From 8b8739cb72cea21d9f8453cf3fd86bc37444227d Mon Sep 17 00:00:00 2001
From: "opentdf-automation[bot]"
 <149537512+opentdf-automation[bot]@users.noreply.github.com>
Date: Tue, 21 Jul 2026 20:08:02 +0000
Subject: [PATCH] chore(main): release service 0.21.0

---
 .../release-please-manifest.json              |  2 +-
 service/CHANGELOG.md                          | 20 +++++++++++++++++++
 service/cmd/version.go                        |  2 +-
 3 files changed, 22 insertions(+), 2 deletions(-)

diff --git a/.github/release-please/release-please-manifest.json b/.github/release-please/release-please-manifest.json
index 8eb93d93b2..972d73a4a1 100644
--- a/.github/release-please/release-please-manifest.json
+++ b/.github/release-please/release-please-manifest.json
@@ -6,5 +6,5 @@
   "otdfctl": "0.35.0",
   "protocol/go": "0.39.0",
   "sdk": "0.26.0",
-  "service": "0.20.0"
+  "service": "0.21.0"
 }
\ No newline at end of file
diff --git a/service/CHANGELOG.md b/service/CHANGELOG.md
index 27a6d73a42..8bed5ccdba 100644
--- a/service/CHANGELOG.md
+++ b/service/CHANGELOG.md
@@ -1,5 +1,25 @@
 # Changelog
 
+## [0.21.0](https://github.com/opentdf/platform/compare/service/v0.20.0...service/v0.21.0) (2026-07-21)
+
+
+### Features
+
+* **core:** Update fixtures ([#3766](https://github.com/opentdf/platform/issues/3766)) ([9ac1640](https://github.com/opentdf/platform/commit/9ac1640df7d8447cdaaa540d0eacc98daa3c832d))
+* **policy:** add entitleable namespace field and narrow-read-API doc corrections ([#3727](https://github.com/opentdf/platform/issues/3727)) ([0fc2f01](https://github.com/opentdf/platform/commit/0fc2f01fbb0d75b04d2a5dcb94e5acdea9f62b6f))
+* **policy:** Add name and manager lookup ([#3753](https://github.com/opentdf/platform/issues/3753)) ([bfbc65d](https://github.com/opentdf/platform/commit/bfbc65d6f56a7d28144379f535bd82ce61e62bdd))
+* **policy:** Add UnsafeUpdateKey rpc. ([#3728](https://github.com/opentdf/platform/issues/3728)) ([c89b193](https://github.com/opentdf/platform/commit/c89b1933e3931bc1984711f2268c8adedd786db4))
+* **policy:** create subject mappings with attribute values ([#3741](https://github.com/opentdf/platform/issues/3741)) ([718320b](https://github.com/opentdf/platform/commit/718320b2bbe1a03041ed70bb3b20eb3c30cf64fa))
+* **policy:** deprecate GetAttributeValuesByFqns in favor of narrow read APIs ([#3745](https://github.com/opentdf/platform/issues/3745)) ([baba709](https://github.com/opentdf/platform/commit/baba70913cfe615448ab05b465ecdaf037791889))
+* **policy:** dynamic attribute value entitlement mappings ([#3568](https://github.com/opentdf/platform/issues/3568)) ([21e95e0](https://github.com/opentdf/platform/commit/21e95e04c9f5903dc4c437d12ea790bbbf20bbb1))
+* **policy:** populate entitleable definition namespace ([#3737](https://github.com/opentdf/platform/issues/3737)) ([3f32839](https://github.com/opentdf/platform/commit/3f32839689e257338babb91903298b3b0256385c))
+
+
+### Bug Fixes
+
+* **authz:** use standard Keycloak token exchange ([#3754](https://github.com/opentdf/platform/issues/3754)) ([de9ae0d](https://github.com/opentdf/platform/commit/de9ae0dde552267470b44c4e09854034cbc70e84))
+* **core:** Pass the platform logger to the authz role provider factory ([#3732](https://github.com/opentdf/platform/issues/3732)) ([9c32554](https://github.com/opentdf/platform/commit/9c32554958aef3572728c0465a047c7779a06d95))
+
 ## [0.20.0](https://github.com/opentdf/platform/compare/service/v0.19.0...service/v0.20.0) (2026-07-07)
 
 
diff --git a/service/cmd/version.go b/service/cmd/version.go
index 5c634e0ffd..07f2e0dbe4 100644
--- a/service/cmd/version.go
+++ b/service/cmd/version.go
@@ -2,7 +2,7 @@ package cmd
 
 import "github.com/spf13/cobra"
 
-const Version = "0.20.0" // Service Version // x-release-please-version
+const Version = "0.21.0" // Service Version // x-release-please-version
 
 func init() {
 	rootCmd.AddCommand(&cobra.Command{