You can, however, do something along the lines of:
my $sql = '... WHERE foo IN (' . join(',', ('?') x scalar( @values )
+) . ') ...';
in order to generate the proper placeholder-based statement that you can then pass your parameters into.
See also DBIx::PreQL.
Update: As per BrowserUK (below), in order to make use of this, you either need to prepare your query each time, cache your prepared query based on number of parameters using prepare_cached or some other method, or know that the number of parameters will be the same each and every time.