[elizabethhealy]

Bump the SDK dependency to v0.33.0 (released in #4068).

• service: github.com/opentdf/platform/sdk v0.31.0 → v0.33.0
• examples: github.com/opentdf/platform/sdk v0.32.0 → v0.33.0
• go.sum checksums updated in both (verified against sum.golang.org)

SDK v0.33.0 transitive deps are already at or below the versions both modules pin, so no other module changes are needed.

Not included:

• test/integration uses a local replace, so nothing to bump
• tests-bdd is still pinned to sdk v0.25.0 / service v0.7.2 with many older deps. Upgrading it needs a full go mod tidy, so it should get its own PR.

Summary by CodeRabbit

• Chores
  • No user-facing changes are included in this update. There are no new features, behavior changes, or bug fixes to highlight. The update is limited to behind-the-scenes maintenance and does not alter the experience or capabilities available in the product.

[coderabbitai]

Navigate logical layers of code changes, visualize relationships, and explore their blast radius.

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Repository UI

Review profile: ASSERTIVE

Plan: Advanced

Run ID: 2703d52e-c9fd-4615-a2c9-e1db57741459

📥 Commits

Reviewing files that changed from the base of the PR and between 3ee815f and 8eb21fb.

⛔ Files ignored due to path filters (2)

• examples/go.sum is excluded by !**/*.sum
• service/go.sum is excluded by !**/*.sum

📒 Files selected for processing (2)

• examples/go.mod
• service/go.mod

Included review availability: This review used your included allowance. Your plan provides up to 1 included review per hour; 0 remain after this review.

---

📝 Walkthrough

Walkthrough

The examples and service modules now require github.com/opentdf/platform/sdk v0.33.0, replacing v0.32.0 and v0.31.0, respectively.

Changes

SDK Dependency Updates

Layer / File(s)	Summary
Update SDK version requirements examples/go.mod, service/go.mod	The examples module now requires SDK v0.33.0 instead of v0.32.0. The service module now requires v0.33.0 instead of v0.31.0.

Priority: ⬇️ Low

Estimated code review effort: 1 (Trivial) | ~3 minutes

Change: Other

Suggested reviewers: pflynn-virtru

Merge Risk: ⚪ Minimal · up to 8eb21

The documented reader-position change does not affect the inspected example inputs, and no concrete service regression was established. Merge risk is minimal; normal build validation remains outstanding.

Architecture Summary

Architecture risk: 🔵 Low · up to 8eb21

The change affects 2 systems.

Changed systems: examples, service

Architecture concerns
No architecture-level concerns identified.

Review details

Systems and components

• observed — examples (service) was modified; 1 changed file maps to changed impact.
• observed — service (service) was modified; 1 changed file maps to changed impact.

Before / after behavior

• observed — Modified behavior in examples/go.mod: The github.com/opentdf/platform/sdk requirement was upgraded from v0.32.0 to v0.33.0.
• observed — Modified behavior in service/go.mod: The required github.com/opentdf/platform/sdk version changed from v0.31.0 to v0.33.0.

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title clearly and concisely describes the SDK dependency upgrade to v0.33.0 in both /service and /examples.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0…
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Commit to this branch
• Create a new PR

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{A rabbit checks the versions in a row
Two modules now have newer SDKs to show
From thirty-one and thirty-two
To thirty-three, both hop anew
The rabbit nods, then bounds through snow}

_{Comment @coderabbitai help to get the list of available commands.}

[github-actions]

Benchmark results, click to expand

Benchmark authorization.GetDecisions Results:

Metric	Value
Approved Decision Requests	1000
Denied Decision Requests	0
Total Time	187.146228ms

Benchmark authorization.v2.GetMultiResourceDecision Results:

Metric	Value
Approved Decision Requests	1000
Denied Decision Requests	0
Total Time	103.219477ms

Benchmark Statistics

Name	№ Requests	Avg Duration	Min Duration	Max Duration

Bulk Benchmark Results

Metric	Value
Total Decrypts	100
Successful Decrypts	100
Failed Decrypts	0
Total Time	397.823906ms
Throughput	251.37 requests/second

TDF3 Benchmark Results:

Metric	Value
Total Requests	5000
Successful Requests	5000
Failed Requests	0
Concurrent Requests	50
Total Time	51.751356504s
Average Latency	516.3121ms
Throughput	96.62 requests/second

[github-actions]

⚠️ Govulncheck found vulnerabilities ⚠️

The following modules have known vulnerabilities:

• otdfctl
• service
• tests-bdd

See the workflow run for details.

[github-actions]

X-Test Results

✅ go@pull-4109-main
✅ java@main-pull-4109
✅ java@main-main
✅ go@pull-4109-pull-4109
✅ go@main-v0.9.0
✅ js@main-pull-4109
✅ go@main-pull-4109
cukes-report
govulncheck-failure-8
✅ go@pull-4109-v0.9.0
govulncheck-failure-3
✅ js@main-main
✅ java@main-v0.9.0
govulncheck-failure-1
✅ js@main-v0.9.0
✅ go@main-main
bats-test-results
opentdfplatformDAYRNY.dockerbuild