service: v0.15.0

0.15.0 (2026-05-06)

Features

• core: pass access token verifier down to registered services (#3428) (b8abf17)
• policy: add sort support to listkaskeys (#3344) (de1fe92)
• policy: support inline obligation triggers on attribute value create (#3432) (876f512)

Bug Fixes

• core: infer JWT algorithms for JWKS keys without alg (#3434) (83285e7)
• deps: bump github.com/Azure/go-ntlmssp from 0.0.0-20221128193559-754e69321358 to 0.1.1 in /service (#3388) (ef79989)
• deps: bump github.com/jackc/pgx/v5 from 5.9.0 to 5.9.2 in /service (#3371) (ab0974b)
• deps: bump github.com/opentdf/platform/lib/identifier from 0.3.0 to 0.4.0 in /service (#3366) (4650e9b)
• deps: bump github.com/opentdf/platform/protocol/go from 0.25.0 to 0.26.0 in /service (#3381) (ebc65f6)
• deps: bump github.com/opentdf/platform/protocol/go from 0.26.0 to 0.27.0 in /service (#3392) (0c36cfa)
• deps: bump github.com/opentdf/platform/protocol/go from 0.27.0 to 0.28.0 in /service (#3416) (bc137f6)
• deps: bump github.com/opentdf/platform/sdk from 0.16.0 to 0.17.0 in /service (#3395) (0382742)
• deps: bump github.com/opentdf/platform/sdk from 0.17.0 to 0.19.0 in /service (#3423) (969ac33)

sdk: v0.19.0

0.19.0 (2026-05-06)

Bug Fixes

• deps: bump the external group across 1 directory with 7 updates (#3422) (be0da08)

protocol/go: v0.29.0

0.29.0 (2026-05-05)

Features

• policy: support inline obligation triggers on attribute value create (#3432) (876f512)

sdk: v0.18.0

0.18.0 (2026-04-29)

Features

• sdk: IsHealthy(ctx) public reachability probe (#3412) (3e2cf98)

Bug Fixes

• deps: bump github.com/opentdf/platform/protocol/go from 0.27.0 to 0.28.0 in /sdk (#3415) (701bd9f)
• deps: bump go.opentelemetry.io/otel from 1.40.0 to 1.41.0 in /sdk (#3399) (d98418b)

protocol/go: v0.28.0

0.28.0 (2026-04-28)

Features

• sdk: add shorthand enum constants for policy types (#3408) (c6f18cb)

sdk: v0.17.0

0.17.0 (2026-04-24)

Bug Fixes

• deps: bump github.com/opentdf/platform/protocol/go from 0.25.0 to 0.26.0 in /sdk (#3380) (5e36f94)
• deps: bump github.com/opentdf/platform/protocol/go from 0.26.0 to 0.27.0 in /sdk (#3393) (7659957)

protocol/go: v0.27.0

0.27.0 (2026-04-23)

Features

• policy: add sort support to listkaskeys (#3344) (de1fe92)

protocol/go: v0.26.0

0.26.0 (2026-04-22)

Features

• sdk: add ergonomic Resource constructors for authorization (#3337) (4a786ca)

Bug Fixes

• sdk: require at least one FQN in ForAttributeValues (#3355) (2529e11)

otdfctl: v0.31.0

0.31.0 (2026-04-22)

Features

• cli: Add e2e tests and fix bugs. (#3353) (213d843)
• cli: Add E2E tests for namespaced policy. (#3363) (e46f07d)
• cli: Interactive confirmation (#3360) (cd931d9)
• cli: migrate otdfctl into platform monorepo (#3205) (5177bec)

Bug Fixes

• deps: bump github.com/opentdf/platform/sdk from 0.15.0 to 0.16.0 in /otdfctl (#3357) (d829184)

service: v0.14.0

0.14.0 (2026-04-21)

⚠ BREAKING CHANGES

• sdk: reclassify KAS 400 errors — distinguish tamper from misconfiguration (#3166)
• policy: optional namespace for RRs (#3165)
• policy: Namespace subject mappings and subject condition sets. (#3143)
• policy: Optional namespace on actions protos, NamespacedPolicy feature flag (#3155)
• policy: add namespaced actions schema and namespace-aware action queries (#3154)
• policy: only require namespace on GetAction if no id provided (#3144)
• policy: add namespace field to Actions proto (#3130)
• policy: namespace Registered Resources (#3111)
• policy: add namespace field to RegisteredResource proto (#3110)

Features

• authz: Namespaced policy in decisioning (#3226) (0355934)
• cli: migrate otdfctl into platform monorepo (#3205) (5177bec)
• fix tracing (#3242) (57e5680)
• policy: add GetObligationTrigger RPC (#3318) (d68e39d)
• policy: add namespace field to Actions proto (#3130) (bedc9b3)
• policy: add namespace field to RegisteredResource proto (#3110) (04fd85d)
• policy: add namespaced actions schema and namespace-aware action queries (#3154) (c0443f1)
• policy: add sort ListSubjectMappings API (#3255) (9d5d757)
• policy: Add sort support listregisteredresources api (#3312) (91a3ff3)
• policy: add sort support to ListAttributes API (#3223) (ec3312f)
• policy: add sort support to ListKeyAccessServer (#3287) (7fae2d7)
• policy: Add sort support to ListNamespaces API (#3192) (aac86cd)
• policy: add sort support to listobligations api (#3300) (9221cac)
• policy: add sort support to ListSubjectConditionSets API (#3272) (9010f12)
• policy: add SortField proto and update PageRequest for sort support (#3187) (6cf1862)
• policy: Enforce same namespace when actions referenced downstream (#3206) (4b5463a)
• policy: namespace Registered Resources (#3111) (6db1883)
• policy: Namespace subject mappings and condition sets (#3172) (6deed50)
• policy: Namespace subject mappings and subject condition sets. (#3143) (3006780)
• policy: optional namespace for RRs (#3165) (8948018)
• policy: rollback migration strategy for namespaced actions (#3235) (f7e5e01)
• policy: Seed existing namespaces with standard actions (#3228) (12136b0)
• policy: Seed namespaces with standard actions on creation + namespaced actions for obligation triggers (#3161) (984d76b)

Bug Fixes

• ci: Upgrade toolchain version to 1.25.8 (#3116) (e1b7882)
• core: do not concat slashes directly in url/file paths (#3290) (114c2a7)
• deps: bump github.com/jackc/pgx/v5 from 5.7.5 to 5.9.0 in /service (#3316) (017362e)
• deps: bump github.com/opentdf/platform/lib/identifier from 0.2.0 to 0.3.0 in /service (#3162) (8bc5dcd)
• deps: bump github.com/opentdf/platform/protocol/go from 0.16.0 to 0.17.0 in /service (#3125) (29fec61)
• deps: bump github.com/opentdf/platform/protocol/go from 0.17.0 to 0.21.0 in /service (#3220) (e63add2)
• deps: bump github.com/opentdf/platform/protocol/go from 0.21.0 to 0.22.0 in /service (#3248) (1ebce73)
• deps: bump github.com/opentdf/platform/protocol/go from 0.22.0 to 0.23.0 in /service (#3271) (3338b8e)
• deps: bump github.com/opentdf/platform/protocol/go from 0.23.0 to 0.24.0 in /service (#3321) (78e6022)
• deps: bump github.com/opentdf/platform/protocol/go from 0.24.0 to 0.25.0 in /service (#3333) (3940bf8)
• deps: bump github.com/opentdf/platform/sdk from 0.13.0 to 0.16.0 in /service (#3356) (5617077)
• deps: bump go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp from 1.42.0 to 1.43.0 in /service (#3282) (046374a)
• deps: bump go.opentelemetry.io/otel/sdk from 1.42.0 to 1.43.0 in /service (#3281) (56b33f2)
• deps: bump google.golang.org/grpc from 1.77.0 to 1.79.3 in /service (#3176) (3289502)
• deps: remove direct github.com/docker/docker dependency (#3229) (2becb27)
• deps: upgrade testcontainers-go to resolve vulns (#3299) (72c6f9b)
• ers: include standard J...