# Cerbos v0.47.0 ## Highlights Running Cerbos on AWS Lambda environments is now easier and more streamlined. Two specially-built binaries with lifecycle event handlers allow Cerbos to be deployed as a standalone function or as an extension to your own function (similar to a sidecar). See [Lambda deployment documentation](https://docs.cerbos.dev/cerbos/latest/deployment/serverless-faas#aws-lambda) for more information. Compiler error messages for missing schema references are now more detailed to help with debugging. The `cerbosctl` commands for working with Cerbos Hub stores are now git-aware. The commands to upload files to Cerbos Hub can detect git repositories and automatically set the commit details if none are provided by the user. A new command to upload files changed in a git commit range has been added as well. ## Changelog ### Features and enhancements - Add upload-git command and git change details option to replace-files command ( [#2695](https://github.com/cerbos/cerbos/pull/2695)) - Add AWS Lambda support ( [#2661](https://github.com/cerbos/cerbos/pull/2661)) - Allow specifying service.trafficDistribution ( [#2693](https://github.com/cerbos/cerbos/pull/2693)) - More detailed schema errors ( [#2663](https://github.com/cerbos/cerbos/pull/2663)) ### Documentation - Add AI policy to contribution guidelines ( [#2710](https://github.com/cerbos/cerbos/pull/2710)) - Add AWS Lambda docs ( [#2740](https://github.com/cerbos/cerbos/pull/2740)) - Fix broken link in README.md ( [#2658](https://github.com/cerbos/cerbos/pull/2658)) ### Other - Added messaging about Hub to PDP logs ( [#2743](https://github.com/cerbos/cerbos/pull/2743)) - Allow overriding TLS settings for cerbosctl hub commands ( [#2724](https://github.com/cerbos/cerbos/pull/2724)) - Batch dependents and deflake CI suites ( [#2677](https://github.com/cerbos/cerbos/pull/2677)) - Better node dedup in query planner ( [#2735](https://github.com/cerbos/cerbos/pull/2735)) - Bump github.com/docker/docker from 27.2.0+incompatible to 28.0.0+incompatible ( [#2666](https://github.com/cerbos/cerbos/pull/2666)) - Bump github.com/go-viper/mapstructure/v2 from 2.3.0 to 2.4.0 ( [#2673](https://github.com/cerbos/cerbos/pull/2673)) - Bump github.com/quic-go/quic-go from 0.54.0 to 0.54.1 in /tools ( [#2731](https://github.com/cerbos/cerbos/pull/2731)) - Bump github.com/ulikunitz/xz from 0.5.12 to 0.5.14 in /tools ( [#2678](https://github.com/cerbos/cerbos/pull/2678)) - Bump version to 0.47.0 - Clean up .goreleaser.yml ( [#2670](https://github.com/cerbos/cerbos/pull/2670)) - Clean up deployment to AWS SAR ( [#2723](https://github.com/cerbos/cerbos/pull/2723)) - Clear disk space quicker ( [#2692](https://github.com/cerbos/cerbos/pull/2692)) - Config option to disable bootstrapping ( [#2691](https://github.com/cerbos/cerbos/pull/2691)) - Decouple rule table ( [#2653](https://github.com/cerbos/cerbos/pull/2653)) - Don’t set `registry-url` to avoid introducing a spurious `NODE_AUTH_TOKEN` ( [#2736](https://github.com/cerbos/cerbos/pull/2736)) - Exclude machineid lib from JS builds ( [#2662](https://github.com/cerbos/cerbos/pull/2662)) - Fix e2e blob test by guaranteeing policy existence ( [#2672](https://github.com/cerbos/cerbos/pull/2672)) - Fix e2e overlay test ( [#2671](https://github.com/cerbos/cerbos/pull/2671)) - Fix flaky remote source tests ( [#2696](https://github.com/cerbos/cerbos/pull/2696)) - Implement io.Closer for Lambda function handler ( [#2689](https://github.com/cerbos/cerbos/pull/2689)) - Increase blob e2e sleep period ( [#2684](https://github.com/cerbos/cerbos/pull/2684)) - Increase E2E blob store update interval ( [#2720](https://github.com/cerbos/cerbos/pull/2720)) - Increase e2e blob store sleep for minio startup ( [#2699](https://github.com/cerbos/cerbos/pull/2699)) - Move all Minio images to bitnamilegacy ( [#2722](https://github.com/cerbos/cerbos/pull/2722)) - Poll for policy existence in blob e2e tests ( [#2706](https://github.com/cerbos/cerbos/pull/2706)) - Publish AWS Lambda extension to SAR ( [#2719](https://github.com/cerbos/cerbos/pull/2719)) - Publish lambda handler to AWS SAR ( [#2707](https://github.com/cerbos/cerbos/pull/2707)) - Remove disableSSL and add protocol to the endpoint query param ( [#2715](https://github.com/cerbos/cerbos/pull/2715)) - Remove superfluous compile manager subscription mechanism ( [#2686](https://github.com/cerbos/cerbos/pull/2686)) - Rename lambda release directories for consistency ( [#2725](https://github.com/cerbos/cerbos/pull/2725)) - Set minimum age for Renovate dependencies ( [#2708](https://github.com/cerbos/cerbos/pull/2708)) - Support Hub config in Lambda ( [#2729](https://github.com/cerbos/cerbos/pull/2729)) - Test publishing to SAR ( [#2713](https://github.com/cerbos/cerbos/pull/2713)) - Update Buf dependencies ( [#2737](https://github.com/cerbos/cerbos/pull/2737)) - Update GitHub Actions deps to v5 (major) ( [#2712](https://github.com/cerbos/cerbos/pull/2712)) - Update Go deps ( [#2711](https://github.com/cerbos/cerbos/pull/2711)) - Update Go deps ( [#2717](https://github.com/cerbos/cerbos/pull/2717)) - Update Go deps ( [#2727](https://github.com/cerbos/cerbos/pull/2727)) - Update Go deps ( [#2732](https://github.com/cerbos/cerbos/pull/2732)) - Update Go deps ( [#2739](https://github.com/cerbos/cerbos/pull/2739)) - Update Go deps ( [#2744](https://github.com/cerbos/cerbos/pull/2744)) - Update Node.js deps ( [#2718](https://github.com/cerbos/cerbos/pull/2718)) - Update Node.js deps ( [#2733](https://github.com/cerbos/cerbos/pull/2733)) - Update Node.js deps ( [#2738](https://github.com/cerbos/cerbos/pull/2738)) - Update Node.js deps ( [#2745](https://github.com/cerbos/cerbos/pull/2745)) - Update actions/setup-go action to v6 ( [#2701](https://github.com/cerbos/cerbos/pull/2701)) - Update amannn/action-semantic-pull-request action to v6 ( [#2681](https://github.com/cerbos/cerbos/pull/2681)) - Update dawidd6/action-download-artifact action to v11 ( [#2682](https://github.com/cerbos/cerbos/pull/2682)) - Update dependency helmfile/helmfile to v1.1.6 ( [#2687](https://github.com/cerbos/cerbos/pull/2687)) - Update github actions deps ( [#2665](https://github.com/cerbos/cerbos/pull/2665)) - Update github actions deps ( [#2669](https://github.com/cerbos/cerbos/pull/2669)) - Update github actions deps ( [#2675](https://github.com/cerbos/cerbos/pull/2675)) - Update github actions deps ( [#2697](https://github.com/cerbos/cerbos/pull/2697)) - Update github actions deps to v3 (major) ( [#2683](https://github.com/cerbos/cerbos/pull/2683)) - Update github actions deps to v5 (major) ( [#2702](https://github.com/cerbos/cerbos/pull/2702)) - Update go deps ( [#2659](https://github.com/cerbos/cerbos/pull/2659)) - Update go deps ( [#2664](https://github.com/cerbos/cerbos/pull/2664)) - Update go deps ( [#2668](https://github.com/cerbos/cerbos/pull/2668)) - Update go deps ( [#2674](https://github.com/cerbos/cerbos/pull/2674)) - Update go deps ( [#2688](https://github.com/cerbos/cerbos/pull/2688)) - Update go deps ( [#2698](https://github.com/cerbos/cerbos/pull/2698)) - Update golangci/golangci-lint-action action to v8 ( [#2703](https://github.com/cerbos/cerbos/pull/2703)) - Update helm.sh/helm/v3 to 3.18.5 ( [#2667](https://github.com/cerbos/cerbos/pull/2667)) - Update module github.com/google/go-licenses to v2 ( [#2704](https://github.com/cerbos/cerbos/pull/2704)) - Update node.js deps ( [#2660](https://github.com/cerbos/cerbos/pull/2660)) - Update node.js deps ( [#2680](https://github.com/cerbos/cerbos/pull/2680)) - Update node.js deps ( [#2700](https://github.com/cerbos/cerbos/pull/2700)) - Use CollectT in EventuallyWithT ( [#2685](https://github.com/cerbos/cerbos/pull/2685)) - Use OIDC to authenticate to publish npm packages ( [#2734](https://github.com/cerbos/cerbos/pull/2734)) - Use default config if one not provided for Lambda ( [#2728](https://github.com/cerbos/cerbos/pull/2728)) - Use faster disk space reclaim action ( [#2694](https://github.com/cerbos/cerbos/pull/2694)) - Use legacy Bitnami registry ( [#2721](https://github.com/cerbos/cerbos/pull/2721)) - update go deps ( [#2679](https://github.com/cerbos/cerbos/pull/2679)) - update go deps ( [#2705](https://github.com/cerbos/cerbos/pull/2705))