Cerbos Files

Cerbos 0.54.0

View the full release notes at https://docs.cerbos.dev/cerbos/latest/releases/v0.54.0.html

Changelog

• [64d274] Auto-configure GOMEMLIMIT from the cgroup memory limit (#3259)
• [3870a7] Add CI performance regression test (#3174)
• [6b483c] Add cerbos.audit.v1.PolicySource.Hub.EmbeddedBundle.bundle_id field (#3155)
• [0bacbd] Add cerbos compile-store command (#3251)
• [b6fb64] Add dimension filters to ruletable index key queries (#3235)
• [f77ba9] Add new documentation homepage and cross linking (#3264)
• [ffc7e7] Add proxy support for Hub client (#3221)
• [9e8e94] Add role policy outputs, constants and variables (#3156)
• [44dd5d] Add v0.54.0 release notes (#3282)
• [3fb957] Allow disabling TLS verification for Hub client (#3220)
• [a39c82] Build binaries at AMD64 microarchitecture level v2 (#3218)
• [db8f3f] Bump fast-uri from 3.1.0 to 3.1.2 in /npm/test/registry (#3162)
• [9d4616] Bump github.com/go-git/go-billy/v6 from 6.0.0-20260424211911-732291493fb8 to 6.0.0-alpha.1 (#3178)
• [305bfb] Bump github.com/go-git/go-billy/v6 from 6.0.0-20260424211911-732291493fb8 to 6.0.0-alpha.1 in /hack/tools/changelog (#3177)
• [fc7f84] Bump golang.org/x/crypto from 0.51.0 to 0.52.0 in /hack/loadtest (#3272)
• [322a56] Bump golang.org/x/crypto from 0.51.0 to 0.52.0 in /hack/tools/changelog (#3271)
• [3ae505] De-duplicate and re-allocate rule table objects (#3209)
• [bdaf97] Disable telemetry in CI performance regression test (#3277)
• [69be64] Display output errors in passing tests and JUnit report (#3202)
• [54046f] Downgrade to go1.25 (#3237)
• [588fc4] Enable incremental rule table marshalling (#3270)
• [189196] Export binary path from npm packages (#3180)
• [96880d] Expose parser (#3276)
• [35f56c] Extend the load-test framework to measure PDP memory demand and GC behaviour under load (#3258)
• [2acd6f] Fix E2E SDK test (#3239)
• [2a7007] Fix Siteline edge function (#3186)
• [79d90e] Fix npm package templates (#3181)
• [f09acc] Fix panic in E2E blob test (#3242)
• [1bda68] Fix parser bugs (#3223)
• [335226] Fix typo in performance regression check workflow (#3179)
• [f2c638] Handle permission denied error from Hub API (#3248)
• [9ea7f6] Ignore helm/* tags when building snapshots (#3152)
• [218362] Import GPG key for Helm Secrets before installation (#3219)
• [5ac3bd] Iterable stores (#3253)
• [ae6972] Lazy load sparse bitmaps (#3200)
• [16888e] Lock file maintenance (npm) (#3168)
• [6b4999] Lock file maintenance (npm) (#3195)
• [72a094] Lock file maintenance (npm) (#3226)
• [bed9c7] Log CEL runtime errors and record them in audit entries (#3260)
• [cd8a94] More compact fqnBindings dimension (#3154)
• [8465b2] Notify Slack on workflow cancellations as well (#3157)
• [e3299f] Omit rule table marshalling from EPDP build (#3278)
• [21443a] Pace GC during rule table builds (#3224)
• [704e54] Perform shallow merges when resolving YAML merge key (<<) (#3234)
• [18f118] Pick up newly created policy subdirectories and their contents in dirwatch (#3247)
• [1f50c3] Prevent Renovate from updating the Helm chart values file (#3161)
• [037b22] Reduce memory usage when compiling rule table bundles (#3263)
• [27b19c] Remove Hub client bundle type config (#3249)
• [1f4ac9] Remove bundle v1 (#3275)
• [858dc3] Retain CheckedExpr(s) in bundles (#3265)
• [40fa6d] Return an error when empty expressions are provided in outputs (#3194)
• [2944c3] Shrink rule table memory with interned bindings and structured eval keys (#3228)
• [be4bdf] Sort validation errors by position (#3252)
• [8eec00] Sort validation errors encountered when parsing files (#3250)
• [19e1d6] Stop publishing the Helm chart to OCI registry (#3145)
• [518c3e] Streaming source stores (#3245)
• [9e7879] Surface JWKS and JWT errors (#3225)
• [bcb36f] Surface errors evaluating outputs (#3192)
• [b52d4a] Test against pnpm v11 (#3153)
• [265328] Update E2E secrets plugin install command for Helm v4 (#3214)
• [84a8cc] Update GitHub Actions deps (#3183)
• [332cf3] Update GitHub Actions deps (#3204)
• [9f7b8b] Update GitHub Actions deps (#3213)
• [1bd3a2] Update Go deps (#3147)
• [c55c53] Update Go deps (#3163)
• [8b3083] Update Go deps (#3173)
• [5480bb] Update Go deps (#3184)
• [94022b] Update Go deps (#3197)
• [5b78d9] Update Go deps (#3205)
• [51e2f3] Update Go deps (#3215)
• [e063c3] Update Go deps (#3230)
• [dec07c] Update Go deps (#3255)
• [cc1b24] Update Go deps (#3262)
• [24700b] Update Go deps (#3274)
• [f4e943] Update Go deps (#3279)
• [6f1c37] Update Go deps (#3281)
• [83ba73] Update Go toolchain version to Go 1.26.4 (#3211)
• [e7bdca] Update Go tools (#3144)
• [76dd31] Update Helm release seaweedfs to v4.22.0 (#3148)
• [2ae4af] Update Helm release seaweedfs to v4.23.0 (#3166)
• [84a191] Update Helm release seaweedfs to v4.26.0 (#3198)
• [87c229] Update Helm release seaweedfs to v4.29.0 (#3206)
• [3aa45d] Update Helm release seaweedfs to v4.31.0 (#3216)
• [872bb5] Update Helm release seaweedfs to v4.32.0 (#3231)
• [a360f5] Update Node.js deps (#3149)
• [2544f1] Update Node.js deps (#3164)
• [166d8e] Update Node.js deps (#3185)
• [7188c9] Update Node.js deps (#3199)
• [003df7] Update Node.js deps (#3207)
• [51c972] Update Node.js deps (#3217)
• [745d10] Update aws-actions/amazon-ecr-login action to v2.1.6 (#3241)
• [562916] Update aws-actions/configure-aws-credentials action to v6.1.1 (#3165)
• [b87691] Update aws-actions/setup-sam action to v3 (#3167)
• [94aa8e] Update cerbos/actions to 148106e (#3169)
• [a7f4f2] Update cerbos/actions to 3a471f8 (#3182)
• [3306f4] Update cerbos/actions to 3e51316 (#3240)
• [f7f4ef] Update cerbos/actions to 40e604d (#3229)
• [2d0fdd] Update cerbos/actions to 52f1500 (#3273)
• [faad5a] Update cerbos/actions to 6e17328 (#3146)
• [9ab1f3] Update cerbos/actions to 77b46c5 (#3280)
• [080e00] Update cerbos/actions to 81c84b6 (#3203)
• [2727a6] Update cerbos/actions to aa71e4b (#3212)
• [98924b] Update cerbos/actions to b65bfbd (#3160)
• [3ed5cb] Update cerbos/actions to b9f76b0 (#3196)
• [a9322b] Update cerbos/actions to d2c46d8 (#3261)
• [ed0f74] Update cerbos/actions to d5b4989 (#3254)
• [6bc6e7] Update dawidd6/action-download-artifact action to v21 (#3150)
• [45e4e1] Update golang.org/x/crypto to v0.52.0 (#3193)
• [a7aa5a] Update module github.com/go-git/go-git/v6 to v6.0.0-alpha.3 [SECURITY] (#3172)
• [1fcf14] Update module github.com/go-git/go-git/v6 to v6.0.0-alpha.4 [SECURITY] (#3188)
• [54356e] Update pnpm to v11.5.2 (#3227)
• [9537aa] Upgrade golang.org/x/net to v0.55.0 (#3201)
• [7b1bba] Use parser everywhere (#3232)
• [151415] add filtered query APIs to ruletable index (#3176)
• [6b40a5] chore(release): Prepare release 0.54.0
• [78e2e5] chore(version): Bump version to 0.54.0
• [cf85ce] docs(tutorial): fix typo in sentence (#3208)
• [2b4827] scope role-policy deny synthesis to per-resource actions (#3158)