Fixed

• (ffi) eliminate aliasing UB + add Azure Policy JSON compilation FFI (#727)
• (interpreter,rvm) correct partial object rule iteration and classification (#718)
• (copilot) robust diff computation for cloud agent environments (#709)

Other

• (azure_policy) reduce AliasRegistry allocations via Rc sharing (#725)
• (normalizer) use Rc interning to reduce alias resolution allocations (#726)
• (deps) bump the rust-dependencies group across 5 directories with 2 updates (#724)
• (deps) bump the rust-dependencies group across 5 directories with 4 updates (#717)

Added

• (copilot) add multi-agent code review skills (#707)
• (azure_policy) test runner, compiler fixes, and example program (#700)
• (azure-policy) implement effect compilation and metadata population (#691)
• (azure-policy) implement count/count.where compilation (#688)
• (azure-policy) implement condition, expression, field, and template dispatch compilation (#686)
• (azure-policy) add compiler skeleton with core types and stubs (#674)
• (rvm) implement Azure Policy condition evaluation (#661)
• (rvm) new instructions and loop semantics for Azure Policy support (#659)
• (azure-policy) add policy rule and policy definition parsers (#660)
• add Azure Policy constraint parser (#658)
• (rvm) extend program metadata and bump serialization to v6 (#654)
• add Azure Policy core JSON parser and expression parser (#655)
• add Azure Policy AST types (#653)
• (azure-policy) add alias normalization and denormalization (#635)
• add Azure Policy builtins with YAML test suite (#630)
• make policy length limits configurable per engine (#624)
• implement add_extension in Python binding (#596)
• (rbac) [breaking] add Azure RBAC engine, FFI API, and cross-language tests (#577)
• Azure RBAC condition interpreter with builtin evaluation coverage and YAML test suite, including quantifier (ForAnyOfAnyValues/ForAllOfAllValues), datetime (DateTimeEquals), IP (IpInRange), GUID (GuidEquals), list (ListContains), and string (StringEquals) semantics.
• FFI surface for Azure RBAC condition evaluation (see bindings changelog for language-specific wrappers).

Fixed

• harden regex builtins with compiled-size limit (#705)
• (ci) skip mimalloc FFI and disable isolation for Miri (#621)

Other

• bump version to 0.10.0 across all bindings
• (deps) update all Rust dependencies and fix lockfile refresh workflow (#704)
• (deps) bump com.google.code.gson:gson (#702)
• (deps) bump the github-actions group across 1 directory with 5 updates (#690)
• (deps) bump the per-dependency group across 1 directory with 5 updates (#703)
• Make git rev-parse in build.rs optional with graceful fallback (#701)
• (azure_policy) add foundation test cases (#698)
• (azure_policy) add end-to-end policy test cases (#699)
• fix rand advisory and harden python CI caching (#675)
• azure-policy parser: allow overriding the column-width limit (#673)
• (deps) bump the rust-dependencies group across 5 directories with 6 updates (#671)
• (deps) bump ruby/setup-ruby in the github-actions group (#670)
• (csharp) prepare NuGet package for nuget.org publishing (#668)
• Fix RVM evaluation of default-only rules (#664)
• (deps) bump minitest in /bindings/ruby in the per-dependency group (#656)
• (deps) bump the rust-dependencies group across 2 directories with 3 updates (#657)
• consolidate RVM instruction variants and clean up VM internals (#651)
• (deps) bump wasm-bindgen-test (#650)
• (deps) bump rb_sys in /bindings/ruby in the per-dependency group (#649)
• (deps) bump the rust-dependencies group across 3 directories with 4 updates (#647)
• (deps) bump the github-actions group across 1 directory with 3 updates (#646)
• (dependabot) restore cargo dependency grouping (#645)
• Fix build break (#634)
• (deps) bump the rust-dependencies group across 5 directories with 16 updates (#633)
• (dependabot) fix cargo config quoting (#632)
• (dependabot) fix cargo workspace updates and refresh lockfiles (#629)
• (deps) bump rubocop in /bindings/ruby in the per-dependency group (#622)
• (deps) bump the github-actions group with 11 updates (#628)
• Consolidate Dependabot, fix #595 (mimalloc + indexmap), add feature-matrix CI (#627)
• RVM compiler & runtime optimizations: caching, instruction fusion, constant hoisting, and correctness fixes (#626)
• Rvm optimizations (#620)
• (deps) bump rubocop in /bindings/ruby in the per-dependency group (#618)
• (ci) add miri workflow (#581)
• (ci) add cargo audit and deny (#580)
• switch binary serialization to postcard (#582)
• (deps-dev) bump org.apache.maven.plugins:maven-surefire-plugin (#605)
• (deps) bump bytes (#569)
• (deps) bump the per-dependency group with 2 updates (#603)
• (deps) bump the per-dependency group across 1 directory with 3 updates (#607)
• boolean mapping (#612)
• Bump the per-dependency group with 1 update (#587)
• (deps) bump the per-dependency group (#585)
• (deps) bump the per-dependency group (#586)
• (deps-dev) bump the per-dependency group (#583)
• (deps) bump the per-dependency group with 12 updates (#593)
• (dependabot) expand coverage and pin workflows (#579)

Changed

• [breaking] Switch RVM binary serialization to postcard, bump the format to v4, and mark v1-3 loads as partial (recompile required).

Fixed

• Release native C# handles reliably to avoid memory growth (#571).
• Centralize C# handle gating with a short dispose wait and deferred release to avoid leaks while blocking new calls (#571).

Added

• Manual C# memory growth tests for both using and finalizer paths (#571).
• C# test runner options for filtered tests, console logging, and skipping sample apps (#571).

Added

• [breaking] Indexes for nodes in the AST (#414)
• Updates for Policy Framework (#405)
• Regorus nuget package (#383)

Fixed

• emit import warning to stderr (#430)
• Clippy warnings (#424)
• Disallow else blocks for set rules (#403)
• [breaking] Remove cryptographic builtins (#396)
• [breaking] Fix glob.match behavior in presence of : (#390)
• C# EvalRule (#387)

Other

• Update release-plz action to v0.5.108 (#431)
• Early return for 'some in' statement (#427)
• Support manually generating C# bindings via Github action and add a README (#423)
• Make the bindings/cpp CMake project installable (#416)
• (deps) bump clap from 4.5.38 to 4.5.39 (#415)
• (deps) Update criterion and other deps (#412)
• Basic benchmarking setup with Criterion (#408)
• Default to Rego v1 in regorus parse (#407)
• (deps) bump clap from 4.5.37 to 4.5.38 (#406)
• Update dependencies (#401)
• Add C# test examples (#397)
• (deps) bump clap from 4.5.35 to 4.5.36 (#395)
• Python binding portability (#388)
• (deps) bump clap from 4.5.34 to 4.5.35 (#389)
• Use VersionPrefix and VersionSuffix (#385)
• Check-in Cargo.lock files and lockdown .net (#384)

Added

• [breaking] Indexes for nodes in the AST (#414)
• Updates for Policy Framework (#405)
• Regorus nuget package (#383)

Fixed

• emit import warning to stderr (#430)
• Clippy warnings (#424)
• Disallow else blocks for set rules (#403)
• [breaking] Remove cryptographic builtins (#396)
• [breaking] Fix glob.match behavior in presence of : (#390)
• C# EvalRule (#387)

Other

• Update release-plz action to v0.5.108 (#431)
• Early return for 'some in' statement (#427)
• Support manually generating C# bindings via Github action and add a README (#423)
• Make the bindings/cpp CMake project installable (#416)
• (deps) bump clap from 4.5.38 to 4.5.39 (#415)
• (deps) Update criterion and other deps (#412)
• Basic benchmarking setup with Criterion (#408)
• Default to Rego v1 in regorus parse (#407)
• (deps) bump clap from 4.5.37 to 4.5.38 (#406)
• Update dependencies (#401)
• Add C# test examples (#397)
• (deps) bump clap from 4.5.35 to 4.5.36 (#395)
• Python binding portability (#388)
• (deps) bump clap from 4.5.34 to 4.5.35 (#389)
• Use VersionPrefix and VersionSuffix (#385)
• Check-in Cargo.lock files and lockdown .net (#384)

Fixed

• [breaking] Update ruby json dependency (#381)
• [breaking] Remove ring dependency (#380)
• [breaking] Remove sha1 dependency (#379)

Other

• Specify optimization flags (#378)

Added

• [breaking] Update to OPA v1.2.0 (#373)

Other

• (deps) update pyo3 requirement from 0.23.5 to 0.24.0 (#375)
• Update ruby binding deps, ruby gem version 0.2.3 (#374)
• (deps) update pyo3 requirement from 0.22.0 to 0.23.5 (#372)
• (deps) update rand requirement from 0.8.5 to 0.9.0 (#370)
• (deps) update cbindgen requirement from 0.27.0 to 0.28.0 (#361)
• Fix typo in README.md (#366)
• Update dependencies (#369)
• Fix clippy warning for result? (#362)
• (deps) update itertools requirement from 0.13.0 to 0.14.0 (#357)
• (deps) update jsonschema requirement from 0.26.1 to 0.28.1 (#356)
• resolve anyhow compile errors (#355)
• (deps) update prettydiff requirement from 0.7.0 to 0.8.0 (#348)

Other

• (deps) update jsonschema requirement from 0.24.0 to 0.26.1 (#343)
• Update to OPA v0.70.0 (#341)

Fixed

• docs failing to build (#334)

Other

• (deps) update jsonschema requirement from 0.23.0 to 0.24.0 (#332)
• (deps) update jsonschema requirement from 0.22.3 to 0.23.0 (#331)

Added

• integer conversion functions for Value (#328)

Other

• update to OPA v0.69.0 (#327)
• (deps) update jsonschema requirement from 0.21.0 to 0.22.3 (#326)
• (deps) update jsonschema requirement from 0.20.0 to 0.21.0 (#325)
• update to jsonschema 0.20.0 (#323)