service: v0.19.0

0.19.0 (2026-06-30)

Features

• authz: Authz-v2 docs (#3670) (4ab7fe8)
• authz: move DPoP enforcement into dpop.enforce config (DSPX-3397) (#3666) (daebade)
• core: add global audit config and add configured JWT claims to audit logs (#3429) (03021fa)
• kas: Adds FIPS-203 wrap with ML-KEM-768/1024 (#3652) (06f30ef)
• policy: Add kas_uri dimenstion to ListKeys. (#3663) (41cee41)

Bug Fixes

• authz: Add default role for every req. (#3664) (2a7095a)
• authz: emit WWW-Authenticate DPoP on all proof rejections (DSPX-3397) (#3665) (d7caacd)
• deps: bump github.com/opentdf/platform/sdk from 0.24.0 to 0.25.0 in /service (#3687) (0b7f77a)
• kas: verify rewrap SRT with its actual JWS algorithm (#3691) (1f073b6)
• policy: undo Condition.operator deprecation (#3668) (917f66a)