bug Fixes

  • authz: Adds jwt to context when verified (#764) (7bf6513)
  • ci: Use the correct schema with the provision fixture command (#794) (459e82a)
  • core: Bump dep on sdk; reduce go to 1.21 (#815) (fe4a5ca)
  • core: rollup readiness checks to central health service (#755) (8a65161), closes #726
  • core: Updates logs statements to log errors (#796) (7a3379b)
  • core: wrong AuthorizationService provided with missing logger (#791) (b13be04)
  • sdk: Reduces sdk go requirement to 1.21 (#795) (6baee80)
  • service: cleanup the cryptoprovider config (#803) (1458d17)

0.4.1 (2024-05-07)

Features

  • core: cors config (#746) (3433b5b)
  • core: Service Level Child Loggers (#740) (aa0f210)
  • ers: Create entity resolution service, replace idp plugin (#660) (ff44112)
  • sdk: insecure plaintext and skip verify conn (#670) (5c94d02)

Bug Fixes

0.4.0 (2024-04-30)

Features

  • chore: move db to pkg so types are exported (#707) (94d3d9d), closes #706

0.3.0 (2024-04-29)

Features

  • core: add service scoped database clients (#647) (019a3bf)

Bug Fixes

  • config: update docs for enforce dpop config and clean up markdown tables (#697) (983ce71)
  • policy: normalize FQN lookup to lower case (#668) (cd8a875), closes #669

0.2.0 (2024-04-26)

Features

  • policy: move key access server registry under policy (#655) (7b63394)
  • provisioning: Keycloak provisioning from custom config (#573) (f9e9d72)
  • sdk: make enforcement of DPoP optional (#617) (028064c)

Bug Fixes

0.1.0 (2024-04-22)

⚠ BREAKING CHANGES

  • Singular platform/service (#511)

Features

  • ability to add public routes that bypass authn middleware (#601) (7c65308)
  • ability to set config key or config file from root cmd (#502) (56a0131)
  • allow --insecure in provision keycloak cmd (#629) (a672325)
  • kas: support HSM and standard crypto (#497) (f0cbe03)
  • opa: Adding jq OPA builtin for selection (#527) (d4ab17a)
  • policy: add created_at and updated_at timestamps to metadata (#538) (e812563)
  • policy: update fixtures, proto comments, and proto field names to reflect use of jq selector syntax within Conditions of Subject Sets (#523) (16f40f7)
  • sdk: don't require client_id in the auth token (#544) (a1e70f9)
  • sdk: normalize token exchange (#546) (9059dff)

Bug Fixes

  • authorization: Hierarchy working in GetDecisions (#519) (2856485)
  • core: allow org-admin casbin role to call KAS rewrap endpoint (#579) (a64c62a)
  • core: fix panic on nil pointer dereference by passing KAS the SDK instance on registration (#574) (327bfca)
  • core: fixes fixtures provisioning after filepath change with repo restructuring (#521) (f128e9f)
  • load extraprops for a service config with remainder values (#524) (d3d72dc)
  • PLAT-3069: opentdf/platform, gRPC: Namespace with existed attribute(s) can be deactivated w/o any prompts (#489) (e5a3324)
  • policy: remove hardcoded schema in goose migration 20240405000000 (#596) (36c3b16)
  • policy: return created_at and updated_at timestamps in CREATE metadata (#557) (fcaaeea)
  • resolves issues auth policy configuration (#498) (08e67cf)
  • service: go.mod version fix sync (#604) (6323efd)
  • url encode db password field to handle special characters (#624) (5069f9d)

Code Refactoring