chore(release): v0.9.4 by SoulPancake · Pull Request #365 · openfga/js-sdk

SoulPancake · 2026-03-31T10:31:35Z

Description

What problem is being solved?

How is it being solved?

What changes are made to solve it?

References

Review Checklist

I have clicked on "allow edits by maintainers".
I have added documentation for new/changed functionality in this PR or in a PR to openfga.dev [Provide a link to any relevant PRs in the references section above]
The correct base branch is being used, if not main
I have added tests to validate that the change in functionality is working as expected

Summary by CodeRabbit

Bug Fixes
- Resolved a security vulnerability in a pinned dependency.
Chores
- Version updated to 0.9.4 across all package references and documentation.

coderabbitai · 2026-03-31T10:31:50Z

Important

Review skipped

Auto incremental reviews are disabled on this repository.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro

Run ID: 40cc2781-2128-4c69-b447-af64dcc59aaa

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

🔍 Trigger review

Walkthrough

This PR bumps the SDK version from 0.9.3 to 0.9.4. Changes include updating version constants, manifests, documentation, and the changelog. The release notes reference a dependency fix pinning axios to 1.14.0 and addressing a brace-expansion audit vulnerability.

Changes

Cohort / File(s)	Summary
Version Constants and Manifests `constants/index.ts`, `package.json`, `example/example1/package.json`	Updated `SdkVersion` constant from `"0.9.3"` to `"0.9.4"` and `UserAgent` string to reflect the new version. Updated package version declarations to match the new release version.
Changelog and Documentation `CHANGELOG.md`, `example/README.md`	Added new v0.9.4 release section dated 2026-03-31 documenting dependency fix for axios 1.14.0 and brace-expansion vulnerability fix. Updated example documentation to reference the updated SDK version constraint.

Estimated code review effort

🎯 1 (Trivial) | ⏱️ ~2 minutes

Possibly related PRs

release: v0.9.3 #342 — Both PRs perform the same release-version updates across CHANGELOG, constants, and package files for a version bump.
release: v0.9.2 #321 — Both PRs make the same kind of release-version bumps with changelog and constant updates.
release: v0.9.2-beta.1 #313 — Both PRs modify version constants and related release metadata in the same files.

Suggested reviewers

rhamzeh
ewanharris

🚥 Pre-merge checks | ✅ 3

✅ Passed checks (3 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title clearly and specifically describes the main change: a version release bump from 0.9.3 to 0.9.4, which is directly reflected in all modified files (package.json, constants, changelog, and example files).
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.

_{✏️ Tip: You can configure your own custom pre-merge checks in the settings.}

✨ Finishing Touches

🧪 Generate unit tests (beta)

Create PR with unit tests
Commit unit tests in branch release/094

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

codecov-commenter · 2026-03-31T10:32:47Z

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 85.80%. Comparing base (1a1639f) to head (d7a8dbb).

Additional details and impacted files

@@           Coverage Diff           @@
##             main     #365   +/-   ##
=======================================
  Coverage   85.80%   85.80%           
=======================================
  Files          26       26           
  Lines        1268     1268           
  Branches      225      225           
=======================================
  Hits         1088     1088           
  Misses        110      110           
  Partials       70       70

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

dosubot · 2026-03-31T10:33:29Z

Documentation Updates

2 document(s) were updated by changes in this PR:

Contextual Tuples Support

View Changes

@@ -8,7 +8,7 @@
 - **Write Assertions**: Supported from OpenFGA server v1.5.8+.
 - **ListUsers**: Supported from OpenFGA server v1.5.4+ (experimental, enable with `OPENFGA_EXPERIMENTALS=enable-list-users`).
 - **BatchCheck, ListObjects, ListRelations**: Supported in recent OpenFGA versions; see SDK and server documentation for details.
-- **JS SDK**: Contextual tuple support for assertions and Expand is available from v0.8.0+ (latest: v0.9.3) and requires OpenFGA server v1.8.0+ for full compatibility.
+- **JS SDK**: Contextual tuple support for assertions and Expand is available from v0.8.0+ (latest: v0.9.4) and requires OpenFGA server v1.8.0+ for full compatibility.
 
 ## Data Model Changes
 
@@ -114,7 +114,7 @@
 - **Expand**: OpenFGA server v1.8.0+.
 - **Write Assertions**: OpenFGA server v1.5.8+.
 - **ListUsers**: OpenFGA server v1.5.4+ (experimental, enable with `OPENFGA_EXPERIMENTALS=enable-list-users`).
-- **JS SDK**: v0.8.0+ (latest: v0.9.3) for contextual tuples in assertions and Expand (requires server v1.8.0+).
+- **JS SDK**: v0.8.0+ (latest: v0.9.4) for contextual tuples in assertions and Expand (requires server v1.8.0+).
 - **Conditional relationships (ABAC)**: Officially supported from OpenFGA v1.4.0+; enable with `enable-conditions` flag in earlier versions.
 - **Tuple validation constraints**: OpenFGA server v1.12.0+ (validation of Unicode control characters and null bytes in tuple fields).

Retry-After Header and Retry Strategy

View Changes

@@ -18,7 +18,7 @@
 ## SDK-Specific Details
 ### JavaScript SDK (`@openfga/sdk`)
 
-**Version Introduced:** v0.9.1 (Current version: v0.9.3)  
+**Version Introduced:** v0.9.1 (Current version: v0.9.4)  
 **[Changelog](https://github.com/openfga/js-sdk/blob/ca4b9fcf9eaed35170d44a4b3697f439b81187f6/CHANGELOG.md#L8-L10)**
 
 #### Node.js Version Support (JavaScript SDK)
@@ -61,7 +61,7 @@
 The SDK adds `executeApiRequest` and `executeStreamedApiRequest` methods to `OpenFgaClient` for calling arbitrary API endpoints with full SDK support (authentication, retries, telemetry, error handling).
 
 #### Migration Guidance
-- Upgrade to v0.9.3+ for the latest features and fixes.
+- Upgrade to v0.9.4+ for the latest features and fixes.
 - If you previously relied on custom retry logic, review the new defaults and configuration.
 - The minimum supported Node.js version is **v20.19.0** (v16 and v18 are no longer supported). Update your runtime accordingly.
 - The maximum allowed `maxRetry` is now enforced at 15.

^{How did I do? Any feedback?}

Copilot

Pull request overview

Release bump for the @openfga/sdk JavaScript/Node SDK to v0.9.4, updating version references across package metadata, constants, examples, and the changelog.

Changes:

Bump SDK version from 0.9.3 to 0.9.4 in package.json and package-lock.json.
Update internal SDK version/user-agent constants to 0.9.4.
Update example dependency documentation and add a v0.9.4 changelog entry.

Reviewed changes

Copilot reviewed 5 out of 6 changed files in this pull request and generated 3 comments.

Show a summary per file

File	Description
package.json	Bumps published package version to `0.9.4`.
package-lock.json	Updates lockfile package version entries to `0.9.4`.
constants/index.ts	Updates `SdkVersion` and `UserAgent` strings to `0.9.4`.
example/README.md	Updates example dependency snippet to `^0.9.4`.
example/example1/package.json	Updates example dependency to `^0.9.4`.
CHANGELOG.md	Adds v0.9.4 section and updates Unreleased compare link base.

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

Co-authored-by: Raghd Hamzeh <[email protected]>

chore(release): v0.9.4

9cb10dc

SoulPancake requested review from a team as code owners March 31, 2026 10:31

Copilot AI review requested due to automatic review settings March 31, 2026 10:31

Copilot AI reviewed Mar 31, 2026

View reviewed changes

Comment thread constants/index.ts

Comment thread example/README.md

Comment thread example/example1/package.json

rhamzeh reviewed Mar 31, 2026

View reviewed changes

Comment thread CHANGELOG.md Outdated

feat: apply suggestion

d7a8dbb

Co-authored-by: Raghd Hamzeh <[email protected]>

rhamzeh approved these changes Mar 31, 2026

View reviewed changes

SoulPancake added this pull request to the merge queue Mar 31, 2026

Merged via the queue into main with commit d09bb3d Mar 31, 2026
26 checks passed

SoulPancake deleted the release/094 branch March 31, 2026 10:42

This was referenced May 6, 2026

release: v0.9.6 #397

Merged

chore(deps): bump deps #398

Merged

chore: bump example deps & point to parent SDK rather than published #403

Merged

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

chore(release): v0.9.4#365

chore(release): v0.9.4#365
SoulPancake merged 2 commits into
mainfrom
release/094

SoulPancake commented Mar 31, 2026 •

edited by coderabbitai Bot

Loading

Uh oh!

coderabbitai Bot commented Mar 31, 2026 •

edited

Loading

Review skipped

Uh oh!

codecov-commenter commented Mar 31, 2026 •

edited

Loading

Uh oh!

dosubot Bot commented Mar 31, 2026 •

edited

Loading

Uh oh!

Copilot AI left a comment

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

4 participants

Uh oh!

Conversation

SoulPancake commented Mar 31, 2026 • edited by coderabbitai Bot Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Description

What problem is being solved?

How is it being solved?

What changes are made to solve it?

References

Review Checklist

Summary by CodeRabbit

Uh oh!

coderabbitai Bot commented Mar 31, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Review skipped

Walkthrough

Changes

Estimated code review effort

Possibly related PRs

Suggested reviewers

Uh oh!

codecov-commenter commented Mar 31, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Codecov Report

Uh oh!

dosubot Bot commented Mar 31, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Contextual Tuples Support

Retry-After Header and Retry Strategy

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Pull request overview

Reviewed changes

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

4 participants

SoulPancake commented Mar 31, 2026 •

edited by coderabbitai Bot

Loading

coderabbitai Bot commented Mar 31, 2026 •

edited

Loading

codecov-commenter commented Mar 31, 2026 •

edited

Loading

dosubot Bot commented Mar 31, 2026 •

edited

Loading