From bf80faee534d3f0e6cf88d70a845430836d92b1e Mon Sep 17 00:00:00 2001
From: "opentdf-automation[bot]"
 <149537512+opentdf-automation[bot]@users.noreply.github.com>
Date: Mon, 14 Sep 2026 16:05:11 +0000
Subject: [PATCH] chore(main): release service 0.27.0

---
 .../release-please-manifest.json              |  2 +-
 service/CHANGELOG.md                          | 20 +++++++++++++++++++
 service/cmd/version.go                        |  2 +-
 3 files changed, 22 insertions(+), 2 deletions(-)

diff --git a/.github/release-please/release-please-manifest.json b/.github/release-please/release-please-manifest.json
index 5e30844a49..d27e1fad8e 100644
--- a/.github/release-please/release-please-manifest.json
+++ b/.github/release-please/release-please-manifest.json
@@ -6,5 +6,5 @@
   "otdfctl": "0.37.0",
   "protocol/go": "0.41.0",
   "sdk": "0.31.0",
-  "service": "0.26.0"
+  "service": "0.27.0"
 }
\ No newline at end of file
diff --git a/service/CHANGELOG.md b/service/CHANGELOG.md
index a7d22bf545..2e3b1b113f 100644
--- a/service/CHANGELOG.md
+++ b/service/CHANGELOG.md
@@ -1,5 +1,25 @@
 # Changelog
 
+## [0.27.0](https://github.com/opentdf/platform/compare/service/v0.26.0...service/v0.27.0) (2026-09-14)
+
+
+### Features
+
+* **authz:** migrate v2 decisioning to targeted entitleable lookups ([#3912](https://github.com/opentdf/platform/issues/3912)) ([69942fe](https://github.com/opentdf/platform/commit/69942fee97b3728fdedbd5e873454a53207583d7))
+* **core:** add canonical audit recorder ([#3901](https://github.com/opentdf/platform/issues/3901)) ([ef9ca64](https://github.com/opentdf/platform/commit/ef9ca643f0bd5fe6e1e094bf2ad2bdcf1d67f106))
+* **policy:** DSPX-3888 add maximum object count configuration ([#3954](https://github.com/opentdf/platform/issues/3954)) ([b44a246](https://github.com/opentdf/platform/commit/b44a24604abdaa4c8990dec9adec8c1c26a339c2))
+
+
+### Bug Fixes
+
+* **authz:** deny decrypt deactivated attribute ([#3985](https://github.com/opentdf/platform/issues/3985)) ([f982fc9](https://github.com/opentdf/platform/commit/f982fc99e3b350ab4d928f3db1c6ae08e8d11d05))
+* **core:** DSPX-4682 protect pprof endpoints ([#4038](https://github.com/opentdf/platform/issues/4038)) ([9c5030f](https://github.com/opentdf/platform/commit/9c5030f1adf31fd1a0e7a81ecd5c0c654daf36af))
+* **core:** DSPX-4692 omit rejected credentials from logs ([#4023](https://github.com/opentdf/platform/issues/4023)) ([6ac8a31](https://github.com/opentdf/platform/commit/6ac8a318edbaea1aee07fdf649260e000e46306e))
+* **core:** DSPX-4694 honor reflection configuration ([#4021](https://github.com/opentdf/platform/issues/4021)) ([8743070](https://github.com/opentdf/platform/commit/87430700274acfe8f68fd9ea1a24301e664df619))
+* **deps:** bump google.golang.org/grpc from 1.83.0 to 1.83.1 in /service ([#3961](https://github.com/opentdf/platform/issues/3961)) ([2140c7a](https://github.com/opentdf/platform/commit/2140c7af1d9143fe32eb9fce997466809d4578f0))
+* **ers:** multi_strat first match wins per category + bdd tests ([#4028](https://github.com/opentdf/platform/issues/4028)) ([5c5cbf4](https://github.com/opentdf/platform/commit/5c5cbf431bb81f8fcf502017c1498ac30cfbb70b))
+* **policy:** DSPX-4607 clear sloglint and SA1019 lint findings ([#3977](https://github.com/opentdf/platform/issues/3977)) ([a22c2ce](https://github.com/opentdf/platform/commit/a22c2cebbc1a6a4066a95c2b543b40f57f981f8e))
+
 ## [0.26.0](https://github.com/opentdf/platform/compare/service/v0.25.0...service/v0.26.0) (2026-08-28)
 
 
diff --git a/service/cmd/version.go b/service/cmd/version.go
index 638f7d67f0..8b10813ebd 100644
--- a/service/cmd/version.go
+++ b/service/cmd/version.go
@@ -2,7 +2,7 @@ package cmd
 
 import "github.com/spf13/cobra"
 
-const Version = "0.26.0" // Service Version // x-release-please-version
+const Version = "0.27.0" // Service Version // x-release-please-version
 
 func init() {
 	rootCmd.AddCommand(&cobra.Command{