fix(core): prevent OpenTelemetry resource schema conflicts [backport to release/service/v0.11] by opentdf-automation[bot] · Pull Request #4036 · opentdf/platform

opentdf-automation · 2026-09-10T20:36:51Z

Description

Backport of #3769 to release/service/v0.11.

Backport adjustments

Resolved release-branch conflicts and updated the Go/runtime dependencies required by the OpenTelemetry v1.44 alignment.
Backported chore(ci): bump golangci/golangci-lint-action from 8.0.0 to 9.2.0 #3043 to use golangci-lint-action v9.2.0.
Backported chore(ci): DSPX-4607 bump golangci-lint to v2.13.2 #3965 to use golangci-lint v2.13.2 with Go 1.25-compatible tooling.
Configured lint CI to report only findings introduced by the backport, matching main behavior.
Updated tests-bdd to Go 1.25.5 and backported the compatible Testcontainers dependency stack from main, including Testcontainers v0.42.0, BuildKit v0.29.0, Docker Compose v5.1.2, Docker CLI v29.4.0, containerd v2.2.8, go-archive v0.3.0, gRPC v1.83.2, and pgx v5.9.2.
Adapted service integration helpers to the Testcontainers v0.42 port and container configuration APIs, matching the corresponding changes on main, and tidied the service module after removing its direct legacy Docker imports.
Backported fix(ci): Dont fail on govulncheck #3257 and fix(ci): Add comment if govulncheck fails #3258 so govulncheck findings remain visible in PR comments without blocking CI, matching main behavior.
Preserved the Go 1.25 floor; the current x/crypto fix requires Go 1.26 and remains visible through the non-blocking govulncheck report.

Known remaining CI issue

Both dependency-review jobs flag github.com/docker/docker v28.5.2 for GHSA-x86f-5xw2-fm2r, GHSA-rg2x-37c3-w2rh, GHSA-pxq6-2prw-chj9, and GHSA-vp62-88p7-qqf5. main currently pins the same legacy module version. The patched Docker release uses github.com/moby/moby/v2, but Buildx still imports the removed legacy pkg/namesgenerator package, so there is no compatible patched module pin to backport. No dependency-review exception has been added.

opentdf-automation · 2026-09-10T20:36:53Z

Please cherry-pick the changes locally and resolve any conflicts.

git fetch origin backport-3769-to-release/service/v0.11
git worktree add --checkout .worktree/backport-3769-to-release/service/v0.11 backport-3769-to-release/service/v0.11
cd .worktree/backport-3769-to-release/service/v0.11
git reset --hard HEAD^
git cherry-pick -x 4a0c41c9e7ca14291b4bed4e02a0a0cae59f2444
git push --force-with-lease

coderabbitai · 2026-09-10T20:36:59Z

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Repository UI

Review profile: ASSERTIVE

Plan: Advanced

Run ID: 52f886dd-60f4-4204-856f-97b73947a9b1

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

🔍 Trigger review

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

_{Comment @coderabbitai help to get the list of available commands.}

github-actions · 2026-09-10T20:37:04Z

Dependency Review

The following issues were found:

❌ 4 vulnerable package(s)
✅ 0 package(s) with incompatible licenses
✅ 0 package(s) with invalid SPDX license definitions
✅ 0 package(s) with unknown licenses.
⚠️ 4 packages with OpenSSF Scorecard issues.

View full job summary

github-actions · 2026-09-10T20:37:16Z

X-Test Failure Report

Signed-off-by: jakedoublev <jake.vanvorhis@virtru.com>

github-actions · 2026-09-10T20:48:10Z

X-Test Failure Report

✅ java@main-v0.9.0
✅ js@main-v0.9.0
opentdf~~platform~~85FU0Z.dockerbuild

github-actions · 2026-09-10T20:53:43Z

Benchmark results, click to expand

Benchmark authorization.GetDecisions Results:

Metric	Value
Approved Decision Requests	1000
Denied Decision Requests	0
Total Time	190.68516ms

Benchmark authorization.v2.GetMultiResourceDecision Results:

Metric	Value
Approved Decision Requests	1000
Denied Decision Requests	0
Total Time	98.116876ms

Benchmark Statistics

Name	№ Requests	Avg Duration	Min Duration	Max Duration

Bulk Benchmark Results

Metric	Value
Total Decrypts	100
Successful Decrypts	100
Failed Decrypts	0
Total Time	409.93117ms
Throughput	243.94 requests/second

TDF3 Benchmark Results:

Metric	Value
Total Requests	5000
Successful Requests	5000
Failed Requests	0
Concurrent Requests	50
Total Time	41.64672711s
Average Latency	415.048515ms
Throughput	120.06 requests/second

NANOTDF Benchmark Results:

Metric	Value
Total Requests	5000
Successful Requests	5000
Failed Requests	0
Concurrent Requests	50
Total Time	29.667206806s
Average Latency	295.556125ms
Throughput	168.54 requests/second

github-actions · 2026-09-10T21:01:05Z

X-Test Failure Report

✅ go@main-v0.9.0
✅ java@main-v0.9.0
✅ js@main-v0.9.0
server-logs-js@main-pull-4036
❌ js@main-pull-4036
cukes-report
server-logs-go@main-pull-4036
server-logs-java@main-pull-4036
opentdf~~platform~~PPIB8N.dockerbuild

github-actions · 2026-09-10T21:06:59Z

Benchmark results, click to expand

Benchmark authorization.GetDecisions Results:

Metric	Value
Approved Decision Requests	1000
Denied Decision Requests	0
Total Time	187.771324ms

Benchmark authorization.v2.GetMultiResourceDecision Results:

Metric	Value
Approved Decision Requests	1000
Denied Decision Requests	0
Total Time	99.937539ms

Benchmark Statistics

Name	№ Requests	Avg Duration	Min Duration	Max Duration

Bulk Benchmark Results

Metric	Value
Total Decrypts	100
Successful Decrypts	100
Failed Decrypts	0
Total Time	387.237128ms
Throughput	258.24 requests/second

TDF3 Benchmark Results:

Metric	Value
Total Requests	5000
Successful Requests	5000
Failed Requests	0
Concurrent Requests	50
Total Time	40.336208033s
Average Latency	401.657308ms
Throughput	123.96 requests/second

NANOTDF Benchmark Results:

Metric	Value
Total Requests	5000
Successful Requests	5000
Failed Requests	0
Concurrent Requests	50
Total Time	28.967402472s
Average Latency	288.454921ms
Throughput	172.61 requests/second

github-actions · 2026-09-10T21:12:19Z

X-Test Failure Report

✅ go@main-v0.9.0
✅ js@main-v0.9.0
✅ java@main-v0.9.0
server-logs-js@main-pull-4036
❌ js@main-pull-4036
cukes-report
bats-test-results
server-logs-java@main-pull-4036
server-logs-go@main-pull-4036
opentdf~~platform~~T1FNUN.dockerbuild

github-actions · 2026-09-10T21:18:47Z

Benchmark results, click to expand

Benchmark authorization.GetDecisions Results:

Metric	Value
Approved Decision Requests	1000
Denied Decision Requests	0
Total Time	188.915162ms

Benchmark authorization.v2.GetMultiResourceDecision Results:

Metric	Value
Approved Decision Requests	1000
Denied Decision Requests	0
Total Time	110.602072ms

Benchmark Statistics

Name	№ Requests	Avg Duration	Min Duration	Max Duration

Bulk Benchmark Results

Metric	Value
Total Decrypts	100
Successful Decrypts	100
Failed Decrypts	0
Total Time	392.289708ms
Throughput	254.91 requests/second

TDF3 Benchmark Results:

Metric	Value
Total Requests	5000
Successful Requests	5000
Failed Requests	0
Concurrent Requests	50
Total Time	42.152711324s
Average Latency	418.351912ms
Throughput	118.62 requests/second

NANOTDF Benchmark Results:

Metric	Value
Total Requests	5000
Successful Requests	5000
Failed Requests	0
Concurrent Requests	50
Total Time	29.186244447s
Average Latency	290.846012ms
Throughput	171.31 requests/second

github-actions · 2026-09-10T21:23:40Z

X-Test Failure Report

✅ go@main-v0.9.0
✅ js@main-v0.9.0
server-logs-js@main-pull-4036
❌ js@main-pull-4036
✅ java@main-v0.9.0
bats-test-results
cukes-report
server-logs-go@main-pull-4036
server-logs-java@main-pull-4036
opentdf~~platform~~Y0F6AZ.dockerbuild

Fixes flaky lint failures in CI that are a network error, not a real lint finding: ``` [../../.golangci.yaml] validate: compile schema: failing loading "https://golangci-lint.run/jsonschema/golangci.v2.8.jsonschema.json": context deadline exceeded (Client.Timeout exceeded while awaiting headers) Error: Command failed: /home/runner/golangci-lint-2.8.0-linux-amd64/golangci-lint config verify ``` **Root cause:** `golangci/golangci-lint-action` defaults `verify: true`, which runs `golangci-lint config verify`. In golangci-lint **v2.8.0** (what we pinned), `config verify` downloads the config JSONSchema over HTTPS with a **2-second client timeout**, so any slow response from `golangci-lint.run` fails the job. Known upstream complaint: golangci/golangci-lint#4864 **Upstream fix landed in v2.12.0:** `pkg/commands/config_verify.go` switched from an HTTP loader to `jsonsch.NewEmbedLoader()`, so the schema is compiled into the binary via `go:embed`. | version | schema source | | --- | --- | | v2.8.0 | remote URL, 2s timeout | | v2.9.0, v2.11.0 | remote URL | | **v2.12.0+** | **embedded** | This bumps all three `2.8.0` pins to `2.13.2` (current latest): - `.github/workflows/checks.yaml` — `golangci-lint-action` `version:` in the `go` matrix job - `.github/workflows/checks.yaml` — `go install ...golangci-lint@v2.13.2` in the proto-generate job - `Makefile` — `toolcheck` install hint and `required_golangci_lint_version` (still a minimum, not an exact pin) The action's `verify` input stays at its `true` default. Bumping already removes the network call, so disabling verification would needlessly give up validation of `.golangci.yaml`. No `.golangci.yaml` changes are needed — the existing config validates cleanly under v2.13.2. Ticket: [DSPX-4607](https://virtru.atlassian.net/browse/DSPX-4607) - `make lint` is never invoked in CI — the only lint gate is the `golangci-lint-action` step in the `go` matrix, which uses `only-new-issues: true`. - v2.13.x surfaces **351 pre-existing findings** repo-wide that v2.8.0 did not (lib/fixtures 26, sdk 10, service 163, examples 9, otdfctl 134, tests-bdd 9). These are deliberately **out of scope** here; `only-new-issues: true` means they only block a PR that touches those lines. Follow-up work is enumerated in DSPX-4607, grouped by fix type (unused `//nolint:sloglint` directives, `sloglint` snake_case keys, `goconst`, `canonicalheader` on DPoP headers, `staticcheck` QF1012/SA1019, and a `gomodguard` → `gomodguard_v2` migration). - v2.12.0 deprecated `gomodguard` in favor of `gomodguard_v2`. It emits a warning and still runs, so it is not a blocker. - [ ] I have added or updated unit tests - [ ] I have added or updated integration tests (if appropriate) - [ ] I have added or updated documentation CI-only change; no product code touched, so no test or doc updates apply. **Local** ```sh make toolcheck # passes with v2.13.2 golangci-lint config verify -c .golangci.yaml # exit 0 HTTPS_PROXY=http://127.0.0.1:9 HTTP_PROXY=http://127.0.0.1:9 \ golangci-lint config verify -c .golangci.yaml # exit 0 on v2.13.2; fails on v2.8.0 ``` **CI** Verified ahead of this PR with a `workflow_dispatch` run of `checks.yaml` on this branch: https://github.com/opentdf/platform/actions/runs/33771514702 ``` Installed golangci-lint into /home/runner/golangci-lint-2.13.2-linux-amd64/golangci-lint in 650ms Running [.../golangci-lint config verify] in [.../lib/fixtures] ... Running [.../golangci-lint run --path-mode=abs] in [.../lib/fixtures] ... ``` `config verify` completed with no schema fetch and no error. That dispatch run did then fail `lib/fixtures` on the pre-existing findings, but only because the log shows `Not fetching patch for showing only new issues because it's not a pull request context: event name is workflow_dispatch` — `only-new-issues` was inert so everything got reported. On this PR it filters to changed lines, and since no Go code changes here, the `go` matrix should be clean. [DSPX-4607]: https://virtru.atlassian.net/browse/DSPX-4607?atlOrigin=eyJpIjoiNWRkNTljNzYxNjVmNDY3MDlhMDU5Y2ZhYzA5YTRkZjUiLCJwIjoiZ2l0aHViLWNvbS1KU1cifQ  - **Chores** - Updated the required golangci-lint version to 2.13.2 across automated checks and local tooling. - Improved lint configuration verification reliability by using a version that embeds the configuration schema. - Updated installation guidance and minimum-version validation accordingly.  --------- Signed-off-by: Dave Mihalcik <dmihalcik@virtru.com>

github-actions · 2026-09-10T22:38:49Z

Benchmark results, click to expand

Benchmark authorization.GetDecisions Results:

Metric	Value
Approved Decision Requests	1000
Denied Decision Requests	0
Total Time	196.23803ms

Benchmark authorization.v2.GetMultiResourceDecision Results:

Metric	Value
Approved Decision Requests	1000
Denied Decision Requests	0
Total Time	114.670822ms

Benchmark Statistics

Name	№ Requests	Avg Duration	Min Duration	Max Duration

Bulk Benchmark Results

Metric	Value
Total Decrypts	100
Successful Decrypts	100
Failed Decrypts	0
Total Time	388.541569ms
Throughput	257.37 requests/second

TDF3 Benchmark Results:

Metric	Value
Total Requests	5000
Successful Requests	5000
Failed Requests	0
Concurrent Requests	50
Total Time	42.074018895s
Average Latency	419.234467ms
Throughput	118.84 requests/second

NANOTDF Benchmark Results:

Metric	Value
Total Requests	5000
Successful Requests	5000
Failed Requests	0
Concurrent Requests	50
Total Time	30.18378384s
Average Latency	300.968657ms
Throughput	165.65 requests/second

github-actions · 2026-09-10T22:41:32Z

X-Test Failure Report

✅ js@main-v0.9.0
✅ go@main-v0.9.0
✅ java@main-v0.9.0
bats-test-results
server-logs-js@main-pull-4036
❌ js@main-pull-4036
cukes-report
server-logs-go@main-pull-4036
server-logs-java@main-pull-4036
opentdf~~platform~~RYKLGA.dockerbuild

github-actions · 2026-09-14T18:05:31Z

Benchmark results, click to expand

Benchmark authorization.GetDecisions Results:

Metric	Value
Approved Decision Requests	1000
Denied Decision Requests	0
Total Time	208.350283ms

Benchmark authorization.v2.GetMultiResourceDecision Results:

Metric	Value
Approved Decision Requests	1000
Denied Decision Requests	0
Total Time	101.545416ms

Benchmark Statistics

Name	№ Requests	Avg Duration	Min Duration	Max Duration

Bulk Benchmark Results

Metric	Value
Total Decrypts	100
Successful Decrypts	100
Failed Decrypts	0
Total Time	424.295186ms
Throughput	235.68 requests/second

TDF3 Benchmark Results:

Metric	Value
Total Requests	5000
Successful Requests	5000
Failed Requests	0
Concurrent Requests	50
Total Time	44.300833996s
Average Latency	440.491135ms
Throughput	112.86 requests/second

NANOTDF Benchmark Results:

Metric	Value
Total Requests	5000
Successful Requests	5000
Failed Requests	0
Concurrent Requests	50
Total Time	31.818545268s
Average Latency	316.873762ms
Throughput	157.14 requests/second

github-actions · 2026-09-14T18:09:58Z

X-Test Failure Report

✅ js@main-v0.9.0
cukes-report
✅ java@main-v0.9.0
✅ go@main-v0.9.0
server-logs-go@main-pull-4036
server-logs-js@main-pull-4036
opentdf~~platform~~2PTUA7.dockerbuild
❌ js@main-pull-4036
bats-test-results
server-logs-java@main-pull-4036

github-actions · 2026-09-14T18:48:32Z

Benchmark results, click to expand

Benchmark authorization.GetDecisions Results:

Metric	Value
Approved Decision Requests	1000
Denied Decision Requests	0
Total Time	147.624449ms

Benchmark authorization.v2.GetMultiResourceDecision Results:

Metric	Value
Approved Decision Requests	1000
Denied Decision Requests	0
Total Time	78.718547ms

Benchmark Statistics

Name	№ Requests	Avg Duration	Min Duration	Max Duration

Bulk Benchmark Results

Metric	Value
Total Decrypts	100
Successful Decrypts	100
Failed Decrypts	0
Total Time	315.996159ms
Throughput	316.46 requests/second

TDF3 Benchmark Results:

Metric	Value
Total Requests	5000
Successful Requests	5000
Failed Requests	0
Concurrent Requests	50
Total Time	31.40587269s
Average Latency	311.761368ms
Throughput	159.21 requests/second

NANOTDF Benchmark Results:

Metric	Value
Total Requests	5000
Successful Requests	5000
Failed Requests	0
Concurrent Requests	50
Total Time	22.298668307s
Average Latency	222.099701ms
Throughput	224.23 requests/second

github-actions · 2026-09-14T18:54:01Z

X-Test Failure Report

✅ go@main-v0.9.0
server-logs-java@main-pull-4036
opentdf~~platform~~W2NU71.dockerbuild
server-logs-js@main-pull-4036
✅ java@main-v0.9.0
❌ js@main-pull-4036
✅ js@main-v0.9.0
bats-test-results
server-logs-go@main-pull-4036
cukes-report

### Proposed Changes * We decided to trust GH Security Check (dependency review GHA in opentdf/platform) as the ground source of truth and make govulncheck nonrequired. We'll do a follow-up to make sure govulncheck run failures add context to PRs for visibility ### Checklist - [ ] I have added or updated unit tests - [ ] I have added or updated integration tests (if appropriate) - [ ] I have added or updated documentation ### Testing Instructions  ## Summary by CodeRabbit * **Chores** * Updated GitHub Actions workflow configuration for vulnerability scanning. The scan will no longer block workflow completion if issues are detected, allowing the pipeline to proceed for further review.

### Proposed Changes * An automated PR comment is created or refreshed to summarize modules with scan failures, and the summary is removed if no results are available. ### Checklist - [ ] I have added or updated unit tests - [ ] I have added or updated integration tests (if appropriate) - [ ] I have added or updated documentation ### Testing Instructions  ## Summary by CodeRabbit * **Chores** * CI vulnerability scans no longer fail the job; scan failures are tolerated so pipelines continue. * Failing scan results are captured and uploaded as short-retention artifacts for investigation. * An automated PR comment is created or refreshed to summarize modules with scan failures, and the summary is removed if no results are available.

github-actions · 2026-09-14T19:44:22Z

Benchmark results, click to expand

Benchmark authorization.GetDecisions Results:

Metric	Value
Approved Decision Requests	1000
Denied Decision Requests	0
Total Time	137.646479ms

Benchmark authorization.v2.GetMultiResourceDecision Results:

Metric	Value
Approved Decision Requests	1000
Denied Decision Requests	0
Total Time	78.470827ms

Benchmark Statistics

Name	№ Requests	Avg Duration	Min Duration	Max Duration

Bulk Benchmark Results

Metric	Value
Total Decrypts	100
Successful Decrypts	100
Failed Decrypts	0
Total Time	320.927232ms
Throughput	311.60 requests/second

TDF3 Benchmark Results:

Metric	Value
Total Requests	5000
Successful Requests	5000
Failed Requests	0
Concurrent Requests	50
Total Time	31.917935384s
Average Latency	317.644824ms
Throughput	156.65 requests/second

NANOTDF Benchmark Results:

Metric	Value
Total Requests	5000
Successful Requests	5000
Failed Requests	0
Concurrent Requests	50
Total Time	22.663211688s
Average Latency	225.751577ms
Throughput	220.62 requests/second

github-actions · 2026-09-14T19:52:25Z

X-Test Failure Report

server-logs-js@main-pull-4036
✅ java@main-v0.9.0
❌ js@main-pull-4036
govulncheck-failure-2
bats-test-results
govulncheck-failure-7
server-logs-go@main-pull-4036
✅ js@main-v0.9.0
opentdf~~platform~~3J9N83.dockerbuild
cukes-report
server-logs-java@main-pull-4036
✅ go@main-v0.9.0

github-actions · 2026-09-14T21:03:15Z

Benchmark results, click to expand

Benchmark authorization.GetDecisions Results:

Metric	Value
Approved Decision Requests	1000
Denied Decision Requests	0
Total Time	206.842422ms

Benchmark authorization.v2.GetMultiResourceDecision Results:

Metric	Value
Approved Decision Requests	1000
Denied Decision Requests	0
Total Time	112.710648ms

Benchmark Statistics

Name	№ Requests	Avg Duration	Min Duration	Max Duration

Bulk Benchmark Results

Metric	Value
Total Decrypts	100
Successful Decrypts	100
Failed Decrypts	0
Total Time	391.78271ms
Throughput	255.24 requests/second

TDF3 Benchmark Results:

Metric	Value
Total Requests	5000
Successful Requests	5000
Failed Requests	0
Concurrent Requests	50
Total Time	42.305403666s
Average Latency	421.075221ms
Throughput	118.19 requests/second

NANOTDF Benchmark Results:

Metric	Value
Total Requests	5000
Successful Requests	5000
Failed Requests	0
Concurrent Requests	50
Total Time	30.472352337s
Average Latency	303.549838ms
Throughput	164.08 requests/second

github-actions · 2026-09-14T21:09:05Z

X-Test Failure Report

server-logs-java@main-pull-4036
opentdf~~platform~~JXQKB8.dockerbuild
✅ go@main-v0.9.0
✅ js@main-v0.9.0
❌ js@main-pull-4036
bats-test-results
server-logs-js@main-pull-4036
✅ java@main-v0.9.0
cukes-report
server-logs-go@main-pull-4036

github-actions · 2026-09-14T21:20:58Z

X-Test Failure Report

❌ js@main-pull-4036
server-logs-js@main-pull-4036
server-logs-go@main-pull-4036
govulncheck-failure-7
server-logs-java@main-pull-4036
server-logs-java@main-pull-4036
govulncheck-failure-2
opentdf~~platform~~JXQKB8.dockerbuild
✅ go@main-v0.9.0
✅ js@main-v0.9.0
❌ js@main-pull-4036
bats-test-results
server-logs-js@main-pull-4036
✅ java@main-v0.9.0
cukes-report
server-logs-go@main-pull-4036

github-actions · 2026-09-15T19:12:00Z

Benchmark results, click to expand

Benchmark authorization.GetDecisions Results:

Metric	Value
Approved Decision Requests	1000
Denied Decision Requests	0
Total Time	187.721328ms

Benchmark authorization.v2.GetMultiResourceDecision Results:

Metric	Value
Approved Decision Requests	1000
Denied Decision Requests	0
Total Time	112.600665ms

Benchmark Statistics

Name	№ Requests	Avg Duration	Min Duration	Max Duration

Bulk Benchmark Results

Metric	Value
Total Decrypts	100
Successful Decrypts	100
Failed Decrypts	0
Total Time	394.64958ms
Throughput	253.39 requests/second

TDF3 Benchmark Results:

Metric	Value
Total Requests	5000
Successful Requests	5000
Failed Requests	0
Concurrent Requests	50
Total Time	39.941901671s
Average Latency	397.649576ms
Throughput	125.18 requests/second

NANOTDF Benchmark Results:

Metric	Value
Total Requests	5000
Successful Requests	5000
Failed Requests	0
Concurrent Requests	50
Total Time	28.968044058s
Average Latency	288.910881ms
Throughput	172.60 requests/second

github-actions · 2026-09-15T19:17:01Z

X-Test Failure Report

govulncheck-failure-2
opentdf~~platform~~WZFHMA.dockerbuild
bats-test-results
cukes-report
✅ js@main-v0.9.0
server-logs-go@main-pull-4036
govulncheck-failure-7
server-logs-java@main-pull-4036
server-logs-js@main-pull-4036
✅ java@main-v0.9.0
❌ js@main-pull-4036

github-actions · 2026-09-15T19:20:15Z

Benchmark results, click to expand

Benchmark authorization.GetDecisions Results:

Metric	Value
Approved Decision Requests	1000
Denied Decision Requests	0
Total Time	90.182028ms

Benchmark authorization.v2.GetMultiResourceDecision Results:

Metric	Value
Approved Decision Requests	1000
Denied Decision Requests	0
Total Time	48.855076ms

Benchmark Statistics

Name	№ Requests	Avg Duration	Min Duration	Max Duration

Bulk Benchmark Results

Metric	Value
Total Decrypts	100
Successful Decrypts	100
Failed Decrypts	0
Total Time	207.659158ms
Throughput	481.56 requests/second

TDF3 Benchmark Results:

Metric	Value
Total Requests	5000
Successful Requests	5000
Failed Requests	0
Concurrent Requests	50
Total Time	21.413368281s
Average Latency	213.315891ms
Throughput	233.50 requests/second

NANOTDF Benchmark Results:

Metric	Value
Total Requests	5000
Successful Requests	5000
Failed Requests	0
Concurrent Requests	50
Total Time	15.203959002s
Average Latency	151.523623ms
Throughput	328.86 requests/second

github-actions · 2026-09-15T19:30:26Z

X-Test Failure Report

✅ java@main-v0.9.0
❌ js@main-pull-4036
bats-test-results
✅ go@main-v0.9.0
✅ js@main-v0.9.0
server-logs-java@main-pull-4036
govulncheck-failure-2
server-logs-go@main-pull-4036
govulncheck-failure-7
opentdf~~platform~~HZ9JXN.dockerbuild
server-logs-js@main-pull-4036
cukes-report

github-actions · 2026-09-15T19:37:33Z

Benchmark results, click to expand

Benchmark authorization.GetDecisions Results:

Metric	Value
Approved Decision Requests	1000
Denied Decision Requests	0
Total Time	187.999565ms

Benchmark authorization.v2.GetMultiResourceDecision Results:

Metric	Value
Approved Decision Requests	1000
Denied Decision Requests	0
Total Time	99.043911ms

Benchmark Statistics

Name	№ Requests	Avg Duration	Min Duration	Max Duration

Bulk Benchmark Results

Metric	Value
Total Decrypts	100
Successful Decrypts	100
Failed Decrypts	0
Total Time	406.387363ms
Throughput	246.07 requests/second

TDF3 Benchmark Results:

Metric	Value
Total Requests	5000
Successful Requests	5000
Failed Requests	0
Concurrent Requests	50
Total Time	40.66971116s
Average Latency	404.616898ms
Throughput	122.94 requests/second

NANOTDF Benchmark Results:

Metric	Value
Total Requests	5000
Successful Requests	5000
Failed Requests	0
Concurrent Requests	50
Total Time	28.633458795s
Average Latency	285.502991ms
Throughput	174.62 requests/second

github-actions · 2026-09-15T19:39:36Z

X-Test Failure Report

bats-test-results
cukes-report
opentdf~~platform~~ID6WFO.dockerbuild
server-logs-java@main-pull-4036
server-logs-js@main-pull-4036
❌ js@main-pull-4036
server-logs-go@main-pull-4036
✅ java@main-v0.9.0
govulncheck-failure-7
✅ js@main-v0.9.0
✅ go@main-v0.9.0
govulncheck-failure-2

github-actions · 2026-09-15T20:34:19Z

Benchmark results, click to expand

Benchmark authorization.GetDecisions Results:

Metric	Value
Approved Decision Requests	1000
Denied Decision Requests	0
Total Time	201.476138ms

Benchmark authorization.v2.GetMultiResourceDecision Results:

Metric	Value
Approved Decision Requests	1000
Denied Decision Requests	0
Total Time	112.494052ms

Benchmark Statistics

Name	№ Requests	Avg Duration	Min Duration	Max Duration

Bulk Benchmark Results

Metric	Value
Total Decrypts	100
Successful Decrypts	100
Failed Decrypts	0
Total Time	411.071188ms
Throughput	243.27 requests/second

TDF3 Benchmark Results:

Metric	Value
Total Requests	5000
Successful Requests	5000
Failed Requests	0
Concurrent Requests	50
Total Time	42.535951414s
Average Latency	422.689108ms
Throughput	117.55 requests/second

NANOTDF Benchmark Results:

Metric	Value
Total Requests	5000
Successful Requests	5000
Failed Requests	0
Concurrent Requests	50
Total Time	29.756693216s
Average Latency	296.593858ms
Throughput	168.03 requests/second

github-actions · 2026-09-15T20:41:43Z

X-Test Failure Report

✅ go@main-v0.9.0
server-logs-java@main-pull-4036
govulncheck-failure-7
cukes-report
❌ js@main-pull-4036
bats-test-results
server-logs-go@main-pull-4036
✅ java@main-v0.9.0
✅ js@main-v0.9.0
server-logs-js@main-pull-4036
govulncheck-failure-2
opentdf~~platform~~LBS4IL.dockerbuild

github-actions · 2026-09-15T20:55:40Z

⚠️ Govulncheck found vulnerabilities ⚠️

The following modules have known vulnerabilities:

service
tests-bdd

See the workflow run for details.

github-actions · 2026-09-15T20:55:53Z

Benchmark results, click to expand

Benchmark authorization.GetDecisions Results:

Metric	Value
Approved Decision Requests	1000
Denied Decision Requests	0
Total Time	188.452839ms

Benchmark authorization.v2.GetMultiResourceDecision Results:

Metric	Value
Approved Decision Requests	1000
Denied Decision Requests	0
Total Time	116.082743ms

Benchmark Statistics

Name	№ Requests	Avg Duration	Min Duration	Max Duration

Bulk Benchmark Results

Metric	Value
Total Decrypts	100
Successful Decrypts	100
Failed Decrypts	0
Total Time	383.104231ms
Throughput	261.03 requests/second

TDF3 Benchmark Results:

Metric	Value
Total Requests	5000
Successful Requests	5000
Failed Requests	0
Concurrent Requests	50
Total Time	41.372642954s
Average Latency	411.335533ms
Throughput	120.85 requests/second

NANOTDF Benchmark Results:

Metric	Value
Total Requests	5000
Successful Requests	5000
Failed Requests	0
Concurrent Requests	50
Total Time	29.41347699s
Average Latency	293.117777ms
Throughput	169.99 requests/second

github-actions · 2026-09-15T21:01:41Z

X-Test Failure Report

server-logs-java@main-pull-4036
✅ java@main-v0.9.0
❌ js@main-pull-4036
✅ js@main-v0.9.0
cukes-report
govulncheck-failure-2
bats-test-results
server-logs-js@main-pull-4036
✅ go@main-v0.9.0
govulncheck-failure-7
opentdf~~platform~~UTCIKF.dockerbuild
server-logs-go@main-pull-4036

opentdf-automation Bot mentioned this pull request Sep 10, 2026

fix(core): prevent OpenTelemetry resource schema conflicts #3769

Merged

BACKPORT-CONFLICT

49d5fe3

opentdf-automation Bot force-pushed the backport-3769-to-release/service/v0.11 branch from 2ad146e to 49d5fe3 Compare September 10, 2026 20:36

github-actions Bot added the size/m label Sep 10, 2026

fix(core): resolve OpenTelemetry backport conflicts

3cffcd3

Signed-off-by: jakedoublev <jake.vanvorhis@virtru.com>

fix(core): update vulnerable runtime dependencies

8bbcaf5

fix(core): update grpc security patch

1fde84b

dependabot Bot and others added 2 commits September 10, 2026 15:25

jakedoublev added 2 commits September 14, 2026 10:49

fix(ci): ignore pre-existing lint findings in backport

ccd4745

fix(core): update tests-bdd security dependencies

4740551

fix(core): update vulnerable tests-bdd containerd

ae463f8

fix(core): update vulnerable Go dependencies

4bf4314

elizabethhealy added 2 commits September 14, 2026 12:32

fix(core): update vulnerable containerd dependency

6e11ae4

fix(core): backport Testcontainers dependency update

680b0bd

fix(core): patch go-archive dependency

6627400

fix(core): patch BuildKit dependencies

e6c7989

fix(core): adapt Testcontainers port APIs

f02a075

fix(core): tidy service container dependencies

d2d90f9

Uh oh!

Conversation

opentdf-automation Bot commented Sep 10, 2026 • edited by jakedoublev Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Description

Backport adjustments

Known remaining CI issue

Uh oh!

opentdf-automation Bot commented Sep 10, 2026

Uh oh!

coderabbitai Bot commented Sep 10, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Review skipped

Uh oh!

github-actions Bot commented Sep 10, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Dependency Review

Uh oh!

github-actions Bot commented Sep 10, 2026

X-Test Failure Report

Uh oh!

github-actions Bot commented Sep 10, 2026

X-Test Failure Report

Uh oh!

github-actions Bot commented Sep 10, 2026

Benchmark authorization.GetDecisions Results:

Benchmark authorization.v2.GetMultiResourceDecision Results:

Benchmark Statistics

Bulk Benchmark Results

TDF3 Benchmark Results:

NANOTDF Benchmark Results:

Uh oh!

github-actions Bot commented Sep 10, 2026

X-Test Failure Report

Uh oh!

github-actions Bot commented Sep 10, 2026

Benchmark authorization.GetDecisions Results:

Benchmark authorization.v2.GetMultiResourceDecision Results:

Benchmark Statistics

Bulk Benchmark Results

TDF3 Benchmark Results:

NANOTDF Benchmark Results:

Uh oh!

github-actions Bot commented Sep 10, 2026

X-Test Failure Report

Uh oh!

github-actions Bot commented Sep 10, 2026

Benchmark authorization.GetDecisions Results:

Benchmark authorization.v2.GetMultiResourceDecision Results:

Benchmark Statistics

Bulk Benchmark Results

TDF3 Benchmark Results:

NANOTDF Benchmark Results:

Uh oh!

github-actions Bot commented Sep 10, 2026

X-Test Failure Report

Uh oh!

github-actions Bot commented Sep 10, 2026

Benchmark authorization.GetDecisions Results:

Benchmark authorization.v2.GetMultiResourceDecision Results:

Benchmark Statistics

Bulk Benchmark Results

TDF3 Benchmark Results:

NANOTDF Benchmark Results:

Uh oh!

github-actions Bot commented Sep 10, 2026

X-Test Failure Report

Uh oh!

github-actions Bot commented Sep 14, 2026

Benchmark authorization.GetDecisions Results:

Benchmark authorization.v2.GetMultiResourceDecision Results:

Benchmark Statistics

Bulk Benchmark Results

TDF3 Benchmark Results:

NANOTDF Benchmark Results:

Uh oh!

github-actions Bot commented Sep 14, 2026

X-Test Failure Report

Uh oh!

github-actions Bot commented Sep 14, 2026

opentdf-automation Bot commented Sep 10, 2026 •

edited by jakedoublev

Loading

coderabbitai Bot commented Sep 10, 2026 •

edited

Loading

github-actions Bot commented Sep 10, 2026 •

edited

Loading