Cerbos v0.46.0

Highlights

This release contains a couple of bug fixes and updates to the audit logging system to record more information about the policy sources used and the PDP itself.

Changelog

Bug Fixes

• Handle const false DENY nodes in role-level query planning ( #2644)
• Handle rule-less policies for multi-tenant fallthrough ( #2649)

Features

• Include policy source in audit logs ( #2624)

Enhancements

• Add embedded PDP metadata to audit logs ( #2625)
• Stickier PDP IDs ( #2641)

Documentation

• Fix css for logo on hover ( #2628)

Chores

• Bump form-data from 4.0.2 to 4.0.4 in /npm/test/registry ( #2654)
• Bump github.com/docker/docker from 28.2.2+incompatible to 28.3.3+incompatible in /tools ( #2655)
• Bump helm.sh/helm/v3 from 3.17.3 to 3.18.4 in /tools ( #2632)
• Bump version to 0.46.0
• Enable gzip and increase response size limit for cerbosctl ( #2631)
• Rename cerbosctl hub like filter to contains ( #2623)
• Set MySQL tag ( #2647)
• Temporarily disable MySQL E2E tests ( #2650)
• Update github actions deps ( #2642)
• Update go deps ( #2626)
• Update go deps ( #2635)
• Update go deps ( #2643)
• Update go deps ( #2651)
• Update node.js deps ( #2652)
• Update pnpm to v10.13.1 ( #2636)
• Update sigstore/cosign-installer action to v3.9.1 ( #2627)
• Use new Bitnami repository ( #2640)
• Use official MySQL image in E2E tests ( #2646)
• update module helm.sh/helm/v3 to v3.18.4 [security] ( #2633)