RATATOSKRATATOSK
Sign in

OpenFGA

v1.19.0Security
Aug 25, 2026

CHECK 1OTHER 18

A maintenance release with dependency updates, correctness fixes, logging changes, and an internal streaming optimization. Previously persisted malformed models now fail with `ErrInvalidModel` on a cache miss instead of running degraded.

Check if affected (1)

  • breakingMalformed RelationReference models rejected on cache miss

    Applicability is not stated in the release notes.

    Previously persisted malformed RelationReference models fail to resolve on a cache miss with ErrInvalidModel instead of silently running degraded. This breaking behavior ships in the release.

All 18 other recorded changesvalue changes 10 · fixes 6 · additions 1 · removals 1

value changes (10)

  • * chore(deps): bump the dependencies group across 1 directory with 5 updates by @dependabot[bot] in https://github.com/openfga/openfga/pull/3229
  • * chore(deps): bump the dependencies group across 1 directory with 6 updates by @dependabot[bot] in https://github.com/openfga/openfga/pull/3243
  • * chore(deps): bump the dependencies group across 1 directory with 2 updates by @dependabot[bot] in https://github.com/openfga/openfga/pull/3251
  • * chore(deps): bump the dependencies group with 8 updates by @dependabot[bot] in https://github.com/openfga/openfga/pull/3252
  • * chore(deps): bump the dependencies group with 2 updates by @dependabot[bot] in https://github.com/openfga/openfga/pull/3260
  • * chore(deps): bump the dependencies group with 3 updates by @dependabot[bot] in https://github.com/openfga/openfga/pull/3261
  • * chore(deps): bump the dependencies group across 1 directory with 5 updates by @dependabot[bot] in https://github.com/openfga/openfga/pull/3253
  • * chore(deps): bump the dependencies group with 3 updates by @dependabot[bot] in https://github.com/openfga/openfga/pull/3269
  • * chore(deps): bump the dependencies group with 4 updates by @dependabot[bot] in https://github.com/openfga/openfga/pull/3270
  • * chore(deps): bump grpc-ecosystem/grpc-health-probe from v0.4.55 to v0.4.56 in the dependencies group by @dependabot[bot] in https://github.com/openfga/openfga/pull/3268

fixes (6)

  • * fix: scope context-cancelation stripping to query execution only by @senojj in https://github.com/openfga/openfga/pull/3255
  • * fix: update potential resolution changes logs to only log on InfoLevel by @Vic-Dev in https://github.com/openfga/openfga/pull/3254
  • * fix(typesystem): prevent panic on malformed RelationReference by @adriantam in https://github.com/openfga/openfga/pull/3262
  • Fixed validation-ordering defect where malformed RelationReference (relation_or_wildcard oneof set but yielding neither wildcard nor non-empty relation) panicked WriteAuthorizationModel.
  • Scope context-cancelation stripping to query execution only. No longer can deadlock on saturated connection pool.
  • Updated v2 resolution diagnostic logging in Check and ListUsers to gate on InfoLevel log level.

additions (1)

  • * feature: create a new "difference direct subtract" worker that can stream its results by @senojj in https://github.com/openfga/openfga/pull/3267

removals (1)

  • Removed diagnostic logging from Expand whose resolution will not change.
Add OpenFGA to your stack

A weekly email arrives when a release needs action. Like the breaking changes in this release.

Add to stack →
Official release note ↗All OpenFGA releases →