Skip to content

Conversation

rhamzeh
Copy link
Member

@rhamzeh rhamzeh commented Aug 15, 2025

Description

What problem is being solved?

How is it being solved?

What changes are made to solve it?

References

Review Checklist

  • I have clicked on "allow edits by maintainers".
  • I have added documentation for new/changed functionality in this PR or in a PR to openfga.dev [Provide a link to any relevant PRs in the references section above]
  • The correct base branch is being used, if not main
  • I have added tests to validate that the change in functionality is working as expected

Summary by CodeRabbit

  • Bug Fixes
    • Eliminated duplicate error messages in query commands (list-objects, list-users, list-relations) for clearer, less noisy output.
  • Chores
    • Upgraded OpenFGA dependency to v1.9.5 to incorporate the latest fixes and improvements.
  • Documentation
    • Added 0.7.4 entry (2025-08-15) to the changelog.
    • Updated version anchors: Unreleased now points to v0.7.4...HEAD; added links for v0.7.4 and adjusted prior version ranges.

@rhamzeh rhamzeh requested a review from a team as a code owner August 15, 2025 20:31
Copy link
Contributor

coderabbitai bot commented Aug 15, 2025

Walkthrough

Adds changelog entry for v0.7.4 with updated release anchors and bumps OpenFGA dependency from v1.9.4 to v1.9.5 in go.mod. No code or API changes.

Changes

Cohort / File(s) Summary
Documentation updates
CHANGELOG.md
Added v0.7.4 under Unreleased (2025-08-15), noted OpenFGA v1.9.5 update and error message fix reference; updated release anchors for Unreleased, 0.7.4, 0.7.3, 0.7.2.
Dependency bump
go.mod
Updated require: github.com/openfga/openfga from v1.9.4 to v1.9.5.

Estimated code review effort

🎯 1 (Trivial) | ⏱️ ~3 minutes

Possibly related PRs

  • release: v0.7.3 #558 — Also updates CHANGELOG release entries/anchors; this PR builds on that structure by adding v0.7.4.

Suggested reviewers

  • jimmyjames
  • aaguiarz
  • sergiught

Tip

🔌 Remote MCP (Model Context Protocol) integration is now available!

Pro plan users can now connect to remote MCP servers from the Integrations page. Connect with popular remote MCPs such as Notion and Linear to add more context to your reviews and chats.

✨ Finishing Touches
🧪 Generate unit tests
  • Create PR with unit tests
  • Post copyable unit tests in a comment
  • Commit unit tests in branch release/v0.7.4

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share
🪧 Tips

Chat

There are 3 ways to chat with CodeRabbit:

  • Review comments: Directly reply to a review comment made by CodeRabbit. Example:
    • I pushed a fix in commit <commit_id>, please review it.
    • Open a follow-up GitHub issue for this discussion.
  • Files and specific lines of code (under the "Files changed" tab): Tag @coderabbitai in a new review comment at the desired location with your query.
  • PR comments: Tag @coderabbitai in a new PR comment to ask questions about the PR branch. For the best results, please provide a very specific query, as very limited context is provided in this mode. Examples:
    • @coderabbitai gather interesting stats about this repository and render them as a table. Additionally, render a pie chart showing the language distribution in the codebase.
    • @coderabbitai read the files in the src/scheduler package and generate a class diagram using mermaid and a README in the markdown format.

Support

Need help? Create a ticket on our support page for assistance with any issues or questions.

CodeRabbit Commands (Invoked using PR/Issue comments)

Type @coderabbitai help to get the list of available commands.

Other keywords and placeholders

  • Add @coderabbitai ignore anywhere in the PR description to prevent this PR from being reviewed.
  • Add @coderabbitai summary to generate the high-level summary at a specific location in the PR description.
  • Add @coderabbitai anywhere in the PR title to generate the title automatically.

CodeRabbit Configuration File (.coderabbit.yaml)

  • You can programmatically configure CodeRabbit by adding a .coderabbit.yaml file to the root of your repository.
  • Please see the configuration documentation for more information.
  • If your editor has YAML language server enabled, you can add the path at the top of this file to enable auto-completion and validation: # yaml-language-server: $schema=https://coderabbit.ai/integrations/schema.v2.json

Status, Documentation and Community

  • Visit our Status Page to check the current availability of CodeRabbit.
  • Visit our Documentation for detailed information on how to use CodeRabbit.
  • Join our Discord Community to get help, request features, and share feedback.
  • Follow us on X/Twitter for updates and announcements.

Copy link

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Updatedgithub.com/​openfga/​openfga@​v1.9.4 ⏵ v1.9.582 +110010010070

View full report

Copy link

Warning

Review the following alerts detected in dependencies.

According to your organization's Security Policy, it is recommended to resolve "Warn" alerts. Learn more about Socket for GitHub.

Action Severity Alert  (click "▶" to expand/collapse)
Warn High
github.com/openfga/openfga@v1.9.5 has a License Policy Violation.

License: CC-BY-4.0 (NOTICE)

License: CC-BY-SA-4.0 (NOTICE)

License: GPL-2.0-only (NOTICE)

License: GPL-2.0-or-later (NOTICE)

License: MPL-2.0 (NOTICE)

License: MPL-2.0 (NOTICE)

License: CC-BY-SA-4.0 (NOTICE)

License: MPL-2.0 (NOTICE)

From: go.modgolang/github.com/openfga/openfga@v1.9.5

ℹ Read more on: This package | This alert | What is a license policy violation?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Find a package that does not violate your license policy or adjust your policy to allow this package's license.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore golang/github.com/openfga/openfga@v1.9.5. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

View full report

Copy link
Contributor

@coderabbitai coderabbitai bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Actionable comments posted: 0

🧹 Nitpick comments (1)
CHANGELOG.md (1)

10-14: Changelog entry for 0.7.4 is clear; optional enhancement: link to upstream release notes

The “Changed: Update OpenFGA to v1.9.5” line reads well. Consider adding a link to the upstream release notes for quick context.

-Changed:
-- Update OpenFGA to v1.9.5
+Changed:
+- Update OpenFGA to v1.9.5 ([release notes](https://github.com/openfga/openfga/releases/tag/v1.9.5))
📜 Review details

Configuration used: CodeRabbit UI
Review profile: CHILL
Plan: Pro

💡 Knowledge Base configuration:

  • MCP integration is disabled by default for public repositories
  • Jira integration is disabled by default for public repositories
  • Linear integration is disabled by default for public repositories

You can enable these sources in your CodeRabbit configuration.

📥 Commits

Reviewing files that changed from the base of the PR and between 56c11cc and c52af3d.

⛔ Files ignored due to path filters (1)
  • go.sum is excluded by !**/*.sum
📒 Files selected for processing (2)
  • CHANGELOG.md (2 hunks)
  • go.mod (1 hunks)
🧰 Additional context used
🪛 LanguageTool
CHANGELOG.md

[grammar] ~12-~12: There might be a mistake here.
Context: ...ased] ## [0.7.4] - 2025-08-15 Changed: - Update OpenFGA to v1.9.5 Fixed: - Remov...

(QB_NEW_EN)

⏰ Context from checks skipped due to timeout of 90000ms. You can increase the timeout in your CodeRabbit configuration to a maximum of 15 minutes (900000ms). (3)
  • GitHub Check: Test Release Process
  • GitHub Check: Tests
  • GitHub Check: Analyze (go)
🔇 Additional comments (2)
go.mod (1)

18-18: OpenFGA bump to v1.9.5 looks good; ensure module graph/go.sum are up to date

No issues spotted with the version bump. Please verify:

  • go.sum reflects this upgrade (run go mod tidy) and commit any changes.
  • Any integration paths that embed/run the server (e.g., model test) still pass with v1.9.5.
CHANGELOG.md (1)

322-324: Anchors updated correctly for Unreleased and 0.7.4

The compare links look correct:

  • [Unreleased] → v0.7.4...HEAD
  • [0.7.4] → v0.7.3...v0.7.4
  • [0.7.3] → v0.7.2...v0.7.3

If you haven’t already, double-check that the tag v0.7.4 exists (post-merge) so these links render properly on GitHub.

@rhamzeh rhamzeh added this pull request to the merge queue Aug 15, 2025
Merged via the queue into main with commit 6320eee Aug 15, 2025
22 checks passed
@rhamzeh rhamzeh deleted the release/v0.7.4 branch August 15, 2025 20:51
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants