chore(main): release 0.7.2

[opentdf-automation]

🤖 I have created a release beep boop

0.7.2

0.7.2 (2026-04-09)

⚠ BREAKING CHANGES

• sdk: remove NanoTDF implementation (#321)
• sdk: add base key and support for key grants in ZTDF (#271)
• sdk: better control which classes we expose (#254)
• sdk: expose method to build an http client (#256)
• sdk: switch to connect-rpc for GRPC (#244)
• sdk: DSPX-1037 update sdk api (#249)
• move to single jar (#160)

Features

• ability to set connect-rpc protocol (#285) (47041c5)
• Add assertion verification (#216) (e0f8caf)
• add code to create services for SDK (#35) (28513e6)
• Add initial Dependency Review configuration (#252) (ba11d49)
• add logging (#49) (9d20647)
• Add NanoTDF E2E Tests (#75) (84f9bd1)
• add system metadata assertion (#270) (d235f13)
• adds token exchange and general auth (#176) (bb325c4)
• BACK-2316 add a simple method to detect TDFs (#111) (bfbef70)
• build: maven refactor for maven central (#174) (c640773), closes #79
• ci: Add xtest workflow trigger (#96) (bc54b63)
• ci: DSPX-1716 Updating permission for bundled tests (#306) (87ff3e6)
• cmd: Adds command --mime-type opt (#113) (45a2c30)
• cmdline: Adds --ecdsa-binding and help (#164) (ed6e982)
• cmdline: assertions cli support (#204) (3325114)
• codegen: Generate and publish Java Proto generated artifacts (#2) (2328fd2)
• core: Add attributes client (#118) (98ba6a9)
• core: Add autoconfigure for key splitting (#120) (7ecbf23)
• core: Adding key cache, tests for specificity (#126) (a149887)
• core: Handle split keys on tdf3 encrypt and decrypt (#109) (943751f)
• core: KID in NanoTDF (#112) (33b5982)
• core: NanoTDF resource locator protocol bit mask (#107) (159d2f1)
• crypto API (#33) (b8295b7)
• Examples module (#202) (ac13a0a)
• expose AuthorizationService v2 (#287) (d1fd106)
• introduce the base key for nano flows (#273) (d337704)
• lib: add fallback to namespace kas (#166) (4368840)
• NanoTDF Implementation (#46) (6485326)
• PLAT-3087: zip reader-writer (#23) (3eeb626)
• SDK Encrypt (with mocked rewrap) (#45) (d67daa2)
• sdk: Add and expose tamper error types (#187) (b4f95e6)
• sdk: add base key and support for key grants in ZTDF (#271) (c3b79db)
• sdk: add CLI and integration tests (#64) (df20e6d)
• sdk: add EntityIdentifier convenience constructors (#346) (eeb8805)
• sdk: add mime type. (#108) (6c4a27b)
• sdk: add nanotdf plaintext policy (#259) (be9cd94)
• sdk: add ssl context (#58) (80246a9)
• sdk: adds Collections API (#212) (1ee1367)
• sdk: better control which classes we expose (#254) (e00eeaf)
• sdk: deserialize policy objects (#179) (39582f3)
• sdk: DSPX-1037 update sdk api (#249) (f2e1307)
• sdk: DSPX-2418 add discovery convenience methods (#339) (8de6068)
• sdk: EC-wrapped key support for ZTDF (#224) (d062691)
• sdk: enhance assertion verification to support jwk and x509 certificates (#322) (251fea2)
• sdk: expose base key (#323) (c370a46)
• sdk: expose GRPC auth service components (#92) (2595cc5)
• sdk: expose method to build an http client (#256) (2cac97c)
• sdk: expose SRT signer (#329) (f93d332)
• sdk: get e2e rewrap working (#52) (fe2c04b)
• sdk: Get the algorithm from the KASInfo and not the config (#272) (feff0e8)
• sdk: Issue #60 - expose SDK (#61) (ddef62a)
• sdk: KAS Allowlist (#245) (e48cdbd)
• sdk: provide access tokens dynamically to KAS (#51) (04ca715)
• sdk: switch to connect-rpc for GRPC (#244) (ff36a1d)
• sdk: the authorization service is needed for use by gateway (#85) (73cac82)
• sdk: update archive support (#47) (29a80a9)
• sdk: Update the assertion support to match go sdk (#117) (f9badb3)
• support key id in ztdf key access object (#84) (862460a)
• update README.md (#142) (198d335)

Bug Fixes

• add a default assertion id if one is not specified (#341) (69d6a53)
• Align identifier bytes correctly in ResourceLocator (#148) (2efe226)
• ci: Fix the workflow that updates the proto version (#301) (9bd9ce5)
• ci: Update codeql.yaml to run on all pull requests (#283) (9e318bb)
• ci: use dokka-maven-plugin instead of javadoc-maven-plugin (#262) (ab1e7b1)
• cmdline: Disable failing encryptnano ecdsa (#227) (80ca207)
• cmdline: Enable ec-wrapped cfg (#231) (ee39ed5)
• core: Add support for certs (#131) (2f98a3a)
• core: Revert "feat(core): Add attributes client" (#124) (3d1ef2b)
• Correct null assertions when deserializing (#211) (b075194)
• create AES-256 keys of the correct length with all curves (#282) (95c20b3)
• create TDFs larger than a single segment (#65) (e1da325)
• deal with the extra layer of hex (#236) (7e961c1)
• docs: DSPX-2409 replace SDK README code example with working code (#336) (0f224a6)
• examples: improve logging and setup logic in examples (#316) (2e5660c)
• fix pom for release please (#77) (3a3c357)
• Force BC provider use (#76) (1bc9dd9)
• get rid of duplicate channel logic (#59) (1edd666)
• GitHub packages snapshot repo (#178) (713cb2b)
• GPG key and Maven credentials in release workflow (#171) (864e9ce)
• if a version < 4.3.0 is specified create an old-style TDF (#234) (082a9e7)
• incorrect isStreamable serialized name (#210) (32825b0)
• Issue #115 - fix for SSL Context for IDP and plaintext platform (#116) (36a29df)
• main: make examples runnable (#311) (5ede7dd)
• make sure we do not deserialize null (#97) (9579c42)
• nano: Store key ids if found (#134) (94c672b)
• NanoTDF secure key from debug logging and iv conflict risk (#208) (6301d32)
• parse hostnames with no ports correctly (#292) (3da5f51)
• passpharse (#169) (8b3cbed)
• policy-binding new structure (#95) (b10a61e)
• sdk: add coverage (#258) (e6ad1bc)
• sdk: add methods to examine Manifest and Policy (#278) (03d5d41)
• sdk: allow SDK to handle protocols in addresses (#70) (97ae8ee)
• sdk: assertion support in tdf3 (#82) (c299dbd)
• sdk: deserialize object statement values correctly (#219) (c513e8c)
• sdk: Fixes nano ECDSA policy binding config (#225) (f3e9fed)
• sdk: Fuzz testing and protocol fixes (#214) (cf6f932)
• sdk: give a test framework test scope (#90) (b99de43)
• sdk: group splits with empty/missing split IDs together (#217) (0f47702)
• sdk: make sdk auto closeable (#63) (c1bbbb4)
• sdk: Mixed split fix (#163) (649dac7)
• sdk: option to disable assertion verification (#205) (78d7b66)
• sdk: parse the component sizes (#286) (3b1bb69)
• sdk: remove hex encoding (#213) (e076d11)
• sdk: remove NanoTDF implementation (#321) (63715d2)
• sdk: remove reserved and unused proto field (#299) (50b0302)
• sdk: Remove temporary ec salt value (#228) (0fe37c6)
• sdk: returns the correct string associated with enums (#200) (1dffd35)
• sdk: Set ec-wrapped to new salt value (#230) (d3be28e)
• sdk: Support kas keys with extended EC methods (#344) (982b287)
• sdk: Support RSA4096 Kas keys (#343) (dba9bbf)
• sdk: Update version information (#232) (f9eeb0d)
• sdk: Updates to proto version v0.16.0 (#308) (4660e27)
• sdk: upgrade the platform protocol code (#275) (90eaba1)
• sdk: uses offset for ByteBuffer array offset (#209) (0d6e761)
• Use reusable start-additional-kas workflow (#215) (cb6f757)
• we can't parse things like 192.168.1.1:4000 (#294) (dc3142d)
• ztdf support both base and handling assertions (#128) (5f72e94)

Documentation

• JavaDoc (#196) (33c9513)
• minor Java SDK README updates (#193) (e9dc738)
• sdk: Adds brief usage code sample (#26) (79215c7)

Miscellaneous Chores

• release 0.6.1 Release-As: 0.6.1 (#135) (09ec548)
• release 0.7.2 (#184) (ea6cf12)

Code Refactoring

• move to single jar (#160) (ba9b2d5)

---

This PR was generated with Release Please. See documentation.

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

[github-actions]

X-Test Results

✅ java-main
✅ java-v0.13.0
✅ js-main
✅ js-v0.13.0
✅ go-main
✅ go-v0.13.0

[marythought]

confirmed everything here has already been released