fix(deps): update module github.com/openfga/openfga to v1.9.0

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
github.com/openfga/openfga	v1.8.13 -> v1.9.0

---

Release Notes

openfga/openfga (github.com/openfga/openfga)

v1.9.0

Compare Source

Added

• Add separate reverse_expand resolution path utilizing the weighted graph. Gated behind enable-list-objects-optimizations experimental flag. #​2529

Changed

• SQLite based iterators will load tuples only when needed (lazy loading). #​2511
• Shared iterator improvement to reduce lock contention when creating and cloning. #​2530
• Enable experimental list object optimizations in shadow mode using flag enable-list-objects-optimizations. #​2509
• Invalidated iterators will be removed from cache if an invalid entity entry is found allowing for less time to refresh. #​2536

Fixed

• Cache Controller was always completely invalidating. #​2522

Full Changelog

• cefb4ce CICD: skip revive var-naming rule (#​2533)
• 974bb2a Feat/list objects shadow mode (#​2509)
• a6cfee2 Fix quoting for GitHub Actions outputs (#​2512)
• 4131a12 Move SQLite to lazy (#​2511)
• f8ebe21 Revert "fix: restore conditional checks for connection pool timeout settings" (#​2505)
• 3533e1e Update README.md (#​2521)
• d45a6e1 Update changelog to prep for 1.9.0 release (#​2540)
• ebdc157 chore(deps): bump github.com/go-viper/mapstructure/v2 from 2.2.1 to 2.3.0 (#​2531)
• 242e3ad chore(deps): bump sigstore/cosign-installer from 3.9.0 to 3.9.1 in the dependencies group (#​2523)
• 27398f9 chore(deps): bump the dependencies group across 1 directory with 4 updates (#​2513)
• 6587dd9 chore(deps): bump the dependencies group with 2 updates (#​2534)
• 72a17a2 chore: add local check resolver to reverse expand (#​2516)
• 73e5c5d chore: bump grpc-gateway and go-retryablehttp pkgs (#​2526)
• ed0848f chore: bump mysql driver + grpc packages (#​2517)
• b581691 clean: Remove fanin code (#​2514)
• 6300686 docs(v1.8.16): add v1.8.16 release notes to CHANGELOG (#​2510)
• 804a268 feat: ReverseExpand with weighted graph, non-infinite weights (#​2529)
• 0aff359 feat: add GetEdgesForListObjects to typesystem (#​2468)
• 90fdaeb feat: typesystem edges for intersection and exclusion (#​2518)
• 2c3e3af feat: typesystem to return userset for listobject (#​2525)
• 7d9d284 fix-iterator-cache-invalidation (#​2536)
• d5ec30f fix: cache controller invalidation logic (#​2522)
• dbfe47c fix: prevent db connections from prematurely closing (#​2508)
• 4a2dfda fix: restore conditional checks for connection pool timeout settings (#​2501)
• e5ccafb fix: shadow resolver causing infinite loop for list objects (#​2532)
• b8d1263 fix: shared iterator metrics (#​2527)
• e8cd761 perf: further reduce lock contention in shared iterators (#​2530)
• cd8a850 performance: refactored the shared iterator and shared iterator datastore (#​2478)
• dd1d716 skip shadow ListObjects query when main query is slow (#​2537)

v1.8.16

Compare Source

Fixed

• Context cancelation was preventing database connections from being reused. #​2508

v1.8.15

Compare Source

Changelog

1.8.15 - 2025-06-11

Added

• Add support for separate read and write datastores for PostgreSQL. #​2479

Fixed

• Improve Check performance for models with recursion and enable-check-optimizations experiment flag is enabled. #​2492
• Reverts the base docker image back to cgr.dev/chainguard/static #​2473
• Fix for picking up env vars for migrate pkg #​2493

v1.8.14

Compare Source

Changelog

1.8.14 - 2025-06-10

Fixed

• Performance improve for SQL based datastore by reducing connection usage during IsReady check. #​2483
• SQL drivers now respect zero value for MaxOpenConns, ConnMaxIdleTime, ConnMaxLifetime. #​2484
• When enable-check-optimizations experiment flag is enabled, incorrect check for model with recursion and user is assigned to more than 100 groups due to iteratorToUserset not handling multiple messages incorrectly. #​2491
• Correlate storage context with caller's context. #​2292

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

ℹ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• 5 additional dependencies were updated

Details:

Package	Change
github.com/openfga/language/pkg/go	v0.2.0-beta.2.0.20250220223040-ed0cfba54336 -> v0.2.0-beta.2.0.20250428093642-7aeebe78bbfe
sigs.k8s.io/controller-runtime	v0.20.4 -> v0.21.0
github.com/oklog/ulid/v2	v2.1.0 -> v2.1.1
gonum.org/v1/gonum	v0.15.1 -> v0.16.0
k8s.io/apiextensions-apiserver	v0.32.1 -> v0.33.0

[renovate]

Renovate Ignore Notification

Because you closed this PR without merging, Renovate will ignore this update (v1.9.0). You will get a PR once a newer version is released. To ignore this dependency forever, add it to the ignoreDeps array of your Renovate config.

If you accidentally closed this PR, or if you changed your mind: rename this PR to get a fresh replacement PR.