vault / openfga / v1.17.0

openfga @ v1.17.0

integrity

size: 1.3 MiB
downloaded: 2026-07-04 06:56 UTC
last checked: 2026-07-18 21:05 UTC
overlays: go
detected: go module github.com/openfga/openfga

source https://github.com/openfga/openfga · available · github

release notes

Added

Added a configurable trace sampler via trace.sampler (OPENFGA_TRACE_SAMPLER / OTEL_TRACES_SAMPLER), supporting the standard OpenTelemetry strategies always_on, always_off, traceidratio, parentbased_always_on, parentbased_always_off, and parentbased_traceidratio. This lets OpenFGA honor upstream parent sampling decisions when running as a downstream service. Defaults to traceidratio to preserve existing behavior. #3072 Thanks @armujahid!

Changed

Redesigned cache key generation to use TLV (type-length-value) binary encoding, eliminating collision risk from string concatenation and adding per-process hash seeding to prevent hash-flooding attacks. #3148

New Contributors

@armujahid made their first contribution in https://github.com/openfga/openfga/pull/3072

Full Changelog: https://github.com/openfga/openfga/compare/v1.16.1...v1.17.0

download

unix · zip

curl -fL -o v1.17.0.zip https://ratatoskr.space/pkg/openfga/v1.17.0.zip
                    printf '%s  %s\n' 'a39a3b43ce37868d75a55b752c8e86dc254ea768897cf91b28626d7459d522c3' 'v1.17.0.zip' | sha256sum -c -

windows · zip

$url = "https://ratatoskr.space/pkg/openfga/v1.17.0.zip"
$out = "v1.17.0.zip"
Invoke-WebRequest -Uri $url -OutFile $out
if ((Get-FileHash $out -Algorithm SHA256).Hash.ToLowerInvariant() -ne "a39a3b43ce37868d75a55b752c8e86dc254ea768897cf91b28626d7459d522c3") { throw "sha256 mismatch" }

unix · tar.gz

curl -fL -o v1.17.0.tar.gz https://ratatoskr.space/pkg/openfga/v1.17.0.tar.gz
                    printf '%s  %s\n' '43dea34ccaa08d6dcba5dabc9b767a137d8d761e99ace85adee1fa98285887e8' 'v1.17.0.tar.gz' | sha256sum -c -

windows · tar.gz

$url = "https://ratatoskr.space/pkg/openfga/v1.17.0.tar.gz"
$out = "v1.17.0.tar.gz"
Invoke-WebRequest -Uri $url -OutFile $out
if ((Get-FileHash $out -Algorithm SHA256).Hash.ToLowerInvariant() -ne "43dea34ccaa08d6dcba5dabc9b767a137d8d761e99ace85adee1fa98285887e8") { throw "sha256 mismatch" }

download via yggdrasil mesh

unix · zip

curl -fL -o v1.17.0.zip http://14cc7d57b5e70f679b851fe5b272ce17c70632ff4beb5b35ab64bc706b2485af.pk.ygg/pkg/openfga/v1.17.0.zip
                    printf '%s  %s\n' 'a39a3b43ce37868d75a55b752c8e86dc254ea768897cf91b28626d7459d522c3' 'v1.17.0.zip' | sha256sum -c -

windows · zip

$url = "http://14cc7d57b5e70f679b851fe5b272ce17c70632ff4beb5b35ab64bc706b2485af.pk.ygg/pkg/openfga/v1.17.0.zip"
$out = "v1.17.0.zip"
Invoke-WebRequest -Uri $url -OutFile $out
if ((Get-FileHash $out -Algorithm SHA256).Hash.ToLowerInvariant() -ne "a39a3b43ce37868d75a55b752c8e86dc254ea768897cf91b28626d7459d522c3") { throw "sha256 mismatch" }

unix · tar.gz

curl -fL -o v1.17.0.tar.gz http://14cc7d57b5e70f679b851fe5b272ce17c70632ff4beb5b35ab64bc706b2485af.pk.ygg/pkg/openfga/v1.17.0.tar.gz
                    printf '%s  %s\n' '43dea34ccaa08d6dcba5dabc9b767a137d8d761e99ace85adee1fa98285887e8' 'v1.17.0.tar.gz' | sha256sum -c -

windows · tar.gz

$url = "http://14cc7d57b5e70f679b851fe5b272ce17c70632ff4beb5b35ab64bc706b2485af.pk.ygg/pkg/openfga/v1.17.0.tar.gz"
$out = "v1.17.0.tar.gz"
Invoke-WebRequest -Uri $url -OutFile $out
if ((Get-FileHash $out -Algorithm SHA256).Hash.ToLowerInvariant() -ne "43dea34ccaa08d6dcba5dabc9b767a137d8d761e99ace85adee1fa98285887e8") { throw "sha256 mismatch" }

artifact	format	size	hashes
v1.17.0.zip	zip	1.3 MiB	blake3-24 461d94937778102d123245a68cdcef0e7d9e29a809a487a1 sha256 a39a3b43ce37868d75a55b752c8e86dc254ea768897cf91b28626d7459d522c3 sha1 67d631a59efd9ac825e3527aa8185decea812bbf
v1.17.0.tar.gz	tar.gz	1021.9 KiB	blake3-24 b44f398d731b6ed58029abea87332e99fd46769d52f12a9c sha256 43dea34ccaa08d6dcba5dabc9b767a137d8d761e99ace85adee1fa98285887e8 sha1 0f454f19ced6b7358d2835031c4e18d69f38dd19

go module archive

module zip with the module path rewritten to this mirror; fetched by go get through the GOPROXY route

artifact	format	size	hashes
v1.17.0.zip	zip	1.3 MiB	blake3-24 a2591747d501ac1a9e4886bc525d2c5d68ff4618936a2de4 sha256 e98a2716ef3f774503a7ca5aec3a1d86ad46e9bf8a4f6389d75aac8bbe843517 sha1 1f2e5ff13a9da357d335f8d8a7cf76b842a02f04

install

bazel

http_archive(
    name = "openfga",
    urls = ["https://ratatoskr.space/pkg/openfga/v1.17.0.tar.gz"],
    integrity = "sha256-Q96jTMqgjW3Lpdq8m3Z6E32Ndh6ZrOha3uH6mChYh+g=",
    strip_prefix = "openfga-v1.17.0",
)

zig

.url = "https://ratatoskr.space/pkg/openfga/v1.17.0.tar.gz",

GOPROXY=https://ratatoskr.space GOSUMDB=off go get ratatoskr.space/pkg/openfga@v1.17.0

install via yggdrasil mesh

bazel

http_archive(
    name = "openfga",
    urls = ["http://14cc7d57b5e70f679b851fe5b272ce17c70632ff4beb5b35ab64bc706b2485af.pk.ygg/pkg/openfga/v1.17.0.tar.gz"],
    integrity = "sha256-Q96jTMqgjW3Lpdq8m3Z6E32Ndh6ZrOha3uH6mChYh+g=",
    strip_prefix = "openfga-v1.17.0",
)

zig

.url = "http://14cc7d57b5e70f679b851fe5b272ce17c70632ff4beb5b35ab64bc706b2485af.pk.ygg/pkg/openfga/v1.17.0.tar.gz",

GOPROXY=http://14cc7d57b5e70f679b851fe5b272ce17c70632ff4beb5b35ab64bc706b2485af.pk.ygg GOSUMDB=off GOINSECURE=14cc7d57b5e70f679b851fe5b272ce17c70632ff4beb5b35ab64bc706b2485af.pk.ygg/* go get 14cc7d57b5e70f679b851fe5b272ce17c70632ff4beb5b35ab64bc706b2485af.pk.ygg/pkg/openfga@v1.17.0

← v1.17.1 v1.16.1 →