v0.268.0

0.268.0 (2026-10-28)

Features

• agent: ship an installable ofga agent skill (#184) (d7e644f)
• build: ship third-party license attribution and gate dependency licenses (#141) (0075851)
• cli: add -o jsonl (#178) (0c382ca)
• cli: add ofga commands, a machine-readable command catalog (#180) (2ee869f)
• cli: agent mode (#179) (2736aff)
• cli: machine-readable errors with stable codes (#177) (648914b)
• cli: publish JSON Schemas for command output (#183) (745ca4b)
• docs: search and read the OpenFGA docs from the CLI (#182) (f070294)
• mappings: an interactive workspace for writing mapping files (#166) (1ffd90c)
• mappings: validate, test and apply mapper files (#165) (7a6c9ce)
• query: read batch checks and contextual tuples from a file (#181) (a624eb8)

Bug fixes

• agent: normalize docs snippets and hint --dir without a home directory (#188) (335676b)
• assertions: print an empty result document when there are no assertions to test (#193) (568a80c)
• cli: hide the password in an API URL in profiles output and the mappings resume hint (#194) (2bc0a11)
• deps: bump x/crypto and moby/go-archive to clear govulncheck (#136) (4dca1b7)
• deps: bump x/net to v0.62.0 to clear govulncheck (#199) (f43b929)
• deps: require go 1.27.2 and bump x/net to clear govulncheck (#153) (b878a8d)
• deps: require go 1.27.3 to clear govulncheck (#169) (344c85e)
• keep agent-mode and machine-output contracts for playground, config warnings and mappings apply (#198) (c65928e)
• mappings: name the interactive workspace in the missing-file hint and tag it not_found (#195) (c3526d5)
• mappings: polish from a QC pass over the commands, TUI and guide (#175) (11ad7fc)
• modeltest: strip hidden controls from GitHub annotations (#163) (efdf69f)
• playground: keep typing in place across query-form rebuilds (#164) (b159530)
• profiles: hide header values in list and show output (#187) (d2833a7)
• tuples: blame only the tuple a bulk write rejected (#176) (58eb9a2)
• validate user references and let the last --config win (#190) (2d1cc10)

Refactors

• cmdmeta: share each enum list with its validation (#189) (467429f)

Tests

• client: check the store iterator's error in the capture tests (#170) (51c6f4b)
• cover agent-mode refusal, cancellation and empty machine output (#191) (7993cf4)
• e2e: remove the shared ofga build dir after the package's tests (#192) (daee4a7)

Documentation

• agent: cover mapping files in the agent skill and treat command output as data (#196) (e9c785f)
• fix stale flag, exit-code and docs-search notes and widen the trademark disclaimer (#197) (1462245)
• mappings: a guide to syncing events into tuples (#167) (51b35e3)

Build

• generate THIRD_PARTY_LICENSES at release time instead of committing it (#157) (d691ad9)

Changelog

• e61239d chore(main): release 0.268.0 (#137)
• f43b929 fix(deps): bump x/net to v0.62.0 to clear govulncheck (#199)
• c65928e fix: keep agent-mode and machine-output contracts for playground, config warnings and mappings apply (#198)
• 1462245 docs: fix stale flag, exit-code and docs-search notes and widen the trademark disclaimer (#197)
• e9c785f docs(agent): cover mapping files in the agent skill and treat command output as data (#196)
• 2bc0a11 fix(cli): hide the password in an API URL in profiles output and the mappings resume hint (#194)
• 568a80c fix(assertions): print an empty result document when there are no assertions to test (#193)
• c3526d5 fix(mappings): name the interactive workspace in the missing-file hint and tag it not_found (#195)
• cc870c2 chore(deps): update go modules (#185)
• 5ba323d chore(deps): update dependency node to v26 (#186)
• daee4a7 test(e2e): remove the shared ofga build dir after the package's tests (#192)
• 7993cf4 test: cover agent-mode refusal, cancellation and empty machine output (#191)
• 2d1cc10 fix: validate user references and let the last --config win (#190)
• 467429f refactor(cmdmeta): share each enum list with its validation (#189)
• 335676b fix(agent): normalize docs snippets and hint --dir without a home directory (#188)
• d2833a7 fix(profiles): hide header values in list and show output (#187)
• d7e644f feat(agent): ship an installable ofga agent skill (#184)
• 745ca4b feat(cli): publish JSON Schemas for command output (#183)
• f070294 feat(docs): search and read the OpenFGA docs from the CLI (#182)
• a624eb8 feat(query): read batch checks and contextual tuples from a file (#181)
• 2ee869f feat(cli): add ofga commands, a machine-readable command catalog (#180)
• 2736aff feat(cli): agent mode (#179)
• 0c382ca feat(cli): add -o jsonl (#178)
• 648914b feat(cli): machine-readable errors with stable codes (#177)
• 58eb9a2 fix(tuples): blame only the tuple a bulk write rejected (#176)
• 11ad7fc fix(mappings): polish from a QC pass over the commands, TUI and guide (#175)
• 417f2aa chore(deps): lock file maintenance (#174)
• 51b35e3 docs(mappings): a guide to syncing events into tuples (#167)
• 1ffd90c feat(mappings): an interactive workspace for writing mapping files (#166)
• 7a6c9ce feat(mappings): validate, test and apply mapper files (#165)
• b159530 fix(playground): keep typing in place across query-form rebuilds (#164)
• efdf69f fix(modeltest): strip hidden controls from GitHub annotations (#163)
• 75bdc33 chore(deps): update dependency goreleaser/goreleaser to v2.19.0 (#173)
• dc09669 chore(deps): update dependency golangci/golangci-lint to v2.15.0 (#172)
• cd132e4 chore(deps): update alpine docker tag to v3.24.3 (#168)
• a1db1fb chore(deps): update dependency anchore/syft to v1.55.0 (#171)
• 62c693a chore(deps): update github-actions (#162)
• d6993bb chore(deps): lock file maintenance (#161)
• 32c1301 chore(deps): update docs site npm (#159)
• 3cf65a7 chore(deps): update go modules (#158)
• 51c6f4b test(client): check the store iterator's error in the capture tests (#170)
• 344c85e fix(deps): require go 1.27.3 to clear govulncheck (#169)
• e828c16 chore(deps): update module golang.org/x/vuln to v1.9.0 (#160)
• d691ad9 build: generate THIRD_PARTY_LICENSES at release time instead of committing it (#157)
• ec61314 chore(deps): update go modules (#156)
• b09341b chore(deps): update docs site npm (#155)
• e364009 chore(deps): update alpine docker tag to v3.24.2 (#154)
• f5dcfb6 chore(deps): update dependency goreleaser/goreleaser to v2.18.3 (#150)
• c180e2d chore(deps): update github.com/openfga/api/proto digest to c0650ce (#152)
• b878a8d fix(deps): require go 1.27.2 and bump x/net to clear govulncheck (#153)
• 44a98a7 chore(deps): update dependency anchore/syft to v1.54.1 (#151)
• efd72e8 chore(deps): update github-actions (#148)
• 356ed1d chore(deps): lock file maintenance (#147)
• d1a39d8 chore(deps): lock file maintenance (#146)
• aaf12cf chore(deps): update module golang.org/x/vuln to v1.8.0 (#145)
• 634e5c2 chore(deps): update dependency goreleaser/goreleaser to v2.18.1 (#143)
• cf8b8f2 chore(ci): group docs-site npm updates into one renovate PR (#144)
• 07a5113 chore(deps): update dependency @astrojs/starlight to ^0.42.0 (#142)
• 0075851 feat(build): ship third-party license attribution and gate dependency licenses (#141)
• 279cf29 chore: require go 1.27.1 (#140)
• 5b9fb94 chore(deps): update github.com/openfga/api/proto digest to 7a79d2a (#138)
• feadca3 chore(deps): update dependency anchore/syft to v1.51.1 (#139)
• ecb3eb0 chore(deps): update github.com/openfga/language/pkg/go digest to 31286a8 (#135)
• 66aea3f chore(deps): update go modules (#131)
• cb33e20 chore(deps): lock file maintenance (#129)
• f19edf5 chore(deps): update github-actions (#132)
• b8973bb chore(deps): update dependency golangci/golangci-lint to v2.13.2 (#133)
• 4dca1b7 fix(deps): bump x/crypto and moby/go-archive to clear govulncheck (#136)
• f6dbae0 chore(deps): update module golang.org/x/vuln to v1.7.0 (#128)
• 783bd73 chore(deps): update dependency anchore/syft to v1.51.0 (#126)
• 9e3c173 chore(deps): update github/codeql-action action to v4.37.7 (#125)
• e21c5d9 chore(deps): lock file maintenance (#124)
• edd2a75 chore(deps): update dependency astro to v7.2.1 (#123)
• 559f5da chore: bump the Go directive to 1.26.6 to clear stdlib advisories (#127)
• 28ba9ac chore(deps): update go modules (#121)
• c182f8b chore(deps): update github.com/openfga/language/pkg/go digest to 7a991c4 (#120)
• c5db63f chore(deps): update dependency @astrojs/starlight to v0.41.7 (#122)
• 7e0a39c chore(deps): update github-actions (#118)
• 8cde812 chore(deps): update go modules (#119)
• 93bbfcc ci: validate the goreleaser config on every PR (#117)
• ad24fc0 ci: migrate the Homebrew tap from a formula to a cask (#116)
• 3eac251 ci: migrate dockers/docker_manifests to dockers_v2 (#115)
• 1ef521e ci: attest release artifacts even when a late publisher fails (#114)