Release v0.5.2

jumpbetweenrows · jumpbetweenrows · commit 7cda9185adb8 · 2026-03-23T19:56:21.000-04:00
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -7,6 +7,13 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [0.5.2] - 2026-03-18
+
+### Added
+- **Scan-level column masking** — Column masks now apply at the `TableScan` level via `transform_up` instead of only at the top-level Projection, preventing CTE and subquery nodes from bypassing masks by changing the DFSchema qualifier.
+  - Masks run before row filters so filters evaluate against raw (unmasked) data
+  - Integration tests for multi-table JOINs with scoped column deny, CTE mask bypass prevention, subquery mask enforcement, and combined mask+deny+filter scenarios
+
 ## [0.5.1] - 2026-03-17
 
 ### Changed
diff --git a/Cargo.lock b/Cargo.lock
diff --git a/admin-ui/package.json b/admin-ui/package.json
@@ -1,7 +1,7 @@
 {
   "name": "admin-ui",
   "private": true,
-  "version": "0.5.1",
+  "version": "0.5.2",
   "type": "module",
   "scripts": {
     "dev": "vite",
diff --git a/migration/Cargo.toml b/migration/Cargo.toml
@@ -1,6 +1,6 @@
 [package]
 name = "migration"
-version = "0.5.1"
+version = "0.5.2"
 edition = "2024"
 
 [dependencies]
diff --git a/proxy/Cargo.toml b/proxy/Cargo.toml
@@ -1,6 +1,6 @@
 [package]
 name = "proxy"
-version = "0.5.1"
+version = "0.5.2"
 edition = "2024"
 
 [dependencies]
