chore(main): release sdk 0.33.0

[opentdf-automation]

🤖 I have created a release beep boop

0.33.0 (2026-09-25)

Features

• sdk: accept io.Reader in CreateTDF and drop the 64 GB payload cap (#3945) (20ff505)
• sdk: add a chunked segment writer (experimental) (#3940) (69cb391)

Bug Fixes

• deps: bump google.golang.org/grpc from 1.83.1 to 1.83.2 in /sdk (#4018) (d1d4bd6)
• sdk: emit spec-compliant key access in experimental/tdf and delegate Writer (#3944) (3e8d88a)
• sdk: read zip entry bytes with io.ReadFull (DSPX-4590) (#4087) (40fa788)
• sdk: stop GetManifest from splitting the key under the lock (#3941) (cf1b083)

---

This PR was generated with Release Please. See documentation.

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Repository UI

Review profile: ASSERTIVE

Plan: Advanced

Run ID: 3fb819f2-8d21-402d-8b8f-b13fbcd94e2c

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[github-actions]

Benchmark results, click to expand

Benchmark authorization.GetDecisions Results:

Metric	Value
Approved Decision Requests	1000
Denied Decision Requests	0
Total Time	263.359308ms

Benchmark authorization.v2.GetMultiResourceDecision Results:

Metric	Value
Approved Decision Requests	1000
Denied Decision Requests	0
Total Time	134.265057ms

Benchmark Statistics

Name	№ Requests	Avg Duration	Min Duration	Max Duration

Bulk Benchmark Results

Metric	Value
Total Decrypts	100
Successful Decrypts	100
Failed Decrypts	0
Total Time	430.541929ms
Throughput	232.27 requests/second

TDF3 Benchmark Results:

Metric	Value
Total Requests	5000
Successful Requests	5000
Failed Requests	0
Concurrent Requests	50
Total Time	1m2.870572554s
Average Latency	627.184117ms
Throughput	79.53 requests/second

[github-actions]

X-Test Results

✅ go@pull-4068-v0.9.0
cukes-report
✅ java@main-main
✅ go@main-v0.9.0
✅ go@pull-4068-main
✅ js@main-main
opentdfplatformPJ2NGH.dockerbuild
bats-test-results
govulncheck-failure-1
govulncheck-failure-8
✅ go@main-main
✅ go@main-pull-4068
✅ java@main-pull-4068
govulncheck-failure-3
✅ go@pull-4068-pull-4068
✅ js@main-v0.9.0
✅ js@main-pull-4068
✅ java@main-v0.9.0

[github-actions]

Benchmark results, click to expand

Benchmark authorization.GetDecisions Results:

Metric	Value
Approved Decision Requests	1000
Denied Decision Requests	0
Total Time	252.077924ms

Benchmark authorization.v2.GetMultiResourceDecision Results:

Metric	Value
Approved Decision Requests	1000
Denied Decision Requests	0
Total Time	130.553433ms

Benchmark Statistics

Name	№ Requests	Avg Duration	Min Duration	Max Duration

Bulk Benchmark Results

Metric	Value
Total Decrypts	100
Successful Decrypts	100
Failed Decrypts	0
Total Time	419.206225ms
Throughput	238.55 requests/second

TDF3 Benchmark Results:

Metric	Value
Total Requests	5000
Successful Requests	5000
Failed Requests	0
Concurrent Requests	50
Total Time	59.509868257s
Average Latency	593.789874ms
Throughput	84.02 requests/second

[github-actions]

X-Test Results

✅ go@main-pull-4068
✅ go@pull-4068-main
✅ js@main-main
✅ go@pull-4068-pull-4068
✅ java@main-v0.9.0
✅ java@main-main
✅ java@main-pull-4068
opentdfplatformUQES6R.dockerbuild
✅ go@main-v0.9.0
✅ go@pull-4068-v0.9.0
cukes-report
✅ js@main-v0.9.0
govulncheck-failure-3
govulncheck-failure-8
govulncheck-failure-1
✅ go@main-main
✅ js@main-pull-4068

[github-actions]

Benchmark results, click to expand

Benchmark authorization.GetDecisions Results:

Metric	Value
Approved Decision Requests	1000
Denied Decision Requests	0
Total Time	246.20677ms

Benchmark authorization.v2.GetMultiResourceDecision Results:

Metric	Value
Approved Decision Requests	1000
Denied Decision Requests	0
Total Time	140.864404ms

Benchmark Statistics

Name	№ Requests	Avg Duration	Min Duration	Max Duration

Bulk Benchmark Results

Metric	Value
Total Decrypts	100
Successful Decrypts	100
Failed Decrypts	0
Total Time	445.412555ms
Throughput	224.51 requests/second

TDF3 Benchmark Results:

Metric	Value
Total Requests	5000
Successful Requests	5000
Failed Requests	0
Concurrent Requests	50
Total Time	59.282278538s
Average Latency	590.9083ms
Throughput	84.34 requests/second

[github-actions]

X-Test Results

✅ go@pull-4068-main
✅ java@main-main
✅ go@pull-4068-v0.9.0
✅ java@main-pull-4068
✅ js@main-pull-4068
✅ go@main-v0.9.0
✅ go@main-main
✅ go@pull-4068-pull-4068
cukes-report
✅ go@main-pull-4068
✅ java@main-v0.9.0
govulncheck-failure-3
govulncheck-failure-1
✅ js@main-v0.9.0
✅ js@main-main
govulncheck-failure-8
opentdfplatform932CWK.dockerbuild

[github-actions]

Benchmark results, click to expand

Benchmark authorization.GetDecisions Results:

Metric	Value
Approved Decision Requests	1000
Denied Decision Requests	0
Total Time	202.310838ms

Benchmark authorization.v2.GetMultiResourceDecision Results:

Metric	Value
Approved Decision Requests	1000
Denied Decision Requests	0
Total Time	111.453515ms

Benchmark Statistics

Name	№ Requests	Avg Duration	Min Duration	Max Duration

Bulk Benchmark Results

Metric	Value
Total Decrypts	100
Successful Decrypts	100
Failed Decrypts	0
Total Time	363.006306ms
Throughput	275.48 requests/second

TDF3 Benchmark Results:

Metric	Value
Total Requests	5000
Successful Requests	5000
Failed Requests	0
Concurrent Requests	50
Total Time	50.157518902s
Average Latency	500.360344ms
Throughput	99.69 requests/second

[github-actions]

X-Test Results

✅ go@main-pull-4068
✅ go@pull-4068-main
✅ go@pull-4068-v0.9.0
cukes-report
✅ js@main-pull-4068
✅ java@main-v0.9.0
govulncheck-failure-3
✅ go@pull-4068-pull-4068
✅ java@main-main
govulncheck-failure-1
govulncheck-failure-8
✅ js@main-v0.9.0
opentdfplatformS6GD5M.dockerbuild
✅ java@main-pull-4068
✅ js@main-main
✅ go@main-v0.9.0
✅ go@main-main

[github-actions]

X-Test Failure Report

govulncheck-failure-1
opentdfplatformPM4AY9.dockerbuild
govulncheck-failure-3
govulncheck-failure-8

[github-actions]

Benchmark results, click to expand

Benchmark authorization.GetDecisions Results:

Metric	Value
Approved Decision Requests	1000
Denied Decision Requests	0
Total Time	194.625268ms

Benchmark authorization.v2.GetMultiResourceDecision Results:

Metric	Value
Approved Decision Requests	1000
Denied Decision Requests	0
Total Time	106.685015ms

Benchmark Statistics

Name	№ Requests	Avg Duration	Min Duration	Max Duration

Bulk Benchmark Results

Metric	Value
Total Decrypts	100
Successful Decrypts	100
Failed Decrypts	0
Total Time	429.542668ms
Throughput	232.81 requests/second

TDF3 Benchmark Results:

Metric	Value
Total Requests	5000
Successful Requests	5000
Failed Requests	0
Concurrent Requests	50
Total Time	53.026042519s
Average Latency	529.057656ms
Throughput	94.29 requests/second

[github-actions]

Benchmark results, click to expand

Benchmark authorization.GetDecisions Results:

Metric	Value
Approved Decision Requests	1000
Denied Decision Requests	0
Total Time	231.464063ms

Benchmark authorization.v2.GetMultiResourceDecision Results:

Metric	Value
Approved Decision Requests	1000
Denied Decision Requests	0
Total Time	124.935639ms

Benchmark Statistics

Name	№ Requests	Avg Duration	Min Duration	Max Duration

Bulk Benchmark Results

Metric	Value
Total Decrypts	100
Successful Decrypts	100
Failed Decrypts	0
Total Time	456.450268ms
Throughput	219.08 requests/second

TDF3 Benchmark Results:

Metric	Value
Total Requests	5000
Successful Requests	5000
Failed Requests	0
Concurrent Requests	50
Total Time	1m1.183706236s
Average Latency	610.38614ms
Throughput	81.72 requests/second

[github-actions]

X-Test Results

✅ java@main-main
opentdfplatform7NTK2X.dockerbuild
✅ js@main-main
✅ java@main-v0.9.0
✅ go@pull-4068-pull-4068
✅ go@main-main
✅ js@main-pull-4068
govulncheck-failure-8
govulncheck-failure-3
✅ go@pull-4068-main
cukes-report
✅ java@main-pull-4068
bats-test-results
✅ js@main-v0.9.0
govulncheck-failure-1
✅ go@main-v0.9.0
✅ go@main-pull-4068
✅ go@pull-4068-v0.9.0

[github-actions]

Benchmark results, click to expand

Benchmark authorization.GetDecisions Results:

Metric	Value
Approved Decision Requests	1000
Denied Decision Requests	0
Total Time	239.850616ms

Benchmark authorization.v2.GetMultiResourceDecision Results:

Metric	Value
Approved Decision Requests	1000
Denied Decision Requests	0
Total Time	136.269524ms

Benchmark Statistics

Name	№ Requests	Avg Duration	Min Duration	Max Duration

Bulk Benchmark Results

Metric	Value
Total Decrypts	100
Successful Decrypts	100
Failed Decrypts	0
Total Time	434.290327ms
Throughput	230.26 requests/second

TDF3 Benchmark Results:

Metric	Value
Total Requests	5000
Successful Requests	5000
Failed Requests	0
Concurrent Requests	50
Total Time	58.369345078s
Average Latency	582.22591ms
Throughput	85.66 requests/second

[github-actions]

X-Test Results

✅ java@main-pull-4068
✅ java@main-main
✅ go@main-v0.9.0
✅ go@pull-4068-pull-4068
bats-test-results
✅ go@main-pull-4068
opentdfplatformRHCWW2.dockerbuild
cukes-report
✅ go@pull-4068-main
✅ go@pull-4068-v0.9.0
✅ go@main-main
✅ js@main-pull-4068
govulncheck-failure-1
govulncheck-failure-3
✅ js@main-main
✅ js@main-v0.9.0
✅ java@main-v0.9.0
govulncheck-failure-8

[github-actions]

Benchmark results, click to expand

Benchmark authorization.GetDecisions Results:

Metric	Value
Approved Decision Requests	1000
Denied Decision Requests	0
Total Time	242.024837ms

Benchmark authorization.v2.GetMultiResourceDecision Results:

Metric	Value
Approved Decision Requests	1000
Denied Decision Requests	0
Total Time	136.918414ms

Benchmark Statistics

Name	№ Requests	Avg Duration	Min Duration	Max Duration

Bulk Benchmark Results

Metric	Value
Total Decrypts	100
Successful Decrypts	100
Failed Decrypts	0
Total Time	416.277546ms
Throughput	240.22 requests/second

TDF3 Benchmark Results:

Metric	Value
Total Requests	5000
Successful Requests	5000
Failed Requests	0
Concurrent Requests	50
Total Time	57.819620568s
Average Latency	576.629253ms
Throughput	86.48 requests/second

[github-actions]

X-Test Results

✅ go@main-pull-4068
cukes-report
✅ go@pull-4068-main
✅ js@main-pull-4068
✅ go@pull-4068-v0.9.0
✅ java@main-v0.9.0
✅ go@main-main
✅ js@main-main
govulncheck-failure-3
✅ go@main-v0.9.0
govulncheck-failure-1
✅ java@main-pull-4068
✅ java@main-main
bats-test-results
opentdfplatformEI32Q3.dockerbuild
✅ go@pull-4068-pull-4068
govulncheck-failure-8
✅ js@main-v0.9.0

[github-actions]

Benchmark results, click to expand

Benchmark authorization.GetDecisions Results:

Metric	Value
Approved Decision Requests	1000
Denied Decision Requests	0
Total Time	177.028856ms

Benchmark authorization.v2.GetMultiResourceDecision Results:

Metric	Value
Approved Decision Requests	1000
Denied Decision Requests	0
Total Time	100.412379ms

Benchmark Statistics

Name	№ Requests	Avg Duration	Min Duration	Max Duration

Bulk Benchmark Results

Metric	Value
Total Decrypts	100
Successful Decrypts	100
Failed Decrypts	0
Total Time	367.367152ms
Throughput	272.21 requests/second

TDF3 Benchmark Results:

Metric	Value
Total Requests	5000
Successful Requests	5000
Failed Requests	0
Concurrent Requests	50
Total Time	44.86322534s
Average Latency	447.632178ms
Throughput	111.45 requests/second

[github-actions]

⚠️ Govulncheck found vulnerabilities ⚠️

The following modules have known vulnerabilities:

• otdfctl
• service
• tests-bdd

See the workflow run for details.

[github-actions]

X-Test Results

opentdfplatform839194.dockerbuild
✅ go@main-pull-4068
✅ go@main-main
✅ js@main-v0.9.0
✅ go@main-v0.9.0
✅ java@main-pull-4068
✅ js@main-pull-4068
govulncheck-failure-3
✅ java@main-v0.9.0
✅ go@pull-4068-main
✅ go@pull-4068-pull-4068
✅ go@pull-4068-v0.9.0
bats-test-results
cukes-report
✅ java@main-main
govulncheck-failure-1
✅ js@main-main
govulncheck-failure-8