vault / openfga / v1.17.1

openfga @ v1.17.1

integrity

size: 1.3 MiB
downloaded: 2026-07-04 06:56 UTC
last checked: 2026-07-18 21:05 UTC
overlays: go
detected: go module github.com/openfga/openfga

source https://github.com/openfga/openfga · available · github

release notes

Changed

Update PR workflow benchmark comparison to be less flakey. #3153

Fixed

Fixed experimental weighted_graph_check falling back to the standard algorithm on errors that v1 would reject identically or that should not be retried. ErrTransactionThrottled, check.ErrValidation, check.ErrInvalidUser, and *tuple.InvalidTupleError (from contextual-tuple validation) are now returned directly instead of triggering a v1 retry. #3150
Fixed a race where an iterator cache entry flushed concurrently with a write could survive cache controller invalidation checks, causing stale tuples to be returned to subsequent requests. #3155 Thanks to @0xmrma for reporting this bug.
Fixed ReadChanges pagination erroring past the first page when an object type name contains |, and tightened Deserialize to reject tokens with an empty ULID segment rather than silently restarting pagination from the beginning. #3152

Security

Update toolchain Go version to 1.26.4 to address the Go standard library vulnerabilities documented in the Go 1.26.4 release notes. #3159
Update grpc-health-probe to v0.4.52, rebuilt with Go 1.26.4, so released images no longer ship the Go standard library vulnerabilities fixed in the Go 1.26.4 release notes. #3164 Thanks @Keralin!

New Contributors

@Keralin made their first contribution in https://github.com/openfga/openfga/pull/3164

Full Changelog: https://github.com/openfga/openfga/compare/v1.17.0...v1.17.1

download

unix · zip

curl -fL -o v1.17.1.zip https://ratatoskr.space/pkg/openfga/v1.17.1.zip
                    printf '%s  %s\n' 'a6bb39fe96330f8df2349b978b5406626fda2f75ab8c5da6d8b619fbd8e596a5' 'v1.17.1.zip' | sha256sum -c -

windows · zip

$url = "https://ratatoskr.space/pkg/openfga/v1.17.1.zip"
$out = "v1.17.1.zip"
Invoke-WebRequest -Uri $url -OutFile $out
if ((Get-FileHash $out -Algorithm SHA256).Hash.ToLowerInvariant() -ne "a6bb39fe96330f8df2349b978b5406626fda2f75ab8c5da6d8b619fbd8e596a5") { throw "sha256 mismatch" }

unix · tar.gz

curl -fL -o v1.17.1.tar.gz https://ratatoskr.space/pkg/openfga/v1.17.1.tar.gz
                    printf '%s  %s\n' 'cca26ef985d79eb1f649a0524c07908a190f0877c138ad4450a6dca4558f714d' 'v1.17.1.tar.gz' | sha256sum -c -

windows · tar.gz

$url = "https://ratatoskr.space/pkg/openfga/v1.17.1.tar.gz"
$out = "v1.17.1.tar.gz"
Invoke-WebRequest -Uri $url -OutFile $out
if ((Get-FileHash $out -Algorithm SHA256).Hash.ToLowerInvariant() -ne "cca26ef985d79eb1f649a0524c07908a190f0877c138ad4450a6dca4558f714d") { throw "sha256 mismatch" }

download via yggdrasil mesh

unix · zip

curl -fL -o v1.17.1.zip http://14cc7d57b5e70f679b851fe5b272ce17c70632ff4beb5b35ab64bc706b2485af.pk.ygg/pkg/openfga/v1.17.1.zip
                    printf '%s  %s\n' 'a6bb39fe96330f8df2349b978b5406626fda2f75ab8c5da6d8b619fbd8e596a5' 'v1.17.1.zip' | sha256sum -c -

windows · zip

$url = "http://14cc7d57b5e70f679b851fe5b272ce17c70632ff4beb5b35ab64bc706b2485af.pk.ygg/pkg/openfga/v1.17.1.zip"
$out = "v1.17.1.zip"
Invoke-WebRequest -Uri $url -OutFile $out
if ((Get-FileHash $out -Algorithm SHA256).Hash.ToLowerInvariant() -ne "a6bb39fe96330f8df2349b978b5406626fda2f75ab8c5da6d8b619fbd8e596a5") { throw "sha256 mismatch" }

unix · tar.gz

curl -fL -o v1.17.1.tar.gz http://14cc7d57b5e70f679b851fe5b272ce17c70632ff4beb5b35ab64bc706b2485af.pk.ygg/pkg/openfga/v1.17.1.tar.gz
                    printf '%s  %s\n' 'cca26ef985d79eb1f649a0524c07908a190f0877c138ad4450a6dca4558f714d' 'v1.17.1.tar.gz' | sha256sum -c -

windows · tar.gz

$url = "http://14cc7d57b5e70f679b851fe5b272ce17c70632ff4beb5b35ab64bc706b2485af.pk.ygg/pkg/openfga/v1.17.1.tar.gz"
$out = "v1.17.1.tar.gz"
Invoke-WebRequest -Uri $url -OutFile $out
if ((Get-FileHash $out -Algorithm SHA256).Hash.ToLowerInvariant() -ne "cca26ef985d79eb1f649a0524c07908a190f0877c138ad4450a6dca4558f714d") { throw "sha256 mismatch" }

artifact	format	size	hashes
v1.17.1.zip	zip	1.3 MiB	blake3-24 84caef78c8dcd347fc6238372eaa1ecb2adf212682908719 sha256 a6bb39fe96330f8df2349b978b5406626fda2f75ab8c5da6d8b619fbd8e596a5 sha1 73cc92538f19a9e779366494fa746461e91ee73c
v1.17.1.tar.gz	tar.gz	1.0 MiB	blake3-24 07e33e4c4b925a436725bf45dde803698233a6072f3b126d sha256 cca26ef985d79eb1f649a0524c07908a190f0877c138ad4450a6dca4558f714d sha1 50168cff8c32a4e9037899cb1c126e2976a5e141

go module archive

module zip with the module path rewritten to this mirror; fetched by go get through the GOPROXY route

artifact	format	size	hashes
v1.17.1.zip	zip	1.3 MiB	blake3-24 84c23820b60050706a718027ee192ea641cd0f8e2376f533 sha256 92b5215cc441368463b37f64744b8f302c9fbd3bef5ad8ed492e6e32114c258f sha1 12e9b03cdacfed3c612893be32604ef6a01ea639

install

bazel

http_archive(
    name = "openfga",
    urls = ["https://ratatoskr.space/pkg/openfga/v1.17.1.tar.gz"],
    integrity = "sha256-zKJu+YXXnrH2SaBSTAeQihkPCHfBOK1EUKbcpFWPcU0=",
    strip_prefix = "openfga-v1.17.1",
)

zig

.url = "https://ratatoskr.space/pkg/openfga/v1.17.1.tar.gz",

GOPROXY=https://ratatoskr.space GOSUMDB=off go get ratatoskr.space/pkg/openfga@v1.17.1

install via yggdrasil mesh

bazel

http_archive(
    name = "openfga",
    urls = ["http://14cc7d57b5e70f679b851fe5b272ce17c70632ff4beb5b35ab64bc706b2485af.pk.ygg/pkg/openfga/v1.17.1.tar.gz"],
    integrity = "sha256-zKJu+YXXnrH2SaBSTAeQihkPCHfBOK1EUKbcpFWPcU0=",
    strip_prefix = "openfga-v1.17.1",
)

zig

.url = "http://14cc7d57b5e70f679b851fe5b272ce17c70632ff4beb5b35ab64bc706b2485af.pk.ygg/pkg/openfga/v1.17.1.tar.gz",

GOPROXY=http://14cc7d57b5e70f679b851fe5b272ce17c70632ff4beb5b35ab64bc706b2485af.pk.ygg GOSUMDB=off GOINSECURE=14cc7d57b5e70f679b851fe5b272ce17c70632ff4beb5b35ab64bc706b2485af.pk.ygg/* go get 14cc7d57b5e70f679b851fe5b272ce17c70632ff4beb5b35ab64bc706b2485af.pk.ygg/pkg/openfga@v1.17.1

← v1.18.0 v1.17.0 →