Cerbos v0.46.0

Highlights

This release contains a couple of bug fixes and updates to the audit logging system to record more information about the policy sources used and the PDP itself.

Changelog

Bug Fixes

• Handle const false DENY nodes in role-level query planning ( #2644)

• Handle rule-less policies for multi-tenant fallthrough ( #2649)

Features

• Include policy source in audit logs ( #2624)

Enhancements

• Add embedded PDP metadata to audit logs ( #2625)

• Stickier PDP IDs ( #2641)

Documentation

• Fix css for logo on hover ( #2628)

Chores

• Bump form-data from 4.0.2 to 4.0.4 in /npm/test/registry ( #2654)

• Bump github.com/docker/docker from 28.2.2+incompatible to 28.3.3+incompatible in /tools ( #2655)

• Bump helm.sh/helm/v3 from 3.17.3 to 3.18.4 in /tools ( #2632)

• Bump version to 0.46.0

• Enable gzip and increase response size limit for cerbosctl ( #2631)

• Rename cerbosctl hub like filter to contains ( #2623)

• Set MySQL tag ( #2647)

• Temporarily disable MySQL E2E tests ( #2650)

• Update github actions deps ( #2642)

• Update go deps ( #2626)

• Update go deps ( #2635)

• Update go deps ( #2643)

• Update go deps ( #2651)

• Update node.js deps ( #2652)

• Update pnpm to v10.13.1 ( #2636)

• Update sigstore/cosign-installer action to v3.9.1 ( #2627)

• Use new Bitnami repository ( #2640)

• Use official MySQL image in E2E tests ( #2646)

• update module helm.sh/helm/v3 to v3.18.4 [security] ( #2633)