All pull requests

Pull requests

• feat(core): DSPX-4707 configurable trusted origins for DPoP htu validation

  comp:middleware:authdocssize/m
  #4323·dmihalcik-virtru opened Nov 12, 2026Member·2 of 3 tasks·

  ·
  4

• feat(sdk): DSPX-5639 negotiate DPoP proof style from server advertisement

  comp:sdksize/m
  #4322·dmihalcik-virtru opened Nov 12, 2026Member·1 of 3 tasks·

  ·
  4

• fix(policy): keep getSubjectMappingsByValueFqns fast under generic plans

  comp:dbcomp:policysize/m
  #4321·ttschampel opened Nov 12, 2026Member·3 tasks·

  ·
  4

• feat(core): accept all ML-KEM private key encodings

  comp:kascomp:lib:ocryptosize/l
  #4320·dmihalcik-virtru opened Nov 10, 2026Member·3 tasks done·

  ·
  6

• fix(cli): migrate go-jose from v3 to v4

  comp:cisize/m
  #4319·jakedoublev opened Nov 10, 2026Contributor·

  ·
  2

• chore(release): release otdfctl 0.27.1

  autorelease: pendingcomp:cisize/s
  #4316·opentdf-automation[bot] opened Nov 10, 2026Bot·

  ·
  4

• test(sdk): DSPX-1561 run the shared assertion conformance vectors

  comp:sdksize/xl
  #4308·dmihalcik-virtru opened Nov 9, 2026Member·1 of 3 tasks·

  ·
  5

• fix(sdk): DSPX-1561 verify assertion bindings under the assertions specification

  comp:sdksize/l
  #4307·dmihalcik-virtru opened Nov 9, 2026Member·2 of 3 tasks·

  ·
  4

• fix(sdk): DSPX-1561 hash assertions as received

  comp:sdksize/m
  #4306·dmihalcik-virtru opened Nov 9, 2026Member·2 of 3 tasks·

  ·
  4

• fix(sdk): DSPX-1561 parse manifests strictly

  comp:sdksize/l
  #4305·dmihalcik-virtru opened Nov 9, 2026Member·2 of 3 tasks·

  ·
  4

• fix(otdfctl): DSPX-1561 pass the default assertion verification key to the SDK

  size/m
  #4304·dmihalcik-virtru opened Nov 9, 2026Member·2 of 3 tasks·

  ·
  4

• fix(sdk): DSPX-1561 verify assertion bindings only with the selected key

  comp:sdksize/s
  #4303·dmihalcik-virtru opened Nov 9, 2026Member·2 of 3 tasks·

  ·
  4

• fix(sdk): DSPX-1561 align TDF manifest parsing and assertion verification across SDKs

  comp:sdksize/xl
  #4301·dmihalcik-virtru opened Nov 9, 2026Member·3 tasks done·

  ·
  6

• fix(cli): address review comments on decrypt --offset/--length

  size/xs
  #4300·dmihalcik-virtru opened Nov 8, 2026Member·

  ·
  6

• refactor(cli): drop HTTP(S) URL input from otdfctl decrypt

  comp:sdksize/m
  #4298·dmihalcik-virtru opened Nov 7, 2026Member·1 of 3 tasks·

  ·
  6

• feat(core): DSPX-3573 reject DPoP-bound tokens presented under Bearer

  comp:middleware:authdocssize/s
  #4297·dmihalcik-virtru opened Nov 6, 2026Member·3 tasks done·

  ·
  4

• fix(core): tolerate client clock skew on DPoP proof iat (DSPX-5486)

  comp:middleware:authdocssize/s
  #4296·dmihalcik-virtru opened Nov 6, 2026Member·2 of 3 tasks·

  ·
  7

• fix(deps): bump the external group across 1 directory with 9 updates

  dependenciesgosize/m
  #4295·dependabot[bot] opened Nov 6, 2026Bot·

  ·
  12

• fix(deps): bump github.com/opentdf/platform/service from 0.29.0 to 0.30.0 in /tests-bdd

  dependenciesgosize/s
  #4294·dependabot[bot] opened Nov 6, 2026Bot·

  ·
  4

• chore(main): release otdfctl 0.42.0

  autorelease: pendingcomp:cisize/s
  #4291·opentdf-automation[bot] opened Nov 5, 2026Bot·

  ·
  12

• fix(kas): accept spec-compliant policy bindings [backport to release/service/v0.29]

  comp:kassize/s
  #4288·opentdf-automation[bot] opened Nov 4, 2026Bot·

  ·
  6

• feat(cli): expose reusable profile store package

  size/m
  #4286·jrschumacher opened Nov 4, 2026Member·2 of 5 tasks·

  ·
  13

• chore(main): release service 0.31.0

  autorelease: pendingcomp:cisize/s
  #4284·opentdf-automation[bot] opened Nov 3, 2026Bot·

  ·
  16

• feat(sdk): cap IsValidTdf manifest size with default and override option

  comp:sdksize/s
  #4283·bnrobinson93 opened Nov 3, 2026·1 of 3 tasks·

  ·
  9

• chore(main): release sdk 0.37.0

  autorelease: pendingcomp:cicomp:sdksize/s
  #4282·opentdf-automation[bot] opened Nov 3, 2026Bot·

  ·
  18