protocol/go: v0.38.0

0.38.0 (2026-07-09)

Features

• policy: add entitleable namespace field and narrow-read-API doc corrections (#3727) (0fc2f01)

service: v0.20.0

0.20.0 (2026-07-07)

⚠ BREAKING CHANGES

• policy: undo subject mapping operator decomposition (#3685)

Features

• policy: add narrow attribute read API protos and generated code (#3634) (5726720)
• policy: implement narrow attribute read APIs (#3697) (eaee9b2)
• policy: undo subject mapping operator decomposition (#3685) (84f3b92)

Bug Fixes

• deps: bump protocol/go to 0.37.0 and sdk to 0.26.0 in /service (#3721) (95d7aa4)
• policy: include attribute value fqn in subject mapping lookup (#3720) (8b63934)

otdfctl: v0.35.0

0.35.0 (2026-07-07)

Bug Fixes

• cli: Pull namespace for OTs from attr val (#3725) (2146d0f)

sdk: v0.26.0

0.26.0 (2026-07-02)

Features

• policy: add narrow attribute read API protos and generated code (#3634) (5726720)
• sdk: resolve key splits via GetKeyMappingsByFqns (#3699) (7a2320b)

Bug Fixes

• deps: bump github.com/opentdf/platform/protocol/go from 0.36.0 to 0.37.0 in /sdk (#3707) (4277e96)

service: v0.19.0

0.19.0 (2026-06-30)

Features

• authz: Authz-v2 docs (#3670) (4ab7fe8)
• authz: move DPoP enforcement into dpop.enforce config (DSPX-3397) (#3666) (daebade)
• core: add global audit config and add configured JWT claims to audit logs (#3429) (03021fa)
• kas: Adds FIPS-203 wrap with ML-KEM-768/1024 (#3652) (06f30ef)
• policy: Add kas_uri dimenstion to ListKeys. (#3663) (41cee41)

Bug Fixes

• authz: Add default role for every req. (#3664) (2a7095a)
• authz: emit WWW-Authenticate DPoP on all proof rejections (DSPX-3397) (#3665) (d7caacd)
• deps: bump github.com/opentdf/platform/sdk from 0.24.0 to 0.25.0 in /service (#3687) (0b7f77a)
• kas: verify rewrap SRT with its actual JWS algorithm (#3691) (1f073b6)
• policy: undo Condition.operator deprecation (#3668) (917f66a)

protocol/go: v0.37.0

0.37.0 (2026-07-01)

⚠ BREAKING CHANGES

• policy: undo subject mapping operator decomposition (#3685)

Features

• policy: add narrow attribute read API protos and generated code (#3634) (5726720)
• policy: undo subject mapping operator decomposition (#3685) (84f3b92)

otdfctl: v0.34.0

0.34.0 (2026-07-01)

Features

• cli: Add search to cli (#3616) (1fb2549)
• cli: DSPX-2998 namespace flags for resource mapping commands (#3576) (beaaac5)
• core: Disable pq algorithms due to format change (#3625) (4a7353d)
• core: Re-enable pq algorithms after format change (#3651) (005f9de)
• kas: Adds FIPS-203 wrap with ML-KEM-768/1024 (#3652) (06f30ef)

Bug Fixes

• cli: fix the get key command. (#3598) (6f832d6)
• deps: bump github.com/opentdf/platform/sdk from 0.22.0 to 0.25.0 in /otdfctl (#3690) (ec2dc5c)

sdk: v0.25.0

0.25.0 (2026-06-29)

Features

• kas: Adds FIPS-203 wrap with ML-KEM-768/1024 (#3652) (06f30ef)

Bug Fixes

• deps: bump github.com/opentdf/platform/lib/ocrypto from 0.13.0 to 0.14.0 in /sdk (#3684) (78366f7)
• deps: bump github.com/opentdf/platform/protocol/go from 0.34.0 to 0.36.0 in /sdk (#3681) (b6cc5cd)

protocol/go: v0.36.0

0.36.0 (2026-06-29)

Features

• kas: Adds FIPS-203 wrap with ML-KEM-768/1024 (#3652) (06f30ef)

lib/ocrypto: v0.14.0

0.14.0 (2026-06-29)

Features

• kas: Adds FIPS-203 wrap with ML-KEM-768/1024 (#3652) (06f30ef)