chore(deps): bump github.com/openfga/openfga from 1.6.2 to 1.7.0 in the dependencies group

[dependabot]

Bumps the dependencies group with 1 update: github.com/openfga/openfga.

Updates github.com/openfga/openfga from 1.6.2 to 1.7.0

Release notes

Sourced from github.com/openfga/openfga's releases.

v1.7.0

Added

• Add an experimental access control feature #1913 Learn more about this feature and how to enable it here If you do try it out, please provide feedback in the GitHub Discussion
• Document OpenFGA release process #1923

Changed

• Bump max number of contextual tuples in a single request to 100. #2040 Note: In assertions, they are still restricted to 20 per assertion

Performance

• Improve Check performance in the case that the query involves resolving nested tuple to userset relations. Enable via experimental flag enable-check-optimizations. #2025
• Improve the sub-problem caching in Check #2006, #2035

Fixed

• Fixed internal error for Check where model has nested userset with publicly assignable wildcard. #2049
• Fixed goroutine leak when ListObjects or StreamedListObjects call cannot be completed within REQUEST_TIMEOUT. #2030
• Fixed incorrect dispatch counts in ListObjects used for observability 2013
• Correct metrics label for ListUsers API calls #2000

Breaking changes

• The storage adapter ListStores's parameter ListStoresOptions allows filtering by IDs #1913 If you are using a custom storage adapter, ListStores now expects ListStoresOptions parameter that accepts passing in a list of IDs. See the following adapter change and the following change for a sample storage adapter implementation. If you are not using OpenFGA as a library with a custom storage adapter, this will not affect you. (for example, if you are using OpenFGA through our published docker images, you are not affected).

Changelog

Sourced from github.com/openfga/openfga's changelog.

[1.7.0] - 2024-10-29

Added

• Add an experimental access control feature #1913 Learn more about this feature and how to enable it here If you do try it out, please provide feedback in the GitHub Discussion
• Document OpenFGA release process #1923

Changed

• Bump max number of contextual tuples in a single request to 100. #2040 Note: In assertions, they are still restricted to 20 per assertion

Performance

• Improve Check performance in the case that the query involves resolving nested tuple to userset relations. Enable via experimental flag enable-check-optimizations. #2025
• Improve the sub-problem caching in Check #2006, #2035

Fixed

• Fixed internal error for Check where model has nested userset with publicly assignable wildcard. #2049
• Fixed goroutine leak when ListObjects or StreamedListObjects call cannot be completed within REQUEST_TIMEOUT. #2030
• Fixed incorrect dispatch counts in ListObjects used for observability 2013
• Correct metrics label for ListUsers API calls #2000

Breaking changes

• The storage adapter ListStores's parameter ListStoresOptions allows filtering by IDs #1913 If you are using a custom storage adapter, ListStores now expects ListStoresOptions parameter that accepts passing in a list of IDs. See the following adapter change and the following change for a sample storage adapter implementation. If you are not using OpenFGA as a library with a custom storage adapter, this will not affect you. (for example, if you are using OpenFGA through our published docker images, you are not affected).

Commits

• 7ddcb0f release: v1.7.0 (#2057)
• 5d5ff7f fix: dont allow writing >1 module unless w/ store write permissions (#2046)
• 25508f0 chore: bump grpc health probe (#2056)
• 5876f3d chore(deps): bump the dependencies group with 6 updates (#2050)
• a3091e3 fix: clone request to avoid data race (#2052)
• 7892e09 chore(deps): bump grpc-ecosystem/grpc-health-probe from v0.4.33 to v0.4.35 in...
• 558aea1 fix: disable fastpath optimization for nested userset with public wildcard (...
• 82059bf refactor: consolidate check_command error handling (#2044)
• f8eac9d test: only listen on localhost to avoid prompting for permission (#2042)
• 1e86401 fixed tests after including openfga/api#208 (#2041)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[stacklok-cloud]

Minder Vulnerability Report ✅

Minder analyzed this PR and found it does not add any new vulnerable dependencies.

Vulnerability scan of 5b04e65f:

• 🐞 vulnerable packages: 0
• 🛠 fixes available for: 0