# Cerbos v0.9.1

This is a quick patch release to fix an issue that was discovered in config parsing. The `bcrypt` hashes of admin API credentials can contain `$` characters which cause the config loader to treat the subsequent set of characters as the name of an environment variable. We now require the `passwordHash` to be a bcrypt hash that has been base64 encoded. Please note that this is a breaking change. If you have a config file with `server.adminAPI.adminCredentials.passwordHash` set, encode it with base64 to work with this version of Cerbos.

## Highlights

If you have policy tests intermingled with your policies, the `cerbos compile` command will now automatically run those tests. Use the `--skip-tests` flag to switch off this behaviour.

## Changelog

### Bug Fixes

- Base64 encode password hashes in config file ( [#406](https://github.com/cerbos/cerbos/pull/406))

### Features

- Run tests by default in cerbos compile sub command ( [#392](https://github.com/cerbos/cerbos/pull/392))

### Documentation

- Add README to Helm chart ( [#404](https://github.com/cerbos/cerbos/pull/404))

- Determine app-version from component ( [#397](https://github.com/cerbos/cerbos/pull/397))

- Validating and testing policies with GitLab CI ( [#394](https://github.com/cerbos/cerbos/pull/394))

### Chores

- Add .idea to .gitignore ( [#405](https://github.com/cerbos/cerbos/pull/405))

- Add tests for admin credentials config ( [#407](https://github.com/cerbos/cerbos/pull/407))

- Bump github.com/aws/aws-sdk-go from 1.41.6 to 1.41.11 ( [#401](https://github.com/cerbos/cerbos/pull/401))

- Bump github.com/envoyproxy/protoc-gen-validate from 0.6.1 to 0.6.2 ( [#390](https://github.com/cerbos/cerbos/pull/390))

- Bump github.com/lestrrat-go/jwx from 1.2.7 to 1.2.8 ( [#391](https://github.com/cerbos/cerbos/pull/391))

- Bump github.com/tidwall/gjson from 1.9.1 to 1.10.2 ( [#398](https://github.com/cerbos/cerbos/pull/398))

- Bump version to 0.10.0

- Fix dependabot workflow committing issue ( [#400](https://github.com/cerbos/cerbos/pull/400))

- Publish Helm charts to download.cerbos.dev and OCI registry ( [#403](https://github.com/cerbos/cerbos/pull/403))

- Remove GoReleaser mod stanza ( [#389](https://github.com/cerbos/cerbos/pull/389))

- Run make commands to generate NOTICE after dependabot PRs ( [#395](https://github.com/cerbos/cerbos/pull/395))

### Other

- Add contents write permission to Dependabot workflow ( [#402](https://github.com/cerbos/cerbos/pull/402))