069dc91cae
add merge_group build trigger to benchmarks ( #8522 )
...
Signed-off-by: Sebastian Spaink <sebastianspaink@gmail.com >
2026-04-16 10:48:16 -05:00
edab2a5f3c
Update opa test to stream test case results ( #8517 )
...
Signed-off-by: Sebastian Spaink <sebastianspaink@gmail.com >
2026-04-16 08:25:24 -05:00
e123cdb007
Fix type checker to recognize numeric index in generated map ( #8518 )
...
Signed-off-by: Sebastian Spaink <sebastianspaink@gmail.com >
2026-04-16 07:16:16 -05:00
4e104b0c94
server: Drop HTML index page ( #8478 )
...
Fixes : #8477
Signed-off-by: Johan Fylling <johan.dev@fylling.se >
2026-04-16 12:59:28 +02:00
cc44823d58
build(deps): bump dompurify from 3.3.2 to 3.4.0 in /docs
...
Bumps [dompurify](https://github.com/cure53/DOMPurify ) from 3.3.2 to 3.4.0.
- [Release notes](https://github.com/cure53/DOMPurify/releases )
- [Commits](https://github.com/cure53/DOMPurify/compare/3.3.2...3.4.0 )
---
updated-dependencies:
- dependency-name: dompurify
dependency-version: 3.4.0
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-04-16 11:26:08 +02:00
7d51f3dc48
build(deps): bump hono in /e2e/api/compile/prisma
...
Bumps [hono](https://github.com/honojs/hono ) from 4.12.12 to 4.12.14.
- [Release notes](https://github.com/honojs/hono/releases )
- [Commits](https://github.com/honojs/hono/compare/v4.12.12...v4.12.14 )
---
updated-dependencies:
- dependency-name: hono
dependency-version: 4.12.14
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-04-16 11:25:52 +02:00
a7bd374b00
Prevent fmt from formatting single attribute objects with comments ( #8519 )
...
Signed-off-by: Sebastian Spaink <sebastianspaink@gmail.com >
2026-04-16 10:09:50 +02:00
cd955f69d0
workflows: attempt to fix slack notifications
...
Signed-off-by: Stephan Renatus <stephan.renatus@gmail.com >
2026-04-15 11:03:19 +02:00
ef9c47973b
workflows/nightly: use OCP ref (temporary workaround)
...
This should make the tests pass in CI, giving us a green nightly build.
On the next OCP release, we can revert this and go back to pulling the
latest release/tag.
Signed-off-by: Stephan Renatus <stephan.renatus@gmail.com >
2026-04-15 11:03:19 +02:00
159fe6b28d
workflows: fix nightly and release-vuln-check
...
Signed-off-by: Stephan Renatus <stephan.renatus@gmail.com >
2026-04-15 09:17:01 +02:00
e7ccaed26f
benchmarks: bump nodejs (24 -> 25)
...
Signed-off-by: Stephan Renatus <stephan.renatus@gmail.com >
2026-04-15 09:17:01 +02:00
27f34789f5
Fix type checker match error for objects with set keys
...
Signed-off-by: Sebastian Spaink <sebastianspaink@gmail.com >
2026-04-15 08:40:27 +02:00
55a9eb6ffa
fix: reachable_paths does not return all reachable paths ( #8510 )
...
* topdown: add failing tests for graph.reachable_paths with shared ancestors
Adds a regression test (shared_ancestor) reproducing the bug reported in
#5871 : given a graph where node 4 has edges to both 3 and 2, and 3 also
has an edge to 2, graph.reachable_paths from 5 drops the path [5,4,2,1].
Also corrects the expected result for the existing cycle_1022_3 test, which
was asserting the buggy output ([one,five,six] truncated) rather than the
correct complete path [one,five,six,seven,eight,three].
Signed-off-by: David Marne <david.marne@workiva.com >
* topdown: fix graph.reachable_paths dropping paths with shared ancestors
graph.reachable_paths had two bugs that caused paths to be silently dropped
when a node is reachable via multiple routes (diamond-shaped graphs).
Bug 1: the `reached` set was mutated and shared across sibling recursive
calls. After branch A finished traversal and added nodes to `reached`,
branch B would see those nodes as already visited and terminate early,
emitting a truncated path instead of continuing.
Fix: copy `reached` once per pathBuilder invocation and pass the copy to
all recursive calls. Each branch now has its own ancestor-only visited set.
Bug 2: ast.NewArray stores the slice it receives directly (elems: a)
without copying. When sibling calls appended to a shared backing array,
the in-place write by one sibling corrupted the already-committed path
term of a previous sibling.
Fix: pass append([]*ast.Term(nil), path...) to each recursive call,
giving each branch its own independent backing array.
Signed-off-by: David Marne <david.marne@workiva.com >
---------
Signed-off-by: David Marne <david.marne@workiva.com >
2026-04-14 10:45:43 -05:00
6a79368e86
build(deps): bump follow-redirects from 1.15.11 to 1.16.0 in /docs ( #8513 )
...
Bumps [follow-redirects](https://github.com/follow-redirects/follow-redirects ) from 1.15.11 to 1.16.0.
- [Release notes](https://github.com/follow-redirects/follow-redirects/releases )
- [Commits](https://github.com/follow-redirects/follow-redirects/compare/v1.15.11...v1.16.0 )
---
updated-dependencies:
- dependency-name: follow-redirects
dependency-version: 1.16.0
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-14 08:48:25 -05:00
b530a7dd2e
build: bump wasmtime-go to v43.0.2
...
Signed-off-by: Stephan Renatus <stephan.renatus@gmail.com >
2026-04-14 09:35:49 +02:00
42baad2bc4
ast: fix parenthesis in String() of {obj,arr,set} comprehensions
...
This should fix the issue underlying
https://github.com/open-policy-agent/opa-control-plane/issues/321
Signed-off-by: Stephan Renatus <stephan.renatus@gmail.com >
2026-04-14 09:29:39 +02:00
1de861f2d6
Add support for days, weeks and years in parse_duration_ns ( #8463 )
...
Signed-off-by: Sebastian Spaink <sebastianspaink@gmail.com >
2026-04-13 20:20:51 +00:00
04ee2c86ad
ast: catch functions in dynamic extent of ref head rule
...
These currently fail, as laid out in #8461 .
With this change, we'll return a controlled error, and don't let the
user run into an NPE or a cryptic error.
Fixes #8461 .
Signed-off-by: Stephan Renatus <stephan.renatus@gmail.com >
2026-04-13 09:28:45 +02:00
9b90626150
docs: Add spec for OCP bundle status tracking API
...
Signed-off-by: Ashutosh Narkar <anarkar4387@gmail.com >
2026-04-09 12:07:29 -07:00
4b47732f77
fmt: Allow indenting all withs in expression ( #8508 )
...
```rego
test_something if {
something
with input.foo as 1
with input.bar as 2
}
```
Would previously be formatted as:
```rego
test_something if {
something with input.foo as 1
with input.bar as 2
}
```
Now the formatter allows also the first `with` to be indented
as the rest if the first `with` is found below the line where
the expression begins.
Existing Rego files that have been formatted before should remain
the same when reformatted, and none of the existing formatter tests
have required changes. Only users who actively place the first `with`
in a group on a line below will now see that the formatter respects
their wish, and will indent it the same way as the following `with`s.
Signed-off-by: Anders Eknert <anders.eknert@apple.com >
2026-04-09 18:05:37 +00:00
e5427d5adb
resolver/wasm: Add NewWithContext to allow passing context ( #8499 )
...
Previously, initializing a new WASM resolver always used a background
context. This prevented callers from passing down an existing context
for timeouts, cancellation, or tracing.
This change introduces `NewWithContext` in `v1/resolver/wasm` which accepts
a context and propagates it to `Entrypoints()`. The existing `New`
function has been updated to wrap `NewWithContext` using a background
context to preserve backwards compatibility. `LoadWasmResolversFromStore`
has been updated to pass the provided context appropriately.
Signed-off-by: Dominik Schulz <dschulz@google.com >
2026-04-09 19:10:19 +02:00
65609fcf0a
build(deps): bump go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp ( #8506 )
...
Bumps [go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp](https://github.com/open-telemetry/opentelemetry-go ) from 1.42.0 to 1.43.0.
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases )
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md )
- [Commits](https://github.com/open-telemetry/opentelemetry-go/compare/v1.42.0...v1.43.0 )
---
updated-dependencies:
- dependency-name: go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp
dependency-version: 1.43.0
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-08 22:23:20 +00:00
ea46a00616
build(deps): bump go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp ( #8504 )
...
Bumps [go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp](https://github.com/open-telemetry/opentelemetry-go ) from 1.42.0 to 1.43.0.
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases )
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md )
- [Commits](https://github.com/open-telemetry/opentelemetry-go/compare/v1.42.0...v1.43.0 )
---
updated-dependencies:
- dependency-name: go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp
dependency-version: 1.43.0
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-08 21:42:24 +00:00
cf0f5fd804
build(deps): bump go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp ( #8503 )
...
Bumps [go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp](https://github.com/open-telemetry/opentelemetry-go ) from 1.42.0 to 1.43.0.
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases )
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md )
- [Commits](https://github.com/open-telemetry/opentelemetry-go/compare/v1.42.0...v1.43.0 )
---
updated-dependencies:
- dependency-name: go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp
dependency-version: 1.43.0
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-08 21:31:36 +00:00
261a4f6c04
type checker: identify compatible type from reference ( #8485 )
...
* type checker: identify compatible type from reference
* Update unifiesObjectsStatic to allow static keys with dynamic properties to be optional, similar to unify1Object
Signed-off-by: Sebastian Spaink <sebastianspaink@gmail.com >
2026-04-08 19:55:49 +00:00
dc3313b189
plugins/rest: carry over all of *tls.Config ( #8476 )
...
- The tokenTLSConfig is cloned from DefaultTLSConfig(c) (which
includes RootCAs) and then InsecureSkipVerify is set explicitly from
c.AllowInsecureTLS, since DefaultTLSConfig only sets it when the service
URL is https, but the token URL is always https regardless.
- New test configures a service with tls.ca_cert pointing to the token
server's CA cert, without allow_insecure_tls. This directly reproduces
the bug report — before the fix, this would fail with x509: certificate
signed by unknown authority. Also removes some duplication we had
before.
Fixes #8473 .
Signed-off-by: Stephan Renatus <stephan.renatus@gmail.com >
2026-04-08 15:46:50 +00:00
b10afee1b9
Updated roadmap link ( #8501 )
...
Signed-off-by: Johan Fylling <johan.dev@fylling.se >
2026-04-08 17:22:49 +02:00
12b7290697
distributedtracing: export Prometheus metrics via OTLP ( #8450 )
...
* distributedtracing: export Prometheus metrics via OTLP
Add support for pushing OPA's existing Prometheus metrics to an
OpenTelemetry collector via OTLP, eliminating the need for a dedicated
scraper sidecar. Uses the OTel Prometheus bridge to read from OPA's
prometheus.Registry and export through an OTLP metric exporter (gRPC
or HTTP), reusing the same address and TLS configuration as traces.
New config fields: distributed_tracing.metrics (bool, default false)
and distributed_tracing.metrics_export_interval_ms (int, default 60000).
Fixes #7591
Signed-off-by: Michael Munch <mm.munk@gmail.com >
* metricsexport: decouple metrics export into top-level config section
Extract metrics export from distributed_tracing into its own
metrics_export config section with independent type (otlp/grpc,
otlp/http), address, and TLS settings. This allows exporting
Prometheus metrics via OTLP without enabling tracing, and to a
different endpoint than traces.
- Extract shared TLS helpers into internal/tlsutil
- Add MetricsExport field to top-level Config
- Create internal/metricsexport package with Init, config parsing
- Remove metrics fields from distributedtracing
- Update runtime to call metricsexport.Init separately
- Move e2e tests to v1/test/e2e/metricsexport
- Add Metrics Export section to configuration docs
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com >
Signed-off-by: Michael Munch <mm.munk@gmail.com >
* ci: retrigger checks
Signed-off-by: Michael Munch <mm.munk@gmail.com >
* go.mod: upgrade dependencies downgraded during rebase
Modules like containerd, go-sqlbuilder, OpenTelemetry, and golang.org/x/*
were at older versions than main after a rebase. Upgrade them to match or
exceed main.
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com >
Signed-off-by: Michael Munch <mm.munk@gmail.com >
* Update internal/distributedtracing/distributedtracing_test.go
Signed-off-by: Michael Munch <mm.munk@gmail.com >
---------
Signed-off-by: Michael Munch <mm.munk@gmail.com >
Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com >
2026-04-08 14:09:51 +00:00
1434b4c040
build(deps): bump hono from 4.12.9 to 4.12.12 in /e2e/api/compile/prisma ( #8498 )
...
Bumps [hono](https://github.com/honojs/hono ) from 4.12.9 to 4.12.12.
- [Release notes](https://github.com/honojs/hono/releases )
- [Commits](https://github.com/honojs/hono/compare/v4.12.9...v4.12.12 )
---
updated-dependencies:
- dependency-name: hono
dependency-version: 4.12.12
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-08 13:00:49 +00:00
e7b6a90e66
build: bump go 1.26.2 ( #8497 )
...
Signed-off-by: Sebastian Spaink <sebastianspaink@gmail.com >
2026-04-08 14:07:27 +02:00
f226d07b1c
Remove old redirects, add new management redirect ( #8491 )
...
Fixes https://github.com/open-policy-agent/opa/issues/8424
Signed-off-by: Charlie Egan <charlie_egan@apple.com >
2026-04-07 16:30:16 +00:00
cf6b6faf1d
Add banner to show when event has passed ( #8493 )
...
Move event status message to prominent banner at top of page.
Replace heading-only note as it was not clear.
Signed-off-by: Charlie Egan <charlie_egan@apple.com >
2026-04-07 16:02:24 +00:00
bb1293a544
build(deps): bump lodash from 4.17.23 to 4.18.1 in /docs ( #8494 )
...
Bumps [lodash](https://github.com/lodash/lodash ) from 4.17.23 to 4.18.1.
- [Release notes](https://github.com/lodash/lodash/releases )
- [Commits](https://github.com/lodash/lodash/compare/4.17.23...4.18.1 )
---
updated-dependencies:
- dependency-name: lodash
dependency-version: 4.18.1
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-07 10:06:09 -05:00
a57f2ef42d
cicd: Split link checker into docs & repo checks ( #8492 )
...
We have fixed most of the broken links! But,
https://github.com/open-policy-agent/opa/issues/8464 is mostly not useful now
as we are checking the docs site internal links which are already checked at
build time which is done in PRs.
This change makes two jobs, one for the repo, and one for the docs site. The
OPA domain is ignored for website checks.
Signed-off-by: Charlie Egan <charlie_egan@apple.com >
2026-04-07 15:05:44 +01:00
f9401259dc
docs: add Windows development notes to dev reference guide ( #8422 )
...
Signed-off-by: Raajhesh Kannaa Chidambaram <495042+raajheshkannaa@users.noreply.github.com >
2026-04-03 10:13:27 -05:00
918b8cc969
fmt: add new line between METADATA blocks ( #8483 )
...
Signed-off-by: Sebastian Spaink <sebastianspaink@gmail.com >
2026-04-03 06:53:36 -05:00
7d266cb687
Allow Back-to-back metadata blocks ( #8482 )
...
Signed-off-by: Sebastian Spaink <sebastianspaink@gmail.com >
2026-04-02 20:14:02 +00:00
48fdef5f69
Security policy update ( #8479 )
...
Since we have seen a few reports that assume no authn/authz lately,
let's update the policy to say something about that.
Signed-off-by: Anders Eknert <anders.eknert@apple.com >
2026-04-02 14:12:24 +02:00
daf53373ec
build(deps): bump lodash and prisma in /e2e/api/compile/prisma ( #8475 )
...
Removes [lodash](https://github.com/lodash/lodash ). It's no longer used after updating ancestor dependency [prisma](https://github.com/prisma/prisma/tree/HEAD/packages/cli ). These dependencies need to be updated together.
Removes `lodash`
Updates `prisma` from 7.5.0 to 7.6.0
- [Release notes](https://github.com/prisma/prisma/releases )
- [Commits](https://github.com/prisma/prisma/commits/7.6.0/packages/cli )
---
updated-dependencies:
- dependency-name: lodash
dependency-version:
dependency-type: indirect
- dependency-name: prisma
dependency-version: 7.6.0
dependency-type: direct:development
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-02 08:40:14 +02:00
a08ff34488
build(deps): bump the e2e-prisma group ( #8472 )
...
Bumps the e2e-prisma group in /e2e/api/compile/prisma with 4 updates: [@prisma/adapter-pg](https://github.com/prisma/prisma/tree/HEAD/packages/adapter-pg ), [@prisma/client](https://github.com/prisma/prisma/tree/HEAD/packages/client ), [pg](https://github.com/brianc/node-postgres/tree/HEAD/packages/pg ) and [prisma](https://github.com/prisma/prisma/tree/HEAD/packages/cli ).
Updates `@prisma/adapter-pg` from 7.4.1 to 7.5.0
- [Release notes](https://github.com/prisma/prisma/releases )
- [Commits](https://github.com/prisma/prisma/commits/7.5.0/packages/adapter-pg )
Updates `@prisma/client` from 7.4.1 to 7.5.0
- [Release notes](https://github.com/prisma/prisma/releases )
- [Commits](https://github.com/prisma/prisma/commits/7.5.0/packages/client )
Updates `pg` from 8.18.0 to 8.20.0
- [Changelog](https://github.com/brianc/node-postgres/blob/master/CHANGELOG.md )
- [Commits](https://github.com/brianc/node-postgres/commits/pg@8.20.0/packages/pg )
Updates `prisma` from 7.4.1 to 7.5.0
- [Release notes](https://github.com/prisma/prisma/releases )
- [Commits](https://github.com/prisma/prisma/commits/7.5.0/packages/cli )
---
updated-dependencies:
- dependency-name: "@prisma/adapter-pg"
dependency-version: 7.5.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: e2e-prisma
- dependency-name: "@prisma/client"
dependency-version: 7.5.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: e2e-prisma
- dependency-name: pg
dependency-version: 8.20.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: e2e-prisma
- dependency-name: prisma
dependency-version: 7.5.0
dependency-type: direct:development
update-type: version-update:semver-minor
dependency-group: e2e-prisma
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-01 17:17:11 +00:00
69361eddfb
build(deps): bump the dependencies group across 2 directories with 8 updates ( #8471 )
...
Bumps the dependencies group with 3 updates in the / directory: [github.com/containerd/containerd/v2](https://github.com/containerd/containerd ), [github.com/huandu/go-sqlbuilder](https://github.com/huandu/go-sqlbuilder ) and [golang.org/x/net](https://github.com/golang/net ).
Bumps the dependencies group with 4 updates in the /e2e directory: [github.com/lib/pq](https://github.com/lib/pq ), [github.com/microsoft/go-mssqldb](https://github.com/microsoft/go-mssqldb ), [github.com/testcontainers/testcontainers-go](https://github.com/testcontainers/testcontainers-go ) and [modernc.org/sqlite](https://gitlab.com/cznic/sqlite ).
Updates `github.com/containerd/containerd/v2` from 2.2.1 to 2.2.2
- [Release notes](https://github.com/containerd/containerd/releases )
- [Changelog](https://github.com/containerd/containerd/blob/main/RELEASES.md )
- [Commits](https://github.com/containerd/containerd/compare/v2.2.1...v2.2.2 )
Updates `github.com/huandu/go-sqlbuilder` from 1.39.1 to 1.40.0
- [Release notes](https://github.com/huandu/go-sqlbuilder/releases )
- [Commits](https://github.com/huandu/go-sqlbuilder/compare/v1.39.1...v1.40.0 )
Updates `golang.org/x/net` from 0.51.0 to 0.52.0
- [Commits](https://github.com/golang/net/compare/v0.51.0...v0.52.0 )
Updates `golang.org/x/text` from 0.34.0 to 0.35.0
- [Release notes](https://github.com/golang/text/releases )
- [Commits](https://github.com/golang/text/compare/v0.34.0...v0.35.0 )
Updates `github.com/lib/pq` from 1.11.2 to 1.12.0
- [Release notes](https://github.com/lib/pq/releases )
- [Changelog](https://github.com/lib/pq/blob/master/CHANGELOG.md )
- [Commits](https://github.com/lib/pq/compare/v1.11.2...v1.12.0 )
Updates `github.com/microsoft/go-mssqldb` from 1.9.7 to 1.9.8
- [Release notes](https://github.com/microsoft/go-mssqldb/releases )
- [Changelog](https://github.com/microsoft/go-mssqldb/blob/main/CHANGELOG.md )
- [Commits](https://github.com/microsoft/go-mssqldb/compare/v1.9.7...v1.9.8 )
Updates `github.com/testcontainers/testcontainers-go` from 0.40.0 to 0.41.0
- [Release notes](https://github.com/testcontainers/testcontainers-go/releases )
- [Commits](https://github.com/testcontainers/testcontainers-go/compare/v0.40.0...v0.41.0 )
Updates `modernc.org/sqlite` from 1.46.1 to 1.47.0
- [Changelog](https://gitlab.com/cznic/sqlite/blob/master/CHANGELOG.md )
- [Commits](https://gitlab.com/cznic/sqlite/compare/v1.46.1...v1.47.0 )
---
updated-dependencies:
- dependency-name: github.com/containerd/containerd/v2
dependency-version: 2.2.2
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: dependencies
- dependency-name: github.com/huandu/go-sqlbuilder
dependency-version: 1.40.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: dependencies
- dependency-name: golang.org/x/net
dependency-version: 0.52.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: dependencies
- dependency-name: golang.org/x/text
dependency-version: 0.35.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: dependencies
- dependency-name: github.com/lib/pq
dependency-version: 1.12.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: dependencies
- dependency-name: github.com/microsoft/go-mssqldb
dependency-version: 1.9.8
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: dependencies
- dependency-name: github.com/testcontainers/testcontainers-go
dependency-version: 0.41.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: dependencies
- dependency-name: modernc.org/sqlite
dependency-version: 1.47.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: dependencies
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-01 15:37:00 +00:00
1447757444
build(deps): bump the go-opentelemetry-io group across 1 directory with 7 updates ( #8470 )
...
Bumps the go-opentelemetry-io group with 4 updates in the / directory: [go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp](https://github.com/open-telemetry/opentelemetry-go-contrib ), [go.opentelemetry.io/otel/exporters/otlp/otlptrace](https://github.com/open-telemetry/opentelemetry-go ), [go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc](https://github.com/open-telemetry/opentelemetry-go ) and [go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp](https://github.com/open-telemetry/opentelemetry-go ).
Updates `go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp` from 0.65.0 to 0.67.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go-contrib/releases )
- [Changelog](https://github.com/open-telemetry/opentelemetry-go-contrib/blob/main/CHANGELOG.md )
- [Commits](https://github.com/open-telemetry/opentelemetry-go-contrib/compare/zpages/v0.65.0...zpages/v0.67.0 )
Updates `go.opentelemetry.io/otel` from 1.40.0 to 1.42.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases )
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md )
- [Commits](https://github.com/open-telemetry/opentelemetry-go/compare/v1.40.0...v1.42.0 )
Updates `go.opentelemetry.io/otel/exporters/otlp/otlptrace` from 1.40.0 to 1.42.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases )
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md )
- [Commits](https://github.com/open-telemetry/opentelemetry-go/compare/v1.40.0...v1.42.0 )
Updates `go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc` from 1.40.0 to 1.42.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases )
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md )
- [Commits](https://github.com/open-telemetry/opentelemetry-go/compare/v1.40.0...v1.42.0 )
Updates `go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp` from 1.40.0 to 1.42.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases )
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md )
- [Commits](https://github.com/open-telemetry/opentelemetry-go/compare/v1.40.0...v1.42.0 )
Updates `go.opentelemetry.io/otel/sdk` from 1.40.0 to 1.42.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases )
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md )
- [Commits](https://github.com/open-telemetry/opentelemetry-go/compare/v1.40.0...v1.42.0 )
Updates `go.opentelemetry.io/otel/trace` from 1.40.0 to 1.42.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases )
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md )
- [Commits](https://github.com/open-telemetry/opentelemetry-go/compare/v1.40.0...v1.42.0 )
---
updated-dependencies:
- dependency-name: go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp
dependency-version: 0.67.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: go-opentelemetry-io
- dependency-name: go.opentelemetry.io/otel
dependency-version: 1.42.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: go-opentelemetry-io
- dependency-name: go.opentelemetry.io/otel/exporters/otlp/otlptrace
dependency-version: 1.42.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: go-opentelemetry-io
- dependency-name: go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc
dependency-version: 1.42.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: go-opentelemetry-io
- dependency-name: go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp
dependency-version: 1.42.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: go-opentelemetry-io
- dependency-name: go.opentelemetry.io/otel/sdk
dependency-version: 1.42.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: go-opentelemetry-io
- dependency-name: go.opentelemetry.io/otel/trace
dependency-version: 1.42.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: go-opentelemetry-io
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-01 10:21:34 -05:00
8479b69566
build(deps): bump actions/setup-go in the gha-dependencies group ( #8469 )
...
Bumps the gha-dependencies group with 1 update: [actions/setup-go](https://github.com/actions/setup-go ).
Updates `actions/setup-go` from 6.3.0 to 6.4.0
- [Release notes](https://github.com/actions/setup-go/releases )
- [Commits](https://github.com/actions/setup-go/compare/4b73464bb391d4059bd26b0524d20df3927bd417...4a3601121dd01d1626a1e23e37211e3254c1c06c )
---
updated-dependencies:
- dependency-name: actions/setup-go
dependency-version: 6.4.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: gha-dependencies
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-01 09:32:00 -05:00
dc09c4841a
build(deps): bump ajv from 6.12.6 to 6.14.0 in /docs ( #8467 )
...
Bumps [ajv](https://github.com/ajv-validator/ajv ) from 6.12.6 to 6.14.0.
- [Release notes](https://github.com/ajv-validator/ajv/releases )
- [Commits](https://github.com/ajv-validator/ajv/compare/v6.12.6...v6.14.0 )
---
updated-dependencies:
- dependency-name: ajv
dependency-version: 6.14.0
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-01 09:26:51 +02:00
273cf3db04
build(deps): bump minimatch and serve-handler in /docs ( #8466 )
...
Bumps [minimatch](https://github.com/isaacs/minimatch ) and [serve-handler](https://github.com/vercel/serve-handler ). These dependencies needed to be updated together.
Updates `minimatch` from 3.1.2 to 3.1.5
- [Changelog](https://github.com/isaacs/minimatch/blob/main/changelog.md )
- [Commits](https://github.com/isaacs/minimatch/compare/v3.1.2...v3.1.5 )
Updates `minimatch` from 10.1.1 to 10.2.5
- [Changelog](https://github.com/isaacs/minimatch/blob/main/changelog.md )
- [Commits](https://github.com/isaacs/minimatch/compare/v3.1.2...v3.1.5 )
Updates `serve-handler` from 6.1.6 to 6.1.7
- [Release notes](https://github.com/vercel/serve-handler/releases )
- [Commits](https://github.com/vercel/serve-handler/compare/6.1.6...6.1.7 )
---
updated-dependencies:
- dependency-name: minimatch
dependency-version: 3.1.5
dependency-type: indirect
- dependency-name: minimatch
dependency-version: 10.2.5
dependency-type: indirect
- dependency-name: serve-handler
dependency-version: 6.1.7
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-01 09:16:34 +02:00
bad337a637
nightly: add OCP+Regal builds to catch breaking changes ( #8460 )
...
* nightly: add OCP build to catch breaking changes
Signed-off-by: Stephan Renatus <stephan.renatus@gmail.com >
* nightly: add Regal build + e2e test run w/ opa main
Signed-off-by: Stephan Renatus <stephan.renatus@gmail.com >
* .github: Add linter ignores for secrets-outside-env.
Signed-off-by: Philip Conrad <philip@chariot-chaser.net >
---------
Signed-off-by: Stephan Renatus <stephan.renatus@gmail.com >
Signed-off-by: Philip Conrad <philip@chariot-chaser.net >
Co-authored-by: Philip Conrad <philip@chariot-chaser.net >
2026-04-01 08:23:49 +02:00
fa913dd5d3
Integrate 1.15.1 patch release ( #8462 )
...
Signed-off-by: Sebastian Spaink <sebastianspaink@gmail.com >
2026-03-31 10:05:45 -05:00
c850487e06
planner: Add not-body support to planner ( #8458 )
...
Fixes : #8392
Signed-off-by: Johan Fylling <johan.dev@fylling.se >
2026-03-31 11:30:22 +02:00
670d2e2556
ast, topdown: Add not AST node type ( #8427 )
...
Disabled by default. To enable, `not` future keyword must be present in capabilities and imported into Rego module.
Implements: #8391
Signed-off-by: Johan Fylling <johan.dev@fylling.se >
2026-03-30 18:12:57 +02:00
878cbc79d3
build(deps): bump brace-expansion from 1.1.12 to 1.1.13 in /docs
...
Bumps [brace-expansion](https://github.com/juliangruber/brace-expansion ) from 1.1.12 to 1.1.13.
- [Release notes](https://github.com/juliangruber/brace-expansion/releases )
- [Commits](https://github.com/juliangruber/brace-expansion/compare/v1.1.12...v1.1.13 )
---
updated-dependencies:
- dependency-name: brace-expansion
dependency-version: 1.1.13
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-03-30 14:33:38 +02:00
Sebastian Spaink