v2.3.3

2.3.3 (2026-08-30)

Pref changes

• ci: cross-compile multi-architecture IAM images (#8) (bb425e1)

v2.3.2

2.3.2 (2026-08-30)

v2.3.1

2.3.1 (2026-08-29)

Bug Fixes

• paginate automation listings without gaps (b32bbeb)

v2.3.0

2.3.0 (2026-08-28)

Features

• scim: add secure SCIM 2.0 provisioning (7e9029b)

v2.2.0

2.2.0 (2026-08-25)

Features

• authz: add granular scoped checks (3088875)
• iam: authorize entity-specific access (239b6e4)
• authz: define granular permission catalog (5231c92)
• iam: expose granular permission catalog (bf81c5d)
• authz: preserve legacy roles for granular checks (395a9e2)
• iam: reject unknown role permissions (4b62d6c)

Bug Fixes

• iam: expose permission catalog route (1dc00ec)
• api: generate with pinned Go toolchain (874775d)

Test changes

• authz: characterize legacy permission hierarchy (1d3e723)
• rbac: cover granular catalog workflow (2920b18)
• authz: prove granular entity isolation (1400926)

v2.1.0

2.1.0 (2026-08-21)

Features

• add guarded SpiceDB-to-Casbin migration (19eddc9)
• automate SpiceDB-to-Casbin upgrades (51d80ac)
• broadcast Casbin policy invalidations over NATS (60726f4)
• replace SpiceDB with configurable Casbin RBAC (e5f2617)

Bug Fixes

• pin OpenAPI generator version (323017f)

Pref changes

• bound IAM memory under authorization load (64ec251)
• cache Casbin authorization decisions (a8227b5)
• model shared Casbin role bindings directly (1beac94)

Test changes

• add Casbin authorization scale benchmarks (c924813)
• harden authorization benchmark validation (c957f72)

v2.0.1

2.0.1 (2026-08-11)

v2.0.0

2.0.0 (2026-08-10)

⚠ BREAKING CHANGES

• v2 services use NATS and cannot run with the v1 RabbitMQ stack.

Features

• replace RabbitMQ messaging with NATS JetStream (622ea40)

v1.0.2

1.0.2 (2026-07-23)

v1.0.1

1.0.1 (2026-07-20)

Bug Fixes

• release: prepare public image publication (7c977ec)