OpenFGA Files

Added

• Add check_count grpc tag to list objects requests. #2515
• Promote the Check fast path v2 implementations to no longer being behind the enable-check-optimizations config flag. #2609

Changed

• Change ListObjectsResolutionMetadata fields to value types instead of pointers. #2583
• Instead of panic when encountering unknown parameters in hasEntrypoints, return internal error to allow graceful handling. #2588
• Shared iterators now rely entirely on a TTL for eviction from the pool. #2590
• Update go toolchain version to 1.24.6 - related: CVE-2025-47907
• Revert min supported go version to 1.24.0
• Bump the base docker image to cgr.dev/chainguard/static@sha256:6a4b683f4708f1f167ba218e31fcac0b7515d94c33c3acf223c36d5c6acd3783

Fixed

• Fixed bug in how experimental ReverseExpand is handling duplicate TTUs. #2589
• Fixed bug in how experimental ReverseExpand is handling duplicate edge traversals. #2594
• Fixed logs in ListObjects weighted graph to include store_id and authorization_model_id through the context. #2581
• Fixed bug where OpenFGA fail to start when both secondary DB and db metrics enabled. #2598

Security

• Bumped up the grpc-health-probe dependency in the published Docker image to the latest release (v0.4.39) which fixes some vulnerabilities. #2601

Full Changelog

• change ListObjectsResolutionMetadata fields from pointers to value types by @senojj in https://github.com/openfga/openfga/pull/2583
• fix: removes isDuplicateQuery check from reverse_expand_weighted by @justincoh in https://github.com/openfga/openfga/pull/2587
• fix: graceful handling of unknown rewrite type in hasEntrypoints by @adriantam in https://github.com/openfga/openfga/pull/2588
• fix: ListObjects weighted graph duplicate TTU bug by @Vic-Dev in https://github.com/openfga/openfga/pull/2589
• chore: add main query count to shadow list objects logging by @justincoh in https://github.com/openfga/openfga/pull/2591
• fix: make weighted reverse expand less aggressive in deduping by @justincoh in https://github.com/openfga/openfga/pull/2594
• chore(ci): categorize snyk sarif file to allow upload to GH code scanning by @rhamzeh in https://github.com/openfga/openfga/pull/2595
• feat: ListObjects check count grpc tag by @Vic-Dev in https://github.com/openfga/openfga/pull/2515
• fix: add store_id and authorization_model_id to the LO logs by @Vic-Dev in https://github.com/openfga/openfga/pull/2581
• chore(deps): bump github.com/docker/docker from 28.2.2+incompatible to 28.3.3+incompatible by @dependabot[bot] in https://github.com/openfga/openfga/pull/2592
• fix: fails to start when using secondary db with db metrics enabled by @adriantam in https://github.com/openfga/openfga/pull/2598
• chore: bump grpc_health_probe by @rhamzeh in https://github.com/openfga/openfga/pull/2601
• chore: dependencies update by @adriantam in https://github.com/openfga/openfga/pull/2604
• fix: flaky unit test for should_recover_from_panic by @adriantam in https://github.com/openfga/openfga/pull/2605
• fix(test): flaky TestIteratorToUserset by @adriantam in https://github.com/openfga/openfga/pull/2607
• fix: support tuple iterator cache in integration tests by @senojj in https://github.com/openfga/openfga/pull/2608
• chore: specify github-native as changelog generation to use by @Vic-Dev in https://github.com/openfga/openfga/pull/2610
• perf: shared iterators with timed eviction by @senojj in https://github.com/openfga/openfga/pull/2590
• chore: temporarily ignore test tags for testing by @Vic-Dev in https://github.com/openfga/openfga/pull/2611
• chore: script for creating release PRs by @Vic-Dev in https://github.com/openfga/openfga/pull/2603
• chore: updating SECURITY-INSIGHTS by @aaguiarz in https://github.com/openfga/openfga/pull/2612
• set benchtime to default 1s by @justincoh in https://github.com/openfga/openfga/pull/2586
• remove fast path v1 code and promote v2 by @elbuo8 in https://github.com/openfga/openfga/pull/2609
• Delete SECURITY-INSIGHTS v1.0.0 by @aaguiarz in https://github.com/openfga/openfga/pull/2623
• split resolvers into separate files by @elbuo8 in https://github.com/openfga/openfga/pull/2622
• chore(ci): remove semgrep workflow by @rhamzeh in https://github.com/openfga/openfga/pull/2625
• chore: bump go for build to g@1.24.6, bump chaingaurd static image by @rhamzeh in https://github.com/openfga/openfga/pull/2627
• chore: add workflow that generates a release tag by @Vic-Dev in https://github.com/openfga/openfga/pull/2613
• release: update changelog for release v1.9.3 by @Vic-Dev in https://github.com/openfga/openfga/pull/2630

Source: https://github.com/openfga/openfga/compare/v1.9.2...v1.9.3