RATATOSKRATATOSK
Sign in

OpenFGA

v1.22.0Security
Oct 6, 2026

ACTION 1CHECK 3OTHER 5

A feature and maintenance release adds MySQL read-replica support, updates dependencies, and raises the minimum Go version. It also corrects SQL timestamp reporting and includes a gRPC update for `GO-2026-6443`.

Action needed (1)

  • securityhighThe google.golang.org/grpc dependency update for GO-2026-6443

    The google.golang.org/grpc dependency was updated to v1.83.2 to resolve GO-2026-6443.

    GO-2026-6443openfga#3317

Check if affected (3)

  • breakingThe mysql.NewWithDB secondary database parameter

    Applies if you use mysql.NewWithDB.

    mysql.NewWithDB now requires a secondaryDB *sql.DB parameter. Pass nil when no replica is configured.

  • breakingThe sqlcommon authorization model functions

    Applies if you use sqlcommon.ReadAuthorizationModel or sqlcommon.FindLatestAuthorizationModel.

    sqlcommon.ReadAuthorizationModel and sqlcommon.FindLatestAuthorizationModel were removed from the shared package and moved to per-backend implementations.

  • breakingThe minimum Go version, raised to 1.26.0

    Applies if you do not depend on go.

    The minimum Go version is now 1.26.0, alongside dependency updates.

    openfga#3329openfga#3328openfga#3324

All 5 other recorded changesvalue changes 3 · additions 1 · fixes 1

value changes (3)

  • * chore(deps): bump the dependencies group across 1 directory with 9 updates by @dependabot[bot] in https://github.com/openfga/openfga/pull/3324
  • * chore(deps): bump chainguard/static from f51c249 to fe55470 in the dependencies group by @dependabot[bot] in https://github.com/openfga/openfga/pull/3328
  • * chore(deps): bump the dependencies group across 1 directory with 19 updates by @dependabot[bot] in https://github.com/openfga/openfga/pull/3329

additions (1)

  • - Added read-replica (primary/secondary) support to the MySQL datastore backend, matching the existing PostgreSQL behaviour. Configure a secondary connection via --datastore-secondary-uri (or OPENFGA_DATASTORE_SECONDARY_URI); all reads except those requesting HIGHER_CONSISTENCY are routed to the replica while all writes remain on the primary.

fixes (1)

  • - ReadUserTuple now returns the tuple's timestamp for the Postgres, MySQL, and SQLite datastores; it previously returned a zero timestamp because the query did not select inserted_at. [#3194](https://github.com/openfga/openfga/pull/3194) Thanks [@nikolauspschuetz](https://github.com/nikolauspschuetz) for the contribution!
Add OpenFGA to your stack

A weekly email arrives when a release needs action. Like the security patches and breaking changes in this release.

Add to stack →
Official release note ↗All OpenFGA releases →