vault / openfga / v1.9.3

openfga @ v1.9.3

integrity

size: 908.9 KiB
downloaded: 2026-07-04 06:57 UTC
last checked: 2026-07-04 06:57 UTC
overlays: go
detected: go module github.com/openfga/openfga

source https://github.com/openfga/openfga · available · github

release notes

Added

Add check_count grpc tag to list objects requests. #2515
Promote the Check fast path v2 implementations to no longer being behind the enable-check-optimizations config flag. #2609

Changed

Change ListObjectsResolutionMetadata fields to value types instead of pointers. #2583
Instead of panic when encountering unknown parameters in hasEntrypoints, return internal error to allow graceful handling. #2588
Shared iterators now rely entirely on a TTL for eviction from the pool. #2590
Update go toolchain version to 1.24.6 - related: CVE-2025-47907
Revert min supported go version to 1.24.0
Bump the base docker image to cgr.dev/chainguard/static@sha256:6a4b683f4708f1f167ba218e31fcac0b7515d94c33c3acf223c36d5c6acd3783

Fixed

Fixed bug in how experimental ReverseExpand is handling duplicate TTUs. #2589
Fixed bug in how experimental ReverseExpand is handling duplicate edge traversals. #2594
Fixed logs in ListObjects weighted graph to include store_id and authorization_model_id through the context. #2581
Fixed bug where OpenFGA fail to start when both secondary DB and db metrics enabled. #2598

Security

Bumped up the grpc-health-probe dependency in the published Docker image to the latest release (v0.4.39) which fixes some vulnerabilities. #2601

Full Changelog

change ListObjectsResolutionMetadata fields from pointers to value types by @senojj in https://github.com/openfga/openfga/pull/2583
fix: removes isDuplicateQuery check from reverse_expand_weighted by @justincoh in https://github.com/openfga/openfga/pull/2587
fix: graceful handling of unknown rewrite type in hasEntrypoints by @adriantam in https://github.com/openfga/openfga/pull/2588
fix: ListObjects weighted graph duplicate TTU bug by @Vic-Dev in https://github.com/openfga/openfga/pull/2589
chore: add main query count to shadow list objects logging by @justincoh in https://github.com/openfga/openfga/pull/2591
fix: make weighted reverse expand less aggressive in deduping by @justincoh in https://github.com/openfga/openfga/pull/2594
chore(ci): categorize snyk sarif file to allow upload to GH code scanning by @rhamzeh in https://github.com/openfga/openfga/pull/2595
feat: ListObjects check count grpc tag by @Vic-Dev in https://github.com/openfga/openfga/pull/2515
fix: add store_id and authorization_model_id to the LO logs by @Vic-Dev in https://github.com/openfga/openfga/pull/2581
chore(deps): bump github.com/docker/docker from 28.2.2+incompatible to 28.3.3+incompatible by @dependabot[bot] in https://github.com/openfga/openfga/pull/2592
fix: fails to start when using secondary db with db metrics enabled by @adriantam in https://github.com/openfga/openfga/pull/2598
chore: bump grpc_health_probe by @rhamzeh in https://github.com/openfga/openfga/pull/2601
chore: dependencies update by @adriantam in https://github.com/openfga/openfga/pull/2604
fix: flaky unit test for should_recover_from_panic by @adriantam in https://github.com/openfga/openfga/pull/2605
fix(test): flaky TestIteratorToUserset by @adriantam in https://github.com/openfga/openfga/pull/2607
fix: support tuple iterator cache in integration tests by @senojj in https://github.com/openfga/openfga/pull/2608
chore: specify github-native as changelog generation to use by @Vic-Dev in https://github.com/openfga/openfga/pull/2610
perf: shared iterators with timed eviction by @senojj in https://github.com/openfga/openfga/pull/2590
chore: temporarily ignore test tags for testing by @Vic-Dev in https://github.com/openfga/openfga/pull/2611
chore: script for creating release PRs by @Vic-Dev in https://github.com/openfga/openfga/pull/2603
chore: updating SECURITY-INSIGHTS by @aaguiarz in https://github.com/openfga/openfga/pull/2612
set benchtime to default 1s by @justincoh in https://github.com/openfga/openfga/pull/2586
remove fast path v1 code and promote v2 by @elbuo8 in https://github.com/openfga/openfga/pull/2609
Delete SECURITY-INSIGHTS v1.0.0 by @aaguiarz in https://github.com/openfga/openfga/pull/2623
split resolvers into separate files by @elbuo8 in https://github.com/openfga/openfga/pull/2622
chore(ci): remove semgrep workflow by @rhamzeh in https://github.com/openfga/openfga/pull/2625
chore: bump go for build to g@1.24.6, bump chaingaurd static image by @rhamzeh in https://github.com/openfga/openfga/pull/2627
chore: add workflow that generates a release tag by @Vic-Dev in https://github.com/openfga/openfga/pull/2613
release: update changelog for release v1.9.3 by @Vic-Dev in https://github.com/openfga/openfga/pull/2630

Source: https://github.com/openfga/openfga/compare/v1.9.2...v1.9.3

download

unix · zip

curl -fL -o v1.9.3.zip https://ratatoskr.space/pkg/openfga/v1.9.3.zip
                    printf '%s  %s\n' 'af53e23ada08b51c1e85389d8b255ba7d68c902619169eecb6a025b9ab8ded74' 'v1.9.3.zip' | sha256sum -c -

windows · zip

$url = "https://ratatoskr.space/pkg/openfga/v1.9.3.zip"
$out = "v1.9.3.zip"
Invoke-WebRequest -Uri $url -OutFile $out
if ((Get-FileHash $out -Algorithm SHA256).Hash.ToLowerInvariant() -ne "af53e23ada08b51c1e85389d8b255ba7d68c902619169eecb6a025b9ab8ded74") { throw "sha256 mismatch" }

unix · tar.gz

curl -fL -o v1.9.3.tar.gz https://ratatoskr.space/pkg/openfga/v1.9.3.tar.gz
                    printf '%s  %s\n' 'e303c59c1fee4946d5c69a6d9d8f418313483e2307462f454155fdf7697e2678' 'v1.9.3.tar.gz' | sha256sum -c -

windows · tar.gz

$url = "https://ratatoskr.space/pkg/openfga/v1.9.3.tar.gz"
$out = "v1.9.3.tar.gz"
Invoke-WebRequest -Uri $url -OutFile $out
if ((Get-FileHash $out -Algorithm SHA256).Hash.ToLowerInvariant() -ne "e303c59c1fee4946d5c69a6d9d8f418313483e2307462f454155fdf7697e2678") { throw "sha256 mismatch" }

download via yggdrasil mesh

unix · zip

curl -fL -o v1.9.3.zip http://14cc7d57b5e70f679b851fe5b272ce17c70632ff4beb5b35ab64bc706b2485af.pk.ygg/pkg/openfga/v1.9.3.zip
                    printf '%s  %s\n' 'af53e23ada08b51c1e85389d8b255ba7d68c902619169eecb6a025b9ab8ded74' 'v1.9.3.zip' | sha256sum -c -

windows · zip

$url = "http://14cc7d57b5e70f679b851fe5b272ce17c70632ff4beb5b35ab64bc706b2485af.pk.ygg/pkg/openfga/v1.9.3.zip"
$out = "v1.9.3.zip"
Invoke-WebRequest -Uri $url -OutFile $out
if ((Get-FileHash $out -Algorithm SHA256).Hash.ToLowerInvariant() -ne "af53e23ada08b51c1e85389d8b255ba7d68c902619169eecb6a025b9ab8ded74") { throw "sha256 mismatch" }

unix · tar.gz

curl -fL -o v1.9.3.tar.gz http://14cc7d57b5e70f679b851fe5b272ce17c70632ff4beb5b35ab64bc706b2485af.pk.ygg/pkg/openfga/v1.9.3.tar.gz
                    printf '%s  %s\n' 'e303c59c1fee4946d5c69a6d9d8f418313483e2307462f454155fdf7697e2678' 'v1.9.3.tar.gz' | sha256sum -c -

windows · tar.gz

$url = "http://14cc7d57b5e70f679b851fe5b272ce17c70632ff4beb5b35ab64bc706b2485af.pk.ygg/pkg/openfga/v1.9.3.tar.gz"
$out = "v1.9.3.tar.gz"
Invoke-WebRequest -Uri $url -OutFile $out
if ((Get-FileHash $out -Algorithm SHA256).Hash.ToLowerInvariant() -ne "e303c59c1fee4946d5c69a6d9d8f418313483e2307462f454155fdf7697e2678") { throw "sha256 mismatch" }

artifact	format	size	hashes
v1.9.3.zip	zip	911.7 KiB	blake3-24 4aeb3869be9cce9208acade9f0cd3e58052ad6d6bfd30e11 sha256 af53e23ada08b51c1e85389d8b255ba7d68c902619169eecb6a025b9ab8ded74 sha1 027b781b16a254dd38f76fe606a33f9d6a7f61cf
v1.9.3.tar.gz	tar.gz	716.5 KiB	blake3-24 228b41fd7e6f06e6feba143caa011bdd9faea407447aff0b sha256 e303c59c1fee4946d5c69a6d9d8f418313483e2307462f454155fdf7697e2678 sha1 18dff02e8da314cc885c684bb6d2c1389cfe3731

go module archive

module zip with the module path rewritten to this mirror; fetched by go get through the GOPROXY route

artifact	format	size	hashes
v1.9.3.zip	zip	922.1 KiB	blake3-24 e024340db51ec44e79cee699ccaa71a020a069b5932084f6 sha256 0d3b250b551953a78fd9e0d9a1045ec82aaee17b132cc46a5f89236b2ef0b03f sha1 6b657eb866a7f4a5b5dccef209fc0c3a5654d24e

install

bazel

http_archive(
    name = "openfga",
    urls = ["https://ratatoskr.space/pkg/openfga/v1.9.3.tar.gz"],
    integrity = "sha256-4wPFnB/uSUbVxpptnY9BgxNIPiMHRi9FQVX992l+Jng=",
    strip_prefix = "openfga-v1.9.3",
)

zig

.url = "https://ratatoskr.space/pkg/openfga/v1.9.3.tar.gz",

GOPROXY=https://ratatoskr.space GOSUMDB=off go get ratatoskr.space/pkg/openfga@v1.9.3

install via yggdrasil mesh

bazel

http_archive(
    name = "openfga",
    urls = ["http://14cc7d57b5e70f679b851fe5b272ce17c70632ff4beb5b35ab64bc706b2485af.pk.ygg/pkg/openfga/v1.9.3.tar.gz"],
    integrity = "sha256-4wPFnB/uSUbVxpptnY9BgxNIPiMHRi9FQVX992l+Jng=",
    strip_prefix = "openfga-v1.9.3",
)

zig

.url = "http://14cc7d57b5e70f679b851fe5b272ce17c70632ff4beb5b35ab64bc706b2485af.pk.ygg/pkg/openfga/v1.9.3.tar.gz",

GOPROXY=http://14cc7d57b5e70f679b851fe5b272ce17c70632ff4beb5b35ab64bc706b2485af.pk.ygg GOSUMDB=off GOINSECURE=14cc7d57b5e70f679b851fe5b272ce17c70632ff4beb5b35ab64bc706b2485af.pk.ygg/* go get 14cc7d57b5e70f679b851fe5b272ce17c70632ff4beb5b35ab64bc706b2485af.pk.ygg/pkg/openfga@v1.9.3

← v1.9.4 v1.9.2 →