RATATOSKRATATOSK
Sign in

OpenFGA

v1.16.1Security
May 29, 2026

OpenFGA v1.16.1 is a bug-fix and security patch release, mainly hardening the experimental weighted_graph_check algorithm and updating grpc-health-probe for Go std lib CVEs.{}}}}} ,

Key changes (5)

  • CI workflow runs now cancel-in-progress via concurrency.group for PR workflows, cutting wasted CI runner time
  • Fixed weighted_graph_check incorrectly falling back to the standard algorithm on deadline/cancellation/throttle-timeout errors instead of returning them directly
  • Fixed weighted_graph_check emitting metrics under the wrong method label when run as the primary algorithm
  • Fixed a weight2 strategy bug in weighted_graph_check that could return false denies when contextual tuples were present, due to a broken sort assumption in the pruning optimization
  • Bumped grpc-health-probe to v0.4.50 to pick up Go std lib CVE fixes