vault / openfga / v1.12.0

openfga @ v1.12.0

integrity

size: 1.1 MiB
downloaded: 2026-07-04 06:56 UTC
last checked: 2026-07-04 06:56 UTC
overlays: go
detected: go module github.com/openfga/openfga

source https://github.com/openfga/openfga · available · github

release notes

Added

Add configuration for maximum size of received gRPC message bytes. #2952

Changed

HTTP gateway's internal gRPC client now uses dynamic TLS credentials that automatically update on certificate rotation via certwatcher, preventing connection failures when certificates are rotated (e.g., by cert-manager). #2951
Tuple validation will now fail when any unicode control characters, or null bytes are present within a tuple string. #2963

Fixed

Fixed swapped format arguments in DecodeParameterType error message that reported required and found generic type counts in the wrong order. #2961
Fixed a few bugs. Two potential index out of bounds scenarios, and one cache of an invalid result. #2942
Fixed a race condition in check reducers causing non-deterministic nested handler execution due to canceled parent context. #2947
Fixed an issue where cache_item_count was incrementing on overwrites, causing the metric to steadily drift upward. #2950
Set pipeline_list_objects enabled by default in experimentals so that setting new experimental values does not disable it. This is required so that a user may pass in a custom featureflag client where pipeline_list_objects can be disabled on a per store basis. To disable the ListObjects pipeline algorithm entirely, set listObjects-pipeline-enabled to false. #2957

Security

Update toolchain go version to 1.26.1 to be latest. #2975
Update toolchain go version to 1.25.8 to address std lib vulnerabilities GO-2026-4603 and GO-2026-4601. #2971

New Contributors

@RepoRonin made their first contribution in https://github.com/openfga/openfga/pull/2951
@oshe-gi made their first contribution in https://github.com/openfga/openfga/pull/2938
@archy-rock3t-cloud made their first contribution in https://github.com/openfga/openfga/pull/2960

Full Changelog: https://github.com/openfga/openfga/compare/v1.11.6...v1.12.0

download

unix · zip

curl -fL -o v1.12.0.zip https://ratatoskr.space/pkg/openfga/v1.12.0.zip
                    printf '%s  %s\n' 'c9a912ef46afc5e94c3b859ddb57557301c024af5773e4a923e3618f05983e2f' 'v1.12.0.zip' | sha256sum -c -

windows · zip

$url = "https://ratatoskr.space/pkg/openfga/v1.12.0.zip"
$out = "v1.12.0.zip"
Invoke-WebRequest -Uri $url -OutFile $out
if ((Get-FileHash $out -Algorithm SHA256).Hash.ToLowerInvariant() -ne "c9a912ef46afc5e94c3b859ddb57557301c024af5773e4a923e3618f05983e2f") { throw "sha256 mismatch" }

unix · tar.gz

curl -fL -o v1.12.0.tar.gz https://ratatoskr.space/pkg/openfga/v1.12.0.tar.gz
                    printf '%s  %s\n' 'ddfd1b1f256fc7cf3ec4c8eab0337669022e60136f624de881befe1b427a604b' 'v1.12.0.tar.gz' | sha256sum -c -

windows · tar.gz

$url = "https://ratatoskr.space/pkg/openfga/v1.12.0.tar.gz"
$out = "v1.12.0.tar.gz"
Invoke-WebRequest -Uri $url -OutFile $out
if ((Get-FileHash $out -Algorithm SHA256).Hash.ToLowerInvariant() -ne "ddfd1b1f256fc7cf3ec4c8eab0337669022e60136f624de881befe1b427a604b") { throw "sha256 mismatch" }

download via yggdrasil mesh

unix · zip

curl -fL -o v1.12.0.zip http://14cc7d57b5e70f679b851fe5b272ce17c70632ff4beb5b35ab64bc706b2485af.pk.ygg/pkg/openfga/v1.12.0.zip
                    printf '%s  %s\n' 'c9a912ef46afc5e94c3b859ddb57557301c024af5773e4a923e3618f05983e2f' 'v1.12.0.zip' | sha256sum -c -

windows · zip

$url = "http://14cc7d57b5e70f679b851fe5b272ce17c70632ff4beb5b35ab64bc706b2485af.pk.ygg/pkg/openfga/v1.12.0.zip"
$out = "v1.12.0.zip"
Invoke-WebRequest -Uri $url -OutFile $out
if ((Get-FileHash $out -Algorithm SHA256).Hash.ToLowerInvariant() -ne "c9a912ef46afc5e94c3b859ddb57557301c024af5773e4a923e3618f05983e2f") { throw "sha256 mismatch" }

unix · tar.gz

curl -fL -o v1.12.0.tar.gz http://14cc7d57b5e70f679b851fe5b272ce17c70632ff4beb5b35ab64bc706b2485af.pk.ygg/pkg/openfga/v1.12.0.tar.gz
                    printf '%s  %s\n' 'ddfd1b1f256fc7cf3ec4c8eab0337669022e60136f624de881befe1b427a604b' 'v1.12.0.tar.gz' | sha256sum -c -

windows · tar.gz

$url = "http://14cc7d57b5e70f679b851fe5b272ce17c70632ff4beb5b35ab64bc706b2485af.pk.ygg/pkg/openfga/v1.12.0.tar.gz"
$out = "v1.12.0.tar.gz"
Invoke-WebRequest -Uri $url -OutFile $out
if ((Get-FileHash $out -Algorithm SHA256).Hash.ToLowerInvariant() -ne "ddfd1b1f256fc7cf3ec4c8eab0337669022e60136f624de881befe1b427a604b") { throw "sha256 mismatch" }

artifact	format	size	hashes
v1.12.0.zip	zip	1.1 MiB	blake3-24 f7bffe773191c66cec491ffb4482d45dd0623a0e84461a6e sha256 c9a912ef46afc5e94c3b859ddb57557301c024af5773e4a923e3618f05983e2f sha1 13e13739efadcd6ff83e8ed944d743d589f83179
v1.12.0.tar.gz	tar.gz	875.1 KiB	blake3-24 cd934c55fb888c8ebceb449867757ea95abf64bdfdd2dacd sha256 ddfd1b1f256fc7cf3ec4c8eab0337669022e60136f624de881befe1b427a604b sha1 234c6d74d0870bb75b0c7a417e0bcad4c3b189b9

go module archive

module zip with the module path rewritten to this mirror; fetched by go get through the GOPROXY route

artifact	format	size	hashes
v1.12.0.zip	zip	1.1 MiB	blake3-24 8f86a8009bc474e052235e08d9bec19639681df31c201231 sha256 649bd09da7f9e39b146af4d672881c53a87e541fd65e6fc76acbdfb33a6298fd sha1 3da41378f06d6e8032947eb4274bfd79b1b805c3

install

bazel

http_archive(
    name = "openfga",
    urls = ["https://ratatoskr.space/pkg/openfga/v1.12.0.tar.gz"],
    integrity = "sha256-3f0bHyVvx88+xMjqsDN2aQIuYBNvYk3ogb7+G0J6YEs=",
    strip_prefix = "openfga-v1.12.0",
)

zig

.url = "https://ratatoskr.space/pkg/openfga/v1.12.0.tar.gz",

GOPROXY=https://ratatoskr.space GOSUMDB=off go get ratatoskr.space/pkg/openfga@v1.12.0

install via yggdrasil mesh

bazel

http_archive(
    name = "openfga",
    urls = ["http://14cc7d57b5e70f679b851fe5b272ce17c70632ff4beb5b35ab64bc706b2485af.pk.ygg/pkg/openfga/v1.12.0.tar.gz"],
    integrity = "sha256-3f0bHyVvx88+xMjqsDN2aQIuYBNvYk3ogb7+G0J6YEs=",
    strip_prefix = "openfga-v1.12.0",
)

zig

.url = "http://14cc7d57b5e70f679b851fe5b272ce17c70632ff4beb5b35ab64bc706b2485af.pk.ygg/pkg/openfga/v1.12.0.tar.gz",

GOPROXY=http://14cc7d57b5e70f679b851fe5b272ce17c70632ff4beb5b35ab64bc706b2485af.pk.ygg GOSUMDB=off GOINSECURE=14cc7d57b5e70f679b851fe5b272ce17c70632ff4beb5b35ab64bc706b2485af.pk.ygg/* go get 14cc7d57b5e70f679b851fe5b272ce17c70632ff4beb5b35ab64bc706b2485af.pk.ygg/pkg/openfga@v1.12.0

← v1.12.1 v1.11.6 →