dev (55a0521b1499b392c75373e11ec5930c6a43f0c7)

Development build from main branch.

Commit: 55a0521b1499b392c75373e11ec5930c6a43f0c7

sdk: v0.21.0

0.21.0 (2026-09-18)

Features

• ci: collect real-browser coverage for SonarCloud (DSPX-4556) (#1001) (55dfcfe)
• main: surface wrap and rewrap algorithm choice in web-app demo (DSPX-3229) (#1000) (2003ed6)
• sdk,cli: settable segment and root integrity algorithms (DSPX-4736) (#1030) (4d8c797)
• sdk: add ML-KEM key access objects (DSPX-3229) (#933) (9a26030)
• sdk: cache ListKeyAccessServers response during decryption (#999) (690d3cb)
• sdk: resolve attribute key splits via GetKeyMappingsByFqns during encrypt (#1002) (e6c580a)

Bug Fixes

• ci: make the build-and-test / ci gate fail closed (DSPX-4767) (#1041) (0719bf6)
• ci: scope down the build-and-test GITHUB_TOKEN (DSPX-4847) (#1043) (859bca6)
• cli: bump js-yaml from 4.2.0 to 4.3.1 in /cli (#981) (baae73b)
• sdk: allow the same KAS to wrap the same split (DSPX-3379) (#967) (fab82a2)
• sdk: bump js-yaml to 3.15.1/4.3.1 in lib to patch omap DoS (#979) (75b50e0)
• sdk: bump linkify-it from 5.0.1 to 5.0.2 in /lib (#972) (0d389f6)
• sdk: reject GMAC root signatures instead of trusting the manifest (DSPX-4703) (#1031) (1ed7b9a)

sdk: v0.20.0

0.20.0 (2026-07-08)

Bug Fixes

• ci: allow Go toolchain auto-download in platform-roundtrip (#966) (1606967)
• deps: resolve Dependabot alerts and clear npm audit (#965) (328c63c)
• sdk: bump uuid and nyc in /lib (#955) (e0201cd)
• sdk: bump uuid from 14.0.0 to 14.0.1 in /lib (#953) (acf26fd)
• sdk: Drops user_info check, does local exp check (#956) (d1c88fd)
• tdf3: remove TODO from customer-facing error message (#952) (19f8d53)

sdk: v0.19.0

0.19.0 (2026-06-23)

Bug Fixes

• ci: switch npm publish to OIDC trusted publishing (#950) (ecd41ec)
• cli: bump js-yaml from 4.1.1 to 4.2.0 in /cli (#943) (f9109bf)
• sdk: bump markdown-it from 14.1.1 to 14.2.0 in /lib (#944) (2dc4d91)
• sdk: bump qs and body-parser in /lib (#935) (a0ad0c2)

sdk: v0.18.0

0.18.0 (2026-06-17)

Bug Fixes

• ci: fix update-protos workflow failing on large generated files (#940) (04f3ae4)
• sdk: update proto bindings to protocol/go/v0.33.1 (#948) (19bed9d)

sdk: v0.17.0

0.17.0 (2026-04-28)

Features

• sdk: re-export policy enums from barrel for convenient imports (#928) (d43919c)

sdk: v0.16.0

0.16.0 (2026-04-23)

Bug Fixes

• sdk: bound browser decrypt memory for large chunker downloads (#922) (66aad4e)
• sdk: bump uuid from 13.0.0 to 14.0.0 in /lib (#923) (7c02e1f)

sdk: v0.15.0

0.15.0 (2026-04-22)

Features

• sdk: add ergonomic Resource constructors for authorization (#921) (a14b777)
• sdk: add segment batch size and max concurrent segment batches options (#920) (376c780)
• sdk: namespace EntityIdentifier helpers under EntityIdentifiers (#916) (d0ab115)

Bug Fixes

• ci: remove redundant npm install in dev-artifact workflow (#913) (015176c)

sdk: v0.14.0

0.14.0 (2026-04-09)

Features

• sdk: add EntityIdentifier convenience constructors (#911) (0bbe549)
• sdk: add TokenProvider factory functions for common OIDC flows (#906) (7627b1e)
• sdk: deprecate AuthProvider in favor of Interceptor pattern (#899) (1be800e)

Bug Fixes

• ci: allow main scope in PR title validation (#912) (14152c4)
• sdk: bump lodash from 4.17.23 to 4.18.1 in /lib (#909) (3f1799c)
• sdk: gate signingKey check on dpopEnabled in withCreds (#898) (74e350a)

sdk: v0.13.0

0.13.0 (2026-03-27)

Bug Fixes

• sdk: bump picomatch in /lib (#893) (29fb0be)
• sdk: Only use crypto service randomBytes where necessary (#889) (1818a74)