chore(main): release service 0.10.0

[opentdf-automation]

🤖 I have created a release beep boop

0.10.0 (2025-09-17)

⚠ BREAKING CHANGES

• policy: Add manager column to provider configuration for multi-instance support (#2601)

Features

• authz: add obligation policy decision point (#2706) (bb2a4f8)
• core: add service negation for op mode (#2680) (029db8c)
• core: Bump default write timeout. (#2671) (6a233c1)
• core: Encapsulate>Encrypt (#2676) (3c5a614)
• core: Lets key manager factory take context (#2715) (8d70993)
• policy: add FQN of obligation definitions/values to protos (#2703) (45ded0e)
• policy: Add manager column to provider configuration for multi-instance support (#2601) (a5fc994)
• policy: Add obligation triggers (#2675) (22d0837)
• policy: add protovalidate for obligation defs + vals (#2699) (af5c049)
• policy: Allow creation and update of triggers on Obligation Values (#2691) (b1e7ba1)
• policy: Allow for additional context to be added to obligation triggers (#2705) (7025599)
• policy: Include Triggers in GET/LISTable reqs (#2704) (b4381d1)
• policy: obligations + values CRUD (#2545) (c194e35)
• use public AES protected key from lib/ocrypto (#2600) (75d7590)

Bug Fixes

• core: remove extraneous comment (#2741) (ada8da6)
• core: return services in the order they were registered (#2733) (1d661db)
• deps: bump github.com/opentdf/platform/lib/ocrypto from 0.3.0 to 0.6.0 in /service (#2714) (00354b3)
• deps: bump github.com/opentdf/platform/protocol/go from 0.7.0 to 0.9.0 in /service (#2726) (9004368)
• deps: bump protocol/go to 0.10.0 in service (#2734) (11e6201)
• deps: update protovalidate to v0.14.2 to use new buf validate MessageOneofRule (#2698) (1cae18e)
• policy: Registered Resources should consider actions correctly within Decision Requests (#2681) (cf264a2)
• sanitize db schema identifiers (#2682) (0d3dd94)

---

This PR was generated with Release Please. See documentation.

[github-actions]

Benchmark results, click to expand

Benchmark authorization.GetDecisions Results:

Metric	Value
Approved Decision Requests	1000
Denied Decision Requests	0
Total Time	172.849873ms

Benchmark authorization.v2.GetMultiResourceDecision Results:

Metric	Value
Approved Decision Requests	1000
Denied Decision Requests	0
Total Time	95.042041ms

Standard Benchmark Metrics Skipped or Failed

Bulk Benchmark Results

Metric	Value
Total Decrypts	100
Successful Decrypts	100
Failed Decrypts	0
Total Time	566.795379ms
Throughput	176.43 requests/second

TDF3 Benchmark Results:

Metric	Value
Total Requests	5000
Successful Requests	5000
Failed Requests	0
Concurrent Requests	50
Total Time	36.792417002s
Average Latency	365.977839ms
Throughput	135.90 requests/second

NANOTDF Benchmark Results:

Metric	Value
Total Requests	5000
Successful Requests	5000
Failed Requests	0
Concurrent Requests	50
Total Time	25.52379833s
Average Latency	254.093435ms
Throughput	195.90 requests/second

[github-actions]

Benchmark results, click to expand

Benchmark authorization.GetDecisions Results:

Metric	Value
Approved Decision Requests	1000
Denied Decision Requests	0
Total Time	172.776405ms

Benchmark authorization.v2.GetMultiResourceDecision Results:

Metric	Value
Approved Decision Requests	1000
Denied Decision Requests	0
Total Time	90.314116ms

Standard Benchmark Metrics Skipped or Failed

Bulk Benchmark Results

Metric	Value
Total Decrypts	100
Successful Decrypts	100
Failed Decrypts	0
Total Time	343.846756ms
Throughput	290.83 requests/second

TDF3 Benchmark Results:

Metric	Value
Total Requests	5000
Successful Requests	5000
Failed Requests	0
Concurrent Requests	50
Total Time	36.45984578s
Average Latency	362.809237ms
Throughput	137.14 requests/second

NANOTDF Benchmark Results:

Metric	Value
Total Requests	5000
Successful Requests	5000
Failed Requests	0
Concurrent Requests	50
Total Time	25.748455864s
Average Latency	256.927663ms
Throughput	194.19 requests/second

[github-actions]

Benchmark results, click to expand

Benchmark authorization.GetDecisions Results:

Metric	Value
Approved Decision Requests	1000
Denied Decision Requests	0
Total Time	184.088219ms

Benchmark authorization.v2.GetMultiResourceDecision Results:

Metric	Value
Approved Decision Requests	1000
Denied Decision Requests	0
Total Time	98.328941ms

Standard Benchmark Metrics Skipped or Failed

Bulk Benchmark Results

Metric	Value
Total Decrypts	100
Successful Decrypts	100
Failed Decrypts	0
Total Time	341.677073ms
Throughput	292.67 requests/second

TDF3 Benchmark Results:

Metric	Value
Total Requests	5000
Successful Requests	5000
Failed Requests	0
Concurrent Requests	50
Total Time	37.842946302s
Average Latency	376.021892ms
Throughput	132.13 requests/second

NANOTDF Benchmark Results:

Metric	Value
Total Requests	5000
Successful Requests	5000
Failed Requests	0
Concurrent Requests	50
Total Time	26.327696077s
Average Latency	262.076847ms
Throughput	189.91 requests/second

[github-actions]

Benchmark results, click to expand

Benchmark authorization.GetDecisions Results:

Metric	Value
Approved Decision Requests	1000
Denied Decision Requests	0
Total Time	180.686884ms

Benchmark authorization.v2.GetMultiResourceDecision Results:

Metric	Value
Approved Decision Requests	1000
Denied Decision Requests	0
Total Time	92.644678ms

Standard Benchmark Metrics Skipped or Failed

Bulk Benchmark Results

Metric	Value
Total Decrypts	100
Successful Decrypts	100
Failed Decrypts	0
Total Time	353.441745ms
Throughput	282.93 requests/second

TDF3 Benchmark Results:

Metric	Value
Total Requests	5000
Successful Requests	5000
Failed Requests	0
Concurrent Requests	50
Total Time	37.837538487s
Average Latency	375.57348ms
Throughput	132.14 requests/second

NANOTDF Benchmark Results:

Metric	Value
Total Requests	5000
Successful Requests	5000
Failed Requests	0
Concurrent Requests	50
Total Time	26.537813072s
Average Latency	264.486102ms
Throughput	188.41 requests/second

[opentdf-automation]

🤖 Created releases:

• service/v0.10.0

🌻