service: v0.16.0

0.16.0 (2026-06-01)

Features

• core: add hybrid NIST EC + ML-KEM key wrapping support (#3276) (1209acc)
• policy: Add FQN to RegisteredResourceValues (#3446) (3199583)
• policy: Add resource mapping group FQNs (#3447) (6a0b3c6)

Bug Fixes

• core: remove deprecated grpc-gateway (#3479) (a4230a2)
• deps: bump github.com/opentdf/platform/lib/ocrypto from 0.10.0 to 0.12.0 in /service (#3524) (9836404)
• deps: bump github.com/opentdf/platform/protocol/go from 0.30.0 to 0.31.0 in /service (#3497) (a29f108)
• deps: bump github.com/opentdf/platform/protocol/go from 0.31.0 to 0.32.0 in /service (#3523) (5f316f0)
• deps: bump github.com/opentdf/platform/sdk from 0.19.0 to 0.20.0 in /service (#3467) (7045d6e)
• deps: bump github.com/opentdf/platform/sdk from 0.20.0 to 0.21.0 in /service (#3548) (09fff7f)
• deps: bump module protocol/go to v0.30.0 throughout (#3459) (8eaa502)
• policy: include action_attribute_values in GetRegisteredResource response (#3472) (29eff55)

sdk: v0.21.0

0.21.0 (2026-05-28)

Features

• core: add hybrid NIST EC + ML-KEM key wrapping support (#3276) (1209acc)
• sdk: add WithPolicyFrom re-wrap helper (#3476) (baa1403)

Bug Fixes

• deps: bump github.com/opentdf/platform/lib/ocrypto from 0.10.0 to 0.11.0 in /sdk (#3522) (e147d12)
• deps: bump github.com/opentdf/platform/lib/ocrypto from 0.11.0 to 0.12.0 in /sdk (#3534) (e95fb70)
• deps: bump github.com/opentdf/platform/protocol/go from 0.30.0 to 0.31.0 in /sdk (#3496) (1415e8e)
• deps: bump github.com/opentdf/platform/protocol/go from 0.31.0 to 0.32.0 in /sdk (#3520) (0385ab4)
• sdk: DSPX-3464 Adds subject_token_type to RFC 8693 token exchanges (#3465) (ed9b0fc)

lib/ocrypto: v0.12.0

0.12.0 (2026-05-27)

Bug Fixes

• core: Uses strict FIPS AES-GCM (#3507) (a0bb218)
• deps: bump the external group across 1 directory with 2 updates (#3519) (0d0c57b)

protocol/go: v0.32.0

0.32.0 (2026-05-21)

Features

• core: add hybrid NIST EC + ML-KEM key wrapping support (#3276) (1209acc)

lib/ocrypto: v0.11.0

0.11.0 (2026-05-26)

Features

• core: add hybrid NIST EC + ML-KEM key wrapping support (#3276) (1209acc)

Bug Fixes

• ci: Upgrade toolchain version to 1.25.8 (#3116) (e1b7882)
• deps: bump the external group across 3 directories with 2 updates (#3153) (c832d89)

otdfctl: v0.32.0

0.32.0 (2026-05-19)

Features

• cli: Add better unit testing. (#3378) (3ad33dc)
• cli: Add interactive review for prune plans (#3421) (c11680b)
• cli: Add prune confirmation. (#3469) (c6d47ec)
• cli: Add prune planner. (#3411) (3e294e6)
• cli: Add prune summary information (#3456) (c900c53)
• cli: add sensitive flag annotation to DocFlag (#3457) (98f48d2)
• cli: Confirm and execute pruning of legacy objects (#3458) (24c09dd)
• cli: Print report on failure (#3365) (05a4473)
• cli: Sort parameters. (#3478) (73ad878)
• policy: Add FQN to RegisteredResourceValues (#3446) (3199583)
• policy: Add resource mapping group FQNs (#3447) (6a0b3c6)

Bug Fixes

• cli: Prune was not classifying multi-namespaced RRs properly. (#3488) (eae8645)
• cli: support json profile output (#3448) (61f194c)
• deps: bump github.com/opentdf/platform/lib/identifier from 0.3.0 to 0.4.0 in /otdfctl (#3367) (aa23179)
• deps: bump github.com/opentdf/platform/protocol/go from 0.27.0 to 0.28.0 in /otdfctl (#3419) (c80374f)
• deps: bump github.com/opentdf/platform/sdk from 0.16.0 to 0.17.0 in /otdfctl (#3397) (bb9fcd6)
• deps: bump go.opentelemetry.io/otel from 1.40.0 to 1.41.0 in /otdfctl (#3400) (5631c37)
• deps: bump module protocol/go to v0.30.0 throughout (#3459) (8eaa502)

protocol/go: v0.31.0

0.31.0 (2026-05-19)

Bug Fixes

• core: remove deprecated grpc-gateway (#3479) (a4230a2)

sdk: v0.20.0

0.20.0 (2026-05-11)

Bug Fixes

• deps: bump module protocol/go to v0.30.0 throughout (#3459) (8eaa502)

protocol/go: v0.30.0

0.30.0 (2026-05-11)

Features

• policy: Add FQN to RegisteredResourceValues (#3446) (3199583)
• policy: Add resource mapping group FQNs (#3447) (6a0b3c6)

service: v0.15.0

0.15.0 (2026-05-06)

Features

• core: pass access token verifier down to registered services (#3428) (b8abf17)
• policy: add sort support to listkaskeys (#3344) (de1fe92)
• policy: support inline obligation triggers on attribute value create (#3432) (876f512)

Bug Fixes

• core: infer JWT algorithms for JWKS keys without alg (#3434) (83285e7)
• deps: bump github.com/Azure/go-ntlmssp from 0.0.0-20221128193559-754e69321358 to 0.1.1 in /service (#3388) (ef79989)
• deps: bump github.com/jackc/pgx/v5 from 5.9.0 to 5.9.2 in /service (#3371) (ab0974b)
• deps: bump github.com/opentdf/platform/lib/identifier from 0.3.0 to 0.4.0 in /service (#3366) (4650e9b)
• deps: bump github.com/opentdf/platform/protocol/go from 0.25.0 to 0.26.0 in /service (#3381) (ebc65f6)
• deps: bump github.com/opentdf/platform/protocol/go from 0.26.0 to 0.27.0 in /service (#3392) (0c36cfa)
• deps: bump github.com/opentdf/platform/protocol/go from 0.27.0 to 0.28.0 in /service (#3416) (bc137f6)
• deps: bump github.com/opentdf/platform/sdk from 0.16.0 to 0.17.0 in /service (#3395) (0382742)
• deps: bump github.com/opentdf/platform/sdk from 0.17.0 to 0.19.0 in /service (#3423) (969ac33)