fix(deps): bump github.com/opentdf/platform/protocol/go from 0.36.0 to 0.37.0 in /sdk

[alkalescent]

Bumps github.com/opentdf/platform/protocol/go from 0.36.0 to 0.37.0 in /sdk.

protocol/go v0.37.0 (released from main) contains the narrow attribute-read RPC types (GetKeyMappingsByFqns, GetEntitleableAttributesByFqns). The sdk already consumes them via the generated sdk/sdkconnect/attributes.go wrapper merged in #3634, but sdk/go.mod still pinned 0.36.0, so the sdk module could not build against its pinned dependency (only via the workspace).

Manual dependency bump modeled on #3681. No code changes — sdk/go.mod + sdk/go.sum only.

Unblocks the next sdk release, which the service release (#3697) depends on.

Verified: cd sdk && GOWORK=off go build ./... && GOWORK=off go test ./... -short pass against the pinned v0.37.0.

Summary by CodeRabbit

• Chores
  • Updated an internal Go dependency to a newer version.

[gemini-code-assist]

Summary of Changes

Hello, I'm Gemini Code Assist¹! I'm currently reviewing this pull request and will post my feedback shortly. In the meantime, here's a summary to help you and other reviewers quickly get up to speed!

This pull request performs a necessary dependency bump for the sdk module to align with the latest protocol definitions. By updating the pinned version of the platform protocol, the sdk is now able to properly consume the recently introduced attribute-read RPC types, unblocking subsequent service releases.

Highlights

• Dependency Update: Updated the github.com/opentdf/platform/protocol/go dependency from v0.36.0 to v0.37.0 in the sdk module.
• Build Compatibility: Ensured the sdk module can correctly build against the new protocol version, enabling the use of updated RPC types.

New Features

🧠 You can now enable Memory (public preview) to help Gemini Code Assist learn from your team's feedback. This makes future code reviews more consistent and personalized to your project's style. Click here to enable Memory in your admin console.

Using Gemini Code Assist

The full guide for Gemini Code Assist can be found on our documentation page, here are some quick tips.

Invoking Gemini

You can request assistance from Gemini at any point by creating a comment using either /gemini <command> or @gemini-code-assist <command>. Below is a summary of the supported commands on the current page.

Feature	Command	Description
Code Review	/gemini review	Performs a code review for the current pull request in its current state.
Pull Request Summary	/gemini summary	Provides a summary of the current pull request in its current state.
Comment	@gemini-code-assist	Responds in comments when explicitly tagged, both in pull request comments and review comments.
Help	/gemini help	Displays a list of available commands.

Customization

To customize the Gemini Code Assist for GitHub experience, repository maintainers can create a configuration file and/or provide a custom code review style guide (such as PEP-8 for Python) by creating and adding files to a .gemini/ folder in the base of the repository. Detailed instructions can be found here.

Limitations & Feedback

Gemini Code Assist may make mistakes. Please leave feedback on any instances where its feedback is incorrect or counterproductive. You can react with 👍 and 👎 on @gemini-code-assist comments. If you're interested in giving your feedback about your experience with Gemini Code Assist for GitHub and other Google products, sign up here.

---

The version bump is now in place, / To keep the SDK in pace. / With RPC types now aligned, / The build is finally refined.

Footnotes

1. Review the Privacy Notices, Generative AI Prohibited Use Policy, Terms of Service, and learn how to configure Gemini Code Assist in GitHub here. Gemini can make mistakes, so double check it and use code with caution. ↩

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Repository UI

Review profile: ASSERTIVE

Plan: Pro

Run ID: 5d58fd31-f2c9-40d3-bbd0-3b82c98ab054

📥 Commits

Reviewing files that changed from the base of the PR and between 327f9a4 and 0d92bd7.

⛔ Files ignored due to path filters (1)

• sdk/go.sum is excluded by !**/*.sum

📒 Files selected for processing (1)

• sdk/go.mod

---

📝 Walkthrough

Walkthrough

This PR updates the github.com/opentdf/platform/protocol/go dependency version in sdk/go.mod from v0.36.0 to v0.37.0.

Changes

Dependency Version Bump

Layer / File(s)	Summary
Update protocol/go dependency version sdk/go.mod	The require entry for github.com/opentdf/platform/protocol/go is bumped from v0.36.0 to v0.37.0.

Estimated code review effort: 1 (Trivial) | ~2 minutes

Possibly related PRs

• opentdf/platform#3325: Both PRs update the same github.com/opentdf/platform/protocol/go dependency in sdk/go.mod.
• opentdf/platform#3441: Both PRs bump the github.com/opentdf/platform/protocol/go version in sdk/go.mod.
• opentdf/platform#3658: Both PRs change the same dependency entry for github.com/opentdf/platform/protocol/go in go.mod.

Suggested reviewers: elizabethhealy, c-r33d

Poem

A hop, a nibble, a version bump,
v0.36 to v0.37, just one jump.
One line in go.mod, tidy and small,
This bunny approves — no fuss at all! 🐰✨

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title accurately summarizes the dependency bump in sdk from v0.36.0 to v0.37.0.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch bump-sdk-protocol-go-0.37.0

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[gemini-code-assist]

Code Review

This pull request updates the github.com/opentdf/platform/protocol/go dependency in sdk/go.mod and sdk/go.sum from version v0.36.0 to v0.37.0. I have no feedback to provide.

Important

The consumer version of Gemini Code Assist on GitHub is being sunset. Starting June 18, 2026, new organization installations will be blocked, and all code review activity will officially cease on July 17, 2026.
For more details on the timeline and next steps, please review the Help Documentation.

[github-actions]

Benchmark results, click to expand

Benchmark authorization.GetDecisions Results:

Metric	Value
Approved Decision Requests	1000
Denied Decision Requests	0
Total Time	194.175885ms

Benchmark authorization.v2.GetMultiResourceDecision Results:

Metric	Value
Approved Decision Requests	1000
Denied Decision Requests	0
Total Time	108.567537ms

Benchmark Statistics

Name	№ Requests	Avg Duration	Min Duration	Max Duration

Bulk Benchmark Results

Metric	Value
Total Decrypts	100
Successful Decrypts	100
Failed Decrypts	0
Total Time	443.462223ms
Throughput	225.50 requests/second

TDF3 Benchmark Results:

Metric	Value
Total Requests	5000
Successful Requests	5000
Failed Requests	0
Concurrent Requests	50
Total Time	45.033537231s
Average Latency	449.241699ms
Throughput	111.03 requests/second

[github-actions]

⚠️ Govulncheck found vulnerabilities ⚠️

The following modules have known vulnerabilities:

• examples
• otdfctl
• sdk
• service
• lib/fixtures
• tests-bdd

See the workflow run for details.

[github-actions]

X-Test Failure Report

✅ go@main-pull-3707
✅ go@main-main
✅ java@main-pull-3707
✅ [email protected]
✅ [email protected]
✅ js@main-pull-3707
✅ js@main-main
✅ [email protected]
✅ [email protected]
cukes-report
server-logs-java@main-main
server-logs-go@pull-3707-main
server-logs-go@pull-3707-pull-3707
opentdfplatformGZ1YBE.dockerbuild
govulncheck-failure-2
govulncheck-failure-8
govulncheck-failure-1
govulncheck-failure-5
govulncheck-failure-3
govulncheck-failure-0

[github-actions]

X-Test Results

✅ go@pull-3707-main
✅ go@pull-3707-pull-3707
✅ java@main-main
bats-test-results
✅ go@main-pull-3707
✅ go@main-main
✅ java@main-pull-3707
✅ [email protected]
✅ [email protected]
✅ js@main-pull-3707
✅ js@main-main
✅ [email protected]
✅ [email protected]
cukes-report
server-logs-java@main-main
server-logs-go@pull-3707-main
server-logs-go@pull-3707-pull-3707
opentdfplatformGZ1YBE.dockerbuild
govulncheck-failure-2
govulncheck-failure-8
govulncheck-failure-1
govulncheck-failure-5
govulncheck-failure-3
govulncheck-failure-0