chore(main): release service 0.20.0

[opentdf-automation]

🤖 I have created a release beep boop

0.20.0 (2026-07-02)

⚠ BREAKING CHANGES

• policy: undo subject mapping operator decomposition (#3685)

Features

• policy: add narrow attribute read API protos and generated code (#3634) (5726720)
• policy: undo subject mapping operator decomposition (#3685) (84f3b92)

Bug Fixes

• policy: include attribute value fqn in subject mapping lookup (#3720) (8b63934)

---

This PR was generated with Release Please. See documentation.

[github-actions]

Benchmark results, click to expand

Benchmark authorization.GetDecisions Results:

Metric	Value
Approved Decision Requests	1000
Denied Decision Requests	0
Total Time	230.351214ms

Benchmark authorization.v2.GetMultiResourceDecision Results:

Metric	Value
Approved Decision Requests	1000
Denied Decision Requests	0
Total Time	113.889399ms

Benchmark Statistics

Name	№ Requests	Avg Duration	Min Duration	Max Duration

Bulk Benchmark Results

Metric	Value
Total Decrypts	100
Successful Decrypts	100
Failed Decrypts	0
Total Time	436.308716ms
Throughput	229.20 requests/second

TDF3 Benchmark Results:

Metric	Value
Total Requests	5000
Successful Requests	5000
Failed Requests	0
Concurrent Requests	50
Total Time	44.963149388s
Average Latency	447.894261ms
Throughput	111.20 requests/second

[github-actions]

X-Test Results

✅ go@main-pull-3702
✅ go@main-main
✅ go@pull-3702-pull-3702
✅ go@pull-3702-main
bats-test-results
✅ [email protected]
✅ java@main-main
✅ [email protected]
✅ java@main-pull-3702
✅ js@main-main
✅ js@main-pull-3702
✅ [email protected]
✅ [email protected]
cukes-report
opentdfplatformKT8KJ5.dockerbuild
govulncheck-failure-3
govulncheck-failure-1
govulncheck-failure-8
govulncheck-failure-2
govulncheck-failure-0
govulncheck-failure-5

[github-actions]

X-Test Results

✅ go@pull-3702-pull-3702
✅ go@pull-3702-main
bats-test-results
✅ go@main-pull-3702
✅ go@main-main
✅ [email protected]
✅ java@main-pull-3702
✅ java@main-main
✅ [email protected]
✅ js@main-main
✅ [email protected]
✅ js@main-pull-3702
cukes-report
✅ [email protected]
opentdfplatform5IZKEA.dockerbuild
govulncheck-failure-1
govulncheck-failure-3
govulncheck-failure-8
govulncheck-failure-0
govulncheck-failure-2
govulncheck-failure-5

[github-actions]

X-Test Results

✅ go@pull-3702-pull-3702
✅ go@pull-3702-main
bats-test-results
✅ go@main-main
✅ go@main-pull-3702
✅ java@main-pull-3702
✅ java@main-main
✅ [email protected]
✅ [email protected]
✅ js@main-main
✅ js@main-pull-3702
✅ [email protected]
✅ [email protected]
cukes-report
opentdfplatformOGE0UY.dockerbuild
govulncheck-failure-8
govulncheck-failure-3
govulncheck-failure-0
govulncheck-failure-1
govulncheck-failure-2
govulncheck-failure-5

[github-actions]

⚠️ Govulncheck found vulnerabilities ⚠️

The following modules have known vulnerabilities:

• examples
• otdfctl
• sdk
• service
• lib/fixtures
• tests-bdd

See the workflow run for details.

[github-actions]

X-Test Results

bats-test-results
✅ go@pull-3702-main
✅ go@main-pull-3702
✅ go@pull-3702-pull-3702
✅ go@main-main
✅ [email protected]
✅ java@main-main
✅ [email protected]
✅ js@main-pull-3702
✅ js@main-main
✅ [email protected]
✅ [email protected]
✅ java@main-pull-3702
cukes-report
opentdfplatformPINGDI.dockerbuild
govulncheck-failure-3
govulncheck-failure-8
govulncheck-failure-1
govulncheck-failure-0
govulncheck-failure-2
govulncheck-failure-5