chore(main): release service 0.12.0

[opentdf-automation]

🤖 I have created a release beep boop

0.12.0 (2026-01-16)

⚠ BREAKING CHANGES

• core: DSPX-2090 Removes unnamed key mgrs (#2952)

Features

• core: Actually use KeyManager ProviderConfig (#2837) (65ba2e0)
• core: add additive CORS configuration fields (#2941) (d45a34b)
• core: add direct entitlement support (#2630) (cc8337a)
• kas: add configurable SRT skew tolerance and diagnostics (#2886) (1a57227)
• kas: Add nano policy binding to rewrap audit. (#2870) (a12d1d4)
• policy: Create/Update scs to use transaction. (#2882) (7493941)
• Update Go toolchain version to 1.24.11 across all modules (#2943) (a960eca)

Bug Fixes

• authz: deny resources granularly when attribute value FQNs not found (#2896) (802db02)
• authz: handle individual resource edge cases in decisions (#2835) (fad4437)
• authz: if entity identifier results in multiple representations, treat with AND in resource decision results (#2860) (e869b35)
• authz: obligations should be logged to audit but not returned when not entitled (#2847) (35da5e3)
• Connect RPC v1.19.1 (#3009) (c354fd3)
• core: add obligations X-Rewrap-Additional-Context to default CORS allowed headers (#2901) (d86868d)
• core: Add stderr log output option (#2989) (7e01b2b)
• core: DSPX-1944 Fix service negation for extra services (#2905) (b07a4fe)
• core: DSPX-2090 Removes unnamed key mgrs (#2952) (ddd98db)
• core: Let default basic keymanager work again (#2858) (fb0b99d)
• core: remove duplicate root-level trace configuration (#2944) (d323e85)
• core: Support audit and warn log levels (#2996) (e789a64)
• core: Updates audit events when cancelled (#2954) (808457e)
• deps: bump github.com/opentdf/platform/lib/fixtures from 0.3.0 to 0.4.0 in /service (#2964) (58512e2)
• deps: bump github.com/opentdf/platform/lib/ocrypto from 0.7.0 to 0.8.0 in /service (#2976) (be970db)
• deps: bump github.com/opentdf/platform/protocol/go from 0.13.0 to 0.14.0 in /service (#2965) (6672550)
• deps: bump the external group across 1 directory with 5 updates (#2950) (6dc3bca)
• deps: bump toolchain to go1.24.9 for CVEs found by govulncheck (#2849) (23f76c0)
• ers: Do not use auth header jwt in MultiStrategy ERS (#2862) (dd6256e)
• kas: Do not log index object (#2910) (4f9b8b9)
• kas: document rewrap proto fields used in bulk flow (#2826) (32a7e91)
• kas: Ensure root key is not logged. (#2918) (de9a76e)
• kas: Fix kas panics on bad requests (#2916) (182b463)
• kas: populate rewrap audit log (#2861) (4fe97fd)
• policy: ListKeys 404 on missing KAS (#3001) (65a228b)
• policy: Return the correct total during list responses. (#2836) (5c1ec9c)
• policy: wrap SQL optional param type casts in null checks (#2977) (4f6825e)
• remove lingering kas info endpoint definition (#2997) (b7e7a66)

---

This PR was generated with Release Please. See documentation.

[github-actions]

Benchmark results, click to expand

Benchmark authorization.GetDecisions Results:

Metric	Value
Approved Decision Requests	1000
Denied Decision Requests	0
Total Time	197.000817ms

Benchmark authorization.v2.GetMultiResourceDecision Results:

Metric	Value
Approved Decision Requests	1000
Denied Decision Requests	0
Total Time	102.320724ms

Standard Benchmark Metrics Skipped or Failed

Bulk Benchmark Results

Metric	Value
Total Decrypts	100
Successful Decrypts	100
Failed Decrypts	0
Total Time	372.858273ms
Throughput	268.20 requests/second

TDF3 Benchmark Results:

Metric	Value
Total Requests	5000
Successful Requests	5000
Failed Requests	0
Concurrent Requests	50
Total Time	41.876089964s
Average Latency	417.202599ms
Throughput	119.40 requests/second

NANOTDF Benchmark Results:

Metric	Value
Total Requests	5000
Successful Requests	5000
Failed Requests	0
Concurrent Requests	50
Total Time	28.87464215s
Average Latency	287.738139ms
Throughput	173.16 requests/second

[github-actions]

X-Test Failure Report

opentdfplatformT3V4RT.dockerbuild
cukes-report
✅ java-v0.4.34
✅ js-v0.4.34
✅ go-v0.4.34

[github-actions]

Benchmark results, click to expand

Benchmark authorization.GetDecisions Results:

Metric	Value
Approved Decision Requests	1000
Denied Decision Requests	0
Total Time	185.603107ms

Benchmark authorization.v2.GetMultiResourceDecision Results:

Metric	Value
Approved Decision Requests	1000
Denied Decision Requests	0
Total Time	96.23431ms

Standard Benchmark Metrics Skipped or Failed

Bulk Benchmark Results

Metric	Value
Total Decrypts	100
Successful Decrypts	100
Failed Decrypts	0
Total Time	373.543113ms
Throughput	267.71 requests/second

TDF3 Benchmark Results:

Metric	Value
Total Requests	5000
Successful Requests	5000
Failed Requests	0
Concurrent Requests	50
Total Time	39.509357192s
Average Latency	393.638256ms
Throughput	126.55 requests/second

NANOTDF Benchmark Results:

Metric	Value
Total Requests	5000
Successful Requests	5000
Failed Requests	0
Concurrent Requests	50
Total Time	28.177759635s
Average Latency	280.958912ms
Throughput	177.44 requests/second

[github-actions]

X-Test Failure Report

opentdfplatform3CQEGM.dockerbuild
✅ js-v0.4.34
✅ java-v0.4.34
✅ go-v0.4.34

[github-actions]

X-Test Failure Report

opentdfplatform3CQEGM.dockerbuild
✅ js-v0.4.34
✅ java-v0.4.34
✅ go-v0.4.34
cukes-report
bats-test-results
test-cases-mapping-report

[github-actions]

Benchmark results, click to expand

Benchmark authorization.GetDecisions Results:

Metric	Value
Approved Decision Requests	1000
Denied Decision Requests	0
Total Time	168.056914ms

Benchmark authorization.v2.GetMultiResourceDecision Results:

Metric	Value
Approved Decision Requests	1000
Denied Decision Requests	0
Total Time	95.1325ms

Standard Benchmark Metrics Skipped or Failed

Bulk Benchmark Results

Metric	Value
Total Decrypts	100
Successful Decrypts	100
Failed Decrypts	0
Total Time	355.860084ms
Throughput	281.01 requests/second

TDF3 Benchmark Results:

Metric	Value
Total Requests	5000
Successful Requests	5000
Failed Requests	0
Concurrent Requests	50
Total Time	38.979790118s
Average Latency	387.863416ms
Throughput	128.27 requests/second

NANOTDF Benchmark Results:

Metric	Value
Total Requests	5000
Successful Requests	5000
Failed Requests	0
Concurrent Requests	50
Total Time	27.26299203s
Average Latency	271.784723ms
Throughput	183.40 requests/second

[github-actions]

X-Test Results

opentdfplatform5OMB3U.dockerbuild
✅ java-v0.4.34
✅ js-v0.4.34
cukes-report
✅ go-v0.4.34
bats-test-results
test-cases-mapping-report
✅ js-pull-2841
✅ java-pull-2841
✅ go-pull-2841

[github-actions]

Benchmark results, click to expand

Benchmark authorization.GetDecisions Results:

Metric	Value
Approved Decision Requests	1000
Denied Decision Requests	0
Total Time	154.755521ms

Benchmark authorization.v2.GetMultiResourceDecision Results:

Metric	Value
Approved Decision Requests	1000
Denied Decision Requests	0
Total Time	83.435474ms

Standard Benchmark Metrics Skipped or Failed

Bulk Benchmark Results

Metric	Value
Total Decrypts	100
Successful Decrypts	100
Failed Decrypts	0
Total Time	582.813346ms
Throughput	171.58 requests/second

TDF3 Benchmark Results:

Metric	Value
Total Requests	5000
Successful Requests	5000
Failed Requests	0
Concurrent Requests	50
Total Time	38.198871208s
Average Latency	380.427086ms
Throughput	130.89 requests/second

NANOTDF Benchmark Results:

Metric	Value
Total Requests	5000
Successful Requests	5000
Failed Requests	0
Concurrent Requests	50
Total Time	26.934863032s
Average Latency	268.61143ms
Throughput	185.63 requests/second

[github-actions]

X-Test Results

opentdfplatformAXDYMW.dockerbuild
cukes-report
✅ java-v0.4.34
✅ go-v0.4.34
✅ js-v0.4.34
bats-test-results
test-cases-mapping-report
✅ js-pull-2841
✅ java-pull-2841
✅ go-pull-2841

[github-actions]

Benchmark results, click to expand

Benchmark authorization.GetDecisions Results:

Metric	Value
Approved Decision Requests	1000
Denied Decision Requests	0
Total Time	176.06986ms

Benchmark authorization.v2.GetMultiResourceDecision Results:

Metric	Value
Approved Decision Requests	1000
Denied Decision Requests	0
Total Time	115.785326ms

Standard Benchmark Metrics Skipped or Failed

Bulk Benchmark Results

Metric	Value
Total Decrypts	100
Successful Decrypts	100
Failed Decrypts	0
Total Time	367.932743ms
Throughput	271.79 requests/second

TDF3 Benchmark Results:

Metric	Value
Total Requests	5000
Successful Requests	5000
Failed Requests	0
Concurrent Requests	50
Total Time	38.733443304s
Average Latency	385.894702ms
Throughput	129.09 requests/second

NANOTDF Benchmark Results:

Metric	Value
Total Requests	5000
Successful Requests	5000
Failed Requests	0
Concurrent Requests	50
Total Time	27.24995221s
Average Latency	271.375788ms
Throughput	183.49 requests/second

[github-actions]

X-Test Results

opentdfplatform7X7F9Z.dockerbuild
cukes-report
✅ js-v0.4.34
✅ java-v0.4.34
✅ go-v0.4.34
bats-test-results
test-cases-mapping-report
✅ js-pull-2841
✅ java-pull-2841
✅ go-pull-2841

[github-actions]

Benchmark results, click to expand

Benchmark authorization.GetDecisions Results:

Metric	Value
Approved Decision Requests	1000
Denied Decision Requests	0
Total Time	159.38849ms

Benchmark authorization.v2.GetMultiResourceDecision Results:

Metric	Value
Approved Decision Requests	1000
Denied Decision Requests	0
Total Time	81.006678ms

Standard Benchmark Metrics Skipped or Failed

Bulk Benchmark Results

Metric	Value
Total Decrypts	100
Successful Decrypts	100
Failed Decrypts	0
Total Time	378.67313ms
Throughput	264.08 requests/second

TDF3 Benchmark Results:

Metric	Value
Total Requests	5000
Successful Requests	5000
Failed Requests	0
Concurrent Requests	50
Total Time	38.845254946s
Average Latency	387.394879ms
Throughput	128.72 requests/second

NANOTDF Benchmark Results:

Metric	Value
Total Requests	5000
Successful Requests	5000
Failed Requests	0
Concurrent Requests	50
Total Time	27.350114313s
Average Latency	272.437302ms
Throughput	182.81 requests/second

[github-actions]

X-Test Results

opentdfplatformJ6BZUM.dockerbuild
cukes-report
✅ java-v0.4.34
✅ js-v0.4.34
✅ go-v0.4.34
bats-test-results
test-cases-mapping-report
✅ js-pull-2841
✅ java-pull-2841
✅ go-pull-2841

[github-actions]

Benchmark results, click to expand

Benchmark authorization.GetDecisions Results:

Metric	Value
Approved Decision Requests	1000
Denied Decision Requests	0
Total Time	193.816755ms

Benchmark authorization.v2.GetMultiResourceDecision Results:

Metric	Value
Approved Decision Requests	1000
Denied Decision Requests	0
Total Time	179.25801ms

Standard Benchmark Metrics Skipped or Failed

Bulk Benchmark Results

Metric	Value
Total Decrypts	100
Successful Decrypts	100
Failed Decrypts	0
Total Time	364.702364ms
Throughput	274.20 requests/second

TDF3 Benchmark Results:

Metric	Value
Total Requests	5000
Successful Requests	5000
Failed Requests	0
Concurrent Requests	50
Total Time	37.606229097s
Average Latency	373.673462ms
Throughput	132.96 requests/second

NANOTDF Benchmark Results:

Metric	Value
Total Requests	5000
Successful Requests	5000
Failed Requests	0
Concurrent Requests	50
Total Time	26.171170734s
Average Latency	260.699063ms
Throughput	191.05 requests/second

[github-actions]

X-Test Results

opentdfplatformY9FL2W.dockerbuild
✅ js-v0.4.34
✅ java-v0.4.34
cukes-report
✅ go-v0.4.34
bats-test-results
test-cases-mapping-report
✅ js-pull-2841
✅ java-pull-2841
✅ go-pull-2841

[github-actions]

Benchmark results, click to expand

Benchmark authorization.GetDecisions Results:

Metric	Value
Approved Decision Requests	1000
Denied Decision Requests	0
Total Time	177.457813ms

Benchmark authorization.v2.GetMultiResourceDecision Results:

Metric	Value
Approved Decision Requests	1000
Denied Decision Requests	0
Total Time	103.967303ms

Standard Benchmark Metrics Skipped or Failed

Bulk Benchmark Results

Metric	Value
Total Decrypts	100
Successful Decrypts	100
Failed Decrypts	0
Total Time	378.952114ms
Throughput	263.89 requests/second

TDF3 Benchmark Results:

Metric	Value
Total Requests	5000
Successful Requests	5000
Failed Requests	0
Concurrent Requests	50
Total Time	41.892187709s
Average Latency	417.636258ms
Throughput	119.35 requests/second

NANOTDF Benchmark Results:

Metric	Value
Total Requests	5000
Successful Requests	5000
Failed Requests	0
Concurrent Requests	50
Total Time	29.029122023s
Average Latency	289.233688ms
Throughput	172.24 requests/second

[github-actions]

X-Test Results

opentdfplatform6C07UD.dockerbuild
cukes-report
✅ js-v0.4.34
✅ java-v0.4.34
✅ go-v0.4.34
bats-test-results
test-cases-mapping-report
✅ js-pull-2841
✅ java-pull-2841
✅ go-pull-2841

[github-actions]

Benchmark results, click to expand

Benchmark authorization.GetDecisions Results:

Metric	Value
Approved Decision Requests	1000
Denied Decision Requests	0
Total Time	194.258276ms

Benchmark authorization.v2.GetMultiResourceDecision Results:

Metric	Value
Approved Decision Requests	1000
Denied Decision Requests	0
Total Time	105.658825ms

Standard Benchmark Metrics Skipped or Failed

Bulk Benchmark Results

Metric	Value
Total Decrypts	100
Successful Decrypts	100
Failed Decrypts	0
Total Time	368.09477ms
Throughput	271.67 requests/second

TDF3 Benchmark Results:

Metric	Value
Total Requests	5000
Successful Requests	5000
Failed Requests	0
Concurrent Requests	50
Total Time	40.477187146s
Average Latency	403.099377ms
Throughput	123.53 requests/second

NANOTDF Benchmark Results:

Metric	Value
Total Requests	5000
Successful Requests	5000
Failed Requests	0
Concurrent Requests	50
Total Time	28.769992341s
Average Latency	286.616104ms
Throughput	173.79 requests/second

[github-actions]

Benchmark results, click to expand

Benchmark authorization.GetDecisions Results:

Metric	Value
Approved Decision Requests	1000
Denied Decision Requests	0
Total Time	192.503146ms

Benchmark authorization.v2.GetMultiResourceDecision Results:

Metric	Value
Approved Decision Requests	1000
Denied Decision Requests	0
Total Time	106.306655ms

Benchmark Statistics

Name	№ Requests	Avg Duration	Min Duration	Max Duration

Bulk Benchmark Results

Metric	Value
Total Decrypts	100
Successful Decrypts	100
Failed Decrypts	0
Total Time	370.072707ms
Throughput	270.22 requests/second

TDF3 Benchmark Results:

Metric	Value
Total Requests	5000
Successful Requests	5000
Failed Requests	0
Concurrent Requests	50
Total Time	38.952596581s
Average Latency	388.313932ms
Throughput	128.36 requests/second

NANOTDF Benchmark Results:

Metric	Value
Total Requests	5000
Successful Requests	5000
Failed Requests	0
Concurrent Requests	50
Total Time	27.806088036s
Average Latency	277.209917ms
Throughput	179.82 requests/second

[github-actions]

X-Test Results

opentdfplatformL2TU14.dockerbuild
✅ java-v0.4.34
✅ js-v0.4.34
cukes-report
✅ go-v0.4.34
bats-test-results
test-cases-mapping-report
✅ js-pull-2841
✅ java-pull-2841
✅ go-pull-2841

[github-actions]

Benchmark results, click to expand

Benchmark authorization.GetDecisions Results:

Metric	Value
Approved Decision Requests	1000
Denied Decision Requests	0
Total Time	175.300135ms

Benchmark authorization.v2.GetMultiResourceDecision Results:

Metric	Value
Approved Decision Requests	1000
Denied Decision Requests	0
Total Time	103.831481ms

Benchmark Statistics

Name	№ Requests	Avg Duration	Min Duration	Max Duration

Bulk Benchmark Results

Metric	Value
Total Decrypts	100
Successful Decrypts	100
Failed Decrypts	0
Total Time	349.919007ms
Throughput	285.78 requests/second

TDF3 Benchmark Results:

Metric	Value
Total Requests	5000
Successful Requests	5000
Failed Requests	0
Concurrent Requests	50
Total Time	39.842223149s
Average Latency	396.833032ms
Throughput	125.50 requests/second

NANOTDF Benchmark Results:

Metric	Value
Total Requests	5000
Successful Requests	5000
Failed Requests	0
Concurrent Requests	50
Total Time	26.823887913s
Average Latency	267.278801ms
Throughput	186.40 requests/second

[github-actions]

X-Test Results

opentdfplatformT6L15M.dockerbuild
cukes-report
✅ java-v0.4.34
✅ js-v0.4.34
✅ go-v0.4.34
bats-test-results
test-cases-mapping-report
✅ js-pull-2841
✅ java-pull-2841
✅ go-pull-2841

[github-actions]

Benchmark results, click to expand

Benchmark authorization.GetDecisions Results:

Metric	Value
Approved Decision Requests	1000
Denied Decision Requests	0
Total Time	249.202993ms

Benchmark authorization.v2.GetMultiResourceDecision Results:

Metric	Value
Approved Decision Requests	1000
Denied Decision Requests	0
Total Time	130.821724ms

Benchmark Statistics

Name	№ Requests	Avg Duration	Min Duration	Max Duration

Bulk Benchmark Results

Metric	Value
Total Decrypts	100
Successful Decrypts	100
Failed Decrypts	0
Total Time	433.102403ms
Throughput	230.89 requests/second

TDF3 Benchmark Results:

Metric	Value
Total Requests	5000
Successful Requests	5000
Failed Requests	0
Concurrent Requests	50
Total Time	46.684983754s
Average Latency	465.020402ms
Throughput	107.10 requests/second

NANOTDF Benchmark Results:

Metric	Value
Total Requests	5000
Successful Requests	5000
Failed Requests	0
Concurrent Requests	50
Total Time	33.087491639s
Average Latency	330.019295ms
Throughput	151.11 requests/second

[github-actions]

X-Test Results

opentdfplatformOEB8K3.dockerbuild
cukes-report
✅ js-v0.4.34
✅ java-v0.4.34
✅ go-v0.4.34
bats-test-results
test-cases-mapping-report
✅ js-pull-2841
✅ java-pull-2841
✅ go-pull-2841

[github-actions]

X-Test Results

opentdfplatformRB8GO2.dockerbuild
✅ js-v0.4.34
cukes-report
✅ java-v0.4.34
✅ go-v0.4.34
bats-test-results
test-cases-mapping-report
✅ js-pull-2841
✅ go-pull-2841
✅ java-pull-2841

[github-actions]

X-Test Failure Report

opentdfplatformA7PRK1.dockerbuild
cukes-report
❌ js-pull-2841
❌ java-pull-2841
❌ go-pull-2841

[github-actions]

X-Test Results

opentdfplatformMM9LRH.dockerbuild
cukes-report
✅ java-v0.4.34
✅ js-v0.4.34
✅ go-v0.4.34
bats-test-results
test-cases-mapping-report
✅ js-pull-2841
✅ java-pull-2841
✅ go-pull-2841

[github-actions]

X-Test Results

opentdfplatformB39PAU.dockerbuild
cukes-report
✅ js-v0.4.34
✅ java-v0.4.34
✅ go-v0.4.34
bats-test-results
test-cases-mapping-report
✅ js-pull-2841
✅ java-pull-2841
✅ go-pull-2841

[github-actions]

X-Test Results

opentdfplatformG551CN.dockerbuild
cukes-report
✅ js-v0.4.34
✅ java-v0.4.34
✅ go-v0.4.34
bats-test-results
test-cases-mapping-report
✅ js-pull-2841
✅ java-pull-2841
✅ go-pull-2841

[github-actions]

X-Test Results

opentdfplatformULQFTW.dockerbuild
cukes-report
✅ js-v0.4.34
✅ java-v0.4.34
✅ go-v0.4.34
bats-test-results
test-cases-mapping-report
✅ js-pull-2841
✅ java-pull-2841
✅ go-pull-2841

[github-actions]

X-Test Results

opentdfplatformVNQYNJ.dockerbuild
cukes-report
✅ java-v0.4.34
✅ js-v0.4.34
✅ go-v0.4.34
bats-test-results
test-cases-mapping-report
✅ js-pull-2841
✅ java-pull-2841
✅ go-pull-2841

[github-actions]

X-Test Results

opentdfplatformOLO2Y7.dockerbuild
✅ js-v0.4.34
cukes-report
✅ java-v0.4.34
✅ go-v0.4.34
bats-test-results
test-cases-mapping-report
✅ js-pull-2841
✅ java-pull-2841
✅ go-pull-2841

[github-actions]

X-Test Results

opentdfplatformIDTA9N.dockerbuild
cukes-report
✅ java-v0.4.34
✅ js-v0.4.34
✅ go-v0.4.34
bats-test-results
test-cases-mapping-report
✅ js-pull-2841
✅ java-pull-2841
✅ go-pull-2841

[github-actions]

X-Test Results

opentdfplatform0MLB19.dockerbuild
cukes-report
✅ java-v0.4.34
✅ js-v0.4.34
✅ go-v0.4.34
bats-test-results
test-cases-mapping-report
✅ js-pull-2841
✅ java-pull-2841
✅ go-pull-2841