chore(main): release sdk 0.32.0

[opentdf-automation]

🤖 I have created a release beep boop

0.32.0 (2026-09-16)

Features

• sdk: make the zipstream clock injectable for deterministic ZIP output (#3931) (02d9aea)

Bug Fixes

• deps: bump google.golang.org/grpc from 1.83.0 to 1.83.1 in /sdk (#3959) (06c4934)
• sdk: DSPX-4590 default per-segment sizes when a writer omits them (#3979) (9deeee8)
• sdk: DSPX-4590 zip64 conformance (#3981) (85bbe96)
• sdk: fill each segment with io.ReadFull and size the buffer to the input (#3936) (20f59a4)
• sdk: map ReadAt plaintext offsets from cumulative segment sizes (#3933) (62cb8e3)
• sdk: reject a zipstream write set that omits segment 0 (#3932) (6ca994b)
• sdk: reject GMAC root signatures (DSPX-4703) (#4030) (2bce7d4)

---

This PR was generated with Release Please. See documentation.

[github-actions]

Benchmark results, click to expand

Benchmark authorization.GetDecisions Results:

Metric	Value
Approved Decision Requests	1000
Denied Decision Requests	0
Total Time	201.891394ms

Benchmark authorization.v2.GetMultiResourceDecision Results:

Metric	Value
Approved Decision Requests	1000
Denied Decision Requests	0
Total Time	115.969217ms

Benchmark Statistics

Name	№ Requests	Avg Duration	Min Duration	Max Duration

Bulk Benchmark Results

Metric	Value
Total Decrypts	100
Successful Decrypts	100
Failed Decrypts	0
Total Time	402.124525ms
Throughput	248.68 requests/second

TDF3 Benchmark Results:

Metric	Value
Total Requests	5000
Successful Requests	5000
Failed Requests	0
Concurrent Requests	50
Total Time	54.208543508s
Average Latency	540.9541ms
Throughput	92.24 requests/second

[github-actions]

X-Test Results

✅ go@main-pull-3963
✅ go@pull-3963-main
✅ go@main-main
✅ go@main-v0.9.0
✅ java@main-pull-3963
✅ go@pull-3963-pull-3963
✅ java@main-v0.9.0
✅ go@pull-3963-v0.9.0
✅ js@main-main
✅ java@main-main
✅ js@main-v0.9.0
✅ js@main-pull-3963
opentdfplatformAN9F2F.dockerbuild
govulncheck-failure-8
govulncheck-failure-1

[github-actions]

Benchmark results, click to expand

Benchmark authorization.GetDecisions Results:

Metric	Value
Approved Decision Requests	1000
Denied Decision Requests	0
Total Time	247.62805ms

Benchmark authorization.v2.GetMultiResourceDecision Results:

Metric	Value
Approved Decision Requests	1000
Denied Decision Requests	0
Total Time	137.454873ms

Benchmark Statistics

Name	№ Requests	Avg Duration	Min Duration	Max Duration

Bulk Benchmark Results

Metric	Value
Total Decrypts	100
Successful Decrypts	100
Failed Decrypts	0
Total Time	437.545894ms
Throughput	228.55 requests/second

TDF3 Benchmark Results:

Metric	Value
Total Requests	5000
Successful Requests	5000
Failed Requests	0
Concurrent Requests	50
Total Time	1m2.528203689s
Average Latency	624.16127ms
Throughput	79.96 requests/second

[github-actions]

X-Test Results

✅ go@pull-3963-pull-3963
✅ go@pull-3963-main
✅ go@main-pull-3963
✅ go@main-v0.9.0
✅ go@main-main
cukes-report
✅ go@pull-3963-v0.9.0
✅ java@main-v0.9.0
✅ java@main-pull-3963
✅ java@main-main
✅ js@main-main
✅ js@main-pull-3963
✅ js@main-v0.9.0
govulncheck-failure-8
govulncheck-failure-1
opentdfplatform7LAPT2.dockerbuild

[github-actions]

Benchmark results, click to expand

Benchmark authorization.GetDecisions Results:

Metric	Value
Approved Decision Requests	1000
Denied Decision Requests	0
Total Time	256.690636ms

Benchmark authorization.v2.GetMultiResourceDecision Results:

Metric	Value
Approved Decision Requests	1000
Denied Decision Requests	0
Total Time	163.777295ms

Benchmark Statistics

Name	№ Requests	Avg Duration	Min Duration	Max Duration

Bulk Benchmark Results

Metric	Value
Total Decrypts	100
Successful Decrypts	100
Failed Decrypts	0
Total Time	335.493438ms
Throughput	298.07 requests/second

TDF3 Benchmark Results:

Metric	Value
Total Requests	5000
Successful Requests	5000
Failed Requests	0
Concurrent Requests	50
Total Time	46.484633894s
Average Latency	463.901712ms
Throughput	107.56 requests/second

[github-actions]

X-Test Failure Report

bats-test-results
✅ go@pull-3963-pull-3963
✅ go@main-pull-3963
✅ go@main-main
✅ go@pull-3963-v0.9.0
✅ go@main-v0.9.0
server-logs-java@main-main
❌ java@main-main
cukes-report
✅ java@main-v0.9.0
✅ js@main-main
✅ js@main-v0.9.0
✅ js@main-pull-3963
server-logs-java@main-pull-3963
server-logs-go@pull-3963-main
opentdfplatformUY9175.dockerbuild
govulncheck-failure-8
govulncheck-failure-3
govulncheck-failure-1

[github-actions]

Benchmark results, click to expand

Benchmark authorization.GetDecisions Results:

Metric	Value
Approved Decision Requests	1000
Denied Decision Requests	0
Total Time	145.996676ms

Benchmark authorization.v2.GetMultiResourceDecision Results:

Metric	Value
Approved Decision Requests	1000
Denied Decision Requests	0
Total Time	80.864911ms

Benchmark Statistics

Name	№ Requests	Avg Duration	Min Duration	Max Duration

Bulk Benchmark Results

Metric	Value
Total Decrypts	100
Successful Decrypts	100
Failed Decrypts	0
Total Time	289.766196ms
Throughput	345.11 requests/second

TDF3 Benchmark Results:

Metric	Value
Total Requests	5000
Successful Requests	5000
Failed Requests	0
Concurrent Requests	50
Total Time	36.469048405s
Average Latency	363.685115ms
Throughput	137.10 requests/second

[github-actions]

X-Test Failure Report

✅ go@pull-3963-pull-3963
bats-test-results
✅ go@main-pull-3963
✅ go@pull-3963-main
✅ go@main-main
✅ go@pull-3963-v0.9.0
✅ go@main-v0.9.0
✅ java@main-main
✅ java@main-v0.9.0
✅ js@main-pull-3963
cukes-report
✅ js@main-main
✅ js@main-v0.9.0
server-logs-java@main-pull-3963
opentdfplatformFNHRKT.dockerbuild
govulncheck-failure-8
govulncheck-failure-1
govulncheck-failure-3

[github-actions]

Benchmark results, click to expand

Benchmark authorization.GetDecisions Results:

Metric	Value
Approved Decision Requests	1000
Denied Decision Requests	0
Total Time	223.098698ms

Benchmark authorization.v2.GetMultiResourceDecision Results:

Metric	Value
Approved Decision Requests	1000
Denied Decision Requests	0
Total Time	130.469149ms

Benchmark Statistics

Name	№ Requests	Avg Duration	Min Duration	Max Duration

Bulk Benchmark Results

Metric	Value
Total Decrypts	100
Successful Decrypts	100
Failed Decrypts	0
Total Time	442.482001ms
Throughput	226.00 requests/second

TDF3 Benchmark Results:

Metric	Value
Total Requests	5000
Successful Requests	5000
Failed Requests	0
Concurrent Requests	50
Total Time	56.063899078s
Average Latency	559.03299ms
Throughput	89.18 requests/second

[github-actions]

X-Test Results

✅ go@main-main
✅ go@pull-3963-main
bats-test-results
cukes-report
✅ java@main-main
✅ go@pull-3963-v0.9.0
✅ java@main-pull-3963
✅ go@main-v0.9.0
✅ go@pull-3963-pull-3963
✅ go@main-pull-3963
✅ js@main-main
✅ js@main-pull-3963
✅ java@main-v0.9.0
✅ js@main-v0.9.0
opentdfplatformRDOYYH.dockerbuild
govulncheck-failure-8
govulncheck-failure-3
govulncheck-failure-1

[github-actions]

Benchmark results, click to expand

Benchmark authorization.GetDecisions Results:

Metric	Value
Approved Decision Requests	1000
Denied Decision Requests	0
Total Time	242.766426ms

Benchmark authorization.v2.GetMultiResourceDecision Results:

Metric	Value
Approved Decision Requests	1000
Denied Decision Requests	0
Total Time	138.055899ms

Benchmark Statistics

Name	№ Requests	Avg Duration	Min Duration	Max Duration

Bulk Benchmark Results

Metric	Value
Total Decrypts	100
Successful Decrypts	100
Failed Decrypts	0
Total Time	425.636597ms
Throughput	234.94 requests/second

TDF3 Benchmark Results:

Metric	Value
Total Requests	5000
Successful Requests	5000
Failed Requests	0
Concurrent Requests	50
Total Time	59.147564392s
Average Latency	589.905245ms
Throughput	84.53 requests/second

[github-actions]

X-Test Results

✅ go@pull-3963-pull-3963
bats-test-results
✅ go@pull-3963-main
✅ go@main-pull-3963
✅ go@main-v0.9.0
✅ java@main-main
✅ go@pull-3963-v0.9.0
✅ java@main-pull-3963
✅ go@main-main
✅ java@main-v0.9.0
✅ js@main-v0.9.0
cukes-report
✅ js@main-pull-3963
✅ js@main-main
opentdfplatformF8B8TS.dockerbuild
govulncheck-failure-8
govulncheck-failure-3
govulncheck-failure-1

[github-actions]

Benchmark results, click to expand

Benchmark authorization.GetDecisions Results:

Metric	Value
Approved Decision Requests	1000
Denied Decision Requests	0
Total Time	170.236107ms

Benchmark authorization.v2.GetMultiResourceDecision Results:

Metric	Value
Approved Decision Requests	1000
Denied Decision Requests	0
Total Time	101.564963ms

Benchmark Statistics

Name	№ Requests	Avg Duration	Min Duration	Max Duration

Bulk Benchmark Results

Metric	Value
Total Decrypts	100
Successful Decrypts	100
Failed Decrypts	0
Total Time	345.51144ms
Throughput	289.43 requests/second

TDF3 Benchmark Results:

Metric	Value
Total Requests	5000
Successful Requests	5000
Failed Requests	0
Concurrent Requests	50
Total Time	46.928661686s
Average Latency	468.32761ms
Throughput	106.54 requests/second

[github-actions]

X-Test Results

✅ go@main-main
✅ go@main-pull-3963
✅ go@pull-3963-main
bats-test-results
✅ go@pull-3963-pull-3963
✅ java@main-main
✅ go@pull-3963-v0.9.0
✅ java@main-pull-3963
✅ js@main-v0.9.0
✅ java@main-v0.9.0
✅ js@main-pull-3963
✅ js@main-main
✅ go@main-v0.9.0
cukes-report
govulncheck-failure-1
opentdfplatformYYH5RF.dockerbuild
govulncheck-failure-8
govulncheck-failure-3

[github-actions]

Benchmark results, click to expand

Benchmark authorization.GetDecisions Results:

Metric	Value
Approved Decision Requests	1000
Denied Decision Requests	0
Total Time	241.771117ms

Benchmark authorization.v2.GetMultiResourceDecision Results:

Metric	Value
Approved Decision Requests	1000
Denied Decision Requests	0
Total Time	135.197641ms

Benchmark Statistics

Name	№ Requests	Avg Duration	Min Duration	Max Duration

Bulk Benchmark Results

Metric	Value
Total Decrypts	100
Successful Decrypts	100
Failed Decrypts	0
Total Time	433.772972ms
Throughput	230.54 requests/second

TDF3 Benchmark Results:

Metric	Value
Total Requests	5000
Successful Requests	5000
Failed Requests	0
Concurrent Requests	50
Total Time	57.783334765s
Average Latency	576.419632ms
Throughput	86.53 requests/second

[github-actions]

X-Test Results

✅ go@pull-3963-pull-3963
bats-test-results
✅ go@main-pull-3963
✅ go@pull-3963-main
✅ go@main-v0.9.0
✅ go@pull-3963-v0.9.0
cukes-report
✅ java@main-pull-3963
✅ go@main-main
✅ js@main-pull-3963
✅ js@main-main
✅ java@main-v0.9.0
✅ js@main-v0.9.0
✅ java@main-main
opentdfplatformX985RN.dockerbuild
govulncheck-failure-8
govulncheck-failure-1
govulncheck-failure-3

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Repository UI

Review profile: ASSERTIVE

Plan: Advanced

Run ID: 32cff3bd-0ed9-470a-8035-13a86c4044fe

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[github-actions]

Benchmark results, click to expand

Benchmark authorization.GetDecisions Results:

Metric	Value
Approved Decision Requests	1000
Denied Decision Requests	0
Total Time	253.402614ms

Benchmark authorization.v2.GetMultiResourceDecision Results:

Metric	Value
Approved Decision Requests	1000
Denied Decision Requests	0
Total Time	138.648072ms

Benchmark Statistics

Name	№ Requests	Avg Duration	Min Duration	Max Duration

Bulk Benchmark Results

Metric	Value
Total Decrypts	100
Successful Decrypts	100
Failed Decrypts	0
Total Time	434.234223ms
Throughput	230.29 requests/second

TDF3 Benchmark Results:

Metric	Value
Total Requests	5000
Successful Requests	5000
Failed Requests	0
Concurrent Requests	50
Total Time	1m0.448406895s
Average Latency	603.063918ms
Throughput	82.72 requests/second

[github-actions]

X-Test Results

✅ go@pull-3963-main
✅ go@main-main
bats-test-results
✅ go@pull-3963-pull-3963
✅ go@main-pull-3963
✅ go@pull-3963-v0.9.0
cukes-report
✅ go@main-v0.9.0
✅ java@main-pull-3963
✅ java@main-main
✅ js@main-main
✅ java@main-v0.9.0
✅ js@main-pull-3963
✅ js@main-v0.9.0
opentdfplatformHWWOAX.dockerbuild
govulncheck-failure-8
govulncheck-failure-3
govulncheck-failure-1

[github-actions]

Benchmark results, click to expand

Benchmark authorization.GetDecisions Results:

Metric	Value
Approved Decision Requests	1000
Denied Decision Requests	0
Total Time	187.306561ms

Benchmark authorization.v2.GetMultiResourceDecision Results:

Metric	Value
Approved Decision Requests	1000
Denied Decision Requests	0
Total Time	98.996351ms

Benchmark Statistics

Name	№ Requests	Avg Duration	Min Duration	Max Duration

Bulk Benchmark Results

Metric	Value
Total Decrypts	100
Successful Decrypts	100
Failed Decrypts	0
Total Time	350.369793ms
Throughput	285.41 requests/second

TDF3 Benchmark Results:

Metric	Value
Total Requests	5000
Successful Requests	5000
Failed Requests	0
Concurrent Requests	50
Total Time	46.765821582s
Average Latency	466.624136ms
Throughput	106.92 requests/second

[github-actions]

X-Test Results

✅ go@main-pull-3963
✅ js@main-main
✅ go@pull-3963-main
✅ java@main-v0.9.0
✅ java@main-pull-3963
✅ go@main-main
cukes-report
✅ js@main-v0.9.0
✅ js@main-pull-3963
✅ go@pull-3963-pull-3963
✅ java@main-main
govulncheck-failure-3
govulncheck-failure-1
✅ go@main-v0.9.0
✅ go@pull-3963-v0.9.0
govulncheck-failure-8
opentdfplatformX6ZFDI.dockerbuild

[github-actions]

Benchmark results, click to expand

Benchmark authorization.GetDecisions Results:

Metric	Value
Approved Decision Requests	1000
Denied Decision Requests	0
Total Time	233.88159ms

Benchmark authorization.v2.GetMultiResourceDecision Results:

Metric	Value
Approved Decision Requests	1000
Denied Decision Requests	0
Total Time	133.06247ms

Benchmark Statistics

Name	№ Requests	Avg Duration	Min Duration	Max Duration

Bulk Benchmark Results

Metric	Value
Total Decrypts	100
Successful Decrypts	100
Failed Decrypts	0
Total Time	422.036807ms
Throughput	236.95 requests/second

TDF3 Benchmark Results:

Metric	Value
Total Requests	5000
Successful Requests	5000
Failed Requests	0
Concurrent Requests	50
Total Time	57.614789411s
Average Latency	574.797222ms
Throughput	86.78 requests/second

[github-actions]

X-Test Results

✅ js@main-pull-3963
govulncheck-failure-1
govulncheck-failure-8
✅ go@main-main
✅ java@main-main
govulncheck-failure-3
✅ java@main-v0.9.0
✅ java@main-pull-3963
✅ go@pull-3963-main
✅ go@pull-3963-pull-3963
cukes-report
✅ go@main-pull-3963
✅ js@main-main
✅ js@main-v0.9.0
✅ go@pull-3963-v0.9.0
✅ go@main-v0.9.0
opentdfplatformLTX93Y.dockerbuild

[github-actions]

Benchmark results, click to expand

Benchmark authorization.GetDecisions Results:

Metric	Value
Approved Decision Requests	1000
Denied Decision Requests	0
Total Time	176.073972ms

Benchmark authorization.v2.GetMultiResourceDecision Results:

Metric	Value
Approved Decision Requests	1000
Denied Decision Requests	0
Total Time	103.082071ms

Benchmark Statistics

Name	№ Requests	Avg Duration	Min Duration	Max Duration

Bulk Benchmark Results

Metric	Value
Total Decrypts	100
Successful Decrypts	100
Failed Decrypts	0
Total Time	351.342096ms
Throughput	284.62 requests/second

TDF3 Benchmark Results:

Metric	Value
Total Requests	5000
Successful Requests	5000
Failed Requests	0
Concurrent Requests	50
Total Time	47.574963541s
Average Latency	474.732081ms
Throughput	105.10 requests/second

[github-actions]

X-Test Results

✅ go@pull-3963-pull-3963
✅ go@main-main
bats-test-results
✅ go@pull-3963-main
✅ go@main-v0.9.0
✅ js@main-pull-3963
✅ java@main-main
✅ go@main-pull-3963
✅ go@pull-3963-v0.9.0
✅ java@main-pull-3963
✅ java@main-v0.9.0
govulncheck-failure-1
opentdfplatformSVOZJ0.dockerbuild
govulncheck-failure-3
govulncheck-failure-8
✅ js@main-v0.9.0
✅ js@main-main

[github-actions]

Benchmark results, click to expand

Benchmark authorization.GetDecisions Results:

Metric	Value
Approved Decision Requests	1000
Denied Decision Requests	0
Total Time	245.023776ms

Benchmark authorization.v2.GetMultiResourceDecision Results:

Metric	Value
Approved Decision Requests	1000
Denied Decision Requests	0
Total Time	140.126968ms

Benchmark Statistics

Name	№ Requests	Avg Duration	Min Duration	Max Duration

Bulk Benchmark Results

Metric	Value
Total Decrypts	100
Successful Decrypts	100
Failed Decrypts	0
Total Time	422.701258ms
Throughput	236.57 requests/second

TDF3 Benchmark Results:

Metric	Value
Total Requests	5000
Successful Requests	5000
Failed Requests	0
Concurrent Requests	50
Total Time	59.96260102s
Average Latency	597.840039ms
Throughput	83.39 requests/second

[github-actions]

X-Test Results

✅ go@main-pull-3963
✅ js@main-v0.9.0
✅ js@main-pull-3963
✅ js@main-main
✅ go@pull-3963-main
✅ java@main-v0.9.0
✅ java@main-main
govulncheck-failure-3
✅ go@pull-3963-v0.9.0
✅ java@main-pull-3963
govulncheck-failure-8
✅ go@main-main
✅ go@pull-3963-pull-3963
govulncheck-failure-1
opentdfplatformYFQGRI.dockerbuild
bats-test-results
✅ go@main-v0.9.0
cukes-report

[github-actions]

Benchmark results, click to expand

Benchmark authorization.GetDecisions Results:

Metric	Value
Approved Decision Requests	1000
Denied Decision Requests	0
Total Time	187.528813ms

Benchmark authorization.v2.GetMultiResourceDecision Results:

Metric	Value
Approved Decision Requests	1000
Denied Decision Requests	0
Total Time	97.248023ms

Benchmark Statistics

Name	№ Requests	Avg Duration	Min Duration	Max Duration

Bulk Benchmark Results

Metric	Value
Total Decrypts	100
Successful Decrypts	100
Failed Decrypts	0
Total Time	353.544733ms
Throughput	282.85 requests/second

TDF3 Benchmark Results:

Metric	Value
Total Requests	5000
Successful Requests	5000
Failed Requests	0
Concurrent Requests	50
Total Time	46.548350475s
Average Latency	464.404445ms
Throughput	107.42 requests/second

[github-actions]

⚠️ Govulncheck found vulnerabilities ⚠️

The following modules have known vulnerabilities:

• otdfctl
• service
• tests-bdd

See the workflow run for details.

[github-actions]

X-Test Results

✅ js@main-v0.9.0
bats-test-results
cukes-report
govulncheck-failure-8
✅ go@pull-3963-v0.9.0
opentdfplatformWY6W48.dockerbuild
✅ go@main-main
govulncheck-failure-1
✅ js@main-main
govulncheck-failure-3
✅ go@pull-3963-pull-3963
✅ java@main-main
✅ java@main-pull-3963
✅ go@main-v0.9.0
✅ go@main-pull-3963
✅ go@pull-3963-main
✅ java@main-v0.9.0
✅ js@main-pull-3963

[opentdf-automation]

🤖 Created releases:

• sdk/v0.32.0

🌻