chore(main): release otdfctl 0.38.0

[opentdf-automation]

🤖 I have created a release beep boop

0.38.0 (2026-09-14)

Features

• cli: Unskip tests (#4042) (f093b43)

Bug Fixes

• cli: reject extra inspect args and add stdin BATS coverage (#4014) (b3a0c9c)
• cli: stream encrypt instead of buffering the whole payload (#3938) (eaf2b81)
• deps: bump google.golang.org/grpc from 1.83.0 to 1.83.1 in /otdfctl (#3962) (d464ed7)

---

This PR was generated with Release Please. See documentation.

[github-actions]

Benchmark results, click to expand

Benchmark authorization.GetDecisions Results:

Metric	Value
Approved Decision Requests	1000
Denied Decision Requests	0
Total Time	189.784517ms

Benchmark authorization.v2.GetMultiResourceDecision Results:

Metric	Value
Approved Decision Requests	1000
Denied Decision Requests	0
Total Time	105.156445ms

Benchmark Statistics

Name	№ Requests	Avg Duration	Min Duration	Max Duration

Bulk Benchmark Results

Metric	Value
Total Decrypts	100
Successful Decrypts	100
Failed Decrypts	0
Total Time	403.972291ms
Throughput	247.54 requests/second

TDF3 Benchmark Results:

Metric	Value
Total Requests	5000
Successful Requests	5000
Failed Requests	0
Concurrent Requests	50
Total Time	53.54598243s
Average Latency	534.343151ms
Throughput	93.38 requests/second

[github-actions]

X-Test Results

✅ go@main-main
✅ go@pull-4013-v0.9.0
✅ go@main-pull-4013
✅ go@pull-4013-pull-4013
✅ go@pull-4013-main
✅ go@main-v0.9.0
bats-test-results
✅ java@main-main
cukes-report
✅ js@main-v0.9.0
✅ java@main-v0.9.0
✅ js@main-main
✅ js@main-pull-4013
✅ java@main-pull-4013
opentdfplatform48GMM6.dockerbuild
govulncheck-failure-8
govulncheck-failure-3
govulncheck-failure-1

[github-actions]

Benchmark results, click to expand

Benchmark authorization.GetDecisions Results:

Metric	Value
Approved Decision Requests	1000
Denied Decision Requests	0
Total Time	250.191921ms

Benchmark authorization.v2.GetMultiResourceDecision Results:

Metric	Value
Approved Decision Requests	1000
Denied Decision Requests	0
Total Time	146.149353ms

Benchmark Statistics

Name	№ Requests	Avg Duration	Min Duration	Max Duration

Bulk Benchmark Results

Metric	Value
Total Decrypts	100
Successful Decrypts	100
Failed Decrypts	0
Total Time	445.341824ms
Throughput	224.55 requests/second

TDF3 Benchmark Results:

Metric	Value
Total Requests	5000
Successful Requests	5000
Failed Requests	0
Concurrent Requests	50
Total Time	1m6.959139821s
Average Latency	668.516618ms
Throughput	74.67 requests/second

[github-actions]

X-Test Results

✅ go@main-main
✅ go@main-v0.9.0
✅ go@pull-4013-pull-4013
✅ go@pull-4013-v0.9.0
✅ go@main-pull-4013
✅ java@main-main
✅ java@main-pull-4013
✅ js@main-main
✅ js@main-pull-4013
✅ go@pull-4013-main
✅ java@main-v0.9.0
✅ js@main-v0.9.0
govulncheck-failure-3
opentdfplatformI1S15W.dockerbuild
govulncheck-failure-8

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Repository UI

Review profile: ASSERTIVE

Plan: Advanced

Run ID: 3466cc1a-3c09-4284-896b-bc7e72a28469

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[github-actions]

Benchmark results, click to expand

Benchmark authorization.GetDecisions Results:

Metric	Value
Approved Decision Requests	1000
Denied Decision Requests	0
Total Time	166.35151ms

Benchmark authorization.v2.GetMultiResourceDecision Results:

Metric	Value
Approved Decision Requests	1000
Denied Decision Requests	0
Total Time	77.198733ms

Benchmark Statistics

Name	№ Requests	Avg Duration	Min Duration	Max Duration

Bulk Benchmark Results

Metric	Value
Total Decrypts	100
Successful Decrypts	100
Failed Decrypts	0
Total Time	277.274976ms
Throughput	360.65 requests/second

TDF3 Benchmark Results:

Metric	Value
Total Requests	5000
Successful Requests	5000
Failed Requests	0
Concurrent Requests	50
Total Time	36.084455928s
Average Latency	360.030704ms
Throughput	138.56 requests/second

[github-actions]

X-Test Results

✅ go@main-main
✅ go@main-pull-4013
✅ go@pull-4013-main
bats-test-results
✅ go@pull-4013-pull-4013
✅ go@main-v0.9.0
✅ go@pull-4013-v0.9.0
✅ java@main-pull-4013
✅ java@main-main
cukes-report
✅ js@main-main
✅ js@main-pull-4013
✅ java@main-v0.9.0
✅ js@main-v0.9.0
opentdfplatformK6X02R.dockerbuild
govulncheck-failure-8
govulncheck-failure-3
govulncheck-failure-1

[github-actions]

Benchmark results, click to expand

Benchmark authorization.GetDecisions Results:

Metric	Value
Approved Decision Requests	1000
Denied Decision Requests	0
Total Time	164.913667ms

Benchmark authorization.v2.GetMultiResourceDecision Results:

Metric	Value
Approved Decision Requests	1000
Denied Decision Requests	0
Total Time	82.704301ms

Benchmark Statistics

Name	№ Requests	Avg Duration	Min Duration	Max Duration

Bulk Benchmark Results

Metric	Value
Total Decrypts	100
Successful Decrypts	100
Failed Decrypts	0
Total Time	306.652747ms
Throughput	326.10 requests/second

TDF3 Benchmark Results:

Metric	Value
Total Requests	5000
Successful Requests	5000
Failed Requests	0
Concurrent Requests	50
Total Time	36.739878977s
Average Latency	366.323221ms
Throughput	136.09 requests/second

[github-actions]

X-Test Results

✅ go@main-main
✅ java@main-pull-4013
✅ go@pull-4013-main
✅ js@main-pull-4013
✅ js@main-main
govulncheck-failure-3
✅ js@main-v0.9.0
✅ go@pull-4013-pull-4013
✅ java@main-v0.9.0
✅ go@pull-4013-v0.9.0
✅ go@main-pull-4013
govulncheck-failure-1
✅ java@main-main
cukes-report
✅ go@main-v0.9.0
govulncheck-failure-8
opentdfplatformBYULVN.dockerbuild

[github-actions]

X-Test Results

✅ go@main-main
✅ go@pull-4013-main
cukes-report
✅ go@pull-4013-pull-4013
✅ go@pull-4013-v0.9.0
✅ go@main-pull-4013
✅ js@main-pull-4013
✅ js@main-main
✅ js@main-v0.9.0
govulncheck-failure-8
✅ java@main-main
✅ go@main-v0.9.0
opentdfplatformL9IFZI.dockerbuild
govulncheck-failure-3
govulncheck-failure-1
✅ java@main-v0.9.0
✅ java@main-pull-4013

[github-actions]

⚠️ Govulncheck found vulnerabilities ⚠️

The following modules have known vulnerabilities:

• examples
• otdfctl
• service
• tests-bdd

See the workflow run for details.

[github-actions]

X-Test Results

✅ go@pull-4013-main
bats-test-results
✅ java@main-pull-4013
✅ go@main-v0.9.0
✅ go@pull-4013-pull-4013
✅ go@main-main
✅ js@main-pull-4013
govulncheck-failure-3
cukes-report
✅ go@main-pull-4013
govulncheck-failure-8
opentdfplatformRH11Y1.dockerbuild
govulncheck-failure-1
✅ js@main-v0.9.0
✅ go@pull-4013-v0.9.0
govulncheck-failure-0
✅ java@main-main
✅ java@main-v0.9.0
✅ js@main-main