Release - v0.40.0 New release published by github-actions[bot] Cerbos 0.40.0 View the full release notes at https://docs.cerbos.dev/cerbos/latest/releases/v0.40.0.html Changelog Features • 18f8e37 feat(plan): Add support for role policies (#2341) • 9ff41a4 feat: Allow default policy version to be configured in tests (#2352) • 0ead3be feat: Define constants for use in condition expressions (#2364) • 2856d7d feat: Multiple principals and/or resources in a test case (#2338) • fcc3e75 feat: Support constants in

cerbosctl

(#2365) • ee13be0 feat: Use groups of principals and/or resources in test cases (#2340) Enhancements • b2e1f04 enhancement!: Report an error if a test exercised time-based policy conditions without specifying

now

(#2354) • a5b7f8e enhancement(plan): Query plan scope permissions support for resource and principal policies (#2361) • 886248a enhancement: Add user-agent to default allowed headers for CORS (#2345) • debdefc enhancement: Introduce policy scope FALL_THROUGH_ON_ALLOW strategy (#2325) • 018340b enhancement: Make

--verbose

less noisy in combination with

--run

(#2351) • c1d16b9 enhancement: Make

now

fully deterministic (#2353) • d3a3448 enhancement: Make scopePermissions a required field on role policies (#2333) • 2fb5853 enhancement: Role policies parent roles field (#2349) • 8d92d97 enhancement: Validate fixtures files with JSON schemas to improve error messages (#2346) Bug fixes • ba1ebf0 fix(helm): Remove whitespace chomp for priorityClassName so valid yaml is rendered (#2337) • b7e5c77 fix(plan): A policy with only conditional DENY rule must produce

ALWAYS_DENIED

(#2369) • 6093dac fix: Command execution fails with

cerbos run

since v0.39 (#2358) • 5c2d31e fix: Inspect policy output expressions (#2392) • 9851460 fix: Populate path field of validation errors (#2363) Documentation • f8b0a47 docs: Remove extraneous space that breaks rendering (#2347) • 02141da docs: Update gRPC API section (#2387) Chores • c95133d chore(ci): Increase E2E test timeout (#2359) • 591d25d chore(deps): Bump github.com/golang-jwt/jwt/v4 from 4.5.0 to 4.5.1 in /tools (#2378) • 0a49f42 chore(deps): Revert to upstream go-yaml (#2383) • 40ca449 chore(deps): Update bufbuild/buf-setup-action action to v1.45.0 (#2334) • c0fa72b chore(deps): Update bufbuild/buf-setup-action action to v1.47.2 (#2382) • 91ca366 chore(deps): Update dependency node to v22 (#2377) • d6203ed chore(deps): Update dependency verdaccio to v6 (#2357) • 254d95a chore(deps): Update github actions deps (#2332) • 3cc8070 chore(deps): Update github actions deps (#2375) • 555e227 chore(deps): Update go deps (#2331) • 6e20018 chore(deps): Update go deps (#2335) • 04d11c5 chore(deps): Update go deps (#2355) • f3539fe chore(deps): Update go deps (#2360) • 576637c chore(deps): Update go deps (#2367) • 3e47658 chore(deps): Update go deps (#2376) • d9ca1ed chore(deps): Update go deps (#2381) • e862e9a chore(deps): Update go deps (<https://github.com/cerbos/cerbos/pull/2385|… cerbos/cerbos