chore: Update CHANGELOG.md

Co-authored-by: Maria Ines Parnisari <maria.ines.parnisari@authzed.com>

Author: tstirrat15

CHANGELOG.md

@@ -22,7 +22,7 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/).
 - Upgraded the spanner client, which changed the internal implementation to not use a session pool. This means that the `--datastore-spanner-max-sessions` and `--datastore-spanner-min-sessions` flags are now deprecated and no-op. We also strongly recommend using [Application Default Credentials](https://docs.cloud.google.com/docs/authentication/client-libraries#adc) in favor of a credentials file. (https://github.com/authzed/spicedb/pull/3038)
 - Query Planner: error `"ERROR: index \"pk_relation_tuple\" cannot be used for this query (SQLSTATE 42809)"` returned when using wildcards (https://github.com/authzed/spicedb/pull/3039)
 - Providing one of (`--grpc-tls-cert-path`, `--grpc-tls-key-path`) but not the other is now considered an error state, as both are necessary if you want to use TLS.
-- In a caveat context that uses nested lists of lists, the hashes generated for cache keys could collide because of an issue with the serialization logic. The serialization now uses deterministic protobuf serialization which avoids this issue.
+- In a caveat context that uses nested lists of lists, the hashes generated for cache keys could collide because of an issue with the serialization logic. The serialization now uses deterministic protobuf serialization which avoids this issue (https://github.com/authzed/spicedb/pull/3065)
 
 ## [1.51.1] - 2026-04-14
 ### Fixed

internal/services/v1/permissions_test.go

@@ -2472,40 +2472,40 @@ func TestBulkCheckCaveatContextCollision(t *testing.T) {
 	goodStruct, err := structpb.NewStruct(map[string]any{"x": []any{[]any{"a"}, "b"}})
 	require.NoError(t, err)
 	good := &v1.CheckBulkPermissionsRequestItem{
-		Resource: &v1.ObjectReference{ObjectType: "document", ObjectId: "doc"},
+		Resource:   &v1.ObjectReference{ObjectType: "document", ObjectId: "doc"},
 		Permission: "view",
-		Subject: &v1.SubjectReference{Object: &v1.ObjectReference{ObjectType: "user", ObjectId: "alice"}},
-		Context: goodStruct,
+		Subject:    &v1.SubjectReference{Object: &v1.ObjectReference{ObjectType: "user", ObjectId: "alice"}},
+		Context:    goodStruct,
 	}
 
 	badStruct, err := structpb.NewStruct(map[string]any{"x": []any{"a", []any{}, "b"}})
 	require.NoError(t, err)
 	bad := &v1.CheckBulkPermissionsRequestItem{
-		Resource: &v1.ObjectReference{ObjectType: "document", ObjectId: "doc"},
+		Resource:   &v1.ObjectReference{ObjectType: "document", ObjectId: "doc"},
 		Permission: "view",
-		Subject: &v1.SubjectReference{Object: &v1.ObjectReference{ObjectType: "user", ObjectId: "alice"}},
-		Context: badStruct,
+		Subject:    &v1.SubjectReference{Object: &v1.ObjectReference{ObjectType: "user", ObjectId: "alice"}},
+		Context:    badStruct,
 	}
 
 	singleBad, err := client.CheckPermission(t.Context(), &v1.CheckPermissionRequest{
-		Resource: bad.Resource,
-		Permission: bad.Permission,
-		Subject: bad.Subject,
-		Context: bad.Context,
+		Resource:    bad.Resource,
+		Permission:  bad.Permission,
+		Subject:     bad.Subject,
+		Context:     bad.Context,
 		Consistency: &v1.Consistency{Requirement: &v1.Consistency_FullyConsistent{FullyConsistent: true}},
 	})
 	require.NoError(t, err)
 	require.Equal(t, v1.CheckPermissionResponse_PERMISSIONSHIP_NO_PERMISSION, singleBad.Permissionship)
 
 	bulk, err := client.CheckBulkPermissions(t.Context(), &v1.CheckBulkPermissionsRequest{
 		Consistency: &v1.Consistency{Requirement: &v1.Consistency_FullyConsistent{FullyConsistent: true}},
-		Items: []*v1.CheckBulkPermissionsRequestItem{good, bad},
+		Items:       []*v1.CheckBulkPermissionsRequestItem{good, bad},
 	})
 	require.NoError(t, err)
 
 	require.Equal(t, v1.CheckPermissionResponse_PERMISSIONSHIP_HAS_PERMISSION, bulk.Pairs[0].GetItem().Permissionship)
 	require.Equal(
-		t, 
+		t,
 		v1.CheckPermissionResponse_PERMISSIONSHIP_NO_PERMISSION,
 		bulk.Pairs[1].GetItem().Permissionship,
 		"the bad request should have a no permission result",