chore(main): release protocol/go 0.4.0

[opentdf-automation]

🤖 I have created a release beep boop

0.4.0 (2025-04-29)

⚠ BREAKING CHANGES

• core: Require go 1.23+ (#1979)

Features

• add ability to retrieve policy resources by id or name (#1901) (deb4455)
• add generated connect-rpc code (#1708) (92ac86a)
• authz: Typed Entities (#1249) (cfab3ad)
• backend migration to connect-rpc (#1733) (d10ba3c)
• core: adds bulk rewrap to sdk and service (#1835) (11698ae)
• core: Adds key ids to kas registry (#1347) (e6c76ee)
• core: EXPERIMENTAL: EC-wrapped key support (#1902) (652266f)
• core: further support in policy for namespace grants (#1334) (d56231e)
• core: policy support for LIST of kas grants (protos/db) (#1317) (599fc56)
• core: Require go 1.23+ (#1979) (164c922)
• core: validate kas uri (#1351) (2b70931)
• policy: 1277 add Resource Mapping Group to objects proto (#1309) (514f1b8), closes #1277
• policy: 1277 protos and service methods for Resource Mapping Groups operations (#1343) (570f402)
• policy: 1398 add metadata support to Resource Mapping Groups (#1412) (87b7b2f)
• policy: 1651 move GetAttributesByValueFqns RPC request validation to protovalidate (#1657) (c7d6b15)
• policy: add enhanced standard/custom actions protos (#2020) (bbac53f)
• policy: add optional name field to registered KASes in policy (#1636) (f1382c1)
• policy: adds new public keys table (#1836) (cad5048)
• policy: DSP-51 - deprecate PublicKey local field (#1590) (e3ed0b5)
• policy: DSPX-893 NDR define crud protos (#2056) (55a5c27)
• policy: DSPX-902 NDR service crud protos only (1/2) (#2092) (24b6cb5)
• policy: Key management proto (#2115) (561f853)
• policy: limit/offset throughout LIST protos/gencode (#1668) (7de6cce)
• policy: subject condition sets prune protos/gencode (#1687) (a627e02)
• policy: subject condition sets prune service/db (#1688) (3cdd1b2), closes #1178
• sdk: add collections for nanotdf (#1695) (6497bf3)
• sdk: Load KAS keys from policy service (#1346) (fe628a0)

Bug Fixes

• add pagination to list public key mappings response (#1889) (9898fbd)
• core: align policy kas grant assignments http gateway methods with actions (#1299) (031c6ca)
• core: Fix parsing /v1/authorization (#1554) (b7d694d), closes #1553
• core: Fix POST /v1/entitlements body parsing (#1574) (fcae7ef)
• core: Fixes protoJSON parse bug on ec rewrap (#1943) (9bebfd0)
• core: Update fixtures and flattening in sdk and service (#1827) (d6d6a7a)
• deps: bump toolchain in /lib/fixtures and /examples to resolve CVE GO-2025-3563 (#2061) (9c16843)
• kas: Regenerate protos and fix tests from info rpc removal (#1291) (91a2fe6)
• policy: deprecates and reserves value members from value object in protos (#1151) (07fcc9e)
• policy: enhance proto validation across policy requests (#1656) (df534c4)
• policy: make MatchSubjectMappings operator agnostic (#1658) (cb63819)
• policy: remove new public keys rpc's (#1962) (5049bab)
• policy: remove predefined rules in actions protos (#2069) (060f059)
• sdk: Fix compatibility between bulk and non-bulk rewrap (#1914) (74abbb6)

---

This PR was generated with Release Please. See documentation.

[github-actions]

Benchmark results, click to expand

Bulk Benchmark Results

Metric	Value
Total Decrypts	100
Successful Decrypts	100
Failed Decrypts	0
Total Time	378.555196ms
Throughput	264.16 requests/second

TDF3 Benchmark Results:

Metric	Value
Total Requests	5000
Successful Requests	5000
Failed Requests	0
Concurrent Requests	50
Total Time	1m19.14994986s
Average Latency	789.128293ms
Throughput	63.17 requests/second

NANOTDF Benchmark Results:

Metric	Value
Total Requests	5000
Successful Requests	4949
Failed Requests	51
Concurrent Requests	50
Total Time	1m8.85598838s
Average Latency	685.491294ms
Throughput	71.87 requests/second

Error Summary:

Error Message	Occurrences
ReadNanoTDF error: rewrap failed: ocrypto.ComputeECDHKey failed :ocrypto.ECPubKeyFromPem failed: failed to parse PEM formatted public key	51 occurrences

Standard Benchmark Metrics Skipped or Failed