Release - v0.39.0 New release published by github-actions[bot] Cerbos 0.39.0 View the full release notes at https://docs.cerbos.dev/cerbos/latest/releases/v0.39.0.html Changelog Features • 2dcf619 feat: Add Role policies (#2192) (#2260) • 7bd0a2d feat: Add public API for running a PDP in-process (#2297) Enhancements • 8bcd411 enhancement: Add more trace spans to engine (#2324) • e2da55c enhancement: Atomic refreshes for blob storage (#2263) • 7add5fe enhancement: Change how blob storage creates work directories and add metric for the last store refresh (#2284) • 1f532ca enhancement: Display attributes in the cerbosctl inspect policies command (#2301) • f4afc44 enhancement: Get/put cerbosctl role policy support (#2274) • 259eeb0 enhancement: Improvements to atomic refreshes for blob storage (#2283) • 4a9830c enhancement: Keep cached files under base64 encoded directory for blob storage (#2292) • 25bd4c2 enhancement: Remove eager log initialisation from schema validation (#2287) Bug fixes • 3ac50c4 fix(docs): Update Helm doc (#2278) • 670b3fe fix(helm): Allow overriding listen addresses (#2289) • 86cf020 fix(helm): Fix schema definition of initContainers (#2305) • 955a0c4 fix(schema): Support TLS with reverse proxy (#2300) • f901abd fix: Move runtime role policy proto scope level (#2321) Documentation • bfbef28 docs: Add role policies sections (#2253) (#2261) • 05917f2 docs: Document the Cerbos Nix flake (#2309) • 28902c6 docs: Fix missing default value for

storage.hub.remote.disableAutoUpdate

(#2298) • 335a8f2 docs: Spell Datadog properly (#2270) Chores • 494db09 chore(ci): Clear disk space for cache workflow (#2268) • 4291df1 chore(ci): Clear disk space for upload workflow (#2269) • 943078e chore(ci): Clear disk space for vulnerability check (#2271) • 95a39cb chore(ci): Clear disk space on PR run (#2266) • 07d83f6 chore(ci): Set SQL Server image pull policy for E2E tests (#2304) • 607d08c chore(ci): Trust SQL Server certificate (#2307) • 6fb7cf8 chore(deps): Bump github.com/docker/docker from 27.1.0+incompatible to 27.1.1+incompatible in /tools (#2277) • cdd71fe chore(deps): Bump github.com/opencontainers/runc from 1.1.13 to 1.1.14 (#2306) • 7bdbbe7 chore(deps): Update bufbuild/buf-setup-action action to v1.37.0 (#2286) • fd8f19f chore(deps): Update bufbuild/buf-setup-action action to v1.38.0 (#2296) • 07fec41 chore(deps): Update bufbuild/buf-setup-action action to v1.39.0 (#2302) • bc56290 chore(deps): Update bufbuild/buf-setup-action action to v1.41.0 (#2311) • 9b307d2 chore(deps): Update bufbuild/buf-setup-action action to v1.42.0 (#2320) • 6c10a02 chore(deps): Update github actions deps (#2275) • 21c5bc6 chore(deps): Update go deps (#2276) • 5508335 chore(deps): Update go deps (#2285) • ba7bad9 chore(deps): Update go deps (#2295) • 2481b79 chore(deps): Update go deps (#2303) • 0b79e26 chore(deps): Update go deps (#2310) • <https://github.com/cerbos/cerbos/commit/a1f40a7d6ba872664e40443103… cerbos/cerbos