chore(main): release otdfctl 0.36.0

[opentdf-automation]

🤖 I have created a release beep boop

0.36.0 (2026-08-04)

⚠ BREAKING CHANGES

• policy: GetPC does not respect manager field. (#3752)

Features

• authz: dynamic value mapping and direct entitlement e2e coverage (#3774) (49c80a0)
• cli: add an sdkfactory for optional override in otdfctl for extension (#3793) (c2f2afe)
• cli: add dynamic value mapping CRUD commands and e2e tests (#3768) (aecd265)
• cli: expose handler hook for injecting SDK options (#3755) (76305b0)
• cli: Unsafe update key cli (#3733) (65d888e)

Bug Fixes

• deps: bump github.com/opentdf/platform/protocol/go from 0.36.0 to 0.39.0 in /otdfctl (#3765) (a3346f8)
• deps: bump github.com/opentdf/platform/sdk from 0.25.0 to 0.27.0 in /otdfctl (#3773) (490c990)
• policy: GetPC does not respect manager field. (#3752) (0d3c0a0)

---

This PR was generated with Release Please. See documentation.

[github-actions]

Benchmark results, click to expand

Benchmark authorization.GetDecisions Results:

Metric	Value
Approved Decision Requests	1000
Denied Decision Requests	0
Total Time	167.16258ms

Benchmark authorization.v2.GetMultiResourceDecision Results:

Metric	Value
Approved Decision Requests	1000
Denied Decision Requests	0
Total Time	93.712063ms

Benchmark Statistics

Name	№ Requests	Avg Duration	Min Duration	Max Duration

Bulk Benchmark Results

Metric	Value
Total Decrypts	100
Successful Decrypts	100
Failed Decrypts	0
Total Time	352.417365ms
Throughput	283.75 requests/second

TDF3 Benchmark Results:

Metric	Value
Total Requests	5000
Successful Requests	5000
Failed Requests	0
Concurrent Requests	50
Total Time	43.890365346s
Average Latency	437.801688ms
Throughput	113.92 requests/second

[github-actions]

⚠️ Govulncheck found vulnerabilities ⚠️

The following modules have known vulnerabilities:

• examples
• otdfctl
• sdk
• service
• lib/fixtures
• tests-bdd

See the workflow run for details.

[github-actions]

X-Test Failure Report

✅ go@pull-3835-main
✅ go@main-pull-3835
✅ go@main-main
✅ go@pull-3835-pull-3835
✅ go@pull-3835-v0.9.0
✅ java@main-main
✅ java@main-pull-3835
✅ go@main-v0.9.0
✅ js@main-pull-3835
✅ java@main-v0.9.0
cukes-report
✅ js@main-v0.9.0
govulncheck-failure-8
govulncheck-failure-3
opentdfplatformVM0J1T.dockerbuild
govulncheck-failure-1
govulncheck-failure-2
govulncheck-failure-0
govulncheck-failure-5

[github-actions]

X-Test Results

✅ js@main-main
bats-test-results
✅ go@pull-3835-main
✅ go@main-pull-3835
✅ go@main-main
✅ go@pull-3835-pull-3835
✅ go@pull-3835-v0.9.0
✅ java@main-main
✅ java@main-pull-3835
✅ go@main-v0.9.0
✅ js@main-pull-3835
✅ java@main-v0.9.0
cukes-report
✅ js@main-v0.9.0
govulncheck-failure-8
govulncheck-failure-3
opentdfplatformVM0J1T.dockerbuild
govulncheck-failure-1
govulncheck-failure-2
govulncheck-failure-0
govulncheck-failure-5