0.7.0 (2025-08-08)

⚠ BREAKING CHANGES

• policy: disable kas grants in favor of key mappings (#2220)
• core: Require go 1.23+ (#1979)

Features

• add ability to retrieve policy resources by id or name (#1901) (deb4455)
• authz: authz v2, ers v2 protos and gencode for ABAC with actions & registered resource (#2124) (ea7992a)
• authz: improve v2 request proto validation (#2357) (f927b99)
• authz: sensible request limit upper bounds (#2526) (b3093cc)
• core: adds bulk rewrap to sdk and service (#1835) (11698ae)
• core: EXPERIMENTAL: EC-wrapped key support (#1902) (652266f)
• core: Require go 1.23+ (#1979) (164c922)
• core: v2 ERS with proto updates (#2210) (a161ef8)
• policy: add enhanced standard/custom actions protos (#2020) (bbac53f)
• policy: Add legacy keys. (#2613) (57370b0)
• policy: Add list key mappings rpc. (#2533) (fbc2724)
• policy: add obligation protos (#2579) (50882e1)
• policy: Add validation to delete keys (#2576) (cc169d9)
• policy: add values to CreateObligationRequest (#2614) (94535cc)
• policy: adds new public keys table (#1836) (cad5048)
• policy: Allow the deletion of a key. (#2575) (82b96f0)
• policy: cache SubjectConditionSet selectors in dedicated column maintained via trigger (#2320) (215791f)
• policy: Change return type for delete key proto. (#2566) (c1ae924)
• policy: Default Platform Keys (#2254) (d7447fe)
• policy: disable kas grants in favor of key mappings (#2220) (30f8cf5)
• policy: DSPX-1018 NDR retrieval by FQN support (#2131) (0001041)
• policy: DSPX-1057 registered resource action attribute values (protos only) (#2217) (6375596)
• policy: DSPX-893 NDR define crud protos (#2056) (55a5c27)
• policy: DSPX-902 NDR service crud protos only (1/2) (#2092) (24b6cb5)
• policy: Finish resource mapping groups (#2224) (5ff754e)
• policy: key management crud (#2110) (4c3d53d)
• policy: Key management proto (#2115) (561f853)
• policy: Modify get request to search for keys by kasid with keyid. (#2147) (780d2e4)
• policy: Return KAS Key structure (#2172) (7f97b99)
• policy: Return Simple Kas Keys from non-Key RPCs (#2387) (5113e0e)
• policy: rotate keys rpc (#2180) (0d00743)
• policy: Update key status's and UpdateKey rpc. (#2315) (7908db9)
• policy: Update simple kas key (#2378) (09d8239)

Bug Fixes

• add pagination to list public key mappings response (#1889) (9898fbd)
• core: Allow 521 curve to be used (#2485) (aaf43dc)
• core: Fixes protoJSON parse bug on ec rewrap (#1943) (9bebfd0)
• core: Update fixtures and flattening in sdk and service (#1827) (d6d6a7a)
• deps: bump toolchain in /lib/fixtures and /examples to resolve CVE GO-2025-3563 (#2061) (9c16843)
• policy: protovalidate deprecated action types and removal of gRPC gateway in subject mappings svc (#2377) (54a6de0)
• policy: remove gRPC gateway in policy except where needed (#2382) (1937acb)
• policy: remove new public keys rpc's (#1962) (5049bab)
• policy: remove predefined rules in actions protos (#2069) (060f059)
• policy: return kas uri on keys for definition, namespace and values (#2186) (6c55fb8)
• sdk: Fix compatibility between bulk and non-bulk rewrap (#1914) (74abbb6)
• update key_mode to provide more context (#2226) (44d0805)