chore(main): release 0.11.0-alpha

[droplet-bot]

🤖 I have created a release beep boop

0.11.0-alpha (2026-05-04)

Features

• acl: add Redis cache for ListPermissions / ListPublicPermissions (#91) (00079e9)
• acl: add shared ACL client package with permission caching (#77) (bea4f72)
• acl: cache split, StreamedListObjects truncation guard, ReadTuples (#93) (4603a52)
• acl: improve permission caching with model ID caching and read-after-write consistency (#79) (74b22dd)
• acl: use StreamedListObjects and add read-after-write consistency support (575530f)
• client: increase MaxPayloadSize from 256 MB to 2 GB (d72af03)
• errors: add ErrNeedUpgradePlan error for plan upgrade prompts (#73) (7bbce9c)
• file: add FileCategory type and helpers for file classification (#83) (2592a2a)
• file: add SupportsFileType function for type validation (#72) (686e098)
• file: add SVG and JSON file type support (bdc5aa9)
• file: centralize file type detection and conversion utilities (#70) (7db770c)
• file: route spreadsheets through excelize instead of PDF conversion (b9e1a79)
• file: update file conversion logic to mark text-based formats as Gemini-native (#81) (09e1680)

Bug Fixes

• acl: add context-based HIGHER_CONSISTENCY for object-level visibility changes (#86) (ec71bef)
• acl: allow visitor auth type in CheckRequesterPermission (#87) (def83be)
• acl: collapse capability subject to visitor and add CheckPermissionWithShareLink (#90) (62bca0a)
• acl: prefer user UID over auth type when resolving FGA subject (#89) (dd4268e)
• acl: skip local cache for pinned users to ensure read-after-write consistency (#80) (8018014)
• acl: use dns:/// + round_robin for OpenFGA gRPC client (d46ae1f)
• client/grpc: add periodic DNS re-resolution resolver for HPA pod discovery (#95) (ac9f96d)
• client/grpc: use dns:/// resolver and round_robin LB policy (376b2c8)
• file: align file type conversion with Gemini-native formats (#74) (a2f91c8)

Miscellaneous

• deps: bump golang.org/x/crypto from 0.39.0 to 0.45.0 (#71) (76282d8)
• error: add repository-to-domain error method (#68) (6d7061c)

Documentation

• invariants: document http-no-pool-client plugin in grpc-lb (d301020)
• invariants: document HTTP/1.1 SSE transport fix in grpc-lb (c40b4d2)
• invariants: document Service-type split for HTTP vs gRPC backends (a488336)
• invariants: update grpc-lb with dns-refresh resolver contract (28ea483)

Refactor

• proto: update imports for flattened protobuf package structure (#75) (5221537)

---

This PR was generated with Release Please. See documentation.