Opt-out Preferences

We use third-party cookies that help us analyze how you use this website, store your preferences, and provide the content and advertisements that are relevant to you. However, you can opt out of these cookies by checking "Do Not Sell or Share My Personal Information" and clicking the "Save My Preferences" button. Once you opt out, you can opt in again at any time by unchecking "Do Not Sell or Share My Personal Information" and clicking the "Save My Preferences" button.

Do Not Sell or Share My Personal Information

Cerbos v0.35.1

Highlights

This is a bug-fix release to handle a cache invalidation bug with lenient scope search and a common expression that should be simplified by the query planner.

This release also includes a new work-in-progress Admin API endpoint to inspect the policies in the policy repo and list their properties. Currently it supports listing the actions covered by each policy.

Changelog

Bug Fixes

  • P.attr.workspaces[R.id].role == "OWNER" must be simplified (#2059)

  • Skip compile cache if first candidate doesn’t exist (#2074)

Features

  • Add --client flag to cerbosctl version (#2013)

  • Inspect policies in the store (#2072)

Enhancements

  • Update Otel HTTP semantic conventions (#2018)

Documentation

  • Add fly.io deploy guide (#2039)

  • Add recipe for permission checks in the UI (#2038)

  • Change wording for prerelease caveat (#2029)

  • Embed tutorial videos (#2057)

  • Fix Go version in CONTRIBUTING.md (#2009)

  • Fix broken callout (#2014)

  • Fix leading space in include directive (#1995)

  • Remove policy version from .NET quickstart (#2065)

Chores

  • Add keywords to npm packages (#2046)

  • Add redirects for image URLs (#2035)

  • Add test cases for comments inside condition blocks (#1994)

  • Allow Renovate to update npm tests (#2081)

  • Bump github.com/docker/docker from 24.0.7+incompatible to 24.0.9+incompatible (#2062)

  • Bump github.com/docker/docker from 25.0.4+incompatible to 25.0.5+incompatible in /tools (#2063)

  • Bump github.com/lestrrat-go/jwx/v2 from 2.0.20 to 2.0.21 (#2040)

  • Bump gopkg.in/go-jose/go-jose.v2 from 2.6.1 to 2.6.3 in /tools (#2036)

  • Bump helm.sh/helm/v3 from 3.14.1 to 3.14.2 (#1997)

  • Bump version to 0.35.0

  • Distribute cerbos and cerbosctl via npm (#2011)

  • Fix Postgres data volume for E2E tests (#2061)

  • Fix disk space problem in Publish Dev Containers job (#2037)

  • Fix disk space problem on E2E tests (#2006)

  • Fix duplicate volume mount for postgres in E2E tests (#2077)

  • Generate cosign bundle for binaries (#1993)

  • Improve documentation accessibility (#2069)

  • InspectPolicies returns FQN instead of policy key (#2079)

  • Move version check below title (#2030)

  • Refactor Cerbos Hub configuration (#2047)

  • Skip flakey cerboshub audit backend test (#2010)

  • Unpin cosign version (#2060)

  • Update Node.js deps (#2082)

  • Update bufbuild/buf-lint-action action to v1.1.1 (#2075)

  • Update bufbuild/buf-setup-action action to v1.30.0 (#2042)

  • Update bufbuild/buf-setup-action action to v1.30.1 (#2085)

  • Update cloud-api usage (#2045)

  • Update dependency verdaccio to v5.30.3 (#2086)

  • Update deprecated brews.folder setting in GoReleaser config (#2084)

  • Update dorny/paths-filter action to v3 (#2001)

  • Update go deps (#2000)

  • Update go deps (#2007)

  • Update go deps (#2043)

  • Update go deps (#2053)

  • Update go deps (#2068)

  • Update go deps (#2076)

  • Update go deps to v1 (major) (#2002)

  • Update go deps to v2 (major) (#2003)

  • Update go deps to v2 (major) (#2008)

  • Update go deps to v2 (major) (#2054)

  • Update golangci/golangci-lint-action action to v4 (#2055)

  • Upgrade golang.org/x/net to 0.24 (#2080)

  • Upgrade protobuf to 1.33.0 (#2012)

  • Work around Renovate bug to enable Yarn updates (#2083)