Merge branch 'lts-workflows8' of github.com:opentdf/java-sdk into lts-workflows8

Author: el-virt

.github/workflows/checks.yaml

@@ -62,47 +62,24 @@ jobs:
       - uses: bufbuild/buf-setup-action@a47c93e0b1648d5651a065437926377d060baa99 # v1.50.0
         with:
           github_token: ${{ secrets.GITHUB_TOKEN }}
-      - name: Set up JDK
-        uses: actions/setup-java@c5195efecf7bdfc987ee8bae7a71cb8b11521c00 # v4.7.1
-        with:
-          java-version: "11"
-          distribution: "adopt"
-          server-id: github
-      - name: Maven Verify
-        run: mvn --batch-mode verify
-        env:
-          BUF_INPUT_HTTPS_USERNAME: opentdf-bot
-          BUF_INPUT_HTTPS_PASSWORD: ${{ secrets.PERSONAL_ACCESS_TOKEN_OPENTDF }}
-
-  sonarcloud:
-    name: SonarCloud Scan
-    runs-on: ubuntu-22.04
-    steps:
-      - name: Check out repository
-        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
-        with:
-          fetch-depth: 0
-      - uses: bufbuild/buf-setup-action@a47c93e0b1648d5651a065437926377d060baa99 # v1.50.0
+      - name: Cache Maven packages
+        uses: actions/cache@5a3ec84eff668545956fd18022155c47e93e2684 # v4.2.3
         with:
-          github_token: ${{ secrets.GITHUB_TOKEN }}
+          path: ~/.m2
+          key: ${{ runner.os }}-m2-${{ hashFiles('**/pom.xml') }}
+          restore-keys: ${{ runner.os }}-m2
       - name: Set up JDK
         uses: actions/setup-java@c5195efecf7bdfc987ee8bae7a71cb8b11521c00 # v4.7.1
         with:
           java-version: "17"
-          distribution: "temurin"
+          distribution: "adopt"
           server-id: github
       - name: Cache SonarCloud packages
         uses: actions/cache@5a3ec84eff668545956fd18022155c47e93e2684 # v4.2.3
         with:
           path: ~/.sonar/cache
           key: ${{ runner.os }}-sonar
           restore-keys: ${{ runner.os }}-sonar
-      - name: Cache Maven packages
-        uses: actions/cache@5a3ec84eff668545956fd18022155c47e93e2684 # v4.2.3
-        with:
-          path: ~/.m2
-          key: ${{ runner.os }}-m2-${{ hashFiles('**/pom.xml') }}
-          restore-keys: ${{ runner.os }}-m2
       - name: Maven Test Coverage
         env:
           SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}
@@ -122,7 +99,7 @@ jobs:
       - name: Set up JDK
         uses: actions/setup-java@c5195efecf7bdfc987ee8bae7a71cb8b11521c00 # v4.7.1
         with:
-          java-version: "11"
+          java-version: "17"
           distribution: "adopt"
           server-id: github
       - name: Build java SDK
@@ -345,7 +322,6 @@ jobs:
       - platform-integration
       - platform-xtest
       - mavenverify
-      - sonarcloud
       - pr
     runs-on: ubuntu-latest
     if: always()

.release-please-manifest.json

@@ -1,3 +1,3 @@
 {
-  ".": "0.7.9"
+  ".": "0.8.1"
 }

CHANGELOG.md

@@ -1,5 +1,36 @@
 # Changelog
 
+## [0.8.1](https://github.com/opentdf/java-sdk/compare/v0.8.0...v0.8.1) (2025-05-29)
+
+
+### Bug Fixes
+
+* **ci:** use `dokka-maven-plugin` instead of `javadoc-maven-plugin` ([#262](https://github.com/opentdf/java-sdk/issues/262)) ([ab1e7b1](https://github.com/opentdf/java-sdk/commit/ab1e7b1505d1875768bf99f1217ff2dcca1bacea))
+
+## [0.8.0](https://github.com/opentdf/java-sdk/compare/v0.7.9...v0.8.0) (2025-05-27)
+
+
+### ⚠ BREAKING CHANGES
+
+* **sdk:** better control which classes we expose ([#254](https://github.com/opentdf/java-sdk/issues/254))
+* **sdk:** expose method to build an http client ([#256](https://github.com/opentdf/java-sdk/issues/256))
+* **sdk:** switch to `connect-rpc` for GRPC ([#244](https://github.com/opentdf/java-sdk/issues/244))
+* **sdk:** DSPX-1037 update sdk api ([#249](https://github.com/opentdf/java-sdk/issues/249))
+
+### Features
+
+* Add initial Dependency Review configuration ([#252](https://github.com/opentdf/java-sdk/issues/252)) ([ba11d49](https://github.com/opentdf/java-sdk/commit/ba11d4924d50ef33539a879818a1e9f53ced47a4))
+* **sdk:** add nanotdf plaintext policy ([#259](https://github.com/opentdf/java-sdk/issues/259)) ([be9cd94](https://github.com/opentdf/java-sdk/commit/be9cd94ba544f91289d64cfc2c7a1014bdfa1cb2))
+* **sdk:** better control which classes we expose ([#254](https://github.com/opentdf/java-sdk/issues/254)) ([e00eeaf](https://github.com/opentdf/java-sdk/commit/e00eeaf9768caaa793717b0ea3045cfa3c73debe))
+* **sdk:** DSPX-1037 update sdk api ([#249](https://github.com/opentdf/java-sdk/issues/249)) ([f2e1307](https://github.com/opentdf/java-sdk/commit/f2e1307ec7ed23289f32ddf620ab39692256c2c0))
+* **sdk:** expose method to build an http client ([#256](https://github.com/opentdf/java-sdk/issues/256)) ([2cac97c](https://github.com/opentdf/java-sdk/commit/2cac97cfdfdbcded64e0e205f968fca523dda4e8))
+* **sdk:** switch to `connect-rpc` for GRPC ([#244](https://github.com/opentdf/java-sdk/issues/244)) ([ff36a1d](https://github.com/opentdf/java-sdk/commit/ff36a1d90f7f2fdf876b892001c8c8d32425db09))
+
+
+### Bug Fixes
+
+* **sdk:** add coverage ([#258](https://github.com/opentdf/java-sdk/issues/258)) ([e6ad1bc](https://github.com/opentdf/java-sdk/commit/e6ad1bcf750b7daed8d81c2e82bbca984f07009a))
+
 ## [0.7.9](https://github.com/opentdf/java-sdk/compare/v0.7.8...v0.7.9) (2025-04-28)
 
 

README.md

@@ -15,33 +15,41 @@ This SDK is available from Maven central as:
 ## Quick Start Example
 
 ```java
+package io.opentdf.platform;
+
 import io.opentdf.platform.sdk.Config;
+import io.opentdf.platform.sdk.Reader;
 import io.opentdf.platform.sdk.SDK;
 import io.opentdf.platform.sdk.SDKBuilder;
-import io.opentdf.platform.sdk.abac.Policy;
+
+import java.io.IOException;
 import java.io.InputStream;
 import java.io.FileInputStream;
+import java.nio.channels.FileChannel;
+import java.nio.channels.SeekableByteChannel;
+import java.nio.file.Path;
+import java.nio.file.StandardOpenOption;
 
 public class Example {
-  public static void main(String[] args) {
-    SDK sdk =
-        new SDKBuilder
-            .clientSecret("myClient", "token")
-            .platformEndpoint("https://your.cluster/")
-            .build();
-    // Encrypt a file
-    try (InputStream in = new FileInputStream("input.plaintext")) {
-      Config c = Config.newTDFConfig(Config.withDataAttributes("attr1", "attr2"));
-      new TDF().createTDF(in, System.out, tdfConfig, sdk.getServices().kas());
-    }
-
-    // Decrypt a file
-    try (SeekableByteChannel in =
-          FileChannel.open("input.ciphertext", StandardOpenOption.READ)) {
-        TDF.Reader reader = new TDF().loadTDF(in, sdk.getServices().kas(), sdk.getServices().kasRegistry(), sdk.getPlatformUrl());
-        reader.readPayload(System.out);
+    public static void main(String[] args) throws IOException {
+        SDK sdk = new SDKBuilder()
+                    .clientSecret("myClient", "token")
+                    .platformEndpoint("https://your.cluster/")
+                    .build();
+
+        // Encrypt a file
+        try (InputStream in = new FileInputStream("input.plaintext")) {
+            Config.TDFConfig c = Config.newTDFConfig(Config.withDataAttributes("attr1", "attr2"));
+            sdk.createTDF(in, System.out, c);
+        }
+
+        // Decrypt a file
+        try (SeekableByteChannel in = FileChannel.open(Path.of("input.ciphertext"), StandardOpenOption.READ)) {
+            Reader reader = sdk.loadTDF(in, Config.newTDFReaderConfig());
+            reader.readPayload(System.out);
+        }
     }
-}}
+}
 ```
 
 ### Cryptography Library
@@ -50,7 +58,7 @@ This SDK uses the [Bouncy Castle Security library](https://www.bouncycastle.org/
 Note: When using this SDK, it may be necessary to register the Bouncy Castle Provider as follows:
 
 ```java
-    static{
+    static {
         Security.addProvider(new BouncyCastleProvider());
     }
 ```

cmdline/pom.xml

@@ -4,7 +4,7 @@
     <parent>
         <groupId>io.opentdf.platform</groupId>
         <artifactId>sdk-pom</artifactId>
-        <version>0.7.10-SNAPSHOT</version>
+        <version>0.8.2-SNAPSHOT</version>
     </parent>
     <artifactId>cmdline</artifactId>
     <properties>

cmdline/src/main/java/io/opentdf/platform/Command.java

@@ -10,7 +10,6 @@
 import io.opentdf.platform.sdk.Config.AssertionVerificationKeys;
 import io.opentdf.platform.sdk.SDK;
 import io.opentdf.platform.sdk.SDKBuilder;
-import io.opentdf.platform.sdk.TDF;
 import nl.altindag.ssl.SSLFactory;
 import org.apache.commons.codec.DecoderException;
 import picocli.CommandLine;
@@ -23,7 +22,6 @@
 import java.io.FileInputStream;
 import java.io.IOException;
 import java.io.PrintWriter;
-import java.net.URISyntaxException;
 import java.nio.ByteBuffer;
 import java.nio.channels.FileChannel;
 import java.nio.charset.StandardCharsets;
@@ -36,7 +34,6 @@
 import java.security.spec.InvalidKeySpecException;
 import java.security.spec.PKCS8EncodedKeySpec;
 import java.security.spec.X509EncodedKeySpec;
-import java.text.ParseException;
 import java.util.ArrayList;
 import java.util.Base64;
 import java.util.List;
@@ -51,7 +48,7 @@
  */
 class Versions {
     // Version of the SDK, managed by release-please.
-    public static final String SDK = "0.7.10-SNAPSHOT"; // x-release-please-version
+    public static final String SDK = "0.8.2-SNAPSHOT"; // x-release-please-version
 
     // This sdk aims to support this version of the TDF spec; currently 4.3.0.
     public static final String TDF_SPEC = "4.3.0";
@@ -165,7 +162,7 @@ void encrypt(
             @Option(names = { "--with-assertions" }, defaultValue = Option.NULL_VALUE) Optional<String> assertion,
             @Option(names = { "--with-target-mode" }, defaultValue = Option.NULL_VALUE) Optional<String> targetMode)
 
-            throws IOException, JOSEException, AutoConfigureException, InterruptedException, ExecutionException, DecoderException {
+            throws IOException, AutoConfigureException {
 
         var sdk = buildSDK();
         var kasInfos = kas.stream().map(k -> {
@@ -300,8 +297,7 @@ void decrypt(@Option(names = { "-f", "--file" }, required = true) Path tdfPath,
     @CommandLine.Command(name = "metadata")
     void readMetadata(@Option(names = { "-f", "--file" }, required = true) Path tdfPath,
     @Option(names = { "--kas-allowlist" }, defaultValue = Option.NULL_VALUE) Optional<String> kasAllowlistStr,
-            @Option(names = { "--ignore-kas-allowlist" }, defaultValue = Option.NULL_VALUE) Optional<Boolean> ignoreAllowlist) throws IOException,
-            TDF.FailedToCreateGMAC, JOSEException, NoSuchAlgorithmException, ParseException, DecoderException, InterruptedException, ExecutionException, URISyntaxException {
+            @Option(names = { "--ignore-kas-allowlist" }, defaultValue = Option.NULL_VALUE) Optional<Boolean> ignoreAllowlist) throws IOException {
         var sdk = buildSDK();
         var opts = new ArrayList<Consumer<Config.TDFReaderConfig>>();
         try (var in = FileChannel.open(tdfPath, StandardOpenOption.READ)) {

examples/pom.xml

@@ -4,7 +4,7 @@
   <parent>
     <artifactId>sdk-pom</artifactId>
     <groupId>io.opentdf.platform</groupId>
-    <version>0.7.10-SNAPSHOT</version>
+    <version>0.8.2-SNAPSHOT</version>
   </parent>
 
   <groupId>io.opentdf.platform</groupId>

examples/src/main/java/io/opentdf/platform/App.java

@@ -12,7 +12,7 @@
 import java.util.Arrays;
 
 public class CreateAttribute {
-    public static void main(String[] args) throws ExecutionException, InterruptedException{
+    public static void main(String[] args) {
 
         String clientId = "opentdf";
         String clientSecret = "secret";

examples/src/main/java/io/opentdf/platform/CreateAttribute.java

@@ -8,7 +8,7 @@
 import java.util.concurrent.ExecutionException;
 
 public class CreateNamespace {
-    public static void main(String[] args) throws ExecutionException, InterruptedException{
+    public static void main(String[] args) {
 
         String clientId = "opentdf";
         String clientSecret = "secret";