Cerbos Files

Cerbos 0.52.0

View the full release notes at https://docs.cerbos.dev/cerbos/latest/releases/v0.52.0.html

Changelog

• [281232] Add 0.52.0 release notes (#3127)
• [3f8cfc] Add TraceBatch format for compact trace representation (#2945)
• [9a8ceb] Add ability to save Hub credentials (#3067)
• [78fec1] Add build constraints (#2979)
• [6e74c6] Add changelog entry for breaking OpenTelemetry changes (#2954)
• [d7eefb] Add pages/recipes for common questions (#3106)
• [9fb62a] Add path functions to Cerbos CEL library (#3039)
• [f3f464] Add permissions advisor workflow (#3007)
• [ad8d24] Add siteline to docs (#3093)
• [b9dc7e] Add tracer.TracesToBatch (#2958)
• [de243b] Add verify.BundleStream (#2944)
• [f8a102] Additional repository statistics (#3025)
• [681bcf] Avoid compiling constant expressions at runtime (#3005)
• [cbfb1b] Avoid round-tripping attributes to JSON for schema validation (#3000)
• [f0e0df] Bump brace-expansion from 2.0.2 to 2.0.3 in /npm/test/registry (#3062)
• [74fa89] Bump filippo.io/edwards25519 from 1.1.0 to 1.1.1 (#2975)
• [a3f8d3] Bump github.com/aws/aws-sdk-go-v2/service/s3 from 1.96.4 to 1.97.3 in /tools (#3083)
• [a02dfd] Bump github.com/aws/aws-sdk-go-v2/service/s3 from 1.97.1 to 1.97.3 (#3082)
• [dce463] Bump github.com/buger/jsonparser from 1.1.1 to 1.1.2 in /tools (#3054)
• [489656] Bump github.com/cloudflare/circl from 1.6.1 to 1.6.3 (#2980)
• [bf6e74] Bump github.com/cloudflare/circl from 1.6.1 to 1.6.3 in /hack/tools/changelog (#2981)
• [96b53c] Bump github.com/cloudflare/circl from 1.6.1 to 1.6.3 in /tools (#2987)
• [04960c] Bump github.com/docker/cli from 27.4.1+incompatible to 29.2.0+incompatible (#3004)
• [a78b47] Bump github.com/go-git/go-git/v5 from 5.17.0 to 5.17.1 in /hack/tools/changelog (#3070)
• [8d29a2] Bump github.com/go-git/go-git/v5 from 5.17.1 to 5.18.0 in /tools (#3109)
• [10d888] Bump github.com/go-git/go-git/v6 from 6.0.0-alpha.1 to 6.0.0-alpha.2 in /hack/tools/changelog (#3113)
• [f1706d] Bump github.com/go-jose/go-jose/v4 from 4.1.3 to 4.1.4 (#3072)
• [9d61b1] Bump github.com/go-jose/go-jose/v4 from 4.1.3 to 4.1.4 in /hack/loadtest (#3073)
• [e9bbc5] Bump github.com/go-jose/go-jose/v4 from 4.1.3 to 4.1.4 in /tools (#3074)
• [35fd05] Bump github.com/jackc/pgx/v5 from 5.9.1 to 5.9.2 (#3118)
• [d4cd21] Bump github.com/sigstore/timestamp-authority/v2 from 2.0.3 to 2.0.6 in /tools (#3104)
• [6febdf] Bump go.opentelemetry.io/otel from 1.40.0 to 1.41.0 in /api/genpb (#3121)
• [ebe00a] Bump go.opentelemetry.io/otel from 1.40.0 to 1.41.0 in /hack/loadtest (#3126)
• [6071f5] Bump go.opentelemetry.io/otel/sdk from 1.39.0 to 1.40.0 in /tools (#2986)
• [73c754] Bump go.opentelemetry.io/otel/sdk from 1.42.0 to 1.43.0 in /tools (#3097)
• [52a952] Bump golang.org/x/net to 0.51.0 (#2985)
• [d99d18] Bump google.golang.org/grpc from 1.78.0 to 1.79.3 in /hack/loadtest (#3043)
• [d435c7] Bump google.golang.org/grpc from 1.79.1 to 1.79.3 in /tools (#3045)
• [079bd8] Bump google.golang.org/grpc from 1.79.2 to 1.79.3 in /api/genpb (#3044)
• [fdad59] Bump helm.sh/helm/v3 from 3.20.0 to 3.20.2 in /tools (#3096)
• [615ac4] Bump lodash and verdaccio in /npm/test/registry (#3077)
• [6040d0] Bump path-to-regexp from 0.1.12 to 0.1.13 in /npm/test/registry (#3066)
• [b75185] Custom bitmap (#3071)
• [a72c2c] Dependency pruning (#3027)
• [56b7ae] Don't re-run E2E failed tests (#3037)
• [024e80] Downgrade go-git to v5.16.5 (#3022)
• [abdcd1] Downgrade go-git to v5.16.5 (#3035)
• [ef3093] Downgrade go-git to v5.16.5 (#3055)
• [8df25a] Embedded mode awareness (#2964)
• [8dce85] Fix Seaweedfs Helm chart version to 4.0.413 (#3017)
• [1ce502] Fix change detection in PR workflow (#3014)
• [f39311] Fix git cloning issue (#3116)
• [0b1e79] Fix issues with the directory watch system (#3061)
• [ceb305] Fix return keys in ListKeys (#2965)
• [1b3961] Fix test case indentation (#3024)
• [34670e] GitHub Actions hardening (#3002)
• [2b2f91] Import protobuf annotations conditionally (#3084)
• [2f61f8] Index parent role ancestors in backends (#2974)
• [665608] Integrate Synapse docs (#3056)
• [85e7f0] Lay groundwork for lazily-evaluated variables (#3038)
• [becde8] Loadtest switch to ghz (#2982)
• [b11ffb] Lock file maintenance (#2995)
• [fb2c67] Lock file maintenance Node.js deps (#2961)
• [48fd13] Make context optional for Authzen batch requests (#3115)
• [7392dd] Move synapse docs to own repo (#3059)
• [9150c2] Move variable identifier check (#2983)
• [dc0e29] Omit index serialization functions from EPDP builds (#3114)
• [49f8bb] Optimize repository statistics (#3029)
• [143bfe] Pin dependencies (#3064)
• [3de054] Pin ghcr.io/cerbos/cerbos Docker tag to 8d35a64 (#3075)
• [98c3b5] Policy stats for Hub (#2998)
• [6ff21c] Pool bitmaps (#3057)
• [d47194] Record store version information such as commit hash or bundle ID in audit log entries (#3094)
• [f63e56] Reduce timestamp precision in test case (#3026)
• [5c9943] Refine ruletable index types (#2959)
• [ddae41] Remove protovalidate dependency from engine (#3006)
• [af89e7] Remove bitmap stats logging (#3086)
• [08eddd] Remove deployment ID from Hub telemetry (#3003)
• [2b01c4] Remove module github.com/google/go-licenses (#2951)
• [438342] Remove the default auxData.jwt.disableVerification configuration value (#3036)
• [599305] Remove unused protobuf imports (#3010)
• [198c82] Replace MinIO with SeaweedFS (#2976)
• [dad069] Restrict permissions of workflows (#3013)
• [33eac7] Revert "Avoid compiling constant expressions at runtime" (#3009)
• [0494bf] Revert api/genpb to Go 1.25 (#2999)
• [43ddff] Revert to Go 1.25 (#3001)
• [144aed] Roaring bitmaps (#3041)
• [eec060] Ruletable bundles support for local source (#3028)
• [457a2a] Serializable bitmap index (#3095)
• [b41392] Traces to TraceBatch benchmark clean-up (#2949)
• [edb57a] Update E2E workflow to run selected tests (#3011)
• [660dfc] Update GitHub Actions deps (#2947)
• [9e24f8] Update GitHub Actions deps (#2977)
• [ee5719] Update GitHub Actions deps (#2989)
• [c898be] Update GitHub Actions deps (#3015)
• [ece7d5] Update GitHub Actions deps (#3031)
• [53df0d] Update GitHub Actions deps (#3047)
• [43fdbe] Update GitHub Actions deps (#3065)
• [47cb44] Update GitHub Actions deps (#3099)
• [6b93e5] Update GitHub Actions deps (#3111)
• [39d2b6] Update GitHub Actions deps to v4 (major) (#3020)
• [f4a5c4] Update GitHub Actions deps to v4 (major) (#3052)
• [9e6136] Update GitHub Actions deps to v7 (major) (#3021)
• [decefe] Update Go deps (#2939)
• [c477f1] Update Go deps (#2952)
• [57e2ae] Update Go deps (#2970)
• [5aa3bf] Update Go deps (#2978)
• [ad2e43] Update Go deps (#2988)
• [538986] Update Go deps (#2994)
• [b2546f] Update Go deps (#3012)
• [e1de91] Update Go deps (#3016)
• [ba4b41] Update Go deps (#3032)
• [08ea4c] Update Go deps (#3048)
• [01c71a] Update Go deps (#3100)
• [a2b197] Update Go deps (#3112)
• [d238a0] Update Go deps (#3122)
• [81ca12] Update Helm release seaweedfs to v4.16.0 (#3034)
• [97918e] Update Helm release seaweedfs to v4.17.0 (#3050)
• [006766] Update Helm release seaweedfs to v4.21.0 (#3125)
• [01d4e3] Update Node.js deps (#2971)
• [767e02] Update Node.js deps (#2990)
• [d13c8b] Update Node.js deps (#3018)
• [420a9a] Update Node.js deps (#3033)
• [d950e8] Update Node.js deps (#3049)
• [4ddd76] Update Node.js deps (#3076)
• [cb5625] Update Node.js deps (#3123)
• [558d39] Update actions/download-artifact action to v8 (#2991)
• [f122b2] Update aws-actions/configure-aws-credentials action to v6 (#2960)
• [8a5818] Update buf to v1.65.0 and fix protobuf errors (#2946)
• [86589a] Update dawidd6/action-download-artifact action to v13 (#2948)
• [3d86c2] Update dawidd6/action-download-artifact action to v14 (#2950)
• [aef6dc] Update dawidd6/action-download-artifact action to v15 (#2993)
• [37abb1] Update dawidd6/action-download-artifact action to v16 (#3019)
• [e4397d] Update dawidd6/action-download-artifact action to v19 (#3051)
• [5334a1] Update dependency go to 1.26.x (#2972)
• [dd6a0f] Update github.com/cerbos/cerbos/api/genpb digest to 767e023 (#2992)
• [dd43f4] Update github/codeql-action action to v4.32.2 (#2969)
• [2c2659] Update go-git to v6.0.0-alpha.1 (#3078)
• [828798] Update module github.com/go-git/go-git/v5 to v5.16.5 [SECURITY] (#2957)
• [7cd559] Update module github.com/go-git/go-git/v5 to v5.17.1 [SECURITY] (#3069)
• [29366a] Update module go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp to v1.43.0 [SECURITY] (#3089)
• [531210] Update module go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp to v1.43.0 [SECURITY] (#3090)
• [73b06d] Update module helm.sh/helm/v3 to v3.20.2 [SECURITY] (#3098)
• [f48a7e] Update tablewriter and migrate (#2967)
• [2c76ee] Update to go-git@v6.0.0-alpha.2 (#3107)
• [5b346b] Use TraceBatch in test results (#2968)
• [6f896c] Use a better link for OpenTelemetry changelog (#2962)
• [63fd0e] add QueryMulti with optional role-policy deny synthesis (#3117)
• [9ea380] build(deps): bump github.com/go-git/go-git/v5 from 5.16.4 to 5.16.5 in /tools (#2966)
• [687446] chore(release): Prepare release 0.52.0
• [881253] chore(version): Bump version to 0.52.0
• [e2c49f] docs: Add Synapse header link (#3060)
• [6f6abb] docs: Add agent skill link to policies nav (#3105)
• [e28107] docs: Add clarifying note about decision precendence between roles (#2997)
• [f166a6] docs: Remove Rudderstack reference from telemetry docs (#3042)
• [b9fcf2] docs: Update siteline edge function (#3103)
• [2eaa60] docs: clarify role policies require resource policies (#3085)