All pull requests

Pull requests

• feat(sdk): add experimental TDF writer checkpoints

  comp:sdksize/m
  #4266·elizabethhealy opened Oct 29, 2026Member·2 of 3 tasks·

  ·
  4

• fix(authorization): preserve safe evaluation error categories

  comp:authorizationcomp:kassize/s
  #4265·elizabethhealy opened Oct 29, 2026Member·1 of 3 tasks·

  ·
  4

• adr(sdk): DSPX-3397 record DPoP third-party library evaluation

  size/m
  #4263·dmihalcik-virtru opened Oct 27, 2026Member·1 of 3 tasks·

  ·
  4

• fix(deps): bump github.com/opentdf/platform/protocol/go from 0.42.0 to 0.44.0 in /service

  dependenciesgosize/xs
  #4262·dependabot[bot] opened Oct 26, 2026Bot·

  ·
  9

• fix(deps): bump github.com/opentdf/platform/protocol/go from 0.42.0 to 0.44.0 in /otdfctl

  dependenciesgosize/xs
  #4260·dependabot[bot] opened Oct 26, 2026Bot·

  ·
  9

• fix(deps): bump github.com/opentdf/platform/protocol/go from 0.42.0 to 0.43.0 in /tests-bdd

  dependenciesgosize/xs
  #4259·dependabot[bot] opened Oct 26, 2026Bot·

  ·
  6

• fix(cli): don't block on stdin when encrypt is given a file

  size/s
  #4257·jwsy opened Oct 26, 2026·

  ·
  4

• fix(sdk): reject non-STORED entries and inconsistent ZIP sizes in the TDF reader (DSPX-5354)

  comp:sdksize/m
  #4255·dmihalcik-virtru opened Oct 23, 2026Member·1 of 3 tasks·

  ·
  4

• feat(cli): add otdfctl validate command (DSPX-5350)

  size/m
  #4254·dmihalcik-virtru opened Oct 23, 2026Member·3 tasks done·

  ·
  4

• fix(sdk): accept mlkem-wrapped key access in manifest schemas (DSPX-4388)

  comp:sdksize/xs
  #4253·dmihalcik-virtru opened Oct 23, 2026Member·1 of 3 tasks·

  ·
  4

• fix(sdk): reject trailing data after the manifest in IsValidTdf (DSPX-5353)

  comp:sdksize/s
  #4252·dmihalcik-virtru opened Oct 23, 2026Member·1 of 3 tasks·

  ·
  4

• chore(main): release lib/flattening 0.3.0

  autorelease: pendingcomp:cicomp:lib:flatteningsize/xs
  #4249·opentdf-automation[bot] opened Oct 22, 2026Bot·

  ·
  12

• chore(main): release lib/ocrypto 0.15.0

  autorelease: pendingcomp:cicomp:lib:ocryptosize/xs
  #4250·opentdf-automation[bot] opened Oct 22, 2026Bot·

  ·
  12

• chore(main): release sdk 0.36.0

  autorelease: pendingcomp:cicomp:sdksize/s
  #4248·opentdf-automation[bot] opened Oct 22, 2026Bot·

  ·
  13

• feat(sdk): read deflate-compressed ZIP entries in TDF archives

  comp:sdksize/m
  #4247·pflynn-virtru opened Oct 20, 2026Member·1 of 3 tasks·

  ·
  14

• chore(ci): pin mkcert download and verify its checksum

  comp:cisize/s
  #4246·pflynn-virtru opened Oct 20, 2026Member·3 tasks·

  ·
  8

• chore(main): release service 0.30.0

  autorelease: pendingcomp:cisize/s
  #4244·opentdf-automation[bot] opened Oct 20, 2026Bot·

  ·
  15

• chore(main): release otdfctl 0.40.0

  autorelease: pendingcomp:cirelease-please:force-runsize/s
  #4243·opentdf-automation[bot] opened Oct 20, 2026Bot·

  ·
  14

• fix(sdk): preserve KAS base path in Connect client URL

  comp:sdksize/s
  #4241·jlancaster36 opened Oct 19, 2026·1 of 3 tasks·

  ·
  12

• feat(sdk): advertise partial_decrypt and http_range_source features

  comp:sdksize/xs
  #4234·sujankota opened Oct 15, 2026Contributor·3 tasks·

  ·
  5

• fix(sdk): skip the segment ending at the cursor in Reader.WriteTo

  comp:sdksize/xs
  #4233·sujankota opened Oct 15, 2026Contributor·1 of 3 tasks·

  ·
  4

• feat(sdk): add opt-in hexless policy binding

  comp:sdksize/m
  #4232·pflynn-virtru opened Oct 15, 2026Member·2 of 3 tasks·

  ·
  10

• fix(deps): bump github.com/opentdf/platform/sdk from 0.33.0 to 0.35.0 in /service

  dependenciesgosize/xs
  #4231·dependabot[bot] opened Oct 15, 2026Bot·

  ·
  11

• feat(cli): support decrypt --offset/--length and HTTP(S) URLs

  size/m
  #4229·sujankota opened Oct 15, 2026Contributor·3 tasks done·

  ·
  8

• fix(kas): stop audit tamper false positives and success-by-default outcomes

  comp:kassize/m
  #4222·dmihalcik-virtru opened Oct 14, 2026Member·

  ·
  4