vault / openfga / v1.8.5

openfga @ v1.8.5

integrity

size: 815.9 KiB
downloaded: 2026-07-04 06:57 UTC
last checked: 2026-07-04 06:57 UTC
overlays: go
detected: go module github.com/openfga/openfga

source https://github.com/openfga/openfga · available · github

release notes

Added

Improve Check performance for sub-problems when caching is enabled #2193.
Improve Check performance for relations involving public wildcard. Enable via experimental flag enable-check-optimizations. #2180.
Improve Check API performance when experimental flag enable-check-optimizations is turned on and contextual tuples are involved. #2150
Added metrics to track invalid cache hits: check_cache_invalid_hit_count and tuples_iterator_cache_invalid_hit_count #2222.
Move Check performance optimizations out of experimental mode: shortcutting based on path, recursive userset fast path, and recursive TTU fast path. #2236
Improve Check API performance when experimental flag enable-check-optimizations is turned on and the model contains union of a TTU and algebraic operations. #2200
Implement dynamic TLS certificate reloading for HTTP and gRPC servers. #2182
Publicize check.RunMatrixTests method to allow testing against any ClientInterface. #2267.

Changed

Performance optimizations for string operations and memory allocations across the codebase #2238 and #2241
Update to Go 1.23 as the min supported version and bump the container image to go1.23.6 We follow Go's version support policy and will only support the latest two major versions of Go. Now that Go 1.24 is out, we have dropped support for Go < 1.23.

Fixed

Optimized database dialect handling by setting it during initialization instead of per-call, fixing SQL syntax errors in MySQL #2252
Fixed incorrect invalidation by cache controller on cache iterator. #2190, #2216
Fixed incorrect types in configuration JSON schema #2217, #2228.
Fixed BatchCheck API to validate presence of the tuple_key property of a BatchCheckItem #2242
Fixed incorrect check and list objects evaluation when model has a relation directly assignable to both public access AND userset with the same type and type bound public access tuple is assigned to the object. CVE-2025-25196

download

unix · zip

curl -fL -o v1.8.5.zip https://ratatoskr.space/pkg/openfga/v1.8.5.zip
                    printf '%s  %s\n' 'bcab64a1bd9af61f3d734cf7bfbaca9a8b9525dc394a570be2bba84526ed0a91' 'v1.8.5.zip' | sha256sum -c -

windows · zip

$url = "https://ratatoskr.space/pkg/openfga/v1.8.5.zip"
$out = "v1.8.5.zip"
Invoke-WebRequest -Uri $url -OutFile $out
if ((Get-FileHash $out -Algorithm SHA256).Hash.ToLowerInvariant() -ne "bcab64a1bd9af61f3d734cf7bfbaca9a8b9525dc394a570be2bba84526ed0a91") { throw "sha256 mismatch" }

unix · tar.gz

curl -fL -o v1.8.5.tar.gz https://ratatoskr.space/pkg/openfga/v1.8.5.tar.gz
                    printf '%s  %s\n' 'cb36d9378d746bf5a30a7bef07e75cd3f558365b1ce96846799987e44e59ca1f' 'v1.8.5.tar.gz' | sha256sum -c -

windows · tar.gz

$url = "https://ratatoskr.space/pkg/openfga/v1.8.5.tar.gz"
$out = "v1.8.5.tar.gz"
Invoke-WebRequest -Uri $url -OutFile $out
if ((Get-FileHash $out -Algorithm SHA256).Hash.ToLowerInvariant() -ne "cb36d9378d746bf5a30a7bef07e75cd3f558365b1ce96846799987e44e59ca1f") { throw "sha256 mismatch" }

download via yggdrasil mesh

unix · zip

curl -fL -o v1.8.5.zip http://14cc7d57b5e70f679b851fe5b272ce17c70632ff4beb5b35ab64bc706b2485af.pk.ygg/pkg/openfga/v1.8.5.zip
                    printf '%s  %s\n' 'bcab64a1bd9af61f3d734cf7bfbaca9a8b9525dc394a570be2bba84526ed0a91' 'v1.8.5.zip' | sha256sum -c -

windows · zip

$url = "http://14cc7d57b5e70f679b851fe5b272ce17c70632ff4beb5b35ab64bc706b2485af.pk.ygg/pkg/openfga/v1.8.5.zip"
$out = "v1.8.5.zip"
Invoke-WebRequest -Uri $url -OutFile $out
if ((Get-FileHash $out -Algorithm SHA256).Hash.ToLowerInvariant() -ne "bcab64a1bd9af61f3d734cf7bfbaca9a8b9525dc394a570be2bba84526ed0a91") { throw "sha256 mismatch" }

unix · tar.gz

curl -fL -o v1.8.5.tar.gz http://14cc7d57b5e70f679b851fe5b272ce17c70632ff4beb5b35ab64bc706b2485af.pk.ygg/pkg/openfga/v1.8.5.tar.gz
                    printf '%s  %s\n' 'cb36d9378d746bf5a30a7bef07e75cd3f558365b1ce96846799987e44e59ca1f' 'v1.8.5.tar.gz' | sha256sum -c -

windows · tar.gz

$url = "http://14cc7d57b5e70f679b851fe5b272ce17c70632ff4beb5b35ab64bc706b2485af.pk.ygg/pkg/openfga/v1.8.5.tar.gz"
$out = "v1.8.5.tar.gz"
Invoke-WebRequest -Uri $url -OutFile $out
if ((Get-FileHash $out -Algorithm SHA256).Hash.ToLowerInvariant() -ne "cb36d9378d746bf5a30a7bef07e75cd3f558365b1ce96846799987e44e59ca1f") { throw "sha256 mismatch" }

artifact	format	size	hashes
v1.8.5.zip	zip	817.7 KiB	blake3-24 cd5796df46353bcb0db3d37f2d25d85c5f85938a36c4ad6e sha256 bcab64a1bd9af61f3d734cf7bfbaca9a8b9525dc394a570be2bba84526ed0a91 sha1 bc75bfd42d8bb0859d97893b95d18261cfab5895
v1.8.5.tar.gz	tar.gz	638.3 KiB	blake3-24 589bca3e34390d3994087fb399f83a1ebc22b62aa73b3086 sha256 cb36d9378d746bf5a30a7bef07e75cd3f558365b1ce96846799987e44e59ca1f sha1 48438fad0af9e5265939dc82df50d1866bef6776

go module archive

module zip with the module path rewritten to this mirror; fetched by go get through the GOPROXY route

artifact	format	size	hashes
v1.8.5.zip	zip	827.2 KiB	blake3-24 af8e83f667ebd7a2ec9824b8777b42a9621e0e80482fc808 sha256 f4680fc354abb632c7edec68af983791a9635f807b0fee2db24c6004b30a3891 sha1 ea30c5e1d48ee4c488c1b73aac46e170918a54d2

install

bazel

http_archive(
    name = "openfga",
    urls = ["https://ratatoskr.space/pkg/openfga/v1.8.5.tar.gz"],
    integrity = "sha256-yzbZN410a/WjCnvvB+dc0/VYNlsc6WhGeZmH5E5Zyh8=",
    strip_prefix = "openfga-v1.8.5",
)

zig

.url = "https://ratatoskr.space/pkg/openfga/v1.8.5.tar.gz",

GOPROXY=https://ratatoskr.space GOSUMDB=off go get ratatoskr.space/pkg/openfga@v1.8.5

install via yggdrasil mesh

bazel

http_archive(
    name = "openfga",
    urls = ["http://14cc7d57b5e70f679b851fe5b272ce17c70632ff4beb5b35ab64bc706b2485af.pk.ygg/pkg/openfga/v1.8.5.tar.gz"],
    integrity = "sha256-yzbZN410a/WjCnvvB+dc0/VYNlsc6WhGeZmH5E5Zyh8=",
    strip_prefix = "openfga-v1.8.5",
)

zig

.url = "http://14cc7d57b5e70f679b851fe5b272ce17c70632ff4beb5b35ab64bc706b2485af.pk.ygg/pkg/openfga/v1.8.5.tar.gz",

GOPROXY=http://14cc7d57b5e70f679b851fe5b272ce17c70632ff4beb5b35ab64bc706b2485af.pk.ygg GOSUMDB=off GOINSECURE=14cc7d57b5e70f679b851fe5b272ce17c70632ff4beb5b35ab64bc706b2485af.pk.ygg/* go get 14cc7d57b5e70f679b851fe5b272ce17c70632ff4beb5b35ab64bc706b2485af.pk.ygg/pkg/openfga@v1.8.5

← v1.8.6 v1.8.4 →