You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@polaris.apache.org by "renovate-bot (via GitHub)" <gi...@apache.org> on 2026/10/29 17:58:07 UTC
[PR] Update docker.io/openpolicyagent/opa Docker tag to v1.22.0 [polaris]
renovate-bot opened a new pull request, #5919:
URL: https://github.com/apache/polaris/pull/5919
This PR contains the following updates:
| Package | Type | Update | Change |
|---|---|---|---|
| [docker.io/openpolicyagent/opa](https://images.chainguard.dev/directory/image/static/overview) ([source](https://redirect.github.com/open-policy-agent/opa)) | final | minor | `1.21.4` → `1.22.0` |
---
### Release Notes
<details>
<summary>open-policy-agent/opa (docker.io/openpolicyagent/opa)</summary>
### [`v1.22.0`](https://redirect.github.com/open-policy-agent/opa/blob/HEAD/CHANGELOG.md#1220)
[Compare Source](https://redirect.github.com/open-policy-agent/opa/compare/v1.21.4...v1.22.0)
This release contains a mix of new features, performance improvements and bug fixes. Notably:
- New `rego.v2` import
- Configurable log level for HTTP access logs
- Stricter handling of bundle signature filenames (breaking change)
- Partial evaluation unrolls `every` over a known domain
##### Configurable log level for HTTP access logs
Added `--log-level-request` (default `info`) to control the level at which the HTTP
server's "Received request."/"Sent response." access log lines are emitted, independent
of the general `--log-level`. Set it to `debug` to keep those lines out of logs unless
`--log-level` is also turned up.
Authored by [@​srenatus](https://redirect.github.com/srenatus)
##### New `rego.v2` import ([#​9224](https://redirect.github.com/open-policy-agent/opa/issues/9224), [#​9269](https://redirect.github.com/open-policy-agent/opa/issues/9269))
`import rego.v2` enables the `and` and `or` keywords and the improved `not` semantics in one
import, in place of `future.keywords.and`, `future.keywords.or`, and `future.keywords.not`.
In a v0 module it also implies `rego.v1`. It is gated by the new `rego_v2_import` capability
feature.
```rego
package example
import rego.v2
allow if input.user.admin or not (input.user.suspended or input.user.locked)
```
See [Importing `rego.v2`](https://www.openpolicyagent.org/docs/policy-reference/keywords/import#importing-regov2).
Additionally: bundles can be declared as Rego v2 by setting the `rego_version` manifest attribute to `2` (individua
bundle modules by setting `file_rego_versions`); and the Go API accepts the new `ast.RegoV2` rego-version when parsing,
compiling, and formatting Rego modules.
The `rego.v2` import is a redundant no-op for modules loaded these ways.
See [bundle file format](https://www.openpolicyagent.org/docs/management-bundles#bundle-file-format).
Authored by [@​johanfylling](https://redirect.github.com/johanfylling)
##### Stricter handling of bundle signature filenames ([#​9300](https://redirect.github.com/open-policy-agent/opa/pull/9300))
Breaking change: We have corrected a long-standing bug in bundle signing and verification, which will cause bundles containing files matching the suffix pattern `*signatures.json` to no longer pass verification in newer versions of OPA.
These bundles will need to be re-signed by this or newer versions of OPA to have a correct `.signatures.json` file.
Bundles that do not contain filenames with the `*signatures.json` pattern are unaffected, and will continue to verify correctly across OPA versions.
OPA has historically been very lax in deciding where to source bundle signature data from during bundle verification, and would attempt to load bundle signatures data from *any* file in the bundle that had the filename suffix pattern `*signatures.json`.
This could cause surprising behavior at bundle verification time, and resulted in all files with the `*signatures.json` pattern being ignored for signing, allowing filenames like `foosignatures.json` to be added to a bundle without being integrity-checked by the bundle signature.
OPA now identifies the bundle signatures file by its exact basename `.signatures.json` (the same way it locates the bundle manifest and data files), so it is found regardless of any directory prefix, and a bundle containing more than one signatures file is rejected.
Additionally, OPA will now correctly detect and sign all other files with the suffix pattern `*signatures.json`, which may cause bundles signed by this and future versions of OPA to have different signatures from the same content signed by older versions of OPA.
Authored by [@​philipaconrad](https://redirect.github.com/philipaconrad)
##### Partial evaluation unrolls `every` over a known domain
Partial evaluation now evaluates an `every` over a known collection of at most 32 elements (counting nested `every`s together) once per element, instead of keeping it in the result when its body has unknowns. The result is the conjunction of the body for each element, which the data filtering targets of the Compile API can translate. See [`every`](https://www.openpolicyagent.org/docs/policy-reference/keywords/every#partial-evaluation).
Authored by [@​srenatus](https://redirect.github.com/srenatus)
##### Runtime, SDK, Tooling
- bundle: Avoid using filepath in FS directory loader ([#​9418](https://redirect.github.com/open-policy-agent/opa/pull/9418)) authored by [@​anderseknert](https://redirect.github.com/anderseknert)
- bundle: Canonicalize `data.yml` for bundle signatures ([#​9301](https://redirect.github.com/open-policy-agent/opa/issues/9301)) reported and authored by [@​philipaconrad](https://redirect.github.com/philipaconrad)
- bundle: Name the missing key when a signing block has a keyid but no keys ([#​9408](https://redirect.github.com/open-policy-agent/opa/pull/9408)) authored by [@​sspaink](https://redirect.github.com/sspaink)
- bundle: Resolve wasm manifest paths against the base dir ([#​5620](https://redirect.github.com/open-policy-agent/opa/issues/5620)) authored by [@​sspaink](https://redirect.github.com/sspaink), reported by [@​johanfylling](https://redirect.github.com/johanfylling)
- bundle: Stricter bundle signatures filename handling. ([#​9289](https://redirect.github.com/open-policy-agent/opa/issues/9289)) reported and authored by [@​philipaconrad](https://redirect.github.com/philipaconrad)
- bundle: don't parse policies that activation deletes ([#​9339](https://redirect.github.com/open-policy-agent/opa/pull/9339)) authored by [@​srenatus](https://redirect.github.com/srenatus)
- cmd/version: Note that the \_static binaries are deprecated ([#​9441](https://redirect.github.com/open-policy-agent/opa/pull/9441)) authored by [@​srenatus](https://redirect.github.com/srenatus)
- cmd: Replace spf13/viper with os.LookupEnv ([#​9288](https://redirect.github.com/open-policy-agent/opa/pull/9288)) authored by [@​sspaink](https://redirect.github.com/sspaink)
- compile: Escape slashes in annotation entrypoint paths ([#​6794](https://redirect.github.com/open-policy-agent/opa/issues/6794)) authored by [@​sspaink](https://redirect.github.com/sspaink), reported by [@​srenatus](https://redirect.github.com/srenatus)
- compile: Report untranslatable policies as fragment errors ([#​9373](https://redirect.github.com/open-policy-agent/opa/pull/9373)) authored by [@​srenatus](https://redirect.github.com/srenatus)
- compile: mirror, not negate, a comparison with the unknown on the right ([#​9373](https://redirect.github.com/open-policy-agent/opa/pull/9373)) authored by [@​srenatus](https://redirect.github.com/srenatus)
- debug: Add JSON tags to debugger struct fields ([#​9335](https://redirect.github.com/open-policy-agent/opa/pull/9335)) authored by [@​anderseknert](https://redirect.github.com/anderseknert)
- format: Adding `ast.RegoV2` enum to Go API ([#​9377](https://redirect.github.com/open-policy-agent/opa/pull/9377)) authored by [@​johanfylling](https://redirect.github.com/johanfylling)
- format: Allow early exit on the fail condition ([#​9156](https://redirect.github.com/open-policy-agent/opa/pull/9156)) authored by [@​oleksii-udovychenko](https://redirect.github.com/oleksii-udovychenko)
- loader: Skip duplicate files and name the conflicting path in merge errors ([#​2983](https://redirect.github.com/open-policy-agent/opa/issues/2983)) authored by [@​sspaink](https://redirect.github.com/sspaink), reported by [@​anderseknert](https://redirect.github.com/anderseknert)
- metrics: Replace rcrowley/go-metrics with in-tree sample ([#​7536](https://redirect.github.com/open-policy-agent/opa/issues/7536)) reported and authored by [@​sspaink](https://redirect.github.com/sspaink)
- metrics: Tweak sample code ([#​9305](https://redirect.github.com/open-policy-agent/opa/pull/9305)) authored by [@​srenatus](https://redirect.github.com/srenatus)
- metrics_export: Support resource attributes on exported metrics ([#​9393](https://redirect.github.com/open-policy-agent/opa/pull/9393)) authored by [@​srenatus](https://redirect.github.com/srenatus)
- plugins/bundle: Optionally send superseded etags in If-None-Match ([#​9370](https://redirect.github.com/open-policy-agent/opa/pull/9370)) authored by [@​srenatus](https://redirect.github.com/srenatus)
- plugins/logs: Export decision log buffer size and upload counters to Prometheus ([#​3812](https://redirect.github.com/open-policy-agent/opa/issues/3812)) authored by [@​sspaink](https://redirect.github.com/sspaink), reported by [@​anderseknert](https://redirect.github.com/anderseknert)
- plugins/logs: Include metrics and error in mask and drop policy input ([#​9357](https://redirect.github.com/open-policy-agent/opa/issues/9357)) reported and authored by [@​girishkvs](https://redirect.github.com/girishkvs)
- plugins/logs: Keep full chunks in the size buffer with manual trigger ([#​9349](https://redirect.github.com/open-policy-agent/opa/pull/9349)) authored by [@​sspaink](https://redirect.github.com/sspaink)
- plugins/logs: Support masking array-rooted input and result ([#​9356](https://redirect.github.com/open-policy-agent/opa/issues/9356)) reported and authored by [@​girishkvs](https://redirect.github.com/girishkvs)
- plugins/status: Export decision log status and drop counters to Prometheus ([#​9285](https://redirect.github.com/open-policy-agent/opa/issues/9285)) authored by [@​sspaink](https://redirect.github.com/sspaink), reported by [@​tsandall](https://redirect.github.com/tsandall)
- runtime: Allow configuring the HTTP access log level ([#​9290](https://redirect.github.com/open-policy-agent/opa/pull/9290)) authored by [@​srenatus](https://redirect.github.com/srenatus)
- runtime: Restart the serve routine to apply config file changes ([#​9184](https://redirect.github.com/open-policy-agent/opa/issues/9184)) authored by [@​sspaink](https://redirect.github.com/sspaink), reported by [@​charlieegan3](https://redirect.github.com/charlieegan3)
- sdk: Convert ND builtins cache so decision log mask rules apply ([#​9355](https://redirect.github.com/open-policy-agent/opa/issues/9355)) reported and authored by [@​girishkvs](https://redirect.github.com/girishkvs)
- server/types: Skip the extras decode when all top-level keys are known ([#​9378](https://redirect.github.com/open-policy-agent/opa/pull/9378)) authored by [@​sspaink](https://redirect.github.com/sspaink)
- server: Create TLS file watcher before returning listeners ([#​9420](https://redirect.github.com/open-policy-agent/opa/pull/9420)) authored by [@​sspaink](https://redirect.github.com/sspaink)
- server: Expose compile request body to the authorizer ([#​9427](https://redirect.github.com/open-policy-agent/opa/pull/9427)) authored by [@​srenatus](https://redirect.github.com/srenatus)
- server: Expose query API request body to the authorizer ([#​9427](https://redirect.github.com/open-policy-agent/opa/pull/9427)) authored by [@​srenatus](https://redirect.github.com/srenatus)
- server: Name not activated bundles in /health?bundles error ([#​6713](https://redirect.github.com/open-policy-agent/opa/issues/6713)) authored by [@​sspaink](https://redirect.github.com/sspaink), reported by [@​ahd3r](https://redirect.github.com/ahd3r)
- server: Report size and limit when request body is too large ([#​3310](https://redirect.github.com/open-policy-agent/opa/issues/3310)) authored by [@​sspaink](https://redirect.github.com/sspaink), reported by [@​grosser](https://redirect.github.com/grosser)
- server: Resolve encoded request paths consistently in authorizer and handlers ([#​9323](https://redirect.github.com/open-policy-agent/opa/issues/9323)) authored by [@​sspaink](https://redirect.github.com/sspaink), reported by [@​abhishekkushwaha4u](https://redirect.github.com/abhishekkushwaha4u)
- tester: Only trace tests that have test cases ([#​9409](https://redirect.github.com/open-policy-agent/opa/issues/9409)) reported and authored by [@​jbpros](https://redirect.github.com/jbpros)
##### Compiler, Topdown and Rego
- ast/parser: Set generated on true bodies ([#​9412](https://redirect.github.com/open-policy-agent/opa/pull/9412)) authored by [@​charlieegan3](https://redirect.github.com/charlieegan3)
- ast/scanner: Report non-breaking spaces as illegal characters ([#​5796](https://redirect.github.com/open-policy-agent/opa/issues/5796)) authored by [@​sspaink](https://redirect.github.com/sspaink), reported by [@​anderseknert](https://redirect.github.com/anderseknert)
- ast: Add `rego.v2` import ([#​9224](https://redirect.github.com/open-policy-agent/opa/issues/9224)) reported and authored by [@​johanfylling](https://redirect.github.com/johanfylling)
- ast: Add location to import aliases ([#​9414](https://redirect.github.com/open-policy-agent/opa/pull/9414)) authored by [@​charlieegan3](https://redirect.github.com/charlieegan3)
- ast: Attach annotations to statements in n log n time ([#​9392](https://redirect.github.com/open-policy-agent/opa/pull/9392)) authored by [@​srenatus](https://redirect.github.com/srenatus)
- ast: Attach rule annotations in linear time ([#​9339](https://redirect.github.com/open-policy-agent/opa/pull/9339)) authored by [@​srenatus](https://redirect.github.com/srenatus)
- ast: Bind hoisted vars in implicit not/and/or bodies ([#​9347](https://redirect.github.com/open-policy-agent/opa/pull/9347)) authored by [@​srenatus](https://redirect.github.com/srenatus)
- ast: Compare numbers of up to 15 digits as exact decimals ([#​9331](https://redirect.github.com/open-policy-agent/opa/pull/9331)) authored by [@​srenatus](https://redirect.github.com/srenatus)
- ast: Decode related-resource URI references ([#​6770](https://redirect.github.com/open-policy-agent/opa/issues/6770)) authored by [@​autoCAT6](https://redirect.github.com/autoCAT6), reported by [@​dxh9845](https://redirect.github.com/dxh9845)
- ast: Hint why same-kind composites fail to unify ([#​2132](https://redirect.github.com/open-policy-agent/opa/issues/2132)) authored by [@​sspaink](https://redirect.github.com/sspaink), reported by [@​patrick-east](https://redirect.github.com/patrick-east)
- ast: Index references holding a local bound to a scalar ([#​9449](https://redirect.github.com/open-policy-agent/opa/pull/9449)) authored by [@​srenatus](https://redirect.github.com/srenatus)
- ast: Keep the number range check off the plain number path ([#​9390](https://redirect.github.com/open-policy-agent/opa/pull/9390)) authored by [@​srenatus](https://redirect.github.com/srenatus)
- ast: Make IntNumberTerm inlinable ([#​9375](https://redirect.github.com/open-policy-agent/opa/pull/9375)) authored by [@​srenatus](https://redirect.github.com/srenatus)
- ast: Narrow ref vars with known values in the rule graph ([#​8255](https://redirect.github.com/open-policy-agent/opa/issues/8255)) authored by [@​sspaink](https://redirect.github.com/sspaink), reported by [@​anderseknert](https://redirect.github.com/anderseknert)
- ast: Only narrow ref vars with bindings ahead of the ref ([#​9327](https://redirect.github.com/open-policy-agent/opa/pull/9327)) authored by [@​sspaink](https://redirect.github.com/sspaink)
- ast: Reject trailing minus in package declaration ([#​9272](https://redirect.github.com/open-policy-agent/opa/issues/9272)) authored by [@​pujitha24](https://redirect.github.com/pujitha24), reported by [@​SophonticAI](https://redirect.github.com/SophonticAI)
- ast: Report dynamic recursion as 'may be recursive' ([#​9336](https://redirect.github.com/open-policy-agent/opa/pull/9336)) authored by [@​sspaink](https://redirect.github.com/sspaink)
- ast: Report reserved names used as import aliases ([#​7255](https://redirect.github.com/open-policy-agent/opa/issues/7255)) authored by [@​sspaink](https://redirect.github.com/sspaink), reported by [@​anderseknert](https://redirect.github.com/anderseknert)
- ast: Treat SomeDecl/Every exprs as non-ground in Expr.IsGround ([#​9280](https://redirect.github.com/open-policy-agent/opa/issues/9280)) authored by [@​srenatus](https://redirect.github.com/srenatus), reported by [@​tun0](https://redirect.github.com/tun0)
- ast: `rego_v2` capability implies `template_strings` and `keywords_in_refs` ([#​9424](https://redirect.github.com/open-policy-agent/opa/pull/9424)) authored by [@​johanfylling](https://redirect.github.com/johanfylling)
- ast: ast, topdown: reject numbers with an out-of-range exponent ([#​9365](https://redirect.github.com/open-policy-agent/opa/issues/9365)) authored by [@​srenatus](https://redirect.github.com/srenatus), reported by [@​jbpros](https://redirect.github.com/jbpros)
- ast: don't keep the statements a module was parsed from ([#​9395](https://redirect.github.com/open-policy-agent/opa/pull/9395)) authored by [@​srenatus](https://redirect.github.com/srenatus)
- ast: don't set a location on the interned zero term when parsing unary minus ([#​9334](https://redirect.github.com/open-policy-agent/opa/pull/9334)) authored by [@​srenatus](https://redirect.github.com/srenatus)
- ast: don't state recursion conditions a builtin's result type rules out ([#​9336](https://redirect.github.com/open-policy-agent/opa/pull/9336)) authored by [@​sspaink](https://redirect.github.com/sspaink)
- eval: Eliminate allocations in evalNot ([#​9270](https://redirect.github.com/open-policy-agent/opa/pull/9270)) authored by [@​anderseknert](https://redirect.github.com/anderseknert)
- fix: Reject some-in bindings that also appear in the domain ([#​9052](https://redirect.github.com/open-policy-agent/opa/issues/9052)) authored by [@​BetterAndBetterII](https://redirect.github.com/BetterAndBetterII), reported by [@​anderseknert](https://redirect.github.com/anderseknert)
- index: Two correctness tweaks ([#​9318](https://redirect.github.com/open-policy-agent/opa/pull/9318)) authored by [@​srenatus](https://redirect.github.com/srenatus)
- internal/compiler: Limit authz schema check to the authz package ([#​7185](https://redirect.github.com/open-policy-agent/opa/issues/7185)) authored by [@​sspaink](https://redirect.github.com/sspaink), reported by [@​Starry-x](https://redirect.github.com/Starry-x)
- rego: Preserve eval options when preparing with partial eval ([#​6787](https://redirect.github.com/open-policy-agent/opa/issues/6787)) authored by [@​sspaink](https://redirect.github.com/sspaink), reported by [@​nkey0](https://redirect.github.com/nkey0)
- topdown: Allocate base cache children on first insert ([#​9450](https://redirect.github.com/open-policy-agent/opa/pull/9450)) authored by [@​srenatus](https://redirect.github.com/srenatus)
- topdown: Cache parsed JWT verification keys ([#​9314](https://redirect.github.com/open-policy-agent/opa/pull/9314)) authored by [@​sspaink](https://redirect.github.com/sspaink)
- topdown: Cache the tries of any_prefix_match and any_suffix_match ([#​6363](https://redirect.github.com/open-policy-agent/opa/issues/6363)) authored by [@​sspaink](https://redirect.github.com/sspaink), reported by [@​prasanthj](https://redirect.github.com/prasanthj)
- topdown: Do arithmetic in the narrowest exact representation ([#​9328](https://redirect.github.com/open-policy-agent/opa/pull/9328)) authored by [@​srenatus](https://redirect.github.com/srenatus)
- topdown: Fix `net.cidr_contains` false negatives on IPv6 subnets ending at `::ffff:ffff:ffff` ([#​9396](https://redirect.github.com/open-policy-agent/opa/issues/9396)) reported and authored by [@​7-Bala](https://redirect.github.com/7-Bala)
- topdown: Fix partial eval panic on negated `every` ([#​9383](https://redirect.github.com/open-policy-agent/opa/issues/9383)) authored by [@​choksi2212](https://redirect.github.com/choksi2212), reported by [@​saluc28](https://redirect.github.com/saluc28)
- topdown: Fix substring overflow with huge length ([#​9366](https://redirect.github.com/open-policy-agent/opa/issues/9366)) authored by [@​srenatus](https://redirect.github.com/srenatus), reported by [@​NitinKumar004](https://redirect.github.com/NitinKumar004)
- topdown: List all conflicting rules in eval_conflict_error ([#​9247](https://redirect.github.com/open-policy-agent/opa/issues/9247)) reported and authored by [@​sspaink](https://redirect.github.com/sspaink)
- topdown: Look up ground values in sets instead of scanning ([#​6740](https://redirect.github.com/open-policy-agent/opa/issues/6740)) authored by [@​sspaink](https://redirect.github.com/sspaink), reported by [@​davidmarne-wf](https://redirect.github.com/davidmarne-wf)
- topdown: Match one string against strings.any\_\*\_match search strings in place ([#​9319](https://redirect.github.com/open-policy-agent/opa/pull/9319)) authored by [@​srenatus](https://redirect.github.com/srenatus)
- topdown: Memoize opa.runtime redaction ([#​9287](https://redirect.github.com/open-policy-agent/opa/pull/9287)) authored by [@​sspaink](https://redirect.github.com/sspaink)
- topdown: Replace go-patricia with sorted binary search ([#​9296](https://redirect.github.com/open-policy-agent/opa/pull/9296)) authored by [@​sspaink](https://redirect.github.com/sspaink)
- topdown: Skip label tracking when the policy has no labels ([#​9325](https://redirect.github.com/open-policy-agent/opa/pull/9325)) authored by [@​srenatus](https://redirect.github.com/srenatus)
- topdown: Skip rune conversion in indexof_n for ASCII ([#​9369](https://redirect.github.com/open-policy-agent/opa/pull/9369)) authored by [@​srenatus](https://redirect.github.com/srenatus)
- topdown: Unroll every over a known domain ([#​9374](https://redirect.github.com/open-policy-agent/opa/pull/9374)) authored by [@​srenatus](https://redirect.github.com/srenatus)
- topdown: Various tweaks ([#​9384](https://redirect.github.com/open-policy-agent/opa/pull/9384)) authored by [@​srenatus](https://redirect.github.com/srenatus)
- topdown: don't panic reversing strings that aren't valid UTF-8 ([#​9321](https://redirect.github.com/open-policy-agent/opa/pull/9321)) authored by [@​sspaink](https://redirect.github.com/sspaink)
- topdown: don't use set lookup fast path for unresolved refs ([#​9442](https://redirect.github.com/open-policy-agent/opa/pull/9442)) authored by [@​sspaink](https://redirect.github.com/sspaink)
- util: Correct JSON number comparison ordering ([#​9411](https://redirect.github.com/open-policy-agent/opa/pull/9411)) authored by [@​git-jxj](https://redirect.github.com/git-jxj)
- wasm: Mark eq and assign as wasm-enabled ([#​5866](https://redirect.github.com/open-policy-agent/opa/issues/5866)) authored by [@​sspaink](https://redirect.github.com/sspaink), reported by [@​ffortier](https://redirect.github.com/ffortier)
##### Docs, Website, Ecosystem
- docs(ecosystem): Update OPA MCP install options ([#​9425](https://redirect.github.com/open-policy-agent/opa/pull/9425)) authored by [@​OrygnsCode](https://redirect.github.com/OrygnsCode)
- docs: Add OPA-AuthZEN to the OPA ecosystem ([#​9401](https://redirect.github.com/open-policy-agent/opa/pull/9401)) authored by [@​kanywst](https://redirect.github.com/kanywst)
- docs: Clarify tls_use_system_certs false behavior ([#​9358](https://redirect.github.com/open-policy-agent/opa/issues/9358)) reported and authored by [@​girishkvs](https://redirect.github.com/girishkvs)
- docs: Explain peak memory during bundle updates ([#​7411](https://redirect.github.com/open-policy-agent/opa/issues/7411)) authored by [@​git-jxj](https://redirect.github.com/git-jxj), reported by [@​anderseknert](https://redirect.github.com/anderseknert)
##### Miscellaneous
- Add James Alseth as a conftest maintainer ([#​9299](https://redirect.github.com/open-policy-agent/opa/pull/9299)) authored by [@​charlieegan3](https://redirect.github.com/charlieegan3)
- Dependency updates; notably:
- build(deps): Bump github.com/vektah/gqlparser/v2 from 2.5.37 to 2.5.58
- build(deps): Bump google.golang.org/grpc from 1.83.2 to 1.84.0
- build: Bump go (1.27.1 -> 1.27.3) ([#​9340](https://redirect.github.com/open-policy-agent/opa/pull/9340), [#​9421](https://redirect.github.com/open-policy-agent/opa/pull/9421)) authored by [@​srenatus](https://redirect.github.com/srenatus), [@​johanfylling](https://redirect.github.com/johanfylling)
- Remove claude agents.md hook ([#​9298](https://redirect.github.com/open-policy-agent/opa/pull/9298)) authored by [@​charlieegan3](https://redirect.github.com/charlieegan3)
- ast: Add regression test for rule conflict reporting ([#​5869](https://redirect.github.com/open-policy-agent/opa/issues/5869)) authored by [@​sspaink](https://redirect.github.com/sspaink), reported by [@​johanfylling](https://redirect.github.com/johanfylling)
- ast: Reword comments that were only relevant at review ([#​9307](https://redirect.github.com/open-policy-agent/opa/pull/9307)) authored by [@​charlieegan3](https://redirect.github.com/charlieegan3)
- capabilities: Integrate patch release v1.21.1 ([#​9291](https://redirect.github.com/open-policy-agent/opa/pull/9291)) authored by [@​srenatus](https://redirect.github.com/srenatus)
- capabilities: Integrate patch release v1.21.3 ([#​9406](https://redirect.github.com/open-policy-agent/opa/pull/9406)) authored by [@​sspaink](https://redirect.github.com/sspaink)
- cmd: Give the malformed remote bundle exec tests a longer timeout ([#​9381](https://redirect.github.com/open-policy-agent/opa/pull/9381)) authored by [@​sspaink](https://redirect.github.com/sspaink)
- e2e: Go mod tidy ([#​9373](https://redirect.github.com/open-policy-agent/opa/pull/9373)) authored by [@​srenatus](https://redirect.github.com/srenatus)
- golangci-lint v2.13 -> v2.14 ([#​9313](https://redirect.github.com/open-policy-agent/opa/pull/9313)) authored by [@​anderseknert](https://redirect.github.com/anderseknert)
- internal: Make better use of helpers ([#​9446](https://redirect.github.com/open-policy-agent/opa/pull/9446)) authored by [@​anderseknert](https://redirect.github.com/anderseknert)
- nightly: Raise the go get smoke test timeout to 30 minutes ([#​9379](https://redirect.github.com/open-policy-agent/opa/pull/9379)) authored by [@​sspaink](https://redirect.github.com/sspaink)
- nightly: Test opa-envoy-plugin main instead of the latest release ([#​9380](https://redirect.github.com/open-policy-agent/opa/pull/9380)) authored by [@​sspaink](https://redirect.github.com/sspaink)
- runtime: Serve TestTracingExcludePaths requests in-process ([#​9268](https://redirect.github.com/open-policy-agent/opa/pull/9268)) authored by [@​srenatus](https://redirect.github.com/srenatus)
- runtime: Serve test servers without StartServer ([#​9261](https://redirect.github.com/open-policy-agent/opa/pull/9261)) authored by [@​srenatus](https://redirect.github.com/srenatus)
- topdown: Benchmark anyStartsWithAny across input shapes ([#​9296](https://redirect.github.com/open-policy-agent/opa/pull/9296)) authored by [@​sspaink](https://redirect.github.com/sspaink)
- topdown: Benchmark naked refs to large base-doc arrays ([#​5946](https://redirect.github.com/open-policy-agent/opa/issues/5946)) authored by [@​sspaink](https://redirect.github.com/sspaink), reported by [@​anderseknert](https://redirect.github.com/anderseknert)
- topdown: Enable more revive linter rules ([#​9312](https://redirect.github.com/open-policy-agent/opa/pull/9312)) authored by [@​anderseknert](https://redirect.github.com/anderseknert)
- topdown: Start the partial-eval test server on first use ([#​9273](https://redirect.github.com/open-policy-agent/opa/pull/9273)) authored by [@​srenatus](https://redirect.github.com/srenatus)
</details>
---
### Configuration
📅 **Schedule**: (UTC)
- Branch creation
- At any time (no schedule defined)
- Automerge
- At any time (no schedule defined)
🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.
♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 **Ignore**: Close this PR and you won't be reminded about this update again.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box
---
This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/apache/polaris).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4xODguMiIsInVwZGF0ZWRJblZlciI6IjQ0LjE4OC4yIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJyZW5vdmF0ZS1wb2xhcmlzIl19-->
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: issues-unsubscribe@polaris.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [PR] Update docker.io/openpolicyagent/opa Docker tag to v1.22.0 [polaris]
Posted by "flyrain (via GitHub)" <gi...@apache.org>.
flyrain merged PR #5919:
URL: https://github.com/apache/polaris/pull/5919
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: issues-unsubscribe@polaris.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org