# Changelog ## [5.0.0](https://github.com/cerebruminc/yates/compare/v4.1.0...v5.0.0) (2026-08-14) ### ⚠ BREAKING CHANGES * migrate yates to Prisma 7 with nested transaction support ### Features * migrate yates to Prisma 7 with nested transaction support ([983ed1b](https://github.com/cerebruminc/yates/commit/983ed1b23dcb4aa20cd095ea5feb3f931f92fe76)) ### Bug Fixes * **prisma:** preserve operation errors during cleanup ([12f0697](https://github.com/cerebruminc/yates/commit/12f0697df37f6335094effdcb9680808933f1593)) ## [4.1.0](https://github.com/cerebruminc/yates/compare/v4.0.1...v4.1.0) (2026-07-22) ### Features * split Yates migration from runtime setup ([8d078f8](https://github.com/cerebruminc/yates/commit/8d078f843c922c809323db4793c0262d5698d491)) ## [4.0.1](https://github.com/cerebruminc/yates/compare/v4.0.0...v4.0.1) (2026-07-06) ### Bug Fixes * **yates:** skip unchanged startup reconciliation ([d01dffc](https://github.com/cerebruminc/yates/commit/d01dffc950666ba28b13b4dc69ea5f3ae71681d4)) ## [4.0.0](https://github.com/cerebruminc/yates/compare/v3.8.1...v4.0.0) (2026-02-25) ### ⚠ BREAKING CHANGES * refactor permissions to query filters ### Features * refactor permissions to query filters ([06d1007](https://github.com/cerebruminc/yates/commit/06d10079c460e15a787516d9301daf28ce776c20)) ## [3.8.1](https://github.com/cerebruminc/yates/compare/v3.8.0...v3.8.1) (2025-11-15) ### Bug Fixes * update prepublishOnly script to include generate step before build ([4f95180](https://github.com/cerebruminc/yates/commit/4f951800f756d26949bc646ab8b45c5b114f88df)) ## [3.8.0](https://github.com/cerebruminc/yates/compare/v3.7.2...v3.8.0) (2025-11-15) ### Features * add test for multiple Yates clients operating in the same DB ([b35e2ed](https://github.com/cerebruminc/yates/commit/b35e2ed154daa05c971e7b1ff17fa9b6807ac612)) * refactor internal to use a class with inner state for tracking database scope ([0d00e29](https://github.com/cerebruminc/yates/commit/0d00e2960ef444df435fd884b0b62511b965dc54)) ### Bug Fixes * scope postgres roles to database ([239f804](https://github.com/cerebruminc/yates/commit/239f804de4f3b46c80c0d4596339f75d5e0d5dc1)) ## [3.7.2](https://github.com/cerebruminc/yates/compare/v3.7.1...v3.7.2) (2025-11-14) ### Bug Fixes * use default abilities for wildcard abilities ([4c22fa0](https://github.com/cerebruminc/yates/commit/4c22fa0220f0e087dc85c9392267cd5a60e426e9)) ## [3.7.1](https://github.com/cerebruminc/yates/compare/v3.7.0...v3.7.1) (2025-11-13) ### Bug Fixes * remove edge case chance of SET ROLE leaking ([35a7394](https://github.com/cerebruminc/yates/commit/35a73948f00c57da0fc1cf3f557769cc4eab16f9)) ## [3.7.0](https://github.com/cerebruminc/yates/compare/v3.6.3...v3.7.0) (2025-08-27) ### Features * add npm audit action over the yates repo ([a7b1563](https://github.com/cerebruminc/yates/commit/a7b156376e8ab8b9975a98b7b41a03c1a9bcc202)) ### Bug Fixes * security vulnerabilities by running npm audit fix ([3a507d8](https://github.com/cerebruminc/yates/commit/3a507d871dce957fa7e7de4a6f7d0cc300d495cf)) ## [3.6.3](https://github.com/cerebruminc/yates/compare/v3.6.2...v3.6.3) (2025-06-16) ### Bug Fixes * correct postgres reference in escape.ts ([25ff473](https://github.com/cerebruminc/yates/commit/25ff473bb8d7333a447ac8e7bbde6e7303a1a468)) * sanitize all hyphens in slug generation ([b05ab55](https://github.com/cerebruminc/yates/commit/b05ab5528a6bc5610ebd4e939b561feea2cf0b51)) ## [3.6.2](https://github.com/cerebruminc/yates/compare/v3.6.1...v3.6.2) (2025-02-13) ### Bug Fixes * **ci:** upgrade base image to run integration-tests workflow ([2bdb0b3](https://github.com/cerebruminc/yates/commit/2bdb0b3fc5b12260bfa478a7e01ef7df79805489)) ## [3.6.1](https://github.com/cerebruminc/yates/compare/v3.6.0...v3.6.1) (2024-11-04) ### Bug Fixes * remove unnecessary yates_id field on transaction ([93f3a1f](https://github.com/cerebruminc/yates/commit/93f3a1ff15bcecbba3bc7ab3726f107e87b323ed)) ## [3.6.0](https://github.com/cerebruminc/yates/compare/v3.5.2...v3.6.0) (2024-11-02) ### Features * improve performance (esp. n+1) by batching requests ([0ff5d67](https://github.com/cerebruminc/yates/commit/0ff5d6716bcf0b49b57e93641b74be175d829b9f)) ## [3.5.2](https://github.com/cerebruminc/yates/compare/v3.5.1...v3.5.2) (2024-04-10) ### Bug Fixes * avoid race condition when creating policies ([4d77dfb](https://github.com/cerebruminc/yates/commit/4d77dfb7c750943277b581976bf66887d1f4521f)) * update to prisma v5.11.0 ([4aa0a92](https://github.com/cerebruminc/yates/commit/4aa0a921a5df69d62e8d3e941e828b4933e7750a)) ## [3.5.1](https://github.com/cerebruminc/yates/compare/v3.5.0...v3.5.1) (2024-03-29) ### Bug Fixes * remove leftover debug statement ([de1f867](https://github.com/cerebruminc/yates/commit/de1f8672b6fa86aaa1e17b9cb330ffc3eb263e28)) ## [3.5.0](https://github.com/cerebruminc/yates/compare/v3.4.1...v3.5.0) (2024-03-28) ### Features * use an ability table for handling ability updates ([7b5b542](https://github.com/cerebruminc/yates/commit/7b5b54274c48c679181a417bb60ce5b7dcc8e014)) ## [3.4.1](https://github.com/cerebruminc/yates/compare/v3.4.0...v3.4.1) (2024-03-26) ### Bug Fixes * only select role and policies that have a yates prefix ([d60498a](https://github.com/cerebruminc/yates/commit/d60498ac51d4321d21356f0a9832b6d8f176bd4e)) ## [3.4.0](https://github.com/cerebruminc/yates/compare/v3.3.2...v3.4.0) (2024-03-22) ### Features * add a debug mode and some additional logging for expressions ([d8b85fa](https://github.com/cerebruminc/yates/commit/d8b85faae13a3aa4e4e6c978f000d7dffc626e7d)) ### Bug Fixes * improve startup performance by unifying queries for pg policies and roles ([d765fd5](https://github.com/cerebruminc/yates/commit/d765fd57ffcaa9a9630e2e70cbec3546effbc854)) ## [3.3.2](https://github.com/cerebruminc/yates/compare/v3.3.1...v3.3.2) (2024-02-28) ### Bug Fixes * do not include test files in published build output ([8bc00dc](https://github.com/cerebruminc/yates/commit/8bc00dc6028df539b8170724757623a8359bd51d)) ## [3.3.1](https://github.com/cerebruminc/yates/compare/v3.3.0...v3.3.1) (2024-02-28) ### Bug Fixes * make sure the dist directory is published to npm ([043cba5](https://github.com/cerebruminc/yates/commit/043cba57f9698fb91868dc439de2eb4e54d613b6)) ## [3.3.0](https://github.com/cerebruminc/yates/compare/v3.2.0...v3.3.0) (2024-02-26) ### Features * improve type safety for expressions ([16b2a0f](https://github.com/cerebruminc/yates/commit/16b2a0f502b413bd8d6547f3d876cbe48ffdf4e0)) ## [3.2.0](https://github.com/cerebruminc/yates/compare/v3.1.1...v3.2.0) (2024-01-16) ### Features * add support for the `in` operator with static scalar values ([7cf7903](https://github.com/cerebruminc/yates/commit/7cf7903df48865f18ea17b1e4f4e1e4e7683aaa8)) ## [3.1.1](https://github.com/cerebruminc/yates/compare/v3.1.0...v3.1.1) (2024-01-15) ### Bug Fixes * support client expressions that query 1:1 relationships ([4cb0e1f](https://github.com/cerebruminc/yates/commit/4cb0e1fefa903ef0a6b2ac0ca7286968e8fe5c09)) ## [3.1.0](https://github.com/cerebruminc/yates/compare/v3.0.2...v3.1.0) (2024-01-09) ### Features * Add support for using the `in` operator with context values ([5707f8a](https://github.com/cerebruminc/yates/commit/5707f8a67d4819236e75b10622062c5a055d4e0f)) ### Bug Fixes * don't duplicate ability name in expression test ([59db403](https://github.com/cerebruminc/yates/commit/59db40346f654697d94e74c6877650db7dbd563f)) ## [3.0.2](https://github.com/cerebruminc/yates/compare/v3.0.1...v3.0.2) (2023-12-15) ### Bug Fixes * allow non-scalar values when using client expressions ([9fc0a52](https://github.com/cerebruminc/yates/commit/9fc0a524516c286f6b10ec4a1441e8711ffc251f)) ## [3.0.1](https://github.com/cerebruminc/yates/compare/v3.0.0...v3.0.1) (2023-12-11) ### Bug Fixes * update to work with latest prisma client version ([a6da0ab](https://github.com/cerebruminc/yates/commit/a6da0ab0f46891eb8b9e422cced76fe718cff8b5)) * use upstream node-sql-parser package ([cdb1d88](https://github.com/cerebruminc/yates/commit/cdb1d88c4e78b089e776ff515b78fe4b9692f604)) ## [3.0.0](https://github.com/cerebruminc/yates/compare/v2.1.0...v3.0.0) (2023-08-02) ### ⚠ BREAKING CHANGES * Yates now requires Prisma @ v5 ### Features * bac-329 update to prisma v5 ([e7dc385](https://github.com/cerebruminc/yates/commit/e7dc3853ec0602141c23dadbf4573f47be48564c)) ## [2.1.0](https://github.com/cerebruminc/yates/compare/v2.0.6...v2.1.0) (2023-05-31) ### Features * Allow maxWait and timeout ITX options to be configurable ([8e0bd6c](https://github.com/cerebruminc/yates/commit/8e0bd6c5a3828f1d448085dec6cb3cc3dc7c570e)) ## [2.0.6](https://github.com/cerebruminc/yates/compare/v2.0.5...v2.0.6) (2023-05-23) ### Bug Fixes * Increase max wait time to 30s (from default 2s) ([9572b5b](https://github.com/cerebruminc/yates/commit/9572b5b3d92f14ad0cf61dd5981020db9c885711)) ## [2.0.5](https://github.com/cerebruminc/yates/compare/v2.0.4...v2.0.5) (2023-05-03) ### Bug Fixes * BAC-129 increase base ITX timeout to 30s ([2288850](https://github.com/cerebruminc/yates/commit/2288850438767809ffc6e50c9b4cb4e2e16c61a9)) ## [2.0.4](https://github.com/cerebruminc/yates/compare/v2.0.3...v2.0.4) (2023-04-11) ### Bug Fixes * bac-24 Only run publish-beta workflow on trusted PRs ([6e50b1c](https://github.com/cerebruminc/yates/commit/6e50b1c088a3edd7a53de04fa413ec81dafacd9d)) * correctly handle long ability names ([f4600d0](https://github.com/cerebruminc/yates/commit/f4600d0819f3f31567c2a6f503b18efc0e8f2a37)) ## [2.0.3](https://github.com/cerebruminc/yates/compare/v2.0.2...v2.0.3) (2023-03-14) ### Bug Fixes * Ensure that Yates works correctly with Prisma Fluent API ([1d85073](https://github.com/cerebruminc/yates/commit/1d85073510eebefc316e139a83da913d850c2a51)) ## [2.0.2](https://github.com/cerebruminc/yates/compare/v2.0.1...v2.0.2) (2023-03-13) ### Bug Fixes * ensure role setting still happens when using async middleware ([9d40852](https://github.com/cerebruminc/yates/commit/9d40852bc08f6f0d2212506723c5567d329e0581)) ## [2.0.1](https://github.com/cerebruminc/yates/compare/v2.0.0...v2.0.1) (2023-02-28) ### Bug Fixes * Fix broken formatting in README code blocks ([50434d7](https://github.com/cerebruminc/yates/commit/50434d7513e29f000a3b7ec22619da3b496e56c4)) * Improve error message thrown when an operation fails ([5b117c5](https://github.com/cerebruminc/yates/commit/5b117c5a5a3299bd5b2d7a21faded47df3ab288d)) ## [2.0.0](https://github.com/cerebruminc/yates/compare/v1.2.0...v2.0.0) (2023-02-22) ### ⚠ BREAKING CHANGES * Use client extensions instead of middleware ### Features * Use client extensions instead of middleware ([f3fa1a3](https://github.com/cerebruminc/yates/commit/f3fa1a3d187d62031e2124d023ba726e7b810e39)) ### Bug Fixes * Explicity disconnect expression Prisma client ([ccceaa3](https://github.com/cerebruminc/yates/commit/ccceaa3f3baab26251b00b631962ae633deea714)) * Strongly type context values in expressions ([ec5e266](https://github.com/cerebruminc/yates/commit/ec5e2668a0ba776ed4319ade0940cd2f8dc9cbed)) ## [1.2.0](https://github.com/cerebruminc/yates/compare/v1.1.1...v1.2.0) (2023-02-20) ### Features * Add functionality for using Prisma as a query builder ([22d16a8](https://github.com/cerebruminc/yates/commit/22d16a8d21ea785256fe770747517e0a249e56c3)) ### Bug Fixes * Don't run integration tests when a PR is closed ([2b25093](https://github.com/cerebruminc/yates/commit/2b250937b0618d4ad7c7706286b74bca52603b22)) ## [1.1.1](https://github.com/cerebruminc/yates/compare/v1.1.0...v1.1.1) (2023-01-30) ### Bug Fixes * Export CustomAbilities type ([2cec86f](https://github.com/cerebruminc/yates/commit/2cec86f9e586db4cf0444bbc315af84e2c14a70a)) ## [1.1.0](https://github.com/cerebruminc/yates/compare/v1.0.4...v1.1.0) (2023-01-30) ### Features * Add ability to run release-please action manually ([9d610c7](https://github.com/cerebruminc/yates/commit/9d610c795bc307f7a09cb4fd36e645ea498e8f5c)) * Add functionality for removing old abilities from a role ([fa59c37](https://github.com/cerebruminc/yates/commit/fa59c372c4b9233ed65b51385a3a4e32775b8059)) ### Bug Fixes * Ensure setup parameters are sanitized ([0d302ab](https://github.com/cerebruminc/yates/commit/0d302ab9e9f97a7cbf23df3142d1835fbd7ed213)) * improve abilities typings ([ade47b8](https://github.com/cerebruminc/yates/commit/ade47b860b1aa8a7f114289b2905138ff85d0a76)) * Increase test coverage and improve setup safety ([ef7d395](https://github.com/cerebruminc/yates/commit/ef7d395003c39bce512dbeb10adc6cd0c19fbc26)) ## [1.0.4](https://github.com/cerebruminc/yates/compare/v1.0.3...v1.0.4) (2023-01-24) ### Bug Fixes * Use privileged Prisma client when setting config in transaction ([b8935e6](https://github.com/cerebruminc/yates/commit/b8935e69a630602a5f8ff0093edc5c95247b20b7)) ## [1.0.3](https://github.com/cerebruminc/yates/compare/v1.0.2...v1.0.3) (2023-01-24) ### Bug Fixes * Don't rerun middleware when applying RLC policies ([39433d8](https://github.com/cerebruminc/yates/commit/39433d8f4678f5238737a8111ca2fde293168296)) ## [1.0.2](https://github.com/cerebruminc/yates/compare/v1.0.1...v1.0.2) (2023-01-24) ### Bug Fixes * Publish package as public explicitly ([2b200e5](https://github.com/cerebruminc/yates/commit/2b200e5e3815c70e9bbf73182613bd5b4997ecb5)) ## [1.0.1](https://github.com/cerebruminc/yates/compare/v1.0.0...v1.0.1) (2023-01-24) ### Bug Fixes * Add NPM version badge to README ([5198969](https://github.com/cerebruminc/yates/commit/51989692711746660bb19044ea732655a1f4ad7b)) ## 1.0.0 (2023-01-20) ### Features * Add basic integration testing ([27bb368](https://github.com/cerebruminc/yates/commit/27bb3680515ffab8868847cfb6d310a2c8abac3e)) ### Bug Fixes * Update .npmignore to be more aggressive ([3915869](https://github.com/cerebruminc/yates/commit/3915869fd9b8df96b499d53bd5566b06f05c4cc1)) * Update Icon to something more thematic ([d37a4e4](https://github.com/cerebruminc/yates/commit/d37a4e4141a153c7d598875ec13bfebce63c31f9)) * Use package-lock for keying action cache ([92375a6](https://github.com/cerebruminc/yates/commit/92375a6bb45586551c8d1a8c5bce600b97346b13))