chore(main): release sdk 0.33.0

[opentdf-automation]

🤖 I have created a release beep boop

0.33.0 (2026-09-18)

Features

• sdk: add a chunked segment writer (experimental) (#3940) (69cb391)

---

This PR was generated with Release Please. See documentation.

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Repository UI

Review profile: ASSERTIVE

Plan: Advanced

Run ID: 20ca0940-e4c9-4838-bfcd-abcf1fae750c

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[github-actions]

Benchmark results, click to expand

Benchmark authorization.GetDecisions Results:

Metric	Value
Approved Decision Requests	1000
Denied Decision Requests	0
Total Time	263.359308ms

Benchmark authorization.v2.GetMultiResourceDecision Results:

Metric	Value
Approved Decision Requests	1000
Denied Decision Requests	0
Total Time	134.265057ms

Benchmark Statistics

Name	№ Requests	Avg Duration	Min Duration	Max Duration

Bulk Benchmark Results

Metric	Value
Total Decrypts	100
Successful Decrypts	100
Failed Decrypts	0
Total Time	430.541929ms
Throughput	232.27 requests/second

TDF3 Benchmark Results:

Metric	Value
Total Requests	5000
Successful Requests	5000
Failed Requests	0
Concurrent Requests	50
Total Time	1m2.870572554s
Average Latency	627.184117ms
Throughput	79.53 requests/second

[github-actions]

X-Test Results

✅ go@pull-4068-v0.9.0
cukes-report
✅ java@main-main
✅ go@main-v0.9.0
✅ go@pull-4068-main
✅ js@main-main
opentdfplatformPJ2NGH.dockerbuild
bats-test-results
govulncheck-failure-1
govulncheck-failure-8
✅ go@main-main
✅ go@main-pull-4068
✅ java@main-pull-4068
govulncheck-failure-3
✅ go@pull-4068-pull-4068
✅ js@main-v0.9.0
✅ js@main-pull-4068
✅ java@main-v0.9.0

[github-actions]

Benchmark results, click to expand

Benchmark authorization.GetDecisions Results:

Metric	Value
Approved Decision Requests	1000
Denied Decision Requests	0
Total Time	252.077924ms

Benchmark authorization.v2.GetMultiResourceDecision Results:

Metric	Value
Approved Decision Requests	1000
Denied Decision Requests	0
Total Time	130.553433ms

Benchmark Statistics

Name	№ Requests	Avg Duration	Min Duration	Max Duration

Bulk Benchmark Results

Metric	Value
Total Decrypts	100
Successful Decrypts	100
Failed Decrypts	0
Total Time	419.206225ms
Throughput	238.55 requests/second

TDF3 Benchmark Results:

Metric	Value
Total Requests	5000
Successful Requests	5000
Failed Requests	0
Concurrent Requests	50
Total Time	59.509868257s
Average Latency	593.789874ms
Throughput	84.02 requests/second

[github-actions]

⚠️ Govulncheck found vulnerabilities ⚠️

The following modules have known vulnerabilities:

• otdfctl
• service
• tests-bdd

See the workflow run for details.

[github-actions]

X-Test Results

✅ go@main-pull-4068
✅ go@pull-4068-main
✅ js@main-main
✅ go@pull-4068-pull-4068
✅ java@main-v0.9.0
✅ java@main-main
✅ java@main-pull-4068
opentdfplatformUQES6R.dockerbuild
✅ go@main-v0.9.0
✅ go@pull-4068-v0.9.0
cukes-report
✅ js@main-v0.9.0
govulncheck-failure-3
govulncheck-failure-8
govulncheck-failure-1
✅ go@main-main
✅ js@main-pull-4068