All pull requests

Pull requests

• feat(sdk): derive AES-GCM segment IVs from a message id and part number

  comp:lib:ocryptocomp:sdksize/xl
  #4118·dmihalcik-virtru opened Sep 28, 2026Member·

  ·
  6

• chore(main): release sdk 0.34.0

  autorelease: pendingcomp:cicomp:sdksize/s
  #4116·opentdf-automation[bot] opened Sep 28, 2026Bot·

  ·
  4

• fix(deps): bump the external group across 1 directory with 34 updates

  dependenciesgosize/l
  #4112·dependabot[bot] opened Sep 28, 2026Bot·

  ·
  4

• fix(kas): skip unhandled requests when failing all KAOs

  comp:kasexternal-contributorsize/xs
  #4107·arkavo-com opened Sep 27, 2026·

  ·
  3

• feat(core): add a health command for container health checks

  external-contributorsize/m
  #4106·mmaudet opened Sep 27, 2026·

  ·
  1

  4

• feat(core): record append-only audit lifecycles for KAS rewrap

  comp:kassize/m
  #4104·dmihalcik-virtru opened Sep 25, 2026Member·

  ·
  4

• docs(core): refresh audit, logging, and telemetry coordination plan

  docssize/m
  #4103·dmihalcik-virtru opened Sep 25, 2026Member·

  ·
  6

• fix(deps): bump github.com/containerd/containerd/v2 from 2.2.8 to 2.2.9 in /tests-bdd

  dependenciesgosize/xs
  #4102·dependabot[bot] opened Sep 25, 2026Bot·

  ·
  4

• chore(main): release otdfctl 0.39.0

  autorelease: pendingcomp:cisize/s
  #4101·opentdf-automation[bot] opened Sep 25, 2026Bot·

  ·
  8

• fix(deps): bump the external group across 1 directory with 8 updates

  comp:sdkdependenciesgosize/m
  #4099·dependabot[bot] opened Sep 24, 2026Bot·

  ·
  6

• build: make fuzz actually fuzz (DSPX-4903)

  size/s
  #4096·dmihalcik-virtru opened Sep 23, 2026Member·

  ·
  4

• chore(main): release service 0.28.0

  autorelease: pendingcomp:cisize/s
  #4095·opentdf-automation[bot] opened Sep 22, 2026Bot·

  ·
  14

• refactor(core)!: replace buffered audit with immediate recording

  comp:authorizationcomp:kascomp:policysize/l
  #4092·strantalis opened Sep 21, 2026Member·2/2·

  ·
  44

• fix(deps): bump the external group across 1 directory with 12 updates

  dependenciesgosize/m
  #4089·dependabot[bot] opened Sep 21, 2026Bot·

  ·
  11

• fix(deps): bump the external group across 1 directory with 4 updates

  dependenciesgosize/xs
  #4088·dependabot[bot] opened Sep 21, 2026Bot·

  ·
  16

• fix(cli): refuse an output destination that aliases the input

  size/s
  #4086·dmihalcik-virtru opened Sep 21, 2026Member·

  ·
  10

• fix(sdk): synchronize KAS key cache

  comp:sdksize/s
  #4084·eugenioenko opened Sep 18, 2026Contributor·

  ·
  1

  17

• fix(kas): accept spec-compliant policy bindings

  comp:kascomp:sdksize/m
  #4081·pflynn-virtru opened Sep 17, 2026Member·

  ·
  7

• chore(sdk): give the bundled manifest schemas real $id values

  comp:sdksize/xs
  #4070·pflynn-virtru opened Sep 17, 2026Member·

  ·
  1

• fix(sdk): read the TDF manifest under the spec name manifest.json

  comp:sdksize/s
  #4063·pflynn-virtru opened Sep 16, 2026Member·

  ·
  13

• fix(sdk): read the TDF spec version at the manifest root, and stop trusting it

  comp:sdksize/m
  #4060·pflynn-virtru opened Sep 16, 2026Member·

  ·
  1

  4

• fix(kas): scope key material cache identity by registry

  comp:kascomp:policysize/s
  #4056·c-r33d opened Sep 16, 2026Contributor·

  ·
  25

• fix(sdk): harden zipstream CleanupSegment rollback

  comp:sdksize/s
  #4054·dmihalcik-virtru opened Sep 15, 2026Member·

  ·
  14

• fix(kas)!: add KAS context to key lookup logs and audit identifiers

  comp:kascomp:policysize/s
  #4053·c-r33d opened Sep 15, 2026Contributor·2/2·

  ·
  28

• feat(sdk): strict WithRequireSpecManifestName to reject off-spec

  comp:sdksize/s
  #4051·pflynn-virtru opened Sep 15, 2026Member·2/2·

  ·
  4