chore(main): release service 0.27.0

[opentdf-automation]

🤖 I have created a release beep boop

0.27.0 (2026-09-11)

Features

• authz: migrate v2 decisioning to targeted entitleable lookups (#3912) (69942fe)
• policy: DSPX-3888 add maximum object count configuration (#3954) (b44a246)

Bug Fixes

• authz: deny decrypt deactivated attribute (#3985) (f982fc9)
• core: DSPX-4682 protect pprof endpoints (#4038) (9c5030f)
• core: DSPX-4692 omit rejected credentials from logs (#4023) (6ac8a31)
• core: DSPX-4694 honor reflection configuration (#4021) (8743070)
• deps: bump google.golang.org/grpc from 1.83.0 to 1.83.1 in /service (#3961) (2140c7a)
• ers: multi_strat first match wins per category + bdd tests (#4028) (5c5cbf4)
• policy: DSPX-4607 clear sloglint and SA1019 lint findings (#3977) (a22c2ce)

---

This PR was generated with Release Please. See documentation.

[github-actions]

Benchmark results, click to expand

Benchmark authorization.GetDecisions Results:

Metric	Value
Approved Decision Requests	1000
Denied Decision Requests	0
Total Time	245.713579ms

Benchmark authorization.v2.GetMultiResourceDecision Results:

Metric	Value
Approved Decision Requests	1000
Denied Decision Requests	0
Total Time	133.988307ms

Benchmark Statistics

Name	№ Requests	Avg Duration	Min Duration	Max Duration

Bulk Benchmark Results

Metric	Value
Total Decrypts	100
Successful Decrypts	100
Failed Decrypts	0
Total Time	415.830365ms
Throughput	240.48 requests/second

TDF3 Benchmark Results:

Metric	Value
Total Requests	5000
Successful Requests	5000
Failed Requests	0
Concurrent Requests	50
Total Time	58.984569723s
Average Latency	587.908888ms
Throughput	84.77 requests/second

[github-actions]

X-Test Results

✅ js@main-pull-3950
✅ go@main-main
✅ go@pull-3950-pull-3950
bats-test-results
✅ go@main-pull-3950
✅ go@pull-3950-main
✅ go@pull-3950-v0.9.0
✅ go@main-v0.9.0
✅ java@main-pull-3950
✅ js@main-main
✅ java@main-v0.9.0
✅ js@main-v0.9.0
cukes-report
✅ java@main-main
opentdfplatformHKD2OF.dockerbuild
govulncheck-failure-1
govulncheck-failure-8
govulncheck-failure-3
govulncheck-failure-2
govulncheck-failure-0
govulncheck-failure-5
govulncheck-failure-4

[github-actions]

Benchmark results, click to expand

Benchmark authorization.GetDecisions Results:

Metric	Value
Approved Decision Requests	1000
Denied Decision Requests	0
Total Time	179.844204ms

Benchmark authorization.v2.GetMultiResourceDecision Results:

Metric	Value
Approved Decision Requests	1000
Denied Decision Requests	0
Total Time	99.35778ms

Benchmark Statistics

Name	№ Requests	Avg Duration	Min Duration	Max Duration

Bulk Benchmark Results

Metric	Value
Total Decrypts	100
Successful Decrypts	100
Failed Decrypts	0
Total Time	354.968947ms
Throughput	281.71 requests/second

TDF3 Benchmark Results:

Metric	Value
Total Requests	5000
Successful Requests	5000
Failed Requests	0
Concurrent Requests	50
Total Time	45.486608302s
Average Latency	453.862109ms
Throughput	109.92 requests/second

[github-actions]

X-Test Results

bats-test-results
✅ go@pull-3950-pull-3950
✅ go@pull-3950-main
✅ go@pull-3950-v0.9.0
✅ go@main-v0.9.0
✅ java@main-main
✅ java@main-pull-3950
✅ go@main-main
✅ go@main-pull-3950
cukes-report
✅ js@main-main
✅ js@main-pull-3950
✅ js@main-v0.9.0
✅ java@main-v0.9.0
opentdfplatform063ALO.dockerbuild
govulncheck-failure-8
govulncheck-failure-1

[github-actions]

Benchmark results, click to expand

Benchmark authorization.GetDecisions Results:

Metric	Value
Approved Decision Requests	1000
Denied Decision Requests	0
Total Time	247.779375ms

Benchmark authorization.v2.GetMultiResourceDecision Results:

Metric	Value
Approved Decision Requests	1000
Denied Decision Requests	0
Total Time	134.868092ms

Benchmark Statistics

Name	№ Requests	Avg Duration	Min Duration	Max Duration

Bulk Benchmark Results

Metric	Value
Total Decrypts	100
Successful Decrypts	100
Failed Decrypts	0
Total Time	461.277085ms
Throughput	216.79 requests/second

TDF3 Benchmark Results:

Metric	Value
Total Requests	5000
Successful Requests	5000
Failed Requests	0
Concurrent Requests	50
Total Time	57.467013645s
Average Latency	573.436432ms
Throughput	87.01 requests/second

[github-actions]

X-Test Results

bats-test-results
✅ go@pull-3950-main
✅ go@main-pull-3950
✅ go@pull-3950-v0.9.0
✅ go@pull-3950-pull-3950
✅ go@main-main
✅ java@main-main
✅ java@main-pull-3950
✅ go@main-v0.9.0
✅ js@main-pull-3950
cukes-report
✅ java@main-v0.9.0
✅ js@main-main
✅ js@main-v0.9.0
opentdfplatform1X050D.dockerbuild
govulncheck-failure-8
govulncheck-failure-1
govulncheck-failure-3

[github-actions]

Benchmark results, click to expand

Benchmark authorization.GetDecisions Results:

Metric	Value
Approved Decision Requests	1000
Denied Decision Requests	0
Total Time	189.344232ms

Benchmark authorization.v2.GetMultiResourceDecision Results:

Metric	Value
Approved Decision Requests	1000
Denied Decision Requests	0
Total Time	102.4381ms

Benchmark Statistics

Name	№ Requests	Avg Duration	Min Duration	Max Duration

Bulk Benchmark Results

Metric	Value
Total Decrypts	100
Successful Decrypts	100
Failed Decrypts	0
Total Time	363.501127ms
Throughput	275.10 requests/second

TDF3 Benchmark Results:

Metric	Value
Total Requests	5000
Successful Requests	5000
Failed Requests	0
Concurrent Requests	50
Total Time	46.85672926s
Average Latency	467.405163ms
Throughput	106.71 requests/second

[github-actions]

X-Test Results

bats-test-results
✅ go@main-main
✅ go@pull-3950-main
✅ go@pull-3950-v0.9.0
cukes-report
✅ go@main-v0.9.0
✅ java@main-main
✅ java@main-pull-3950
✅ go@pull-3950-pull-3950
✅ js@main-pull-3950
✅ js@main-main
✅ go@main-pull-3950
✅ js@main-v0.9.0
✅ java@main-v0.9.0
opentdfplatformBPNVUO.dockerbuild
govulncheck-failure-8
govulncheck-failure-1
govulncheck-failure-3

[github-actions]

Benchmark results, click to expand

Benchmark authorization.GetDecisions Results:

Metric	Value
Approved Decision Requests	1000
Denied Decision Requests	0
Total Time	245.199053ms

Benchmark authorization.v2.GetMultiResourceDecision Results:

Metric	Value
Approved Decision Requests	1000
Denied Decision Requests	0
Total Time	140.404428ms

Benchmark Statistics

Name	№ Requests	Avg Duration	Min Duration	Max Duration

Bulk Benchmark Results

Metric	Value
Total Decrypts	100
Successful Decrypts	100
Failed Decrypts	0
Total Time	465.537168ms
Throughput	214.81 requests/second

TDF3 Benchmark Results:

Metric	Value
Total Requests	5000
Successful Requests	5000
Failed Requests	0
Concurrent Requests	50
Total Time	1m2.209047303s
Average Latency	621.124846ms
Throughput	80.37 requests/second

[github-actions]

X-Test Results

✅ go@pull-3950-pull-3950
✅ go@main-main
bats-test-results
✅ go@main-pull-3950
✅ go@pull-3950-main
✅ go@pull-3950-v0.9.0
✅ go@main-v0.9.0
✅ java@main-main
cukes-report
✅ java@main-pull-3950
✅ js@main-main
✅ java@main-v0.9.0
✅ js@main-pull-3950
✅ js@main-v0.9.0
opentdfplatform9GA9O2.dockerbuild
govulncheck-failure-8
govulncheck-failure-1
govulncheck-failure-3

[github-actions]

Benchmark results, click to expand

Benchmark authorization.GetDecisions Results:

Metric	Value
Approved Decision Requests	1000
Denied Decision Requests	0
Total Time	244.780805ms

Benchmark authorization.v2.GetMultiResourceDecision Results:

Metric	Value
Approved Decision Requests	1000
Denied Decision Requests	0
Total Time	134.537378ms

Benchmark Statistics

Name	№ Requests	Avg Duration	Min Duration	Max Duration

Bulk Benchmark Results

Metric	Value
Total Decrypts	100
Successful Decrypts	100
Failed Decrypts	0
Total Time	446.996198ms
Throughput	223.72 requests/second

TDF3 Benchmark Results:

Metric	Value
Total Requests	5000
Successful Requests	5000
Failed Requests	0
Concurrent Requests	50
Total Time	58.505334645s
Average Latency	583.521543ms
Throughput	85.46 requests/second

[github-actions]

X-Test Failure Report

✅ go@main-main
✅ go@main-pull-3950
✅ go@pull-3950-pull-3950
✅ go@pull-3950-main
✅ java@main-main
✅ java@main-pull-3950
✅ go@pull-3950-v0.9.0
cukes-report
✅ js@main-main
✅ js@main-pull-3950
✅ js@main-v0.9.0
✅ java@main-v0.9.0
opentdfplatformNUP7MX.dockerbuild
govulncheck-failure-8
govulncheck-failure-3
govulncheck-failure-1

[github-actions]

Benchmark results, click to expand

Benchmark authorization.GetDecisions Results:

Metric	Value
Approved Decision Requests	1000
Denied Decision Requests	0
Total Time	213.808629ms

Benchmark authorization.v2.GetMultiResourceDecision Results:

Metric	Value
Approved Decision Requests	1000
Denied Decision Requests	0
Total Time	121.757865ms

Benchmark Statistics

Name	№ Requests	Avg Duration	Min Duration	Max Duration

Bulk Benchmark Results

Metric	Value
Total Decrypts	100
Successful Decrypts	100
Failed Decrypts	0
Total Time	438.134518ms
Throughput	228.24 requests/second

TDF3 Benchmark Results:

Metric	Value
Total Requests	5000
Successful Requests	5000
Failed Requests	0
Concurrent Requests	50
Total Time	54.981072061s
Average Latency	548.641121ms
Throughput	90.94 requests/second

[github-actions]

X-Test Results

✅ go@main-main
bats-test-results
✅ go@pull-3950-pull-3950
✅ go@pull-3950-main
✅ java@main-pull-3950
✅ go@main-pull-3950
✅ java@main-main
✅ go@main-v0.9.0
✅ go@pull-3950-v0.9.0
✅ js@main-pull-3950
cukes-report
✅ js@main-main
✅ java@main-v0.9.0
✅ js@main-v0.9.0
govulncheck-failure-1
opentdfplatformI9DM0U.dockerbuild
govulncheck-failure-3
govulncheck-failure-8

[github-actions]

Benchmark results, click to expand

Benchmark authorization.GetDecisions Results:

Metric	Value
Approved Decision Requests	1000
Denied Decision Requests	0
Total Time	230.498456ms

Benchmark authorization.v2.GetMultiResourceDecision Results:

Metric	Value
Approved Decision Requests	1000
Denied Decision Requests	0
Total Time	137.093654ms

Benchmark Statistics

Name	№ Requests	Avg Duration	Min Duration	Max Duration

Bulk Benchmark Results

Metric	Value
Total Decrypts	100
Successful Decrypts	100
Failed Decrypts	0
Total Time	454.764548ms
Throughput	219.89 requests/second

TDF3 Benchmark Results:

Metric	Value
Total Requests	5000
Successful Requests	5000
Failed Requests	0
Concurrent Requests	50
Total Time	57.061599452s
Average Latency	569.377075ms
Throughput	87.62 requests/second

[github-actions]

X-Test Results

bats-test-results
✅ go@pull-3950-pull-3950
✅ go@pull-3950-main
✅ go@main-pull-3950
✅ go@pull-3950-v0.9.0
✅ go@main-v0.9.0
cukes-report
✅ java@main-pull-3950
✅ java@main-main
✅ go@main-main
✅ js@main-pull-3950
✅ java@main-v0.9.0
✅ js@main-main
✅ js@main-v0.9.0
govulncheck-failure-3
opentdfplatform1HS03C.dockerbuild
govulncheck-failure-8
govulncheck-failure-1

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Repository UI

Review profile: ASSERTIVE

Plan: Advanced

Run ID: 9e10064a-51d8-425e-8310-c0b8470e6e01

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[github-actions]

Benchmark results, click to expand

Benchmark authorization.GetDecisions Results:

Metric	Value
Approved Decision Requests	1000
Denied Decision Requests	0
Total Time	225.427692ms

Benchmark authorization.v2.GetMultiResourceDecision Results:

Metric	Value
Approved Decision Requests	1000
Denied Decision Requests	0
Total Time	125.691328ms

Benchmark Statistics

Name	№ Requests	Avg Duration	Min Duration	Max Duration

Bulk Benchmark Results

Metric	Value
Total Decrypts	100
Successful Decrypts	100
Failed Decrypts	0
Total Time	452.183151ms
Throughput	221.15 requests/second

TDF3 Benchmark Results:

Metric	Value
Total Requests	5000
Successful Requests	5000
Failed Requests	0
Concurrent Requests	50
Total Time	56.579144043s
Average Latency	564.279678ms
Throughput	88.37 requests/second

[github-actions]

X-Test Results

✅ go@pull-3950-main
✅ go@pull-3950-pull-3950
✅ go@main-main
bats-test-results
✅ go@main-pull-3950
cukes-report
✅ java@main-main
✅ java@main-pull-3950
✅ go@pull-3950-v0.9.0
✅ js@main-main
✅ java@main-v0.9.0
✅ js@main-v0.9.0
✅ go@main-v0.9.0
✅ js@main-pull-3950
opentdfplatformE8C3UP.dockerbuild
govulncheck-failure-3
govulncheck-failure-8
govulncheck-failure-1

[github-actions]

Benchmark results, click to expand

Benchmark authorization.GetDecisions Results:

Metric	Value
Approved Decision Requests	1000
Denied Decision Requests	0
Total Time	129.918599ms

Benchmark authorization.v2.GetMultiResourceDecision Results:

Metric	Value
Approved Decision Requests	1000
Denied Decision Requests	0
Total Time	67.935506ms

Benchmark Statistics

Name	№ Requests	Avg Duration	Min Duration	Max Duration

Bulk Benchmark Results

Metric	Value
Total Decrypts	100
Successful Decrypts	100
Failed Decrypts	0
Total Time	248.600082ms
Throughput	402.25 requests/second

TDF3 Benchmark Results:

Metric	Value
Total Requests	5000
Successful Requests	5000
Failed Requests	0
Concurrent Requests	50
Total Time	33.658620026s
Average Latency	335.762082ms
Throughput	148.55 requests/second

[github-actions]

X-Test Results

✅ go@main-main
✅ go@pull-3950-pull-3950
✅ go@pull-3950-main
✅ go@main-pull-3950
✅ go@pull-3950-v0.9.0
✅ java@main-pull-3950
✅ java@main-main
bats-test-results
✅ js@main-pull-3950
✅ java@main-v0.9.0
✅ go@main-v0.9.0
✅ js@main-v0.9.0
cukes-report
✅ js@main-main
opentdfplatformVSIEZ7.dockerbuild
govulncheck-failure-8
govulncheck-failure-3
govulncheck-failure-1

[github-actions]

Benchmark results, click to expand

Benchmark authorization.GetDecisions Results:

Metric	Value
Approved Decision Requests	1000
Denied Decision Requests	0
Total Time	128.008263ms

Benchmark authorization.v2.GetMultiResourceDecision Results:

Metric	Value
Approved Decision Requests	1000
Denied Decision Requests	0
Total Time	71.912473ms

Benchmark Statistics

Name	№ Requests	Avg Duration	Min Duration	Max Duration

Bulk Benchmark Results

Metric	Value
Total Decrypts	100
Successful Decrypts	100
Failed Decrypts	0
Total Time	255.264429ms
Throughput	391.75 requests/second

TDF3 Benchmark Results:

Metric	Value
Total Requests	5000
Successful Requests	5000
Failed Requests	0
Concurrent Requests	50
Total Time	34.897423208s
Average Latency	348.225729ms
Throughput	143.28 requests/second

[github-actions]

X-Test Failure Report

bats-test-results
✅ go@pull-3950-pull-3950
✅ go@main-pull-3950
✅ go@pull-3950-main
✅ go@main-v0.9.0
✅ java@main-main
cukes-report
✅ js@main-pull-3950
✅ js@main-main
✅ java@main-pull-3950
✅ go@pull-3950-v0.9.0
✅ js@main-v0.9.0
✅ java@main-v0.9.0
server-logs-go@main-main
opentdfplatformPEN4RF.dockerbuild
govulncheck-failure-8
govulncheck-failure-3
govulncheck-failure-1

[github-actions]

Benchmark results, click to expand

Benchmark authorization.GetDecisions Results:

Metric	Value
Approved Decision Requests	1000
Denied Decision Requests	0
Total Time	166.870564ms

Benchmark authorization.v2.GetMultiResourceDecision Results:

Metric	Value
Approved Decision Requests	1000
Denied Decision Requests	0
Total Time	94.374495ms

Benchmark Statistics

Name	№ Requests	Avg Duration	Min Duration	Max Duration

Bulk Benchmark Results

Metric	Value
Total Decrypts	100
Successful Decrypts	100
Failed Decrypts	0
Total Time	295.788951ms
Throughput	338.08 requests/second

TDF3 Benchmark Results:

Metric	Value
Total Requests	5000
Successful Requests	5000
Failed Requests	0
Concurrent Requests	50
Total Time	40.317307778s
Average Latency	402.606692ms
Throughput	124.02 requests/second

[github-actions]

X-Test Results

✅ go@main-pull-3950
✅ go@pull-3950-pull-3950
bats-test-results
✅ go@main-main
✅ java@main-main
cukes-report
✅ go@pull-3950-v0.9.0
✅ java@main-pull-3950
✅ go@pull-3950-main
✅ js@main-main
✅ java@main-v0.9.0
✅ js@main-pull-3950
✅ go@main-v0.9.0
✅ js@main-v0.9.0
opentdfplatformJXLCSU.dockerbuild
govulncheck-failure-8
govulncheck-failure-3
govulncheck-failure-1

[github-actions]

Benchmark results, click to expand

Benchmark authorization.GetDecisions Results:

Metric	Value
Approved Decision Requests	1000
Denied Decision Requests	0
Total Time	121.795758ms

Benchmark authorization.v2.GetMultiResourceDecision Results:

Metric	Value
Approved Decision Requests	1000
Denied Decision Requests	0
Total Time	60.679092ms

Benchmark Statistics

Name	№ Requests	Avg Duration	Min Duration	Max Duration

Bulk Benchmark Results

Metric	Value
Total Decrypts	100
Successful Decrypts	100
Failed Decrypts	0
Total Time	233.260654ms
Throughput	428.70 requests/second

TDF3 Benchmark Results:

Metric	Value
Total Requests	5000
Successful Requests	5000
Failed Requests	0
Concurrent Requests	50
Total Time	32.904119623s
Average Latency	328.385956ms
Throughput	151.96 requests/second

[github-actions]

⚠️ Govulncheck found vulnerabilities ⚠️

The following modules have known vulnerabilities:

• otdfctl
• sdk
• service
• tests-bdd

See the workflow run for details.

[github-actions]

X-Test Results

✅ go@pull-3950-main
✅ go@pull-3950-v0.9.0
✅ js@main-pull-3950
govulncheck-failure-2
✅ go@main-pull-3950
govulncheck-failure-1
✅ go@pull-3950-pull-3950
✅ js@main-v0.9.0
✅ go@main-main
✅ js@main-main
govulncheck-failure-3
✅ java@main-pull-3950
✅ java@main-main
✅ java@main-v0.9.0
opentdfplatformUGJ3QS.dockerbuild
✅ go@main-v0.9.0
govulncheck-failure-8