fix(deps): bump the external group across 1 directory with 9 updates by dependabot[bot] · Pull Request #3347 · opentdf/platform

dependabot · 2026-04-21T15:10:13Z

Bumps the external group with 6 updates in the /otdfctl directory:

Package	From	To
github.com/charmbracelet/bubbles	`0.21.1-0.20250623103423-23b8fd6302d7`	`1.0.0`
github.com/charmbracelet/glamour	`0.10.0`	`1.0.0`
github.com/charmbracelet/huh	`0.8.0`	`1.0.0`
github.com/golang-jwt/jwt/v5	`5.3.0`	`5.3.1`
github.com/zitadel/oidc/v3	`3.45.1`	`3.47.5`
google.golang.org/grpc	`1.79.3`	`1.81.0`

Updates github.com/charmbracelet/bubbles from 0.21.1-0.20250623103423-23b8fd6302d7 to 1.0.0

Release notes

Sourced from github.com/charmbracelet/bubbles's releases.

v1.0.0

This is just an honorary release of Bubbles v1. Stay tuned for the next major version 🫧

Changelog

Fixed

d0166363eb8176b331de98dba1d6e997560f216f: fix: changed 'recieve' to 'receive' for 100% quality of Go Report Card (#881) (@Atennop1)

Thoughts? Questions? We love hearing from you. Feel free to reach out on X, Discord, Slack, The Fediverse, Bluesky.

v0.21.1

Changelog

New!

dff42ddb7cf28f022da475c69dba2e74f75af34d: feat: update keybindings in list setSize method (@Broderick-Westrope)

Fixed

c376ce3ef18cc26bbf1f6338cc8518ae329a18d6: fix(cursor): fix data race on blinkTag (#784) (@DryHumour)

11d52ca426e5c594f7c6c10766935a7f30a83225: fix(table): preventing cursor from being out-of-bounds. (@s0ders)

49ff5c03b7bada572da36c79269dc15ab03d569b: fix(textinput): improve placeholder (#768) (@caarlos0)

7c44f63d3185e6f1d795e9369ba85185e6efe956: v1: fix(list): ensure correct cursor positions with page/cursor methods (#831) (@lrstanley)

Docs

7fcf75da535ee7db938586044a02f0f74f40339e: docs(readme): update footer image and copyright date (@meowgorithm)

d4feefed7d674edbfbc8f09e99c56704706038c5: docs: remove Charm Cloud reference (#785) (@ShalokShalom)

Other stuff

daab808a4d85e0b616ca9e30c1c5d9acd365aa02: ci: sync dependabot config (#786) (@charmcli)

4b2d311076480670a00b3f24fd9ad280c35c7c57: ci: sync dependabot config (#835) (@charmcli)

8562e9075fb87edf45e99c5d63a6610254d6c6e7: ci: sync golangci-lint config (#781) (@github-actions[bot])

f54a125f7decd8fefa0db4a0853720200d50a631: test(table): improve table unit tests (#601) (@Broderick-Westrope)

Thoughts? Questions? We love hearing from you. Feel free to reach out on X, Discord, Slack, The Fediverse, Bluesky.

Commits

See full diff in compare view

Updates github.com/charmbracelet/glamour from 0.10.0 to 1.0.0

Commits

69661fd chore(deps): bump actions/checkout from 5 to 6 in the all group (#491)
0af1a2d chore(deps): bump the all group with 2 updates (#482)
a9ec019 chore(deps): bump github.com/charmbracelet/x/ansi in the all group (#477)
7a4cf0c ci: sync dependabot config (#476)
49c8248 chore(deps): bump the all group with 2 updates (#472)
c1ce505 chore(deps): bump actions/setup-go from 5 to 6 in the all group (#471)
f9c650c ci: sync dependabot config (#470)
e3c481b chore(deps): bump actions/checkout from 4 to 5 (#469)
7209389 chore(deps): bump golang.org/x/term from 0.33.0 to 0.34.0 (#468)
f447e14 chore(deps): bump github.com/charmbracelet/x/ansi from 0.9.3 to 0.10.1 (#467)
Additional commits viewable in compare view

Updates github.com/charmbracelet/huh from 0.8.0 to 1.0.0

Commits

9dc45e3 chore(deps): bump github.com/charmbracelet/bubbles (#733)
bffc99a chore(deps): bump github.com/charmbracelet/bubbles (#739)
5c5971e chore(deps): bump github.com/charmbracelet/bubbles (#732)
04fe1e4 ci: sync golangci-lint config
cf33835 chore(deps): bump github.com/charmbracelet/x/exp/strings (#729)
6f7d32f chore: minor wording change in match select (#716)
6575a6e chore(deps): bump actions/checkout from 5 to 6 in the all group (#715)
25888d1 chore(deps): bump golangci/golangci-lint-action in the all group (#712)
See full diff in compare view

Updates github.com/golang-jwt/jwt/v5 from 5.3.0 to 5.3.1

Release notes

Sourced from github.com/golang-jwt/jwt/v5's releases.

v5.3.1

What's Changed

🔐 Features

Add spellcheck Github action to catch common spelling mistakes by @equalsgibson in golang-jwt/jwt#458

Add WithNotBeforeRequired parser option and add test coverage by @equalsgibson in golang-jwt/jwt#456

Update godoc example func to properly refer to NewWithClaims() by @equalsgibson in golang-jwt/jwt#459

Update github workflows by @mfridman in golang-jwt/jwt#462

Additional test for CustomClaims that validates unmarshalling behaviour by @equalsgibson in golang-jwt/jwt#457

Fix early file close in jwt cli by @mfridman in golang-jwt/jwt#472

Add TPM signature reference by @salrashid123 in golang-jwt/jwt#473

Remove misleading ParserOptions documentation in golang-jwt/jwt#484

Save signature to Token struct after successful signing by @EgorSheff in golang-jwt/jwt#417

Set token.Signature in ParseUnverified by @slickwilli in golang-jwt/jwt#414

👒 Dependencies

Bump crate-ci/typos from 1.34.0 to 1.35.3 by @dependabot[bot] in golang-jwt/jwt#461

Bump crate-ci/typos from 1.35.4 to 1.36.2 by @dependabot[bot] in golang-jwt/jwt#470

Bump github/codeql-action from 3 to 4 by @dependabot[bot] in golang-jwt/jwt#478

Bump crate-ci/typos from 1.36.2 to 1.39.0 by @dependabot[bot] in golang-jwt/jwt#480

Bump golangci/golangci-lint-action from 8 to 9 by @dependabot[bot] in golang-jwt/jwt#481

Bump actions/setup-go from 5 to 6 by @dependabot[bot] in golang-jwt/jwt#469

Bump crate-ci/typos from 1.39.0 to 1.40.0 by @dependabot[bot] in golang-jwt/jwt#488

Bump actions/checkout from 5 to 6 by @dependabot[bot] in golang-jwt/jwt#487

Bump crate-ci/typos from 1.40.0 to 1.41.0 by @dependabot[bot] in golang-jwt/jwt#490

Bump crate-ci/typos from 1.41.0 to 1.42.1 by @dependabot[bot] in golang-jwt/jwt#492

New Contributors

@equalsgibson made their first contribution in golang-jwt/jwt#458

@salrashid123 made their first contribution in golang-jwt/jwt#473

@EgorSheff made their first contribution in golang-jwt/jwt#417

@slickwilli made their first contribution in golang-jwt/jwt#414

Full Changelog: golang-jwt/jwt@v5.3.0...v5.3.1

Commits

7ceae61 Add release.yml for changelog configuration
dce8e4d Set token.Signature in ParseUnverified (#414)
8889e20 Save signature to Token struct after successful signing (#417)
d237f82 ci: update github-actions schedule interval to monthly
d8dce95 Bump crate-ci/typos from 1.41.0 to 1.42.1 (#492)
e931803 Bump crate-ci/typos from 1.40.0 to 1.41.0 (#490)
e6a0afa Bump actions/checkout from 5 to 6 (#487)
9f85c9e Bump crate-ci/typos from 1.39.0 to 1.40.0 (#488)
60a8669 Bump actions/setup-go from 5 to 6 (#469)
76f5828 Remove misleading ParserOptions documentation (#484)
Additional commits viewable in compare view

Updates github.com/zitadel/oidc/v3 from 3.45.1 to 3.47.5

Release notes

Sourced from github.com/zitadel/oidc/v3's releases.

v3.47.5

3.47.5 (2026-04-20)

Bug Fixes

op: allow dynamic loopback ports in post_logout_redirect_uri per RFC 8252 §7.3 (#875) (fb9fbfe), closes /datatracker.ietf.org/doc/html/rfc8252#section-7 zitadel/zitadel#6615

v3.47.4

3.47.4 (2026-04-17)

Bug Fixes

URL-encode client credentials in Basic Auth per RFC 6749 §2.3.1 (#873) (178e018), closes /datatracker.ietf.org/doc/html/rfc6749#section-2 #857 #858

v3.47.3

3.47.3 (2026-04-15)

Bug Fixes

propagate signature verification errors correctly (#872) (49664bf)

v3.47.2

3.47.2 (2026-04-10)

Bug Fixes

tolerate string amr claims from external providers (#855) (5f70eff)

v3.47.1

3.47.1 (2026-04-09)

Bug Fixes

oidc server error to http status mapping (#865) (d118dd7)

v3.47.0

This release adds signing of opaque tokens. By secure default, all existing opaque access tokens emitted by OP implementations, will be invalid. Users will need to re-login. If you want a more gradual upgrade use the op.WithCrypto() option to pass a op.NewCompositeCrypto(). Use aop.NewAESCrypto() in the Decrypter slice with the existing master key.

This change does not affect client / RP / RS libraries.

What's Changed

feat: use jose for bearer-token encryption by @wim07101993 in zitadel/oidc@b4cf422

chore: package upgrades by @wim07101993 in zitadel/oidc#866

... (truncated)

Commits

fb9fbfe fix(op): allow dynamic loopback ports in post_logout_redirect_uri per RFC 825...
178e018 fix: URL-encode client credentials in Basic Auth per RFC 6749 §2.3.1 (#873)
49664bf fix: propagate signature verification errors correctly (#872)
5f70eff fix: tolerate string amr claims from external providers (#855)
97b71d3 chore(deps): bump golang.org/x/text from 0.35.0 to 0.36.0 (#869)
d118dd7 fix: oidc server error to http status mapping (#865)
2534f81 docs: update semantic title requirements (#863)
d016375 example: set device cookie httpOnly (#868)
b4cf422 Merge commit from fork
0bf0ade chore: package upgrades (#866)
Additional commits viewable in compare view

Updates golang.org/x/oauth2 from 0.35.0 to 0.36.0

Commits

4d954e6 all: upgrade go directive to at least 1.25.0 [generated]
See full diff in compare view

Updates golang.org/x/term from 0.40.0 to 0.41.0

Commits

9d2dc07 go.mod: update golang.org/x dependencies
d954e03 all: upgrade go directive to at least 1.25.0 [generated]
See full diff in compare view

Updates google.golang.org/grpc from 1.79.3 to 1.81.0

Release notes

Sourced from google.golang.org/grpc's releases.

Release 1.81.0

Behavior Changes

balancer/rls: Switch gauge metrics to asynchronous emission (once per collection cycle) to reduce telemetry noise and align with other gRPC language implementations. (#8808)

Dependencies

Minimum supported Go version is now 1.25. (#8969)

Bug Fixes

xds: Use the leaf cluster's security config for the TLS handshake instead of the aggregate cluster's config. (#8956)

transport: Send a RST_STREAM when receiving an END_STREAM when the stream is not already half-closed. (#8832)

xds: Fix ADS resource name validation to prevent a panic. (#8970)

New Features

grpc/stats: Add support for custom labels in per-call metrics (gRFC A108). (#9008)

xds: Add support for Server Name Indication (SNI) and SAN validation (gRFC A101). Disabled by default. To enable, set GRPC_EXPERIMENTAL_XDS_SNI=true environment variable. (#9016)

xds: Add support to control which fields get propagated from ORCA backend metric reports to LRS load reports (gRFC A85). Disabled by default. To enable, set GRPC_EXPERIMENTAL_XDS_ORCA_LRS_PROPAGATION=true. (#9005)

xds: Add metrics to track xDS client connectivity and cached resource state (gRFC A78). (#8807)

stats/otel: Enhance grpc.subchannel.disconnections metric by adding disconnection reason to the grpc.disconnect_error label (gRFC A94). This provides granular insights into why subchannels are closing. (#8973)

mem: Add mem.Buffer.Slice() API to slice the buffer like a slice. (#8977)

Special Thanks: @ash2k

Performance Improvements

alts: Pool read buffers to lower memory utilization when sockets are unreadable. (#8964)

transport: Pool HTTP/2 framer read buffers to reduce idle memory consumption. Currently limited to Linux for ALTS and non-encrypted transports (TCP, Unix). To disable, set GRPC_GO_EXPERIMENTAL_HTTP_FRAMER_READ_BUFFER_POOLING=false and report any issues. (#9032)

Release 1.80.0

Behavior Changes

balancer: log a warning if a balancer is registered with uppercase letters, as balancer names should be lowercase. In a future release, balancer names will be treated as case-insensitive; see #5288 for details. (#8837)

xds: update resource error handling and re-resolution logic (#8907)

Re-resolve all LOGICAL_DNS clusters simultaneously when re-resolution is requested.

Fail all in-flight RPCs immediately upon receipt of listener or route resource errors, instead of allowing them to complete.

Bug Fixes

xds: support the LB policy configured in LOGICAL_DNS cluster resources instead of defaulting to pick_first. (#8733)

credentials/tls: perform per-RPC authority validation against the leaf certificate instead of the entire peer certificate chain. (#8831)

xds: enabling A76 ring hash endpoint keys no longer causes EDS resources with invalid proxy metadata to be NACKed when HTTP CONNECT (gRFC A86) is disabled. (#8875)

xds: validate that the sum of endpoint weights in a locality does not exceed the maximum uint32 value. (#8899)

Special Thanks: @RAVEYUS

xds: fix incorrect proto field access in the weighted round robin (WRR) configuration where blackout_period was used instead of weight_expiration_period. (#8915)

Special Thanks: @gregbarasch

xds/rbac: handle addresses with ports in IP matchers. (#8990)

New Features

... (truncated)

Commits

cb18228 Change version to 1.81.0 (#9062)
96748f9 Cherry-pick #9105 to 1.81.x (#9106)
9183222 Cherry pick #9055, #9032 to v1.81.x (#9095)
5cba6da Revert "deps: update dependencies for all modules (#9065)" (#9067)
af8a936 deps: update dependencies for all modules (#9065)
cdc60df transport: optimize heap allocations in ready reader and update syscall conne...
208d053 xds/resolver: pass complete XDSConfig in RPC context for HTTP filters (gRFC A...
50fe1cc test: Fix flaky test TestServerStreaming_ClientCallRecvMsgTwice in `end2end...
d574bad build(deps): bump go.opentelemetry.io/otel/sdk from 1.42.0 to 1.43.0 (#9050)
b8bf4d0 build(deps): bump go.opentelemetry.io/otel/sdk from 1.42.0 to 1.43.0 in /inte...
Additional commits viewable in compare view

Updates google.golang.org/protobuf from 1.36.10 to 1.36.11

github-actions · 2026-04-21T15:15:24Z

Benchmark results, click to expand

Benchmark authorization.GetDecisions Results:

Metric	Value
Approved Decision Requests	1000
Denied Decision Requests	0
Total Time	153.337666ms

Benchmark authorization.v2.GetMultiResourceDecision Results:

Metric	Value
Approved Decision Requests	1000
Denied Decision Requests	0
Total Time	81.613992ms

Benchmark Statistics

Name	№ Requests	Avg Duration	Min Duration	Max Duration

Bulk Benchmark Results

Metric	Value
Total Decrypts	100
Successful Decrypts	100
Failed Decrypts	0
Total Time	398.922102ms
Throughput	250.68 requests/second

TDF3 Benchmark Results:

Metric	Value
Total Requests	5000
Successful Requests	5000
Failed Requests	0
Concurrent Requests	50
Total Time	40.67821637s
Average Latency	405.621934ms
Throughput	122.92 requests/second

github-actions · 2026-04-21T15:23:45Z

X-Test Results

✅ go-pull-3347
✅ java-pull-3347
✅ go-v0.9.0
✅ js-pull-3347
bats-test-results
✅ java-v0.9.0
✅ js-v0.9.0
cukes-report
opentdf~~platform~~I0WQ8L.dockerbuild
govulncheck-failure-8
govulncheck-failure-0
govulncheck-failure-2
govulncheck-failure-3
govulncheck-failure-1
govulncheck-failure-5

github-actions · 2026-04-21T18:03:44Z

Benchmark results, click to expand

Benchmark authorization.GetDecisions Results:

Metric	Value
Approved Decision Requests	1000
Denied Decision Requests	0
Total Time	199.643258ms

Benchmark authorization.v2.GetMultiResourceDecision Results:

Metric	Value
Approved Decision Requests	1000
Denied Decision Requests	0
Total Time	90.745865ms

Benchmark Statistics

Name	№ Requests	Avg Duration	Min Duration	Max Duration

Bulk Benchmark Results

Metric	Value
Total Decrypts	100
Successful Decrypts	100
Failed Decrypts	0
Total Time	412.394365ms
Throughput	242.49 requests/second

TDF3 Benchmark Results:

Metric	Value
Total Requests	5000
Successful Requests	5000
Failed Requests	0
Concurrent Requests	50
Total Time	43.52700941s
Average Latency	433.773843ms
Throughput	114.87 requests/second

github-actions · 2026-04-21T18:12:06Z

X-Test Results

✅ go-pull-3347
✅ java-pull-3347
✅ js-pull-3347
✅ go-v0.9.0
✅ java-v0.9.0
bats-test-results
✅ js-v0.9.0
cukes-report
opentdf~~platform~~2MGT7F.dockerbuild
govulncheck-failure-0
govulncheck-failure-2
govulncheck-failure-8
govulncheck-failure-3
govulncheck-failure-1
govulncheck-failure-5

github-actions · 2026-04-21T19:29:55Z

Benchmark results, click to expand

Benchmark authorization.GetDecisions Results:

Metric	Value
Approved Decision Requests	1000
Denied Decision Requests	0
Total Time	145.457673ms

Benchmark authorization.v2.GetMultiResourceDecision Results:

Metric	Value
Approved Decision Requests	1000
Denied Decision Requests	0
Total Time	73.253618ms

Benchmark Statistics

Name	№ Requests	Avg Duration	Min Duration	Max Duration

Bulk Benchmark Results

Metric	Value
Total Decrypts	100
Successful Decrypts	100
Failed Decrypts	0
Total Time	340.857465ms
Throughput	293.38 requests/second

TDF3 Benchmark Results:

Metric	Value
Total Requests	5000
Successful Requests	5000
Failed Requests	0
Concurrent Requests	50
Total Time	35.592835291s
Average Latency	354.867013ms
Throughput	140.48 requests/second

github-actions · 2026-04-21T19:37:14Z

X-Test Results

✅ go-pull-3347
✅ java-pull-3347
✅ go-v0.9.0
✅ js-pull-3347
✅ java-v0.9.0
✅ js-v0.9.0
bats-test-results
cukes-report
govulncheck-failure-0
opentdf~~platform~~SKPB1I.dockerbuild
govulncheck-failure-2
govulncheck-failure-1
govulncheck-failure-8
govulncheck-failure-3
govulncheck-failure-5

github-actions · 2026-04-22T15:39:22Z

Benchmark results, click to expand

Benchmark authorization.GetDecisions Results:

Metric	Value
Approved Decision Requests	1000
Denied Decision Requests	0
Total Time	154.685771ms

Benchmark authorization.v2.GetMultiResourceDecision Results:

Metric	Value
Approved Decision Requests	1000
Denied Decision Requests	0
Total Time	83.745927ms

Benchmark Statistics

Name	№ Requests	Avg Duration	Min Duration	Max Duration

Bulk Benchmark Results

Metric	Value
Total Decrypts	100
Successful Decrypts	100
Failed Decrypts	0
Total Time	401.90039ms
Throughput	248.82 requests/second

TDF3 Benchmark Results:

Metric	Value
Total Requests	5000
Successful Requests	5000
Failed Requests	0
Concurrent Requests	50
Total Time	43.185248707s
Average Latency	429.394507ms
Throughput	115.78 requests/second

github-actions · 2026-04-22T15:44:42Z

X-Test Results

✅ go-pull-3347
✅ go-v0.9.0
✅ java-pull-3347
✅ js-pull-3347
✅ java-v0.9.0
✅ js-v0.9.0
bats-test-results
cukes-report
opentdf~~platform~~HYTQ2X.dockerbuild
govulncheck-failure-1
govulncheck-failure-5
govulncheck-failure-8
govulncheck-failure-3
govulncheck-failure-2
govulncheck-failure-0

github-actions · 2026-04-22T18:04:04Z

Benchmark results, click to expand

Benchmark authorization.GetDecisions Results:

Metric	Value
Approved Decision Requests	1000
Denied Decision Requests	0
Total Time	188.6618ms

Benchmark authorization.v2.GetMultiResourceDecision Results:

Metric	Value
Approved Decision Requests	1000
Denied Decision Requests	0
Total Time	96.428843ms

Benchmark Statistics

Name	№ Requests	Avg Duration	Min Duration	Max Duration

Bulk Benchmark Results

Metric	Value
Total Decrypts	100
Successful Decrypts	100
Failed Decrypts	0
Total Time	410.706341ms
Throughput	243.48 requests/second

TDF3 Benchmark Results:

Metric	Value
Total Requests	5000
Successful Requests	5000
Failed Requests	0
Concurrent Requests	50
Total Time	43.721328024s
Average Latency	435.62323ms
Throughput	114.36 requests/second

github-actions · 2026-04-22T18:11:28Z

X-Test Results

✅ go-pull-3347
✅ go-v0.9.0
✅ java-pull-3347
bats-test-results
✅ java-v0.9.0
✅ js-pull-3347
✅ js-v0.9.0
cukes-report
opentdf~~platform~~SZEXZ3.dockerbuild
govulncheck-failure-3
govulncheck-failure-8
govulncheck-failure-2
govulncheck-failure-0
govulncheck-failure-1
govulncheck-failure-5

github-actions · 2026-04-23T18:04:45Z

Benchmark results, click to expand

Benchmark authorization.GetDecisions Results:

Metric	Value
Approved Decision Requests	1000
Denied Decision Requests	0
Total Time	156.404154ms

Benchmark authorization.v2.GetMultiResourceDecision Results:

Metric	Value
Approved Decision Requests	1000
Denied Decision Requests	0
Total Time	84.023104ms

Benchmark Statistics

Name	№ Requests	Avg Duration	Min Duration	Max Duration

Bulk Benchmark Results

Metric	Value
Total Decrypts	100
Successful Decrypts	100
Failed Decrypts	0
Total Time	406.550558ms
Throughput	245.97 requests/second

TDF3 Benchmark Results:

Metric	Value
Total Requests	5000
Successful Requests	5000
Failed Requests	0
Concurrent Requests	50
Total Time	42.064174338s
Average Latency	419.217717ms
Throughput	118.87 requests/second

github-actions · 2026-04-23T18:11:58Z

X-Test Results

✅ go-pull-3347
✅ java-pull-3347
✅ go-v0.9.0
bats-test-results
✅ js-pull-3347
✅ java-v0.9.0
✅ js-v0.9.0
cukes-report
opentdf~~platform~~17M08U.dockerbuild
govulncheck-failure-1
govulncheck-failure-8
govulncheck-failure-3
govulncheck-failure-0
govulncheck-failure-2
govulncheck-failure-5

github-actions · 2026-04-24T18:02:03Z

Benchmark results, click to expand

Benchmark authorization.GetDecisions Results:

Metric	Value
Approved Decision Requests	1000
Denied Decision Requests	0
Total Time	188.530517ms

Benchmark authorization.v2.GetMultiResourceDecision Results:

Metric	Value
Approved Decision Requests	1000
Denied Decision Requests	0
Total Time	103.192477ms

Benchmark Statistics

Name	№ Requests	Avg Duration	Min Duration	Max Duration

Bulk Benchmark Results

Metric	Value
Total Decrypts	100
Successful Decrypts	100
Failed Decrypts	0
Total Time	389.261042ms
Throughput	256.90 requests/second

TDF3 Benchmark Results:

Metric	Value
Total Requests	5000
Successful Requests	5000
Failed Requests	0
Concurrent Requests	50
Total Time	44.527549939s
Average Latency	443.214409ms
Throughput	112.29 requests/second

github-actions · 2026-04-24T18:08:48Z

X-Test Results

✅ go-pull-3347
✅ go-v0.9.0
bats-test-results
✅ java-pull-3347
✅ java-v0.9.0
✅ js-pull-3347
✅ js-v0.9.0
cukes-report
opentdf~~platform~~X7JVLG.dockerbuild
govulncheck-failure-2
govulncheck-failure-3
govulncheck-failure-8
govulncheck-failure-1
govulncheck-failure-5
govulncheck-failure-0

github-actions · 2026-04-27T16:02:50Z

Benchmark results, click to expand

Benchmark authorization.GetDecisions Results:

Metric	Value
Approved Decision Requests	1000
Denied Decision Requests	0
Total Time	201.706783ms

Benchmark authorization.v2.GetMultiResourceDecision Results:

Metric	Value
Approved Decision Requests	1000
Denied Decision Requests	0
Total Time	109.585723ms

Benchmark Statistics

Name	№ Requests	Avg Duration	Min Duration	Max Duration

Bulk Benchmark Results

Metric	Value
Total Decrypts	100
Successful Decrypts	100
Failed Decrypts	0
Total Time	412.295643ms
Throughput	242.54 requests/second

TDF3 Benchmark Results:

Metric	Value
Total Requests	5000
Successful Requests	5000
Failed Requests	0
Concurrent Requests	50
Total Time	44.745730619s
Average Latency	445.62709ms
Throughput	111.74 requests/second

github-actions · 2026-04-27T16:10:14Z

X-Test Results

✅ go-pull-3347
✅ java-pull-3347
bats-test-results
✅ java-v0.9.0
✅ go-v0.9.0
✅ js-v0.9.0
✅ js-pull-3347
cukes-report
govulncheck-failure-5
govulncheck-failure-8
opentdf~~platform~~P7IM87.dockerbuild
govulncheck-failure-1
govulncheck-failure-3
govulncheck-failure-2
govulncheck-failure-0

github-actions · 2026-04-28T16:11:13Z

X-Test Results

✅ go-pull-3347
✅ go-v0.9.0
✅ java-pull-3347
bats-test-results
✅ java-v0.9.0
✅ js-v0.9.0
✅ js-pull-3347
cukes-report
opentdf~~platform~~YDW85T.dockerbuild
govulncheck-failure-8

github-actions · 2026-04-28T18:05:12Z

Benchmark results, click to expand

Benchmark authorization.GetDecisions Results:

Metric	Value
Approved Decision Requests	1000
Denied Decision Requests	0
Total Time	184.301795ms

Benchmark authorization.v2.GetMultiResourceDecision Results:

Metric	Value
Approved Decision Requests	1000
Denied Decision Requests	0
Total Time	100.717584ms

Benchmark Statistics

Name	№ Requests	Avg Duration	Min Duration	Max Duration

Bulk Benchmark Results

Metric	Value
Total Decrypts	100
Successful Decrypts	100
Failed Decrypts	0
Total Time	409.555021ms
Throughput	244.17 requests/second

TDF3 Benchmark Results:

Metric	Value
Total Requests	5000
Successful Requests	5000
Failed Requests	0
Concurrent Requests	50
Total Time	44.597721188s
Average Latency	444.538752ms
Throughput	112.11 requests/second

github-actions · 2026-04-28T18:11:29Z

X-Test Results

✅ go-pull-3347
✅ go-v0.9.0
✅ js-pull-3347
✅ java-pull-3347
bats-test-results
✅ java-v0.9.0
✅ js-v0.9.0
cukes-report
opentdf~~platform~~NT0WYA.dockerbuild
govulncheck-failure-8

github-actions · 2026-04-29T18:04:54Z

Benchmark results, click to expand

Benchmark authorization.GetDecisions Results:

Metric	Value
Approved Decision Requests	1000
Denied Decision Requests	0
Total Time	199.664781ms

Benchmark authorization.v2.GetMultiResourceDecision Results:

Metric	Value
Approved Decision Requests	1000
Denied Decision Requests	0
Total Time	102.739546ms

Benchmark Statistics

Name	№ Requests	Avg Duration	Min Duration	Max Duration

Bulk Benchmark Results

Metric	Value
Total Decrypts	100
Successful Decrypts	100
Failed Decrypts	0
Total Time	410.452443ms
Throughput	243.63 requests/second

TDF3 Benchmark Results:

Metric	Value
Total Requests	5000
Successful Requests	5000
Failed Requests	0
Concurrent Requests	50
Total Time	44.821578822s
Average Latency	446.16447ms
Throughput	111.55 requests/second

github-actions · 2026-04-29T18:13:41Z

X-Test Results

✅ go-pull-3347
✅ go-v0.9.0
✅ java-pull-3347
✅ js-pull-3347
✅ java-v0.9.0
bats-test-results
✅ js-v0.9.0
cukes-report
opentdf~~platform~~U237A4.dockerbuild
govulncheck-failure-8

github-actions · 2026-04-30T18:03:18Z

Benchmark results, click to expand

Benchmark authorization.GetDecisions Results:

Metric	Value
Approved Decision Requests	1000
Denied Decision Requests	0
Total Time	196.709721ms

Benchmark authorization.v2.GetMultiResourceDecision Results:

Metric	Value
Approved Decision Requests	1000
Denied Decision Requests	0
Total Time	105.72934ms

Benchmark Statistics

Name	№ Requests	Avg Duration	Min Duration	Max Duration

Bulk Benchmark Results

Metric	Value
Total Decrypts	100
Successful Decrypts	100
Failed Decrypts	0
Total Time	412.878732ms
Throughput	242.20 requests/second

TDF3 Benchmark Results:

Metric	Value
Total Requests	5000
Successful Requests	5000
Failed Requests	0
Concurrent Requests	50
Total Time	46.707031928s
Average Latency	465.674783ms
Throughput	107.05 requests/second

github-actions · 2026-04-30T18:15:33Z

X-Test Results

✅ java-v0.9.0
✅ go-pull-3347
✅ go-v0.9.0
✅ java-pull-3347
bats-test-results
✅ js-pull-3347
✅ js-v0.9.0
cukes-report
opentdf~~platform~~WNG5VC.dockerbuild
govulncheck-failure-8

github-actions · 2026-05-01T21:35:34Z

Benchmark results, click to expand

Benchmark authorization.GetDecisions Results:

Metric	Value
Approved Decision Requests	1000
Denied Decision Requests	0
Total Time	149.493115ms

Benchmark authorization.v2.GetMultiResourceDecision Results:

Metric	Value
Approved Decision Requests	1000
Denied Decision Requests	0
Total Time	71.193124ms

Benchmark Statistics

Name	№ Requests	Avg Duration	Min Duration	Max Duration

Bulk Benchmark Results

Metric	Value
Total Decrypts	100
Successful Decrypts	100
Failed Decrypts	0
Total Time	332.680702ms
Throughput	300.59 requests/second

TDF3 Benchmark Results:

Metric	Value
Total Requests	5000
Successful Requests	5000
Failed Requests	0
Concurrent Requests	50
Total Time	33.465371734s
Average Latency	333.461734ms
Throughput	149.41 requests/second

github-actions · 2026-05-01T21:44:11Z

X-Test Results

✅ go-pull-3347
✅ go-v0.9.0
✅ java-pull-3347
bats-test-results
✅ java-v0.9.0
✅ js-pull-3347
✅ js-v0.9.0
cukes-report
opentdf~~platform~~1V3XUC.dockerbuild
govulncheck-failure-8

github-actions · 2026-05-04T22:36:01Z

Benchmark results, click to expand

Benchmark authorization.GetDecisions Results:

Metric	Value
Approved Decision Requests	1000
Denied Decision Requests	0
Total Time	186.956026ms

Benchmark authorization.v2.GetMultiResourceDecision Results:

Metric	Value
Approved Decision Requests	1000
Denied Decision Requests	0
Total Time	104.126643ms

Benchmark Statistics

Name	№ Requests	Avg Duration	Min Duration	Max Duration

Bulk Benchmark Results

Metric	Value
Total Decrypts	100
Successful Decrypts	100
Failed Decrypts	0
Total Time	424.059971ms
Throughput	235.82 requests/second

TDF3 Benchmark Results:

Metric	Value
Total Requests	5000
Successful Requests	5000
Failed Requests	0
Concurrent Requests	50
Total Time	42.489505948s
Average Latency	423.925064ms
Throughput	117.68 requests/second

github-actions · 2026-05-04T22:42:19Z

X-Test Results

✅ go-pull-3347
✅ go-v0.9.0
✅ java-pull-3347
bats-test-results
✅ java-v0.9.0
✅ js-pull-3347
✅ js-v0.9.0
cukes-report
opentdf~~platform~~XBK2JK.dockerbuild
govulncheck-failure-8

github-actions · 2026-05-05T18:07:35Z

Benchmark results, click to expand

Benchmark authorization.GetDecisions Results:

Metric	Value
Approved Decision Requests	1000
Denied Decision Requests	0
Total Time	189.965129ms

Benchmark authorization.v2.GetMultiResourceDecision Results:

Metric	Value
Approved Decision Requests	1000
Denied Decision Requests	0
Total Time	93.54803ms

Benchmark Statistics

Name	№ Requests	Avg Duration	Min Duration	Max Duration

Bulk Benchmark Results

Metric	Value
Total Decrypts	100
Successful Decrypts	100
Failed Decrypts	0
Total Time	433.336752ms
Throughput	230.77 requests/second

TDF3 Benchmark Results:

Metric	Value
Total Requests	5000
Successful Requests	5000
Failed Requests	0
Concurrent Requests	50
Total Time	43.394619995s
Average Latency	432.434884ms
Throughput	115.22 requests/second

github-actions · 2026-05-05T18:15:12Z

X-Test Results

✅ go-v0.9.0
bats-test-results
✅ java-pull-3347
✅ go-pull-3347
✅ js-v0.9.0
✅ java-v0.9.0
✅ js-pull-3347
cukes-report
opentdf~~platform~~XPHRUE.dockerbuild
govulncheck-failure-8

github-actions · 2026-05-06T18:05:06Z

Benchmark results, click to expand

Benchmark authorization.GetDecisions Results:

Metric	Value
Approved Decision Requests	1000
Denied Decision Requests	0
Total Time	159.517464ms

Benchmark authorization.v2.GetMultiResourceDecision Results:

Metric	Value
Approved Decision Requests	1000
Denied Decision Requests	0
Total Time	85.479158ms

Benchmark Statistics

Name	№ Requests	Avg Duration	Min Duration	Max Duration

Bulk Benchmark Results

Metric	Value
Total Decrypts	100
Successful Decrypts	100
Failed Decrypts	0
Total Time	416.742432ms
Throughput	239.96 requests/second

TDF3 Benchmark Results:

Metric	Value
Total Requests	5000
Successful Requests	5000
Failed Requests	0
Concurrent Requests	50
Total Time	42.712500405s
Average Latency	424.914877ms
Throughput	117.06 requests/second

github-actions · 2026-05-06T18:14:25Z

X-Test Results

✅ go-pull-3347
✅ go-v0.9.0
✅ java-pull-3347
✅ java-v0.9.0
✅ js-pull-3347
bats-test-results
✅ js-v0.9.0
cukes-report
opentdf~~platform~~PGWY3R.dockerbuild
govulncheck-failure-8

github-actions · 2026-05-07T18:05:08Z

Benchmark results, click to expand

Benchmark authorization.GetDecisions Results:

Metric	Value
Approved Decision Requests	1000
Denied Decision Requests	0
Total Time	204.594643ms

Benchmark authorization.v2.GetMultiResourceDecision Results:

Metric	Value
Approved Decision Requests	1000
Denied Decision Requests	0
Total Time	104.870206ms

Benchmark Statistics

Name	№ Requests	Avg Duration	Min Duration	Max Duration

Bulk Benchmark Results

Metric	Value
Total Decrypts	100
Successful Decrypts	100
Failed Decrypts	0
Total Time	424.047586ms
Throughput	235.82 requests/second

TDF3 Benchmark Results:

Metric	Value
Total Requests	5000
Successful Requests	5000
Failed Requests	0
Concurrent Requests	50
Total Time	43.998935035s
Average Latency	438.272886ms
Throughput	113.64 requests/second

github-actions · 2026-05-07T18:12:21Z

X-Test Results

✅ go-pull-3347
✅ go-v0.9.0
bats-test-results
✅ java-pull-3347
✅ java-v0.9.0
✅ js-pull-3347
✅ js-v0.9.0
opentdf~~platform~~MFUDQ3.dockerbuild
govulncheck-failure-8

Bumps the external group with 6 updates in the /otdfctl directory: | Package | From | To | | --- | --- | --- | | [github.com/charmbracelet/bubbles](https://github.com/charmbracelet/bubbles) | `0.21.1-0.20250623103423-23b8fd6302d7` | `1.0.0` | | [github.com/charmbracelet/glamour](https://github.com/charmbracelet/glamour) | `0.10.0` | `1.0.0` | | [github.com/charmbracelet/huh](https://github.com/charmbracelet/huh) | `0.8.0` | `1.0.0` | | [github.com/golang-jwt/jwt/v5](https://github.com/golang-jwt/jwt) | `5.3.0` | `5.3.1` | | [github.com/zitadel/oidc/v3](https://github.com/zitadel/oidc) | `3.45.1` | `3.47.5` | | [google.golang.org/grpc](https://github.com/grpc/grpc-go) | `1.79.3` | `1.81.0` | Updates `github.com/charmbracelet/bubbles` from 0.21.1-0.20250623103423-23b8fd6302d7 to 1.0.0 - [Release notes](https://github.com/charmbracelet/bubbles/releases) - [Commits](https://github.com/charmbracelet/bubbles/commits/v1.0.0) Updates `github.com/charmbracelet/glamour` from 0.10.0 to 1.0.0 - [Release notes](https://github.com/charmbracelet/glamour/releases) - [Commits](charmbracelet/glamour@v0.10.0...v1.0.0) Updates `github.com/charmbracelet/huh` from 0.8.0 to 1.0.0 - [Release notes](https://github.com/charmbracelet/huh/releases) - [Commits](charmbracelet/huh@v0.8.0...v1.0.0) Updates `github.com/golang-jwt/jwt/v5` from 5.3.0 to 5.3.1 - [Release notes](https://github.com/golang-jwt/jwt/releases) - [Commits](golang-jwt/jwt@v5.3.0...v5.3.1) Updates `github.com/zitadel/oidc/v3` from 3.45.1 to 3.47.5 - [Release notes](https://github.com/zitadel/oidc/releases) - [Commits](zitadel/oidc@v3.45.1...v3.47.5) Updates `golang.org/x/oauth2` from 0.35.0 to 0.36.0 - [Commits](golang/oauth2@v0.35.0...v0.36.0) Updates `golang.org/x/term` from 0.40.0 to 0.41.0 - [Commits](golang/term@v0.40.0...v0.41.0) Updates `google.golang.org/grpc` from 1.79.3 to 1.81.0 - [Release notes](https://github.com/grpc/grpc-go/releases) - [Commits](grpc/grpc-go@v1.79.3...v1.81.0) Updates `google.golang.org/protobuf` from 1.36.10 to 1.36.11 --- updated-dependencies: - dependency-name: github.com/charmbracelet/bubbles dependency-version: 1.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: external - dependency-name: github.com/charmbracelet/glamour dependency-version: 1.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: external - dependency-name: github.com/charmbracelet/huh dependency-version: 1.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: external - dependency-name: github.com/golang-jwt/jwt/v5 dependency-version: 5.3.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: external - dependency-name: github.com/zitadel/oidc/v3 dependency-version: 3.47.5 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: external - dependency-name: golang.org/x/oauth2 dependency-version: 0.36.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: external - dependency-name: golang.org/x/term dependency-version: 0.41.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: external - dependency-name: google.golang.org/grpc dependency-version: 1.80.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: external - dependency-name: google.golang.org/protobuf dependency-version: 1.36.11 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: external ... Signed-off-by: dependabot[bot] <support@github.com>

github-actions · 2026-05-08T18:07:12Z

Benchmark results, click to expand

Benchmark authorization.GetDecisions Results:

Metric	Value
Approved Decision Requests	1000
Denied Decision Requests	0
Total Time	188.549996ms

Benchmark authorization.v2.GetMultiResourceDecision Results:

Metric	Value
Approved Decision Requests	1000
Denied Decision Requests	0
Total Time	99.338649ms

Benchmark Statistics

Name	№ Requests	Avg Duration	Min Duration	Max Duration

Bulk Benchmark Results

Metric	Value
Total Decrypts	100
Successful Decrypts	100
Failed Decrypts	0
Total Time	413.174454ms
Throughput	242.03 requests/second

TDF3 Benchmark Results:

Metric	Value
Total Requests	5000
Successful Requests	5000
Failed Requests	0
Concurrent Requests	50
Total Time	42.833215358s
Average Latency	426.766944ms
Throughput	116.73 requests/second

github-actions · 2026-05-08T18:08:00Z

⚠️ Govulncheck found vulnerabilities ⚠️

The following modules have known vulnerabilities:

examples
otdfctl
sdk
service
lib/fixtures
tests-bdd

See the workflow run for details.

github-actions · 2026-05-08T18:15:09Z

X-Test Results

✅ go-pull-3347
✅ go-v0.9.0
✅ java-pull-3347
bats-test-results
✅ java-v0.9.0
✅ js-pull-3347
✅ js-v0.9.0
cukes-report
opentdf~~platform~~47P02L.dockerbuild
govulncheck-failure-0
govulncheck-failure-5
govulncheck-failure-8
govulncheck-failure-3
govulncheck-failure-2
govulncheck-failure-1

dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Apr 21, 2026

dependabot Bot requested a review from a team as a code owner April 21, 2026 15:10

dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Apr 21, 2026

github-actions Bot added the size/m label Apr 21, 2026

dependabot Bot changed the title ~~fix(deps): bump the external group in /otdfctl with 9 updates~~ fix(deps): bump the external group across 1 directory with 9 updates Apr 21, 2026

dependabot Bot force-pushed the dependabot/go_modules/otdfctl/external-d0059dd97e branch from 419e785 to 1cdbfb5 Compare April 21, 2026 17:57

dependabot Bot force-pushed the dependabot/go_modules/otdfctl/external-d0059dd97e branch from 1cdbfb5 to 125bae2 Compare April 21, 2026 19:24

dependabot Bot force-pushed the dependabot/go_modules/otdfctl/external-d0059dd97e branch from 125bae2 to 6dc740c Compare April 22, 2026 15:31

dependabot Bot force-pushed the dependabot/go_modules/otdfctl/external-d0059dd97e branch from 6dc740c to abe6762 Compare April 22, 2026 17:58

dependabot Bot force-pushed the dependabot/go_modules/otdfctl/external-d0059dd97e branch from abe6762 to 0d7aa59 Compare April 23, 2026 17:59

dependabot Bot force-pushed the dependabot/go_modules/otdfctl/external-d0059dd97e branch from 0d7aa59 to 6d49a23 Compare April 24, 2026 17:57

dependabot Bot force-pushed the dependabot/go_modules/otdfctl/external-d0059dd97e branch from 6d49a23 to 5b3518e Compare April 27, 2026 15:56

dependabot Bot force-pushed the dependabot/go_modules/otdfctl/external-d0059dd97e branch from 786b66a to b436b5f Compare April 28, 2026 17:59

dependabot Bot force-pushed the dependabot/go_modules/otdfctl/external-d0059dd97e branch from b436b5f to 28b60d0 Compare April 29, 2026 17:58

dependabot Bot force-pushed the dependabot/go_modules/otdfctl/external-d0059dd97e branch from 28b60d0 to 5393ddf Compare April 30, 2026 17:58

dependabot Bot force-pushed the dependabot/go_modules/otdfctl/external-d0059dd97e branch from 5393ddf to b73a483 Compare May 1, 2026 21:30

dependabot Bot force-pushed the dependabot/go_modules/otdfctl/external-d0059dd97e branch from b73a483 to af66ebb Compare May 4, 2026 22:30

dependabot Bot force-pushed the dependabot/go_modules/otdfctl/external-d0059dd97e branch from af66ebb to 98351b9 Compare May 5, 2026 18:01

dependabot Bot force-pushed the dependabot/go_modules/otdfctl/external-d0059dd97e branch from 98351b9 to 6110133 Compare May 6, 2026 17:59

dependabot Bot force-pushed the dependabot/go_modules/otdfctl/external-d0059dd97e branch from 6110133 to 8d0615d Compare May 7, 2026 18:00

dependabot Bot force-pushed the dependabot/go_modules/otdfctl/external-d0059dd97e branch from 8d0615d to 3cbe4e6 Compare May 8, 2026 18:01

Conversation

dependabot Bot commented on behalf of github Apr 21, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v1.0.0

Changelog

Fixed

v0.21.1

Changelog

New!

Fixed

Docs

Other stuff

v5.3.1

What's Changed

🔐 Features

👒 Dependencies

New Contributors

v3.47.5

3.47.5 (2026-04-20)

Bug Fixes

v3.47.4

3.47.4 (2026-04-17)

Bug Fixes

v3.47.3

3.47.3 (2026-04-15)

Bug Fixes

v3.47.2

3.47.2 (2026-04-10)

Bug Fixes

v3.47.1

3.47.1 (2026-04-09)

Bug Fixes

v3.47.0

What's Changed

Release 1.81.0

Behavior Changes

Dependencies

Bug Fixes

New Features

Performance Improvements

Release 1.80.0

Behavior Changes

Bug Fixes

New Features

Uh oh!

github-actions Bot commented Apr 21, 2026

Benchmark authorization.GetDecisions Results:

Benchmark authorization.v2.GetMultiResourceDecision Results:

Benchmark Statistics

Bulk Benchmark Results

TDF3 Benchmark Results:

Uh oh!

github-actions Bot commented Apr 21, 2026

X-Test Results

Uh oh!

github-actions Bot commented Apr 21, 2026

Benchmark authorization.GetDecisions Results:

Benchmark authorization.v2.GetMultiResourceDecision Results:

Benchmark Statistics

Bulk Benchmark Results

TDF3 Benchmark Results:

Uh oh!

github-actions Bot commented Apr 21, 2026

X-Test Results

Uh oh!

github-actions Bot commented Apr 21, 2026

Benchmark authorization.GetDecisions Results:

Benchmark authorization.v2.GetMultiResourceDecision Results:

Benchmark Statistics

Bulk Benchmark Results

TDF3 Benchmark Results:

Uh oh!

github-actions Bot commented Apr 21, 2026

X-Test Results

Uh oh!

github-actions Bot commented Apr 22, 2026

Benchmark authorization.GetDecisions Results:

Benchmark authorization.v2.GetMultiResourceDecision Results:

Benchmark Statistics

Bulk Benchmark Results

dependabot Bot commented on behalf of github Apr 21, 2026 •

edited

Loading