Cerbos v0.46.0

Highlights

This release contains a couple of bug fixes and updates to the audit logging system to record more information about the policy sources used and the PDP itself.

Changelog

Bug Fixes

  • Handle const false DENY nodes in role-level query planning (#2644)

  • Handle rule-less policies for multi-tenant fallthrough (#2649)

Features

  • Include policy source in audit logs (#2624)

Enhancements

  • Add embedded PDP metadata to audit logs (#2625)

  • Stickier PDP IDs (#2641)

Documentation

  • Fix css for logo on hover (#2628)

Chores

  • Bump form-data from 4.0.2 to 4.0.4 in /npm/test/registry (#2654)

  • Bump github.com/docker/docker from 28.2.2+incompatible to 28.3.3+incompatible in /tools (#2655)

  • Bump helm.sh/helm/v3 from 3.17.3 to 3.18.4 in /tools (#2632)

  • Bump version to 0.46.0

  • Enable gzip and increase response size limit for cerbosctl (#2631)

  • Rename cerbosctl hub like filter to contains (#2623)

  • Set MySQL tag (#2647)

  • Temporarily disable MySQL E2E tests (#2650)

  • Update github actions deps (#2642)

  • Update go deps (#2626)

  • Update go deps (#2635)

  • Update go deps (#2643)

  • Update go deps (#2651)

  • Update node.js deps (#2652)

  • Update pnpm to v10.13.1 (#2636)

  • Update sigstore/cosign-installer action to v3.9.1 (#2627)

  • Use new Bitnami repository (#2640)

  • Use official MySQL image in E2E tests (#2646)

  • update module helm.sh/helm/v3 to v3.18.4 [security] (#2633)