Skip to content

fix(deps): bump github.com/opentdf/platform/sdk from 0.33.0 to 0.35.0 in /service - #4231

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/service/github.com/opentdf/platform/sdk-0.35.0
Open

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/service/github.com/opentdf/platform/sdk-0.35.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 15, 2026 •

Copy link
Copy Markdown
Contributor

Bumps github.com/opentdf/platform/sdk from 0.33.0 to 0.35.0.

Release notes

Sourced from github.com/opentdf/platform/sdk's releases.

protocol/go: v0.35.0

0.35.0 (2026-06-25)

Bug Fixes

  • policy: undo Condition.operator deprecation (#3668) (917f66a)

otdfctl: v0.35.0

0.35.0 (2026-07-07)

Bug Fixes

  • cli: Pull namespace for OTs from attr val (#3725) (2146d0f)

sdk: v0.35.0

0.35.0 (2026-10-15)

Features

  • kas: support ML-KEM client session keys in rewrap (#3814) (b81da1e)
  • sdk: DSPX-4975 configure token expiration buffer (#4224) (90f4aa0)
  • sdk: return ErrAESGCMExhausted when IV collision risk exceeds 2^-32 (DSPX-4492) (#4203) (55a9b57)

Bug Fixes

  • deps: bump github.com/opentdf/platform/protocol/go from 0.41.0 to 0.42.0 in /sdk (#4227) (daf575c)
  • sdk: bound zip64 reader offsets against the archive (DSPX-4590) (#4043) (85179a6)
  • sdk: make the manifest size limit opt-in (DSPX-4502) (#4214) (08ecb66)
  • sdk: read the TDF manifest under the spec name manifest.json (#4063) (a36b5df)
  • sdk: read the TDF spec version at the manifest root and under payload (#4060) (943df98)
  • sdk: remove panic with null assertions (DSPX-5102) (#4212) (3afe2d0)

protocol/go: v0.34.0

0.34.0 (2026-06-17)

⚠ BREAKING CHANGES

  • core: Add min_len to search term. (#3604)

Features

  • policy: DSPX-2754 DynamicValueMapping protos + generated code (#3580) (090c0f6)

Bug Fixes

... (truncated)

Commits
  • b048476 chore(main): release sdk 0.35.0 (#4123)
  • 90f4aa0 feat(sdk): DSPX-4975 configure token expiration buffer (#4224)
  • e8094bb chore(core): centralize rewrap failure reasons (#4225)
  • d937028 fix(kas): accept spec-compliant policy bindings (#4223)
  • 4c239d0 chore(main): release service 0.29.0 (#4168)
  • 4e2ab71 fix(deps): bump github.com/opentdf/platform/protocol/go from 0.41.0 to 0.42.0...
  • daf575c fix(deps): bump github.com/opentdf/platform/protocol/go from 0.41.0 to 0.42.0...
  • 5580481 fix(deps): bump github.com/opentdf/platform/protocol/go from 0.41.0 to 0.42.0...
  • 24ad887 chore(main): release protocol/go 0.42.0 (#4011)
  • 568d23e fix(kas): complete rewrap audit coverage (#4205)
  • Additional commits viewable in compare view

@dependabot
dependabot Bot requested a review from a team as a code owner October 15, 2026 17:55
@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Oct 15, 2026
@dependabot
dependabot Bot requested a review from a team as a code owner October 15, 2026 17:55
@dependabot dependabot Bot added the go Pull requests that update Go code label Oct 15, 2026
@coderabbitai

coderabbitai Bot commented Oct 15, 2026 •

Copy link
Copy Markdown

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration
  • Configuration used: Repository UI
  • Review profile: ASSERTIVE
  • Plan: Advanced
  • Run ID: a6a0da91-b919-4e5b-9db4-d89a14f0cec3

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • 🔍 Trigger review
  • Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

@github-actions

Copy link
Copy Markdown
Contributor
Benchmark results, click to expand

Bulk Benchmark Results

Metric Value
Total Decrypts 100
Successful Decrypts 100
Failed Decrypts 0
Total Time 238.901855ms
Throughput 418.58 requests/second

TDF3 Benchmark Results

Metric Value
Total Requests 5000
Successful Requests 5000
Failed Requests 0
Concurrent Requests 50
Total Time 27.475459053s
Average Latency 274.07838ms
Throughput 181.98 requests/second

Bumps [github.com/opentdf/platform/sdk](https://github.com/opentdf/platform) from 0.33.0 to 0.35.0.
- [Release notes](https://github.com/opentdf/platform/releases)
- [Commits](sdk/v0.33.0...sdk/v0.35.0)

---
updated-dependencies:
- dependency-name: github.com/opentdf/platform/sdk
  dependency-version: 0.35.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/go_modules/service/github.com/opentdf/platform/sdk-0.35.0 branch from cad426e to 6f7978c Compare October 19, 2026 15:04
@github-actions

Copy link
Copy Markdown
Contributor
Benchmark results, click to expand

Bulk Benchmark Results

Metric Value
Total Decrypts 100
Successful Decrypts 100
Failed Decrypts 0
Total Time 395.287523ms
Throughput 252.98 requests/second

TDF3 Benchmark Results

Metric Value
Total Requests 5000
Successful Requests 5000
Failed Requests 0
Concurrent Requests 50
Total Time 43.015570771s
Average Latency 429.339491ms
Throughput 116.24 requests/second

@github-actions

Copy link
Copy Markdown
Contributor

⚠️ Govulncheck found vulnerabilities ⚠️

The following modules have known vulnerabilities:

  • otdfctl
  • sdk
  • service
  • lib/fixtures
  • tests-bdd

See the workflow run for details.

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update Go code size/xs

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants