github pthm/melange v0.6.5
melange v0.6.5

latest releases: cmd/melange/v0.7.4, v0.7.4, melange/v0.7.4...
2 months ago

What's Changed

Security Fix

  • Fix intersection parsing for unions containing tuple-to-userset patterns (#14) - Fixes #13 reported by @jake-wickstrom

    When parsing intersection rules like viewer and (member from group or owner from group), the union containing TupleToUserset (TTU) patterns was silently dropped. This caused the generated SQL to only check the viewer relation, ignoring the group membership requirement entirely.

    If you use intersection rules with from patterns in unions, upgrade immediately.

Other

  • Fix release script to skip pushing root tag if goreleaser already pushed it

Full Changelog: v0.6.4...v0.6.5

Don't miss a new melange release

NewReleases is sending notifications on new releases.