# OpenFGA v1.22.0

> Security · 2026-10-06

A feature and maintenance release adds MySQL read-replica support, updates dependencies, and raises the minimum Go version. It also corrects SQL timestamp reporting and includes a gRPC update for `GO-2026-6443`.

## Action needed
- **[security · high]** The `google.golang.org/grpc` dependency update for `GO-2026-6443`
  - The `google.golang.org/grpc` dependency was updated to `v1.83.2` to resolve `GO-2026-6443`.

## Check if affected
- **[breaking]** The `mysql.NewWithDB` secondary database parameter
  - Applies if you use `mysql.NewWithDB`.
  - `mysql.NewWithDB` now requires a `secondaryDB *sql.DB` parameter. Pass `nil` when no replica is configured.
- **[breaking]** The `sqlcommon` authorization model functions
  - Applies if you use `sqlcommon.ReadAuthorizationModel` or `sqlcommon.FindLatestAuthorizationModel`.
  - `sqlcommon.ReadAuthorizationModel` and `sqlcommon.FindLatestAuthorizationModel` were removed from the shared package and moved to per-backend implementations.
- **[breaking]** The minimum Go version, raised to `1.26.0`
  - Applies if you do not depend on `go`.
  - The minimum Go version is now `1.26.0`, alongside dependency updates.

## Other recorded changes
- 5 (value_changed 3, added 1, defect_corrected 1)

[Full analysis](https://ratatosk.io/en/releases/openfga/v1.22.0)

[Original release notes](https://github.com/openfga/openfga/releases/tag/v1.22.0)