OpenFGA v0.2.5 is out with important security fixes #59

[aaguiarz]

Hey everyone!

We just released OpenFGA v0.2.5 with an important security fix. If you are using OpenFGA, it is important that you update to this release as soon as you can.

If you are running through docker:

• If you are targeting latest, make sure to update by running docker pull openfga/openfga
• If you are targeting pinned releases, make sure to set your pinned version to: openfga/openfga:v0.2.5

Changes in this release

Security

• Patches OpenFGA CVE-2022-39352

Fixed

• Read RPC returns correct error when authorization model id is not found
• Throw error if http.upstreamTimeout config is less than listObjectsDeadline

Added

• Multi-platform container build manifests to releases