v0.36.0

Cerbos 0.36.0

View the full release notes at https://docs.cerbos.dev/cerbos/latest/releases/v0.36.0.html

Changelog

Features

• e98d5f1 feat: Add cerbosctl hub epdp list-candidates command (#2078)
• 7ba383d feat: Add cerbosctl inspect policies command (#2101)

Enhancements

• cdf2589 enhancement: Add audit log filtering to Hub backend (#2073)
• b11597e enhancement: Apply perf patch to YAML parser (#2132)
• 2e335d5 enhancement: Write audit logs asynchronously (#2104)

Bug fixes

• 4929745 fix: Eagerly establish gRPC connection to avoid initial delay (#2105)
• ea039c4 fix: Handle folded strings and indented newlines in YAML correctly (#2128)
• 8aac976 fix: Ignore context cancellation when writing audit log entries (#2113)
• a88733f fix: Include implicit EFFECT_DENY in test failure details (#2117)
• 68fcdfa fix: Kafka TLS using system CA (#2120)
• 61addb0 fix: Mark tests with missing expectations as errored (#2116)
• 0c755f2 fix: Stop blocking Kafka audit publishing when an outage occurs (#2122)

Documentation

• b022d25 docs: Add documentation for Dagger Cerbos module (#2106)
• 31897e0 docs: Document Hub features (#2133)
• 1a04715 docs: Document how to verify cosign signatures (#2094)

Chores

• 36d3681 chore(ci): Check results of npm package tests (#2098)
• 82f774d chore(ci): Fix E2E tests combining the host address with extra colon (#2114)
• 55b6826 chore(ci): Remove unmaintained Netlify action (#2093)
• c95f50f chore(ci): Update storage type for Jaeger chart (#2096)
• 2001128 chore(deps): Bump github.com/docker/docker from 26.0.0+incompatible to 26.0.2+incompatible in /tools (#2108)
• f74f372 chore(deps): Bump github.com/sigstore/cosign/v2 from 2.2.1 to 2.2.4 in /tools (#2097)
• e2b73f0 chore(deps): Bump golang.org/x/net from 0.21.0 to 0.23.0 in /api/genpb (#2110)
• 5ac1c32 chore(deps): Update github actions deps (#2125)
• e7d828a chore(deps): Update go deps (#2099)
• 5f96e64 chore(deps): Update go deps (#2111)
• a40093a chore(deps): Update go deps (#2124)
• 38c0f24 chore(deps): Update go deps (#2135)
• 236ab29 chore(deps): Update go deps (#2139)
• 56a29ba chore(deps): Update go deps to v2 (major) (#2138)
• 394cfa0 chore(deps): Update golangci/golangci-lint-action action to v5 (#2127)
• 70db704 chore(deps): Update golangci/golangci-lint-action action to v5.3.0 (#2136)
• c862740 chore(deps): Update node.js deps (#2100)
• cd4894a chore(deps): Update node.js deps (#2126)
• 4e40af6 chore(deps): Update node.js deps (#2137)
• 603d0ef chore(deps): Update pnpm to v9.0.5 (#2112)
• 8f7af37 chore(deps): Update to go1.22.3 (#2143)
• a5d835b chore(deps): Use latest Cerbos SDK (#2140)
• d797ebb chore(docs): Update cloud-platforms.adoc (#2109)
• 531e896 chore(release): Add 0.35.1 release notes (#2090)
• 80e10c1 chore(release): Add 0.36.0 release notes (#2144)
• c91df82 chore(release): Prepare release 0.36.0
• b3109b3 chore(test): Test npm packages against pnpm v9 (#2102)
• b9fe96e chore(version): Bump version to 0.36.0
• cb3c68d chore: Handle panics during parsing (#2129)
• ef65065 chore: Remove deprecated audit log fields from filter (#2121)
• 0140870 chore: Remove usage of deprecated MySQL native authentication plugin (#2131)
• eb6029c chore: Rename bundle driver to hub (#2130)
• 5dbef14 chore: Use new hub configuration for env var override (#2142)

v0.35.1

Cerbos 0.35.1

View the full release notes at https://docs.cerbos.dev/cerbos/latest/releases/v0.35.1.html

Changelog

Chores

• e5b322b chore(ci): Output signature from cosign (#2089)
• 0dfd432 chore(release): Prepare release 0.35.1
• 4c9c159 chore(version): Bump version to 0.36.0

v0.34.0

Cerbos 0.34.0

View the full release notes at https://docs.cerbos.dev/cerbos/latest/releases/v0.34.0.html

Changelog

Features

• 42e8442 feat: Better diagnostic error messages for policy issues (#1960)

Enhancements

• 36b0e6d enhancement(ci): Sign release artifacts (#1959)
• 5db9ab0 enhancement(ci): Validate Helm chart in CI (#1957)
• 90f198a enhancement: Better compilation errors (#1968)
• 707278f enhancement: Detailed load errors in REPL (#1985)

Bug fixes

• 4f90a5c fix: Record HTTP remote address as peer address for HTTP requests (#1964)

Documentation

• 4afdc2f docs: Fix branch filter (#1958)

Chores

• 05ef26b chore(ci): Add correct permissions to snapshot job (#1962)
• f24bec2 chore(ci): Add cosign to snapshot build job (#1961)
• 8db9898 chore(ci): Fix workflow permissions (#1963)
• cfed07f chore(ci): Use master version of govulncheck (#1967)
• b89c2c7 chore(deps): Bump github.com/opencontainers/runc from 1.1.5 to 1.1.12 (#1971)
• 7918e5e chore(deps): Bump helm.sh/helm/v3 from 3.14.0 to 3.14.1 (#1986)
• 5cf243a chore(deps): Update actions/cache action to v4 (#1955)
• dc8cf7f chore(deps): Update actions/setup-go action to v5 (#1990)
• 5574e85 chore(deps): Update github actions deps (#1973)
• e510788 chore(deps): Update github actions deps (#1983)
• 58a915c chore(deps): Update go deps (#1954)
• e683b1d chore(deps): Update go deps (#1974)
• 9bc3226 chore(deps): Update go deps (#1984)
• f151096 chore(deps): Update go deps (#1989)
• 0c095fc chore(deps): Update module github.com/goreleaser/goreleaser to v1.24.0 [security] (#1976)
• 9cf901b chore(docs): Readme update (#1965)
• aad2e98 chore(docs): Readme update (#1966)
• e5c7bef chore(docs): Update header to have tabs for PDP and Hub (#1975)
• c9d468d chore(release): Add 0.34.0 release notes (#1991)
• 8534c79 chore(release): Prepare release 0.34.0
• 563bec1 chore(version): Bump version to 0.34.0
• e4ebc88 chore: Add JSON test cases for parser (#1952)
• 0dd8dad chore: Add ability to parse well-known types (#1972)
• c253d87 chore: Copy metadata to runtime policies (#1981)
• bc84737 chore: Handle invalid YAML files containing unterminated strings (#1970)
• b10b139 chore: Move compiled policies annotations to *PolicySet (#1988)
• 4798453 chore: Reduce Docker healthcheck interval (#1978)
• 03f95ec chore: Remove start-period from Docker health check (#1979)
• 353aa08 chore: Switch workspace mode off for vulnerability check (#1953)
• 199ae8d chore: Update test filtering logic (#1992)
• d022db1 chore: Use Go 1.22 (#1982)

v0.33.0

Cerbos 0.33.0

View the full release notes at https://docs.cerbos.dev/cerbos/latest/releases/v0.33.0.html

Changelog

Features

• 323bbf2 feat: Add audit call ID to API responses (#1911)
• f6b9d06 feat: Produce output if condition fails (#1932)
• e66df40 feat: Record policy source attributes in audit log (#1889)

Enhancements

• d2d7fe0 enhancement!: Drop support for tracing configuration block (#1898)
• a594f90 enhancement!: Remove deprecated client package (#1904)
• 8226beb enhancement(helm): Add podLabels to the chart (#1912)
• af85ff2 enhancement: Add Admin API update timestamp to policy (#1903)
• ddcc341 enhancement: Configurable database connection retries (#1926)
• 66e01b8 enhancement: Pass all HTTP headers through unmodified from gRPC-Gateway (#1934)

Bug fixes

• 3ace137 fix(planner): Query planner doesn't use stable time (#1949)
• 89dcf2c fix(planner): Query planner must (pre)evaluate expressions with resource kind (#1921)
• 6352365 fix: Don't forward connection-specific headers via gRPC-Gateway (#1938)
• cb06545 fix: Restore User-Agent header aliasing (#1941)

Documentation

• 2db232f chore: Revert "docs: Fix image URLs (#1943)" (#1951)
• cfa36ef docs: Add policy variable examples (#1940)
• 5072b93 docs: Fix image URLs (#1943)
• 4194f6e docs: Fix incorrect policy rule in tutorial (#1930)
• 7affa69 docs: Remove older versions (#1942)

Chores

• b40cf5a chore(deps): Bump github.com/cloudflare/circl from 1.3.3 to 1.3.7 (#1935)
• 015f51a chore(deps): Bump github.com/cloudflare/circl from 1.3.5 to 1.3.7 in /tools (#1936)
• d9d22e5 chore(deps): Bump github.com/go-git/go-git/v5 from 5.7.0 to 5.11.0 in /tools (#1925)
• d871844 chore(deps): Bump golang.org/x/crypto from 0.15.0 to 0.17.0 in /tools (#1916)
• 002b035 chore(deps): Downgrade github.com/chigopher/pathlib (#1924)
• e7d6014 chore(deps): Tidy dependencies (#1899)
• 24acf48 chore(deps): Tidy dependencies (#1907)
• 7c43413 chore(deps): Update actions/setup-go action to v5 (#1906)
• 7f098db chore(deps): Update github actions deps to v3 (major) (#1915)
• 5d2264b chore(deps): Update github actions deps to v4 (major) (#1923)
• 852cfff chore(deps): Update go deps (#1896)
• 6a5f22b chore(deps): Update go deps (#1905)
• a939aa0 chore(deps): Update go deps (#1914)
• d79fa22 chore(deps): Update go deps (#1922)
• 73e1971 chore(deps): Update go deps (#1928)
• ca453c7 chore(deps): Update go deps (#1933)
• e128d4a chore(deps): Update go deps (#1950)
• 288e33c chore(deps): Update google-github-actions/auth action to v2 (#1897)
• 39b39be chore(deps): Update google-github-actions/setup-gcloud action to v2 (#1929)
• 9c6b6d9 chore(deps): Update module golang.org/x/crypto to v0.17.0 [security] (#1917)
• a45ddc2 chore(docs): Readme update (#1937)
• e94eab9 chore(release): Add 0.32.0 release notes (#1894)
• fdc3a82 chore(release): Add 0.33.0 release notes (#1948)
• 704728f chore(release): Prepare release 0.33.0
• 0551fc4 chore(test): Ignore source attributes in cerbosctl tests (#1908)
• cf9a44c chore(version): Bump version to 0.33.0
• cc90cd8 chore: Tag API module during release (#1909)
• 5fd68b2 chore: Update buf modules (#1902)
• 2de571b chore: Update copyright header (#1931)
• 3027bc9 chore: YAML to Protobuf parser (#1939)

v0.32.0

Cerbos 0.32.0

View the full release notes at https://docs.cerbos.dev/cerbos/latest/releases/v0.32.0.html

Changelog

Features

• ce425d9 feat!: Switch metrics to OpenTelemetry and add support for push metrics (#1887)
• 1722454 feat: Better support for OTLP (#1886)

Enhancements

• e87b533 enhancement(ci): Mirror Cerbos image to Docker Hub (#1867)
• f2ff20d enhancement: Detect and warn about invalid test suites (#1868)
• c055d13 enhancement: Include expected effect and outputs for successful tests (#1881)

Bug fixes

• 12354c3 fix: Ignore empty files in policy repository (#1882)

Documentation

• 5e254ae docs: Remove outdated playground section (#1864)

Chores

• c62c562 chore(ci): Replace deprecated GoReleaser --skip-publish flag (#1893)
• 9fe252a chore(deps): Bump github.com/sigstore/cosign/v2 from 2.0.3-0.20230523133326-0544abd8fc8a to 2.2.1 in /tools (#1869)
• da82249 chore(deps): Bump go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc from 0.45.0 to 0.46.0 (#1871)
• e028281 chore(deps): Update amannn/action-semantic-pull-request action to v5.4.0 (#1862)
• fd30cac chore(deps): Update bufbuild/buf-setup-action action to v1.28.0 (#1873)
• 72f67c3 chore(deps): Update github actions deps (#1884)
• ebb56d2 chore(deps): Update go deps (#1863)
• 4662108 chore(deps): Update go deps (#1874)
• d51d9c9 chore(deps): Update go deps (#1885)
• 23de714 chore(deps): Update go deps (#1888)
• fef22d1 chore(release): Prepare release 0.32.0
• 8f52e1e chore(test): Fix Kafka integration tests (#1878)
• 7a72711 chore(version): Bump version to 0.32.0
• 761a3dc chore: Access to check options from custom checkers (#1861)
• 16f081b chore: Add pre-cache API to TestFixtureGetter (#1866)
• cf21eb0 chore: Add tests to check fixture loading from testdata (#1877)
• eba4b3f chore: Allow LoadTestFixture to continue on error (#1859)
• d51f597 chore: Enable Otel interceptor for grpc-gateway client (#1892)
• 3dc5ff8 chore: Fix legacy OTLP exporter initialization (#1891)
• 7dd5d0c chore: Simplify residual expression (#1876)
• 77e836e chore: Upgrade to CEL 0.18 (#1860)

v0.31.0

Cerbos 0.31.0

View the full release notes at https://docs.cerbos.dev/cerbos/latest/releases/v0.31.0.html

Changelog

Features

• 3ec2930 feat!: Make runtime.effectiveDerivedRoles available in CEL expressions (#1778)
• 111c4a3 feat: Reload certificates when they change on disk (#1841)

Enhancements

• d4c39c9 enhancement(api): Separate Go module for API definitions (#1801)
• 0d63f1e enhancement(api): Use toolchain to manage Go version used (#1804)
• 56f7683 enhancement(helm): Add support for defining topology spread constraints (#1821)
• c8af11b enhancement(security)!: Configure gRPC max concurrent streams (#1853)
• 055e476 enhancement: Allow parsing JWTs with legacy keysets (#1823)
• 0624962 enhancement: Deprecate client package (#1815)
• 7123a67 enhancement: Expose Index interface from private (#1847)
• 21315fe enhancement: Expose private Check API (#1843)
• 90bd6cd enhancement: Lenient scope search in tests (#1838)
• dff2dcc enhancement: Migrate to protovalidate (#1800)

Bug fixes

• d135222 fix(docs): Correct link to resources test fixture schema (#1829)
• c6a158a fix(test): Fix resource kind in test (#1813)

Documentation

• 25ba555 docs: Remove unstable warning from Admin API (#1835)
• 85e4eac docs: Update Neovim yamlls configuration section (#1824)

Chores

• ff152ce chore(deps): Bump github.com/docker/docker from 24.0.6+incompatible to 24.0.7+incompatible (#1856)
• 12dc45a chore(deps): Bump github.com/docker/docker from 24.0.6+incompatible to 24.0.7+incompatible in /tools (#1855)
• 4edc6d6 chore(deps): Bump golang.org/x/net from 0.15.0 to 0.17.0 in /api/genpb (#1830)
• e494600 chore(deps): Bump golang.org/x/net from 0.15.0 to 0.17.0 in /tools (#1831)
• ab81d8e chore(deps): Bump golang.org/x/net from 0.16.0 to 0.17.0 (#1833)
• f134903 chore(deps): Bump google.golang.org/grpc from 1.58.0 to 1.58.3 in /tools (#1848)
• 0707972 chore(deps): Update actions/checkout action to v4 (#1806)
• 01a6016 chore(deps): Update amannn/action-semantic-pull-request action to v5.3.0 (#1819)
• 58d2969 chore(deps): Update bufbuild/buf-lint-action action to v1.1.0 (#1840)
• ce03553 chore(deps): Update bufbuild/buf-setup-action action to v1.27.0 (#1827)
• 42e6e61 chore(deps): Update bufbuild/buf-setup-action action to v1.27.1 (#1844)
• 8fb0092 chore(deps): Update bufbuild/buf-setup-action action to v1.27.2 (#1851)
• ecb6b49 chore(deps): Update github actions deps to v3 (major) (#1807)
• f74ecf8 chore(deps): Update go deps (#1805)
• bba5a64 chore(deps): Update go deps (#1816)
• d2affcb chore(deps): Update go deps (#1818)
• e8aa142 chore(deps): Update go deps (#1826)
• 49bfbe0 chore(deps): Update go deps (#1839)
• 1295185 chore(deps): Update go deps (#1845)
• 5f6b938 chore(deps): Update go deps (#1852)
• 81f2745 chore(deps): Update goreleaser/goreleaser-action action to v5 (#1808)
• 4512ca7 chore(docs): Add link to Laravel SDK (#1810)
• 5bfdcbb chore(release): Add 0.31.0 release notes (#1849)
• 625bc0d chore(release): Prepare release 0.31.0
• 9bd8557 chore(version): Bump version to 0.31.0
• e16f1d3 chore: Drop replace directive for API module (#1802)
• a624bed chore: Expose discovered test fixture paths (#1854)
• 41a2a06 chore: Remove coverage badge (#1811)
• a6728b1 chore: Remove ghz from tools deps (#1857)
• 7e6b062 chore: Rename Cerbos Cloud to Cerbos Hub (#1836)
• 9753162 chore: Set go.mod version to 1.21 (#1809)
• 341baa4 chore: Set go.work version to 1.21 (#1817)
• 8756210 chore: Update Buf modules (#1822)

v0.30.0

Cerbos 0.30.0

View the full release notes at https://docs.cerbos.dev/cerbos/latest/releases/v0.30.0.html

Changelog

Features

• 304586b feat!: Check variable references at compile time (#1772)
• b9228f6 feat(client): Add options for intercepting gRPC operations (#1724)
• 24cb3e4 feat: Add cerbosctl command to export policies and schemas from store (#1686)
• 9652c90 feat: Audit log rotation support (#1766)

Enhancements

• 8fd1ac8 enhancement!: Use .cerbos.yaml as conventional name for config file (#1755)
• 5dce9a9 enhancement(helm): Add ability to set clusterIP (#1707)
• 3fbd95e enhancement(helm): Allow an image digest to be provided instead of a tag (#1735)
• 1f6ba2c enhancement: Better error messages from compile command (#1750)
• e2c7af0 enhancement: Clean-up store resources (#1749)
• 4e7d22c enhancement: Compile and run tests from an archive (#1721)
• 6582c70 enhancement: Configurable time skew for JWT validation (#1790)
• 1130d12 enhancement: Configuration to disable API explorer (#1767)
• 4d5d0c5 enhancement: Relax naming conventions for resource kinds, principals and roles (#1762)

Bug fixes

• 0b7a189 fix(docs): Typo in Calling Cerbos (#1726)
• 6b09c62 fix(planner): Lambda body can be a field selection (#1720)
• 91a0d48 fix: Evict policies from cache after disable or enable (#1711)
• a29a992 fix: Ignore invalid expressions (#1799)
• 7bfa52a fix: Normalize Git store subdirectory config to handle leading ./ correctly (#1774)

Documentation

• c7c5f37 docs(sdk): Update SDK examples (#1731)
• 34f6859 docs: Add testdata schema URLs (#1779)
• eaaed3d docs: Caveats of sharing a DB with multiple instances (#1743)
• a8ad220 docs: Fix typo in 03_calling-cerbos.adoc (#1714)
• b606512 docs: Remove deprecated endpoint/rpc (#1734)
• 4fbbe36 docs: Stop building docs for older versions (#1716)
• a2cf9c9 docs: Update examples for handling expressions beginning with quote (#1739)

Chores

• 4a690fd chore(ci): Always run upload-test-times after test (#1756)
• 2b7c99b chore(ci): Create PRs for Homebrew formula updates (#1704)
• 98de402 chore(ci): Debug logging for server tests (#1791)
• 711844a chore(ci): Increase timeout for client tests (#1793)
• bc1a4d5 chore(ci): Publish prerelease images tagged by commit hash (#1736)
• 5691a1b chore(ci): Split snapshots job (#1796)
• 2479397 chore(ci): Switch to Coveralls (#1751)
• b3c81ff chore(ci): Upload test coverage from snapshot builds (#1764)
• fdf5f2e chore(ci): Use experimental 'loopvar' released with Go 1.21 (#1738)
• 3738d7c chore(deps): Bump github.com/cyphar/filepath-securejoin from 0.2.3 to 0.2.4 in /tools (#1788)
• e7aff6e chore(deps): Downgrade pterm to v0.12.66 (#1787)
• 81122c6 chore(deps): Update actions/checkout action to v4 (#1795)
• 0959bda chore(deps): Update bufbuild/buf-setup-action action to v1.25.0 (#1709)
• e4410ce chore(deps): Update bufbuild/buf-setup-action action to v1.25.1 (#1729)
• aa99210 chore(deps): Update bufbuild/buf-setup-action action to v1.26.0 (#1748)
• 2bae859 chore(deps): Update github actions deps (#1759)
• ac28478 chore(deps): Update go deps (#1708)
• cedf358 chore(deps): Update go deps (#1718)
• 3d8dd13 chore(deps): Update go deps (#1730)
• 5b25738 chore(deps): Update go deps (#1747)
• 2f6605d chore(deps): Update go deps (#1760)
• d399486 chore(deps): Update go deps (#1768)
• 53b0ab1 chore(deps): Update go deps (#1780)
• 0b8db17 chore(deps): Update go deps (#1794)
• 2200fcd chore(deps): Update go deps to v2 (major) (#1769)
• fc2f9bc chore(deps): Update helm release postgresql to v12.6.7 (#1681)
• 2d2bcfd chore(deps): Update module github.com/jdxcode/netrc to v1 (#1782)
• 29f1439 chore(deps): Upgrade gRPC middleware to v2 (#1786)
• 7e2ef07 chore(docs): Configure Cloud docs build (#1712)
• aba3b1d chore(docs): Ignore PlaygroundEnabled configuration flag (#1705)
• 15208f9 chore(e2e): Fix output path of the E2E coverage (#1757)
• 792daf7 chore(release): Add 0.30.0 release notes (#1792)
• 953433e chore(release): Prepare release 0.30.0
• a0165f3 chore(version): Bump version to 0.30.0
• 690d90a chore: Mark auxData parameter as optional in OpenAPI spec (#1723)
• 9dd75f4 chore: Move gonum dependency into correct group (#1776)
• cc2d95d chore: Update Go to v1.20 (#1775)
• bfc0f3b chore: Upgrade to CEL 0.17 (#1717)

v0.29.0

Cerbos 0.29.0

View the full release notes at https://docs.cerbos.dev/cerbos/latest/releases/v0.29.0.html

Changelog

Features

• beb3a65 feat: Add tls support kafka (#1667)
• 748b93c feat: Allow reuse of variable definitions between policies (#1646)
• a527424 feat: Allow top-level $schema field in JSON files (#1676)
• fb98b74 feat: Introduce environment-specific global variables (#1645)
• 919245f feat: Lenient scope search (#1655)
• 49faf0a feat: Quit REPL when Ctrl-D is pressed on an empty prompt (#1674)

Enhancements

• cd72c0c enhancement(helm): Add config checksum to pod annotations so that deployment restarts on config changes (#1693)
• c1cfadc enhancement(sdk): Add getters for principal and resource ID fields (#1660)
• f21ecf7 enhancement: Add ListPolicies filtering ability to cerbosctl get (#1649)
• c2fcf27 enhancement: Add filtering in the ListPolicies RPC (#1642)

Bug fixes

• 210ccc3 fix: Fix overlay e2e test caused by troublesome bitnami postgres image (#1677)
• 2a86019 fix: Log request_id in the grpc "Handled request" log message (#1691)
• ad6928b fix: Obtain write lock while reloading index (#1659)

Chores

• 9454970 chore(ci): Disable cache of Go installation for GolangCI (#1662)
• ad00877 chore(ci): Don't use built-in caching in setup-go action (#1678)
• d2dbcd0 chore(ci): Downgrade telepresence (#1641)
• 646f234 chore(deps): Bump github.com/lestrrat-go/jwx/v2 from 2.0.9 to 2.0.11 (#1643)
• 5e32834 chore(deps): Update bufbuild/buf-setup-action action to v1.22.0 (#1665)
• 891c211 chore(deps): Update bufbuild/buf-setup-action action to v1.23.1 (#1671)
• 92c6fec chore(deps): Update cloud-api to 0.1.4 (#1698)
• 3dbb7b1 chore(deps): Update github actions deps (#1652)
• 65c8236 chore(deps): Update github actions deps (#1697)
• dd5cd82 chore(deps): Update go deps (#1651)
• b0904d2 chore(deps): Update go deps (#1666)
• 07df282 chore(deps): Update go deps (#1672)
• 0c5fb88 chore(deps): Update go deps (#1680)
• c35feeb chore(deps): Update go deps (#1696)
• a7d5e37 chore(deps): Update module github.com/jackc/pgx/v4 to v5 (#1653)
• 79826d7 chore(e2e): Run govulncheck without verbose flag (#1675)
• 8a4f6a6 chore(release): Add 0.29.0 release notes (#1699)
• ddba2c4 chore(release): Prepare release 0.29.0
• 44c7afa chore(test): Add E2E test for lenient scopes (#1657)
• 37762a8 chore(version): Bump version to 0.29.0
• 4600eb2 chore: Add parentheses after the function name getSeconds (#1684)

v0.28.0

Cerbos 0.28.0

View the full release notes at https://docs.cerbos.dev/cerbos/latest/releases/v0.28.0.html

Changelog

Features

• 1f0a4d5 feat: Ability to verify outputs in policy tests (#1634)
• 9ae31dc feat: Support different compression algorithms for kafka audit (#1636)

Bug fixes

• 5925445 fix: Only produce outputs for activated rules (#1631)
• 11fb4de fix: Render the condition correctly in an Engine trace (#1637)

Chores

• 94b1de3 chore(release): Add 0.28.0 release notes (#1639)
• 36093bc chore(release): Prepare release 0.28.0
• 669c33e chore(test): Remove manual setup from overlay E2E test (#1633)
• a6fba65 chore(version): Bump version to 0.28.0
• c823d98 chore: Add output support to Playground API (#1632)

v0.27.0

Cerbos 0.27.0

View the full release notes at https://docs.cerbos.dev/cerbos/latest/releases/v0.27.0.html

Changelog

Features

• d0b3f79 feat: Storage overlay (#1560)
• 0ce1346 feat: User-defined output from policy evaluation (#1594)
• 7570df3 feat: Validate policy and test files with JSON schema (#1526)

Enhancements

• ded521c enhancement(helm): Allow LoadBalancerIP to be set (#1605)
• 41a1753 enhancement(helm): Upgrade to HPA v2 API (#1548)
• 620f980 enhancement(helm): Volume mounts for Cerbos Cloud (#1547)
• 7220e09 enhancement(sdk): Add support for user-defined outputs (#1620)
• 60ff224 enhancement: Add CEL math extension (#1569)
• 6a24371 enhancement: Handle schemas folder being in wrong place with more verbose error (#1550)
• b20c182 enhancement: Verify required tables are present in the db (#1584)

Bug fixes

• 3b64da7 fix: Add helmfile init step to e2e GH actions setup (#1583)
• 7870db5 fix: Give Overlay interface precendence in storage switch on server startup (#1573)
• 6af9d52 fix: Introduce custom temp directory creation function with pathname length limit for uds (#1541)
• 8f66068 fix: Mark /tmp as a container volume (#1546)
• ad1c460 fix: Return correct error code when store is invalid (#1592)
• 0f78104 fix: Update e2e overlay test seed file with newly added output data (#1611)
• b49d27d fix: Use IncludeMetadata option on all gRPC requests (#1586)

Documentation

• fc5ea9b docs: Add page with output example (#1622)
• 562dfee docs: Clarify policy repository layout (#1551)
• cb892e7 docs: Fix typo in charAt example (#1606)

Chores

• 85e5d7a chore(ci): Disable automatic label updates (#1544)
• b9382cf chore(ci): Fix data race in store test (#1537)
• 4029bd2 chore(ci): Update Renovate labels (#1565)
• c8d2d20 chore(deps): Bump github.com/cloudflare/circl from 1.1.0 to 1.3.3 (#1577)
• dcc269d chore(deps): Bump github.com/docker/distribution from 2.8.1+incompatible to 2.8.2+incompatible in /tools (#1578)
• 8eda680 chore(deps): Bump github.com/goreleaser/nfpm/v2 from 2.28.0 to 2.29.0 in /tools (#1599)
• ee53b22 chore(deps): Bump github.com/sigstore/rekor from 1.0.1 to 1.1.1 in /tools (#1563)
• a709152 chore(deps): Bump github.com/sigstore/rekor from 1.1.1 to 1.2.0 in /tools (#1600)
• 1b30b4c chore(deps): Update Antora to 3.1.2 (#1575)
• 5aca50e chore(deps): Update bufbuild/buf-setup-action action to v1.18.0 (#1567)
• 26f2579 chore(deps): Update github actions deps (#1597)
• b00915b chore(deps): Update github actions deps (#1625)
• 6d06a49 chore(deps): Update go deps (#1553)
• 5c51c4c chore(deps): Update go deps (#1556)
• 71d6d68 chore(deps): Update go deps (#1568)
• 2082630 chore(deps): Update go deps (#1581)
• b6ee759 chore(deps): Update go deps (#1596)
• f750c1a chore(deps): Update go deps (#1624)
• e900c62 chore(deps): Update google-github-actions/setup-gcloud action to v1.1.1 (#1582)
• c4b3ed1 chore(deps): Update module github.com/envoyproxy/protoc-gen-validate to v1 (#1557)
• c51804d chore(docs): Add paths to test schema files (#1564)
• f36cdee chore(docs): Fix referencing non-existent format flag (#1617)
• 4e2999e chore(release): Add v0.27.0 release notes (#1628)
• 5137c91 chore(release): Prepare release 0.27.0
• d82d66e chore(test): Overlay e2e test (#1579)
• 16d8656 chore(version): Bump version to 0.27.0
• 9c12c4f chore: Add bundle driver info to telemetry (#1545)
• 294e5bf chore: Change Cloud API version to api.cerbos.cloud/v1 (#1559)
• cac7569 chore: Remove the cerbos prefix from output keys (#1614)
• 1d26a97 chore: Update to go 1.19 (#1543)