fix(deps): bump the external group across 1 directory with 3 updates by dependabot[bot] · Pull Request #3474 · opentdf/platform

dependabot · 2026-05-14T17:53:53Z

Bumps the external group with 2 updates in the /sdk directory: golang.org/x/text and google.golang.org/grpc.

Updates golang.org/x/text from 0.36.0 to 0.37.0

Commits

3ef517e go.mod: update golang.org/x dependencies
See full diff in compare view

Updates golang.org/x/tools from 0.43.0 to 0.44.0

Commits

3dd188d go.mod: update golang.org/x dependencies
aebd870 gopls: improve doc link matching to support links followed by a colon
5357b43 go/analysis/passes/modernize: rangeint: handle type parameter constraints
bf04c61 go/types/internal/play: show normal terms of selected type
0ae2de0 gopls/internal/filecache: cache decoded objects in memCache
8e51a5f go/ssa: support direct references to embedded fields in struct lit
5005b9e internal/gcimporter: rename ureader_yes.go to ureader.go
5ca865b go/types/objectpath: add debugging command
f6476fb internal/gcimporter: consume generic methods in gcimporter
b36d1d1 internal/pkgbits: sync version.go with goroot
Additional commits viewable in compare view

Updates google.golang.org/grpc from 1.81.0 to 1.81.1

Release notes

Sourced from google.golang.org/grpc's releases.

Release 1.81.1

Security

xds/rbac: Fix a potential authorization bypass caused by incorrectly falling through URI/DNS SANs to Subject Distinguished Name (DN) when matching the authenticated principal name. With this fix, only the first non-empty identity source will be used, as per gRFC A41. (#9111)

Special Thanks: @al4an444

Bug Fixes

otel: Segregate client and server RPC information used for metrics and traces, to avoid one overwriting the other. (#9081)

Commits

caf0772 Change version from 1.81.1-dev to 1.81.1 (#9122)
6ccbeeb Cherry-pick #9111 into v1.81.x (#9121)
b33c29e Cherry-pick #9081 into v1.81.x (#9102)
c45fae6 Change version to 1.81.1-dev (#9063)
See full diff in compare view

github-actions · 2026-05-14T17:59:55Z

Benchmark results, click to expand

Benchmark authorization.GetDecisions Results:

Metric	Value
Approved Decision Requests	1000
Denied Decision Requests	0
Total Time	181.623589ms

Benchmark authorization.v2.GetMultiResourceDecision Results:

Metric	Value
Approved Decision Requests	1000
Denied Decision Requests	0
Total Time	93.014713ms

Benchmark Statistics

Name	№ Requests	Avg Duration	Min Duration	Max Duration

Bulk Benchmark Results

Metric	Value
Total Decrypts	100
Successful Decrypts	100
Failed Decrypts	0
Total Time	435.684881ms
Throughput	229.52 requests/second

TDF3 Benchmark Results:

Metric	Value
Total Requests	5000
Successful Requests	5000
Failed Requests	0
Concurrent Requests	50
Total Time	43.752384531s
Average Latency	435.762615ms
Throughput	114.28 requests/second

github-actions · 2026-05-14T18:07:56Z

X-Test Results

✅ go-pull-3474
✅ go-v0.9.0
✅ java-pull-3474
bats-test-results
✅ js-pull-3474
✅ java-v0.9.0
✅ js-v0.9.0
cukes-report
opentdf~~platform~~CUUMOK.dockerbuild
govulncheck-failure-8
govulncheck-failure-3
govulncheck-failure-0
govulncheck-failure-1
govulncheck-failure-2
govulncheck-failure-5

github-actions · 2026-05-15T18:00:12Z

Benchmark results, click to expand

Benchmark authorization.GetDecisions Results:

Metric	Value
Approved Decision Requests	1000
Denied Decision Requests	0
Total Time	177.931187ms

Benchmark authorization.v2.GetMultiResourceDecision Results:

Metric	Value
Approved Decision Requests	1000
Denied Decision Requests	0
Total Time	91.963384ms

Benchmark Statistics

Name	№ Requests	Avg Duration	Min Duration	Max Duration

Bulk Benchmark Results

Metric	Value
Total Decrypts	100
Successful Decrypts	100
Failed Decrypts	0
Total Time	442.084312ms
Throughput	226.20 requests/second

TDF3 Benchmark Results:

Metric	Value
Total Requests	5000
Successful Requests	5000
Failed Requests	0
Concurrent Requests	50
Total Time	45.150967239s
Average Latency	449.172003ms
Throughput	110.74 requests/second

github-actions · 2026-05-15T18:07:40Z

X-Test Results

✅ go@main-pull-3474
bats-test-results
✅ go@main-v0.9.0
✅ java@main-pull-3474
✅ java@main-v0.9.0
✅ js@main-v0.9.0
✅ js@main-pull-3474
cukes-report
opentdf~~platform~~FDIDMM.dockerbuild
govulncheck-failure-2
govulncheck-failure-8
govulncheck-failure-3
govulncheck-failure-5
govulncheck-failure-1
govulncheck-failure-0

github-actions · 2026-05-19T03:24:48Z

Benchmark results, click to expand

Benchmark authorization.GetDecisions Results:

Metric	Value
Approved Decision Requests	1000
Denied Decision Requests	0
Total Time	189.964203ms

Benchmark authorization.v2.GetMultiResourceDecision Results:

Metric	Value
Approved Decision Requests	1000
Denied Decision Requests	0
Total Time	107.052738ms

Benchmark Statistics

Name	№ Requests	Avg Duration	Min Duration	Max Duration

Bulk Benchmark Results

Metric	Value
Total Decrypts	100
Successful Decrypts	100
Failed Decrypts	0
Total Time	439.136225ms
Throughput	227.72 requests/second

TDF3 Benchmark Results:

Metric	Value
Total Requests	5000
Successful Requests	5000
Failed Requests	0
Concurrent Requests	50
Total Time	45.930091996s
Average Latency	458.289539ms
Throughput	108.86 requests/second

github-actions · 2026-05-19T03:32:15Z

X-Test Results

✅ go@main-pull-3474
✅ java@main-pull-3474
✅ go@main-v0.9.0
✅ js@main-pull-3474
✅ java@main-v0.9.0
✅ js@main-v0.9.0
cukes-report
opentdf~~platform~~IQX45W.dockerbuild
govulncheck-failure-8
govulncheck-failure-1
govulncheck-failure-3
govulncheck-failure-2
govulncheck-failure-0
govulncheck-failure-5

github-actions · 2026-05-20T02:14:40Z

Benchmark results, click to expand

Benchmark authorization.GetDecisions Results:

Metric	Value
Approved Decision Requests	1000
Denied Decision Requests	0
Total Time	139.061347ms

Benchmark authorization.v2.GetMultiResourceDecision Results:

Metric	Value
Approved Decision Requests	1000
Denied Decision Requests	0
Total Time	74.059602ms

Benchmark Statistics

Name	№ Requests	Avg Duration	Min Duration	Max Duration

Bulk Benchmark Results

Metric	Value
Total Decrypts	100
Successful Decrypts	100
Failed Decrypts	0
Total Time	349.564251ms
Throughput	286.07 requests/second

TDF3 Benchmark Results:

Metric	Value
Total Requests	5000
Successful Requests	5000
Failed Requests	0
Concurrent Requests	50
Total Time	34.922147287s
Average Latency	347.846447ms
Throughput	143.18 requests/second

github-actions · 2026-05-20T02:22:33Z

X-Test Results

✅ go@main-pull-3474
✅ go@main-v0.9.0
✅ java@main-pull-3474
✅ js@main-pull-3474
✅ java@main-v0.9.0
✅ js@main-v0.9.0
cukes-report
opentdf~~platform~~JQGP57.dockerbuild
govulncheck-failure-8
govulncheck-failure-3
govulncheck-failure-2
govulncheck-failure-1
govulncheck-failure-0
govulncheck-failure-5

Bumps the external group with 2 updates in the /sdk directory: [golang.org/x/text](https://github.com/golang/text) and [google.golang.org/grpc](https://github.com/grpc/grpc-go). Updates `golang.org/x/text` from 0.36.0 to 0.37.0 - [Release notes](https://github.com/golang/text/releases) - [Commits](golang/text@v0.36.0...v0.37.0) Updates `golang.org/x/tools` from 0.43.0 to 0.44.0 - [Release notes](https://github.com/golang/tools/releases) - [Commits](golang/tools@v0.43.0...v0.44.0) Updates `google.golang.org/grpc` from 1.81.0 to 1.81.1 - [Release notes](https://github.com/grpc/grpc-go/releases) - [Commits](grpc/grpc-go@v1.81.0...v1.81.1) --- updated-dependencies: - dependency-name: golang.org/x/text dependency-version: 0.37.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: external - dependency-name: golang.org/x/tools dependency-version: 0.44.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: external - dependency-name: google.golang.org/grpc dependency-version: 1.81.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: external ... Signed-off-by: dependabot[bot] <support@github.com>

github-actions · 2026-05-20T15:35:29Z

Benchmark results, click to expand

Benchmark authorization.GetDecisions Results:

Metric	Value
Approved Decision Requests	1000
Denied Decision Requests	0
Total Time	185.097516ms

Benchmark authorization.v2.GetMultiResourceDecision Results:

Metric	Value
Approved Decision Requests	1000
Denied Decision Requests	0
Total Time	97.881913ms

Benchmark Statistics

Name	№ Requests	Avg Duration	Min Duration	Max Duration

Bulk Benchmark Results

Metric	Value
Total Decrypts	100
Successful Decrypts	100
Failed Decrypts	0
Total Time	417.071721ms
Throughput	239.77 requests/second

TDF3 Benchmark Results:

Metric	Value
Total Requests	5000
Successful Requests	5000
Failed Requests	0
Concurrent Requests	50
Total Time	43.538646669s
Average Latency	432.997636ms
Throughput	114.84 requests/second

github-actions · 2026-05-20T15:36:48Z

⚠️ Govulncheck found vulnerabilities ⚠️

The following modules have known vulnerabilities:

examples
otdfctl
sdk
service
lib/fixtures
tests-bdd

See the workflow run for details.

github-actions · 2026-05-20T15:43:04Z

X-Test Results

✅ go@main-pull-3474
✅ go@main-v0.9.0
✅ java@main-v0.9.0
✅ java@main-pull-3474
✅ js@main-pull-3474
✅ js@main-v0.9.0
cukes-report
opentdf~~platform~~H32BL0.dockerbuild
govulncheck-failure-3
govulncheck-failure-8
govulncheck-failure-2
govulncheck-failure-5
govulncheck-failure-0
govulncheck-failure-1

dependabot · 2026-05-20T22:01:18Z

Looks like these dependencies are updatable in another way, so this is no longer needed.

dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels May 14, 2026

dependabot Bot requested review from a team as code owners May 14, 2026 17:53

dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels May 14, 2026

github-actions Bot added comp:sdk A software development kit, including library, for client applications and inter-service communicati size/s labels May 14, 2026

dependabot Bot force-pushed the dependabot/go_modules/sdk/external-9ecdcfabe1 branch from 58d819f to dd7e702 Compare May 15, 2026 17:54

dependabot Bot force-pushed the dependabot/go_modules/sdk/external-9ecdcfabe1 branch from dd7e702 to 7c4c892 Compare May 19, 2026 03:19

dependabot Bot force-pushed the dependabot/go_modules/sdk/external-9ecdcfabe1 branch from 7c4c892 to fcc6dc3 Compare May 20, 2026 02:09

dependabot Bot force-pushed the dependabot/go_modules/sdk/external-9ecdcfabe1 branch from fcc6dc3 to 22b0215 Compare May 20, 2026 15:29

dependabot Bot closed this May 20, 2026

dependabot Bot deleted the dependabot/go_modules/sdk/external-9ecdcfabe1 branch May 20, 2026 22:01

Conversation

dependabot Bot commented on behalf of github May 14, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release 1.81.1

Security

Bug Fixes

Uh oh!

github-actions Bot commented May 14, 2026

Benchmark authorization.GetDecisions Results:

Benchmark authorization.v2.GetMultiResourceDecision Results:

Benchmark Statistics

Bulk Benchmark Results

TDF3 Benchmark Results:

Uh oh!

github-actions Bot commented May 14, 2026

X-Test Results

Uh oh!

github-actions Bot commented May 15, 2026

Benchmark authorization.GetDecisions Results:

Benchmark authorization.v2.GetMultiResourceDecision Results:

Benchmark Statistics

Bulk Benchmark Results

TDF3 Benchmark Results:

Uh oh!

github-actions Bot commented May 15, 2026

X-Test Results

Uh oh!

github-actions Bot commented May 19, 2026

Benchmark authorization.GetDecisions Results:

Benchmark authorization.v2.GetMultiResourceDecision Results:

Benchmark Statistics

Bulk Benchmark Results

TDF3 Benchmark Results:

Uh oh!

github-actions Bot commented May 19, 2026

X-Test Results

Uh oh!

github-actions Bot commented May 20, 2026

Benchmark authorization.GetDecisions Results:

Benchmark authorization.v2.GetMultiResourceDecision Results:

Benchmark Statistics

Bulk Benchmark Results

TDF3 Benchmark Results:

Uh oh!

github-actions Bot commented May 20, 2026

X-Test Results

Uh oh!

github-actions Bot commented May 20, 2026

Benchmark authorization.GetDecisions Results:

Benchmark authorization.v2.GetMultiResourceDecision Results:

Benchmark Statistics

Bulk Benchmark Results

TDF3 Benchmark Results:

Uh oh!

github-actions Bot commented May 20, 2026

⚠️ Govulncheck found vulnerabilities ⚠️

Uh oh!

github-actions Bot commented May 20, 2026

X-Test Results

Uh oh!

dependabot Bot commented on behalf of github May 20, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot Bot commented on behalf of github May 14, 2026 •

edited

Loading