Skip to content

fix(deps): bump github.com/opentdf/platform/sdk from 0.33.0 to 0.35.0 in /otdfctl - #4230

Merged
jakedoublev merged 1 commit into
mainfrom
dependabot/go_modules/otdfctl/github.com/opentdf/platform/sdk-0.35.0
Oct 19, 2026
Merged

jakedoublev merged 1 commit into
mainfrom
dependabot/go_modules/otdfctl/github.com/opentdf/platform/sdk-0.35.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 15, 2026

Copy link
Copy Markdown
Contributor

Bumps github.com/opentdf/platform/sdk from 0.33.0 to 0.35.0.

Release notes

Sourced from github.com/opentdf/platform/sdk's releases.

protocol/go: v0.35.0

0.35.0 (2026-06-25)

Bug Fixes

  • policy: undo Condition.operator deprecation (#3668) (917f66a)

otdfctl: v0.35.0

0.35.0 (2026-07-07)

Bug Fixes

  • cli: Pull namespace for OTs from attr val (#3725) (2146d0f)

sdk: v0.35.0

0.35.0 (2026-10-15)

Features

  • kas: support ML-KEM client session keys in rewrap (#3814) (b81da1e)
  • sdk: DSPX-4975 configure token expiration buffer (#4224) (90f4aa0)
  • sdk: return ErrAESGCMExhausted when IV collision risk exceeds 2^-32 (DSPX-4492) (#4203) (55a9b57)

Bug Fixes

  • deps: bump github.com/opentdf/platform/protocol/go from 0.41.0 to 0.42.0 in /sdk (#4227) (daf575c)
  • sdk: bound zip64 reader offsets against the archive (DSPX-4590) (#4043) (85179a6)
  • sdk: make the manifest size limit opt-in (DSPX-4502) (#4214) (08ecb66)
  • sdk: read the TDF manifest under the spec name manifest.json (#4063) (a36b5df)
  • sdk: read the TDF spec version at the manifest root and under payload (#4060) (943df98)
  • sdk: remove panic with null assertions (DSPX-5102) (#4212) (3afe2d0)

protocol/go: v0.34.0

0.34.0 (2026-06-17)

⚠ BREAKING CHANGES

  • core: Add min_len to search term. (#3604)

Features

  • policy: DSPX-2754 DynamicValueMapping protos + generated code (#3580) (090c0f6)

Bug Fixes

... (truncated)

Commits
  • b048476 chore(main): release sdk 0.35.0 (#4123)
  • 90f4aa0 feat(sdk): DSPX-4975 configure token expiration buffer (#4224)
  • e8094bb chore(core): centralize rewrap failure reasons (#4225)
  • d937028 fix(kas): accept spec-compliant policy bindings (#4223)
  • 4c239d0 chore(main): release service 0.29.0 (#4168)
  • 4e2ab71 fix(deps): bump github.com/opentdf/platform/protocol/go from 0.41.0 to 0.42.0...
  • daf575c fix(deps): bump github.com/opentdf/platform/protocol/go from 0.41.0 to 0.42.0...
  • 5580481 fix(deps): bump github.com/opentdf/platform/protocol/go from 0.41.0 to 0.42.0...
  • 24ad887 chore(main): release protocol/go 0.42.0 (#4011)
  • 568d23e fix(kas): complete rewrap audit coverage (#4205)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [github.com/opentdf/platform/sdk](https://github.com/opentdf/platform) from 0.33.0 to 0.35.0.
- [Release notes](https://github.com/opentdf/platform/releases)
- [Commits](sdk/v0.33.0...sdk/v0.35.0)

---
updated-dependencies:
- dependency-name: github.com/opentdf/platform/sdk
  dependency-version: 0.35.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Oct 15, 2026
@dependabot
dependabot Bot requested a review from a team as a code owner October 15, 2026 17:54
@dependabot dependabot Bot added the go Pull requests that update Go code label Oct 15, 2026
@coderabbitai

coderabbitai Bot commented Oct 15, 2026

Copy link
Copy Markdown

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration
  • Configuration used: Repository UI
  • Review profile: ASSERTIVE
  • Plan: Advanced
  • Run ID: c76238ae-0a73-4f47-b2c7-bb5fe8ad6ed2

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • 🔍 Trigger review
  • Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

@github-actions

Copy link
Copy Markdown
Contributor

⚠️ Govulncheck found vulnerabilities ⚠️

The following modules have known vulnerabilities:

  • otdfctl
  • sdk
  • service
  • lib/fixtures
  • tests-bdd

See the workflow run for details.

@github-actions

Copy link
Copy Markdown
Contributor
Benchmark results, click to expand

Bulk Benchmark Results

Metric Value
Total Decrypts 100
Successful Decrypts 100
Failed Decrypts 0
Total Time 411.870266ms
Throughput 242.79 requests/second

TDF3 Benchmark Results

Metric Value
Total Requests 5000
Successful Requests 5000
Failed Requests 0
Concurrent Requests 50
Total Time 47.017360385s
Average Latency 469.530226ms
Throughput 106.34 requests/second

@jakedoublev
jakedoublev added this pull request to the merge queue Oct 19, 2026
Merged via the queue into main with commit 562a937 Oct 19, 2026
50 checks passed
@jakedoublev
jakedoublev deleted the dependabot/go_modules/otdfctl/github.com/opentdf/platform/sdk-0.35.0 branch October 19, 2026 15:01
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update Go code size/xs

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant