cerbos · haines · Apr 28, 2026 · Apr 28, 2026
diff --git a/packages/core/CHANGELOG.md b/packages/core/CHANGELOG.md
@@ -2,6 +2,10 @@
 
 ## [Unreleased]
 
+No notable changes.
+
+## [0.29.0] - 2026-04-28
+
 ### Added
 
 - [`PolicySourceHubRemoteBundle`](https://cerbos.github.io/cerbos-sdk-javascript/interfaces/_cerbos_core.PolicySourceHubRemoteBundle.html) as a possible type for [`AccessLogEntry.policySource`](https://cerbos.github.io/cerbos-sdk-javascript/interfaces/_cerbos_core.AccessLogEntry.html#policysource) and [`DecisionLogEntry.policySource`](https://cerbos.github.io/cerbos-sdk-javascript/interfaces/_cerbos_core.DecisionLogEntry.html#policysource) ([#1418](https://github.com/cerbos/cerbos-sdk-javascript/pull/1418))
@@ -368,7 +372,8 @@
 
 - Common types for gRPC and HTTP clients ([#73](https://github.com/cerbos/cerbos-sdk-javascript/pull/73))
 
-[unreleased]: https://github.com/cerbos/cerbos-sdk-javascript/compare/@cerbos/core@0.28.1...HEAD
+[unreleased]: https://github.com/cerbos/cerbos-sdk-javascript/compare/@cerbos/core@0.29.0...HEAD
+[0.29.0]: https://github.com/cerbos/cerbos-sdk-javascript/compare/@cerbos/core@0.28.1...@cerbos/core@0.29.0
 [0.28.1]: https://github.com/cerbos/cerbos-sdk-javascript/compare/@cerbos/core@0.28.0...@cerbos/core@0.28.1
 [0.28.0]: https://github.com/cerbos/cerbos-sdk-javascript/compare/@cerbos/core@0.27.1...@cerbos/core@0.28.0
 [0.27.1]: https://github.com/cerbos/cerbos-sdk-javascript/compare/@cerbos/core@0.27.0...@cerbos/core@0.27.1

diff --git a/packages/core/changelog.yaml b/packages/core/changelog.yaml
@@ -1,12 +1,12 @@
-unreleased:
-  type: minor
+releases:
+  - version: 0.29.0
+    date: 2026-04-28
 
-  added:
-    - summary: "[`PolicySourceHubRemoteBundle`](https://cerbos.github.io/cerbos-sdk-javascript/interfaces/_cerbos_core.PolicySourceHubRemoteBundle.html) as a possible type for [`AccessLogEntry.policySource`](https://cerbos.github.io/cerbos-sdk-javascript/interfaces/_cerbos_core.AccessLogEntry.html#policysource) and [`DecisionLogEntry.policySource`](https://cerbos.github.io/cerbos-sdk-javascript/interfaces/_cerbos_core.DecisionLogEntry.html#policysource)"
-      details: Requires a policy decision point server running Cerbos 0.52+.
-      pull: 1418
+    added:
+      - summary: "[`PolicySourceHubRemoteBundle`](https://cerbos.github.io/cerbos-sdk-javascript/interfaces/_cerbos_core.PolicySourceHubRemoteBundle.html) as a possible type for [`AccessLogEntry.policySource`](https://cerbos.github.io/cerbos-sdk-javascript/interfaces/_cerbos_core.AccessLogEntry.html#policysource) and [`DecisionLogEntry.policySource`](https://cerbos.github.io/cerbos-sdk-javascript/interfaces/_cerbos_core.DecisionLogEntry.html#policysource)"
+        details: Requires a policy decision point server running Cerbos 0.52+.
+        pull: 1418
 
-releases:
   - version: 0.28.1
     date: 2026-04-27
 

diff --git a/packages/core/package.json b/packages/core/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@cerbos/core",
-  "version": "0.28.1",
+  "version": "0.29.0",
   "type": "module",
   "description": "Common types used by the Cerbos client libraries",
   "repository": {

diff --git a/packages/embedded-client/CHANGELOG.md b/packages/embedded-client/CHANGELOG.md
@@ -4,6 +4,14 @@
 
 No notable changes.
 
+## [0.5.2] - 2026-04-28
+
+### Changed
+
+- Bump dependency on [@cerbos/core] to 0.29.0 ([#1436](https://github.com/cerbos/cerbos-sdk-javascript/pull/1436))
+
+- Bump dependency on [@cerbos/hub] to 0.5.4 ([#1436](https://github.com/cerbos/cerbos-sdk-javascript/pull/1436))
+
 ## [0.5.1] - 2026-04-27
 
 ### Changed
@@ -93,7 +101,8 @@ No notable changes.
 
 - Client library for new embedded policy decision point servers ([#1312](https://github.com/cerbos/cerbos-sdk-javascript/pull/1312))
 
-[unreleased]: https://github.com/cerbos/cerbos-sdk-javascript/compare/@cerbos/embedded-client@0.5.1...HEAD
+[unreleased]: https://github.com/cerbos/cerbos-sdk-javascript/compare/@cerbos/embedded-client@0.5.2...HEAD
+[0.5.2]: https://github.com/cerbos/cerbos-sdk-javascript/compare/@cerbos/embedded-client@0.5.1...@cerbos/embedded-client@0.5.2
 [0.5.1]: https://github.com/cerbos/cerbos-sdk-javascript/compare/@cerbos/embedded-client@0.5.0...@cerbos/embedded-client@0.5.1
 [0.5.0]: https://github.com/cerbos/cerbos-sdk-javascript/compare/@cerbos/embedded-client@0.4.0...@cerbos/embedded-client@0.5.0
 [0.4.0]: https://github.com/cerbos/cerbos-sdk-javascript/compare/@cerbos/embedded-client@0.3.0...@cerbos/embedded-client@0.4.0

diff --git a/packages/embedded-client/changelog.yaml b/packages/embedded-client/changelog.yaml
@@ -1,7 +1,16 @@
-unreleased:
-  type: patch
-
 releases:
+  - version: 0.5.2
+    date: 2026-04-28
+
+    bumped:
+      "@cerbos/core":
+        to: 0.29.0
+        pull: 1436
+
+      "@cerbos/hub":
+        to: 0.5.4
+        pull: 1436
+
   - version: 0.5.1
     date: 2026-04-27
 

diff --git a/packages/embedded-client/package.json b/packages/embedded-client/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@cerbos/embedded-client",
-  "version": "0.5.1",
+  "version": "0.5.2",
   "type": "module",
   "description": "Client library for interacting with embedded Cerbos policy decision points from server-side Node.js and browser-based applications",
   "repository": {
@@ -55,8 +55,8 @@
   },
   "dependencies": {
     "@bufbuild/protovalidate": "^1.2.0",
-    "@cerbos/core": "^0.28.1",
-    "@cerbos/hub": "^0.5.3",
+    "@cerbos/core": "^0.29.0",
+    "@cerbos/hub": "^0.5.4",
     "ulid": "^3.0.2"
   },
   "publishConfig": {

diff --git a/packages/embedded/CHANGELOG.md b/packages/embedded/CHANGELOG.md
@@ -4,6 +4,12 @@
 
 No notable changes.
 
+## [0.15.2] - 2026-04-28
+
+### Changed
+
+- Bump dependency on [@cerbos/core] to 0.29.0 ([#1436](https://github.com/cerbos/cerbos-sdk-javascript/pull/1436))
+
 ## [0.15.1] - 2026-04-27
 
 ### Changed
@@ -327,7 +333,8 @@ No notable changes.
 
 - Lite client for interacting with a WebAssembly Cerbos policy bundle ([#249](https://github.com/cerbos/cerbos-sdk-javascript/pull/249))
 
-[unreleased]: https://github.com/cerbos/cerbos-sdk-javascript/compare/@cerbos/embedded@0.15.1...HEAD
+[unreleased]: https://github.com/cerbos/cerbos-sdk-javascript/compare/@cerbos/embedded@0.15.2...HEAD
+[0.15.2]: https://github.com/cerbos/cerbos-sdk-javascript/compare/@cerbos/embedded@0.15.1...@cerbos/embedded@0.15.2
 [0.15.1]: https://github.com/cerbos/cerbos-sdk-javascript/compare/@cerbos/embedded@0.15.0...@cerbos/embedded@0.15.1
 [0.15.0]: https://github.com/cerbos/cerbos-sdk-javascript/compare/@cerbos/embedded@0.14.2...@cerbos/embedded@0.15.0
 [0.14.2]: https://github.com/cerbos/cerbos-sdk-javascript/compare/@cerbos/embedded@0.14.1...@cerbos/embedded@0.14.2

diff --git a/packages/embedded/changelog.yaml b/packages/embedded/changelog.yaml
@@ -1,7 +1,12 @@
-unreleased:
-  type: patch
-
 releases:
+  - version: 0.15.2
+    date: 2026-04-28
+
+    bumped:
+      "@cerbos/core":
+        to: 0.29.0
+        pull: 1436
+
   - version: 0.15.1
     date: 2026-04-27
 

diff --git a/packages/embedded/package.json b/packages/embedded/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@cerbos/embedded",
-  "version": "0.15.1",
+  "version": "0.15.2",
   "type": "module",
   "description": "Client library for interacting with embedded Cerbos policy decision points generated by Cerbos Hub from server-side Node.js and browser-based applications",
   "repository": {
@@ -53,7 +53,7 @@
     "@cerbos/api": "^0.6.0"
   },
   "dependencies": {
-    "@cerbos/core": "^0.28.1",
+    "@cerbos/core": "^0.29.0",
     "ulid": "^3.0.2"
   },
   "publishConfig": {

diff --git a/packages/files/CHANGELOG.md b/packages/files/CHANGELOG.md
@@ -4,6 +4,12 @@
 
 No notable changes.
 
+## [0.6.3] - 2026-04-28
+
+### Changed
+
+- Bump dependency on [@cerbos/core] to 0.29.0 ([#1436](https://github.com/cerbos/cerbos-sdk-javascript/pull/1436))
+
 ## [0.6.2] - 2026-04-27
 
 ### Changed
@@ -252,7 +258,8 @@ No notable changes.
 
 - A package to load Cerbos policies from YAML or JSON files ([#611](https://github.com/cerbos/cerbos-sdk-javascript/pull/611))
 
-[unreleased]: https://github.com/cerbos/cerbos-sdk-javascript/compare/@cerbos/files@0.6.2...HEAD
+[unreleased]: https://github.com/cerbos/cerbos-sdk-javascript/compare/@cerbos/files@0.6.3...HEAD
+[0.6.3]: https://github.com/cerbos/cerbos-sdk-javascript/compare/@cerbos/files@0.6.2...@cerbos/files@0.6.3
 [0.6.2]: https://github.com/cerbos/cerbos-sdk-javascript/compare/@cerbos/files@0.6.1...@cerbos/files@0.6.2
 [0.6.1]: https://github.com/cerbos/cerbos-sdk-javascript/compare/@cerbos/files@0.6.0...@cerbos/files@0.6.1
 [0.6.0]: https://github.com/cerbos/cerbos-sdk-javascript/compare/@cerbos/files@0.5.1...@cerbos/files@0.6.0

diff --git a/packages/files/changelog.yaml b/packages/files/changelog.yaml
@@ -1,7 +1,12 @@
-unreleased:
-  type: patch
-
 releases:
+  - version: 0.6.3
+    date: 2026-04-28
+
+    bumped:
+      "@cerbos/core":
+        to: 0.29.0
+        pull: 1436
+
   - version: 0.6.2
     date: 2026-04-27
 

diff --git a/packages/files/package.json b/packages/files/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@cerbos/files",
-  "version": "0.6.2",
+  "version": "0.6.3",
   "type": "module",
   "description": "Load Cerbos policies from YAML or JSON files",
   "repository": {
@@ -51,7 +51,7 @@
     "@cerbos/api": "^0.6.0"
   },
   "dependencies": {
-    "@cerbos/core": "^0.28.1",
+    "@cerbos/core": "^0.29.0",
     "yaml": "^2.8.3"
   },
   "publishConfig": {

diff --git a/packages/grpc/CHANGELOG.md b/packages/grpc/CHANGELOG.md
@@ -2,12 +2,20 @@
 
 ## [Unreleased]
 
+No notable changes.
+
+## [0.26.0] - 2026-04-28
+
 ### Added
 
 - [`PolicySourceHubRemoteBundle`](https://cerbos.github.io/cerbos-sdk-javascript/interfaces/_cerbos_core.PolicySourceHubRemoteBundle.html) as a possible type for [`AccessLogEntry.policySource`](https://cerbos.github.io/cerbos-sdk-javascript/interfaces/_cerbos_core.AccessLogEntry.html#policysource) and [`DecisionLogEntry.policySource`](https://cerbos.github.io/cerbos-sdk-javascript/interfaces/_cerbos_core.DecisionLogEntry.html#policysource) ([#1418](https://github.com/cerbos/cerbos-sdk-javascript/pull/1418))
 
   Requires a policy decision point server running Cerbos 0.52+.
 
+### Changed
+
+- Bump dependency on [@cerbos/core] to 0.29.0 ([#1436](https://github.com/cerbos/cerbos-sdk-javascript/pull/1436))
+
 ## [0.25.1] - 2026-04-27
 
 ### Changed
@@ -562,7 +570,8 @@
 
 - Separate gRPC client for server-side Node.js applications ([#73](https://github.com/cerbos/cerbos-sdk-javascript/pull/73))
 
-[unreleased]: https://github.com/cerbos/cerbos-sdk-javascript/compare/@cerbos/grpc@0.25.1...HEAD
+[unreleased]: https://github.com/cerbos/cerbos-sdk-javascript/compare/@cerbos/grpc@0.26.0...HEAD
+[0.26.0]: https://github.com/cerbos/cerbos-sdk-javascript/compare/@cerbos/grpc@0.25.1...@cerbos/grpc@0.26.0
 [0.25.1]: https://github.com/cerbos/cerbos-sdk-javascript/compare/@cerbos/grpc@0.25.0...@cerbos/grpc@0.25.1
 [0.25.0]: https://github.com/cerbos/cerbos-sdk-javascript/compare/@cerbos/grpc@0.24.2...@cerbos/grpc@0.25.0
 [0.24.2]: https://github.com/cerbos/cerbos-sdk-javascript/compare/@cerbos/grpc@0.24.1...@cerbos/grpc@0.24.2

diff --git a/packages/grpc/changelog.yaml b/packages/grpc/changelog.yaml
@@ -1,12 +1,17 @@
-unreleased:
-  type: minor
+releases:
+  - version: 0.26.0
+    date: 2026-04-28
 
-  added:
-    - summary: "[`PolicySourceHubRemoteBundle`](https://cerbos.github.io/cerbos-sdk-javascript/interfaces/_cerbos_core.PolicySourceHubRemoteBundle.html) as a possible type for [`AccessLogEntry.policySource`](https://cerbos.github.io/cerbos-sdk-javascript/interfaces/_cerbos_core.AccessLogEntry.html#policysource) and [`DecisionLogEntry.policySource`](https://cerbos.github.io/cerbos-sdk-javascript/interfaces/_cerbos_core.DecisionLogEntry.html#policysource)"
-      details: Requires a policy decision point server running Cerbos 0.52+.
-      pull: 1418
+    added:
+      - summary: "[`PolicySourceHubRemoteBundle`](https://cerbos.github.io/cerbos-sdk-javascript/interfaces/_cerbos_core.PolicySourceHubRemoteBundle.html) as a possible type for [`AccessLogEntry.policySource`](https://cerbos.github.io/cerbos-sdk-javascript/interfaces/_cerbos_core.AccessLogEntry.html#policysource) and [`DecisionLogEntry.policySource`](https://cerbos.github.io/cerbos-sdk-javascript/interfaces/_cerbos_core.DecisionLogEntry.html#policysource)"
+        details: Requires a policy decision point server running Cerbos 0.52+.
+        pull: 1418
+
+    bumped:
+      "@cerbos/core":
+        to: 0.29.0
+        pull: 1436
 
-releases:
   - version: 0.25.1
     date: 2026-04-27
 

diff --git a/packages/grpc/package.json b/packages/grpc/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@cerbos/grpc",
-  "version": "0.25.1",
+  "version": "0.26.0",
   "type": "module",
   "description": "Client library for interacting with the Cerbos policy decision point service over gRPC from server-side Node.js applications",
   "repository": {
@@ -52,7 +52,7 @@
     "@cerbos/api": "^0.6.0"
   },
   "dependencies": {
-    "@cerbos/core": "^0.28.1",
+    "@cerbos/core": "^0.29.0",
     "@grpc/grpc-js": "^1.14.3"
   },
   "publishConfig": {

diff --git a/packages/http/CHANGELOG.md b/packages/http/CHANGELOG.md
@@ -2,12 +2,20 @@
 
 ## [Unreleased]
 
+No notable changes.
+
+## [0.27.0] - 2026-04-28
+
 ### Added
 
 - [`PolicySourceHubRemoteBundle`](https://cerbos.github.io/cerbos-sdk-javascript/interfaces/_cerbos_core.PolicySourceHubRemoteBundle.html) as a possible type for [`AccessLogEntry.policySource`](https://cerbos.github.io/cerbos-sdk-javascript/interfaces/_cerbos_core.AccessLogEntry.html#policysource) and [`DecisionLogEntry.policySource`](https://cerbos.github.io/cerbos-sdk-javascript/interfaces/_cerbos_core.DecisionLogEntry.html#policysource) ([#1418](https://github.com/cerbos/cerbos-sdk-javascript/pull/1418))
 
   Requires a policy decision point server running Cerbos 0.52+.
 
+### Changed
+
+- Bump dependency on [@cerbos/core] to 0.29.0 ([#1436](https://github.com/cerbos/cerbos-sdk-javascript/pull/1436))
+
 ## [0.26.2] - 2026-04-27
 
 ### Changed
@@ -488,7 +496,8 @@
 
 - Separate HTTP client for browser-based applications ([#73](https://github.com/cerbos/cerbos-sdk-javascript/pull/73))
 
-[unreleased]: https://github.com/cerbos/cerbos-sdk-javascript/compare/@cerbos/http@0.26.2...HEAD
+[unreleased]: https://github.com/cerbos/cerbos-sdk-javascript/compare/@cerbos/http@0.27.0...HEAD
+[0.27.0]: https://github.com/cerbos/cerbos-sdk-javascript/compare/@cerbos/http@0.26.2...@cerbos/http@0.27.0
 [0.26.2]: https://github.com/cerbos/cerbos-sdk-javascript/compare/@cerbos/http@0.26.1...@cerbos/http@0.26.2
 [0.26.1]: https://github.com/cerbos/cerbos-sdk-javascript/compare/@cerbos/http@0.26.0...@cerbos/http@0.26.1
 [0.26.0]: https://github.com/cerbos/cerbos-sdk-javascript/compare/@cerbos/http@0.25.0...@cerbos/http@0.26.0

diff --git a/packages/http/changelog.yaml b/packages/http/changelog.yaml
@@ -1,12 +1,17 @@
-unreleased:
-  type: minor
+releases:
+  - version: 0.27.0
+    date: 2026-04-28
 
-  added:
-    - summary: "[`PolicySourceHubRemoteBundle`](https://cerbos.github.io/cerbos-sdk-javascript/interfaces/_cerbos_core.PolicySourceHubRemoteBundle.html) as a possible type for [`AccessLogEntry.policySource`](https://cerbos.github.io/cerbos-sdk-javascript/interfaces/_cerbos_core.AccessLogEntry.html#policysource) and [`DecisionLogEntry.policySource`](https://cerbos.github.io/cerbos-sdk-javascript/interfaces/_cerbos_core.DecisionLogEntry.html#policysource)"
-      details: Requires a policy decision point server running Cerbos 0.52+.
-      pull: 1418
+    added:
+      - summary: "[`PolicySourceHubRemoteBundle`](https://cerbos.github.io/cerbos-sdk-javascript/interfaces/_cerbos_core.PolicySourceHubRemoteBundle.html) as a possible type for [`AccessLogEntry.policySource`](https://cerbos.github.io/cerbos-sdk-javascript/interfaces/_cerbos_core.AccessLogEntry.html#policysource) and [`DecisionLogEntry.policySource`](https://cerbos.github.io/cerbos-sdk-javascript/interfaces/_cerbos_core.DecisionLogEntry.html#policysource)"
+        details: Requires a policy decision point server running Cerbos 0.52+.
+        pull: 1418
+
+    bumped:
+      "@cerbos/core":
+        to: 0.29.0
+        pull: 1436
 
-releases:
   - version: 0.26.2
     date: 2026-04-27
 

diff --git a/packages/http/package.json b/packages/http/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@cerbos/http",
-  "version": "0.26.2",
+  "version": "0.27.0",
   "type": "module",
   "description": "Client library for interacting with the Cerbos policy decision point service over HTTP from browser-based applications",
   "repository": {
@@ -53,7 +53,7 @@
     "@cerbos/api": "^0.6.0"
   },
   "dependencies": {
-    "@cerbos/core": "^0.28.1"
+    "@cerbos/core": "^0.29.0"
   },
   "publishConfig": {
     "access": "public",

diff --git a/packages/hub/CHANGELOG.md b/packages/hub/CHANGELOG.md
@@ -4,6 +4,12 @@
 
 No notable changes.
 
+## [0.5.4] - 2026-04-28
+
+### Changed
+
+- Bump dependency on [@cerbos/core] to 0.29.0 ([#1436](https://github.com/cerbos/cerbos-sdk-javascript/pull/1436))
+
 ## [0.5.3] - 2026-04-27
 
 ### Changed
@@ -118,7 +124,8 @@ No notable changes.
 
 - A client for interacting with policy stores in Cerbos Hub ([#1173](https://github.com/cerbos/cerbos-sdk-javascript/pull/1173), [#1191](https://github.com/cerbos/cerbos-sdk-javascript/pull/1191))
 
-[unreleased]: https://github.com/cerbos/cerbos-sdk-javascript/compare/@cerbos/hub@0.5.3...HEAD
+[unreleased]: https://github.com/cerbos/cerbos-sdk-javascript/compare/@cerbos/hub@0.5.4...HEAD
+[0.5.4]: https://github.com/cerbos/cerbos-sdk-javascript/compare/@cerbos/hub@0.5.3...@cerbos/hub@0.5.4
 [0.5.3]: https://github.com/cerbos/cerbos-sdk-javascript/compare/@cerbos/hub@0.5.2...@cerbos/hub@0.5.3
 [0.5.2]: https://github.com/cerbos/cerbos-sdk-javascript/compare/@cerbos/hub@0.5.1...@cerbos/hub@0.5.2
 [0.5.1]: https://github.com/cerbos/cerbos-sdk-javascript/compare/@cerbos/hub@0.5.0...@cerbos/hub@0.5.1