Skip to content

Bump OpenFGA to v1.18.2 - #30

Merged
JohnRDOrazio merged 1 commit into
mainfrom
chore/openfga-1.18.2
Aug 5, 2026
Merged

Bump OpenFGA to v1.18.2#30
JohnRDOrazio merged 1 commit into
mainfrom
chore/openfga-1.18.2

Conversation

@JohnRDOrazio

@JohnRDOrazio JohnRDOrazio commented Aug 5, 2026

Copy link
Copy Markdown
Member

Local dev stack only. Image pin bump for both openfga and openfga-migrate (v1.15.1v1.18.2). No other pinned image touched; the Playground+preshared-auth comment at lines ~150-154 stays accurate (re-verified against 1.18.2, still panics).

Migration-free on Postgres: the Postgres migration set is identical (001-006) at both tags, and the v1.18.0 MySQL lock warning does not apply here.

Verification (in place, against the existing local dev volume — not a fresh one)

  • openfga-migrate v1.18.2 run against the database this stack already migrated with v1.15.1: reports current version: 6 and applies nothing (exit 0).
  • openfga v1.18.2 reaches healthy via the existing /usr/local/bin/grpc_health_probe healthcheck — unchanged from v1.15.1.
  • Store/model/tuple state compared before and after the bump: exactly one Martyrology store (01KZ63MBF6M9A08XQD6QR8PR81), the same authorization model (01KZ63MBFTEC5TFBM896WYEJHR), and the same 11 structural tuples (8 governed_by + 3 on_platform) — byte-identical, nothing re-seeded.
  • The unrelated, already-running martyrology-frontend stack (separate compose project, its own OpenFGA instance) was confirmed undisturbed throughout: still 9 containers up, its API container still healthy and serving 200 on /docs.

No production access was used for this verification; everything above is local Docker only.

Summary by CodeRabbit

  • Chores
    • Updated OpenFGA migration and runtime services to version v1.18.2 for improved compatibility and maintenance.

Migration-free on Postgres: the Postgres migration set is identical (001-006)
at v1.15.1 and v1.18.2, and the v1.18.0 lock warning applies only to MySQL
(schema migration 008, CVE-2026-55170 / CVE-2026-55689).

Verified in place against the existing local dev database (not a fresh
volume): openfga-migrate v1.18.2 reports current version 6 and applies
nothing; openfga v1.18.2 reaches healthy via the existing
/usr/local/bin/grpc_health_probe healthcheck; the store, its authorization
model, and all 11 structural tuples are unchanged before and after.
@codecov-commenter

codecov-commenter commented Aug 5, 2026

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ All tests successful. No failed tests found.

📢 Thoughts on this report? Let us know!

@coderabbitai

coderabbitai Bot commented Aug 5, 2026

Copy link
Copy Markdown

Review Change Stack

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info
⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro Plus

Run ID: 7a85d452-322a-49ff-b12a-2ae15e2e5a6b

📥 Commits

Reviewing files that changed from the base of the PR and between 975ca2a and cf99903.

📒 Files selected for processing (1)
  • docker-compose.yml

📝 Walkthrough

Walkthrough

The Docker Compose configuration updates both OpenFGA services from image version v1.15.1 to v1.18.2.

Changes

OpenFGA image update

Layer / File(s) Summary
Update OpenFGA service images
docker-compose.yml
The migration and runtime services now use OpenFGA image v1.18.2.

Estimated code review effort: 1 (Trivial) | ~2 minutes

🚥 Pre-merge checks | ✅ 5
✅ Passed checks (5 passed)
Check name Status Explanation
Description Check ✅ Passed Check skipped - CodeRabbit’s high-level summary is enabled.
Title check ✅ Passed The title clearly and concisely describes the primary change: updating OpenFGA to version v1.18.2.
Docstring Coverage ✅ Passed No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check ✅ Passed Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check ✅ Passed Check skipped because no linked issues were found for this pull request.
✨ Finishing Touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Commit unit tests in branch chore/openfga-1.18.2

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

@JohnRDOrazio
JohnRDOrazio merged commit 46f249c into main Aug 5, 2026
4 checks passed
@JohnRDOrazio
JohnRDOrazio deleted the chore/openfga-1.18.2 branch August 5, 2026 10:54
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants