All pull requests

Pull requests

• feat(sdk): add AesGcmEncryptor to CryptoService (DSPX-4496)

  #1063·dmihalcik-virtru opened Oct 6, 2026Member·

  ·
  3

• feat(sdk): default encrypt segment size to 2 MiB (DSPX-4496)

  #1062·dmihalcik-virtru opened Oct 6, 2026Member·

  ·
  3

• refactor(sdk): calculate encrypted segment size instead of measuring it (DSPX-4496)

  #1061·dmihalcik-virtru opened Oct 6, 2026Member·

  ·
  3

• fix(sdk): require 12-byte AES-GCM IVs (DSPX-4496)

  #1060·dmihalcik-virtru opened Oct 6, 2026Member·

  ·
  3

• fix(sdk): reject non-positive segment sizes in writeStream (DSPX-4496)

  #1059·dmihalcik-virtru opened Oct 6, 2026Member·

  ·
  3

• feat(sdk): keep the KAS's reason on PermissionDeniedError

  #1058·mmaudet opened Oct 1, 2026·

  ·
  1

  1

• chore(ci): bump github/codeql-action/analyze from 4.32.6 to 4.38.2

  dependenciesgithub_actions
  #1057·dependabot[bot] opened Oct 1, 2026Bot·

  ·
  2

• chore(ci): bump SonarSource/sonarqube-scan-action from 5.3.1 to 8.2.2

  dependenciesgithub_actions
  #1056·dependabot[bot] opened Oct 1, 2026Bot·

  ·
  2

• chore(ci): bump stefanzweifel/git-auto-commit-action from 5.1.0 to 7.2.0

  dependenciesgithub_actions
  #1055·dependabot[bot] opened Oct 1, 2026Bot·

  ·
  2

• fix(sdk): read the TDF spec version from all three places

  #1054·pflynn-virtru opened Sep 30, 2026Member·

  ·
  6

• chore(main): release sdk 0.22.0

  autorelease: pending
  #1053·opentdf-automation[bot] opened Sep 30, 2026Bot·

  ·
  8

• fix(sdk): configured assertion keys take precedence over JWS header keys

  #1052·pflynn-virtru opened Sep 30, 2026Member·

  ·
  5

• chore(sdk): bump ip-address from 10.5.0 to 10.7.2 in /lib

  dependenciesjavascript
  #1051·dependabot[bot] opened Sep 29, 2026Bot·

  ·
  2

• feat(sdk): wrap keys for hybrid ML-KEM + ECDH KAS keys

  #1049·mmaudet opened Sep 27, 2026·

  ·
  1

• fix(sdk): report a malformed manifest as an invalid file

  #1044·pflynn-virtru opened Sep 18, 2026Member·

  ·
  7

• fix(sdk)!: name the TDF manifest entry manifest.json per spec

  #1040·pflynn-virtru opened Sep 15, 2026Member·

  ·
  10

• chore(tests): failing repros for the #1031 review findings (DSPX-4703)

  #1039·pflynn-virtru opened Sep 14, 2026Member·

  ·
  1

• fix(sdk): stop toBuffer from masking a decrypt failure as a network error (DSPX-4703)

  #1035·dmihalcik-virtru opened Sep 11, 2026Member·

  ·
  3

• fix(sdk): validate the manifest at the read boundary (DSPX-4703)

  #1034·dmihalcik-virtru opened Sep 11, 2026Member·

  ·
  9

• chore(sdk): bump js-yaml from 3.15.1 to 3.15.2 in /lib

  dependenciesjavascript
  #1028·dependabot[bot] opened Sep 10, 2026Bot·

  ·
  4

• chore(sdk): bump baseline-browser-mapping from 2.9.19 to 2.11.25 in /lib

  dependenciesjavascript
  #1026·dependabot[bot] opened Sep 10, 2026Bot·

  ·
  3

• chore(cli): bump js-yaml from 4.3.1 to 4.3.2 in /cli

  dependenciesjavascript
  #1025·dependabot[bot] opened Sep 10, 2026Bot·

  ·
  4

• feat(sdk): make consumption-paced decrypt prefetch the default (DSPX-4654)

  #1024·dmihalcik-virtru opened Sep 9, 2026Member·

  ·
  12

• fix(sdk): stream remote encrypt sources and bound stream decrypt buffering (DSPX-4653)

  #1023·dmihalcik-virtru opened Sep 9, 2026Member·

  ·
  16

• feat(sdk): derive the encrypt byte ceiling instead of hardcoding 64 GB (DSPX-4652)

  #1022·dmihalcik-virtru opened Sep 9, 2026Member·

  ·
  12