# Cerbos v0.19.0

## Highlights

The `PlanResources` API now validates requests using [schemas](https://docs.cerbos.dev/cerbos/prerelease/policies/schemas) to flag any invalid or unknown attributes. Similar to the `CheckResources` API, the [schema enforcement level](https://docs.cerbos.dev/cerbos/prerelease/configuration/schema) defined in the configuration file determines whether invalid requests are processed with warnings or completely rejected.

This release also includes several fixes to the `PlanResources` output to simplify the plan produced for expressions that make use of higher-order functions like `in` and `exists`. The AST produced for logical operators like `and` and `or` is now more consistent regardless of the operator used as well.

Distributed traces can now be exported to collectors that support [OTLP](https://github.com/open-telemetry/opentelemetry-specification/blob/main/specification/protocol/otlp.md) by using the new [`otlp` exporter](https://docs.cerbos.dev/cerbos/prerelease/configuration/tracing#otlp). Thanks to community member @rcrowe for contributing this feature.

## Changelog

### Bug Fixes

- Avoid short-circuit when expressions access non-existent attributes ( [#1056](https://github.com/cerbos/cerbos/pull/1056))

- Handle missing scopes in playground validate API ( [#1042](https://github.com/cerbos/cerbos/pull/1042))

- Transform `&&`/`||` to `and`/`or` in ASTs ( [#1021](https://github.com/cerbos/cerbos/pull/1021))

- Transform maps to lists for membership test ( [#1032](https://github.com/cerbos/cerbos/pull/1032))

- Transform maps to lists in comprehension expressions ( [#1044](https://github.com/cerbos/cerbos/pull/1044))

- Transform membership test in empty list to false ( [#1059](https://github.com/cerbos/cerbos/pull/1059))

### Enhancements

- Export traces via OTLP to a collector ( [#1017](https://github.com/cerbos/cerbos/pull/1017))

- Output detailed index build errors when the number of errors is low ( [#1038](https://github.com/cerbos/cerbos/pull/1038))

- Validate schemas when planning queries ( [#1013](https://github.com/cerbos/cerbos/pull/1013))

### Documentation

- Add AWS Cognito integration demo docs ( [#1037](https://github.com/cerbos/cerbos/pull/1037))

- Add link to AWS Cognito docs in sidebar ( [#1039](https://github.com/cerbos/cerbos/pull/1039))

- Updating customer logos ( [#1054](https://github.com/cerbos/cerbos/pull/1054))

- Use analogy to explain derived roles ( [#1015](https://github.com/cerbos/cerbos/pull/1015))

### Chores

- Add function to compile a set of files ( [#1046](https://github.com/cerbos/cerbos/pull/1046))

- Bump bufbuild/buf-lint-action from 1.0.0 to 1.0.1 ( [#1047](https://github.com/cerbos/cerbos/pull/1047))

- Bump bufbuild/buf-setup-action from 1.5.0 to 1.6.0 ( [#1048](https://github.com/cerbos/cerbos/pull/1048))

- Bump github.com/alecthomas/kong from 0.6.0 to 0.6.1 ( [#1028](https://github.com/cerbos/cerbos/pull/1028))

- Bump github.com/alecthomas/participle/v2 ( [#1026](https://github.com/cerbos/cerbos/pull/1026))

- Bump github.com/alecthomas/participle/v2 from 2.0.0-alpha11 to 2.0.0-beta.2 ( [#1051](https://github.com/cerbos/cerbos/pull/1051))

- Bump github.com/bufbuild/buf from 1.5.0 to 1.6.0 in /tools ( [#1053](https://github.com/cerbos/cerbos/pull/1053))

- Bump github.com/fergusstrange/embedded-postgres ( [#1029](https://github.com/cerbos/cerbos/pull/1029))

- Bump github.com/google/gops from 0.3.23 to 0.3.24 ( [#1049](https://github.com/cerbos/cerbos/pull/1049))

- Bump github.com/lestrrat-go/jwx/v2 from 2.0.2 to 2.0.3 ( [#1025](https://github.com/cerbos/cerbos/pull/1025))

- Bump github.com/minio/minio-go/v7 from 7.0.28 to 7.0.29 ( [#1033](https://github.com/cerbos/cerbos/pull/1033))

- Bump github.com/pterm/pterm from 0.12.41 to 0.12.42 ( [#1050](https://github.com/cerbos/cerbos/pull/1050))

- Bump github.com/stretchr/testify from 1.7.2 to 1.7.5 ( [#1052](https://github.com/cerbos/cerbos/pull/1052))

- Bump github.com/vektra/mockery/v2 from 2.12.3 to 2.13.1 in /tools ( [#1024](https://github.com/cerbos/cerbos/pull/1024))

- Bump go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc ( [#1027](https://github.com/cerbos/cerbos/pull/1027))

- Bump google.golang.org/protobuf ( [#1023](https://github.com/cerbos/cerbos/pull/1023))

- Bump helm/kind-action from 1.2.0 to 1.3.0 ( [#1022](https://github.com/cerbos/cerbos/pull/1022))

- Bump version to 0.19.0

- Fix confdocs panic when no struct tag is provided ( [#1020](https://github.com/cerbos/cerbos/pull/1020))

- Fix flaky query plan test by sorting map keys in deterministic order ( [#1043](https://github.com/cerbos/cerbos/pull/1043))

- Fix flaky update store test ( [#1045](https://github.com/cerbos/cerbos/pull/1045))

- Ignore OpenTelemetry error message about sampler ( [#1031](https://github.com/cerbos/cerbos/pull/1031))

- Split tests across multiple runners ( [#1019](https://github.com/cerbos/cerbos/pull/1019))