silo-pkg v3.13.3
SILO-PKG v3.13.3 fixes policy correctness and wildcard performance without changing module paths or the Go 1.26 compatibility floor.
- Preserve distinct
Denystatements with differentNotResourcevalues during policy parsing and merging. - Keep string-condition value boundaries distinct during deduplication.
- Detect
Denyclauses in directly constructed policies before indexing. - Bound wildcard matching while preserving the existing matching semantics and constant auxiliary space.
Consumers should require github.com/pgsty/silo-pkg/v3 v3.13.3 directly. Policies already saved after losing clauses must be restored from their original source; upgrading cannot recover missing JSON statements. Correctly preserved Deny clauses may reject requests previously allowed by the defects.
Validated at a92c54d7ad910060dd6053c2fc38d41f3229bcfe: full tests and race checks, Go 1.26 compatibility, LDAP validation, and vulnerability checks. This is a source-only library release with no binary assets.