Skip to content

chore(deps): update module github.com/open-policy-agent/opa to v1 #2904

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
wants to merge 1 commit into
base: main
Choose a base branch
from

Conversation

renovate-bot
Copy link
Contributor

@renovate-bot renovate-bot commented Mar 3, 2025

This PR contains the following updates:

Package Change Age Adoption Passing Confidence
github.com/open-policy-agent/opa v0.70.0 -> v1.3.0 age adoption passing confidence

Release Notes

open-policy-agent/opa (github.com/open-policy-agent/opa)

v1.3.0

Compare Source

This release contains a mix of features, bugfixes, and dependency updates.

New Buffer Option for Decision Logs (#​5724)

A new, optional, buffering mechanism has been added to decision logging.
The default buffer is designed around making precise memory footprint guarantees, which can produce lock contention at high loads, negatively impacting query performance.
The new event-based buffer is designed to reduce lock contention and improve performance at high loads, but sacrifices the memory footprint guarantees of the default buffer.

The new event-based buffer is enabled by setting the decision_logs.reporting.buffer_type configuration option to event.

For more details, see the decision log plugin README.

Reported by @​mjungsbluth, authored by @​sspaink

OpenTelemetry: HTTP Support and Expanded Batch Span Configuration (#​7412)

Distributed tracing through OpenTelemetry has been extended to support HTTP collectors (enabled by setting the distributed_tracing.type configuration option to http).
Additionally, configuration has been expanded with fine-grained batch span processor options.

Authored and reported by @​sqyang94

Runtime, Tooling, SDK
Docs, Website, Ecosystem
Miscellaneous
  • Enable unused-receiver linter (revive) (#​7448) authored by @​anderseknert
  • Dependency updates; notably:
    • build(deps): bump github.com/containerd/containerd from 1.7.26 to 1.7.27
    • build(deps): bump github.com/dgraph-io/badger/v4 from 4.5.1 to 4.6.0
    • build(deps): bump github.com/opencontainers/image-spec from 1.1.0 to 1.1.1
    • build(deps): bump github.com/prometheus/client_golang 1.21.0 to 1.21.1
    • build(deps): bump golang.org/x/net from 0.35.0 to 0.37.0
    • build(deps): bump golang.org/x/time from 0.10.0 to 0.11.0
    • build(deps): bump google.golang.org/grpc from 1.70.0 to 1.71.0
    • build(deps): bump go.opentelemetry.io deps to 1.35.0/0.60.0

v1.2.0

Compare Source

This release contains a mix of features, performance improvements, and bugfixes.

Parameterized Rego Tests (#​2176)

Rego tests now support parameterization, allowing a single test rule to include multiple, hierarchical, named test cases.
This feature is useful for data-driven testing, where a single test rule can be used for multiple test cases with different inputs and expected outputs.

package example_test

test_concat[note] if {
	some note, tc in {
		"empty + empty": {
			"a": [],
			"b": [],
			"exp": [],
		},
		"empty + filled": {
			"a": [],
			"b": [1, 2],
			"exp": [1, 2],
		},
		"filled + filled": {
			"a": [1, 2],
			"b": [3, 4],
			"exp": [1, 2, 3], # Faulty expectation, this test case will fail
		},
	}

	act := array.concat(tc.a, tc.b)
	act == tc.exp
}
$ opa test example_test.rego
example_test.rego:
data.example_test.test_concat: FAIL (263.375µs)
  empty + empty: PASS
  empty + filled: PASS
  filled + filled: FAIL
--------------------------------------------------------------------------------
FAIL: 1/1

See the documentation for more information.

Authored by @​johanfylling, reported by @​anderseknert

Performance Improvements
Topdown and Rego
Runtime, Tooling, SDK
Docs, Website, Ecosystem
Miscellaneous
  • build+test: Add make test-short task (#​7364) (authored by @​anderseknert)
  • build: Add gocritic linter (#​7377) authored by @​anderseknert
  • build: Add nilness linter from govet (#​7335) authored by @​anderseknert
  • build: Add perfsprint linter (#​7334) authored by @​anderseknert
  • ci: Tagging release binaries with build version (#​7395, #​7397, #​7400) authored by @​johanfylling
  • test: fix race in TestIntraQueryCache_ClientError and TestInterQueryCache_ClientError (#​7280) authored by @​Juneezee
  • misc: Use Go 1.22+ int ranges (#​7328) authored by @​anderseknert
  • Dependency updates; notably:
    • build: bump go from 1.23.5 to 1.24.0
    • build(deps): bump github.com/agnivade/levenshtein from 1.2.0 to 1.2.1
    • build(deps): bump github.com/containerd/containerd from 1.7.25 to 1.7.26
    • build(deps): bump github.com/google/go-cmp from 0.6.0 to 0.7.0
    • build(deps): bump github.com/prometheus/client_golang
    • build(deps): bump github.com/spf13/cobra from 1.8.1 to 1.9.1
    • build(deps): bump github.com/spf13/pflag from 1.0.5 to 1.0.6
    • build(deps): bump golang.org/x/net from 0.34.0 to 0.35.0
    • build(deps): bump golang.org/x/time from 0.9.0 to 0.10.0
    • build(deps): bump ossf/scorecard-action from 2.4.0 to 2.4.1
    • Bump golangci-lint from v1.60.1 to 1.64.5

v1.1.0

Compare Source

This release contains a mix of features, performance improvements, and bugfixes.

Performance Improvements
Topdown and Rego
Runtime, Tooling, SDK
Docs, Website, Ecosystem
Miscellaneous
  • ci(nightly): Remove vendor w/o modproxy check (#​7292) authored by @​srenatus
  • Dependency updates; notably:
    • build(go): bump to 1.23.5 (7279) authored by @​srenatus
    • build(deps): upgrade github.com/dgraph-io/badger to v4 (4.5.1) (#​7239) authored by @​Juneezee
    • build(deps): bump github.com/containerd/containerd from 1.7.24 to 1.7.25
    • build(deps): bump github.com/tchap/go-patricia/v2 from 2.3.1 to 2.3.2
    • build(deps): bump golang.org/x/net from 0.33.0 to 0.34.0
    • build(deps): bump golang.org/x/time from 0.8.0 to 0.9.0
    • build(deps): bump google.golang.org/grpc from 1.69.2 to 1.70.0
    • build(deps): bump go.opentelemetry.io deps to 1.34.0/0.59.0

v1.0.1

Compare Source

This is a bug fix release addressing the following issues:

  • build(go): bump to 1.23.5 (authored by @​srenatus).
    Addressing CVE-2024-45341 and CVE-2024-45336 vulnerabilities in the Go runtime.
  • bundle: Add info about the correct rego version to parse modules on the store, co-authored by @​ashutosh-narkar and @​johanfylling in #​7278.
    Fixing an issue where the rego-version for individual modules was lost during bundle deactivation (bundle lifecycle) if this version diverged from the active runtime rego-version.
    This could cause reloading of v0 bundles to fail when OPA was not running with the --v0-compatible flag.

v1.0.0

Compare Source

NOTES:

  • The minimum version of Go required to build the OPA module is 1.22

We are excited to announce OPA 1.0, a milestone release consolidating an improved developer experience for the future of Policy as Code. The release makes new functionality designed to simplify policy writing and improve the language's consistency the default.

Changes to Rego in OPA 1.0

Below we highlight some key changes to the defaults in OPA 1.0:

  • Using if for all rule definitions and contains for multi-value rules is now mandatory, not just when using the rego.v1 import.
  • Other new keywords (every, in) are available without any imports.
  • Some requirements that were previously only run in "strict mode" (opa check --strict) are now the default. Duplicate imports and imports which shadow each other are no longer allowed.
  • OPA 1.0 comes with a range of backwards compatibility features to aid your migrations, please see the v0 compatibility guide
    if you must continue to support v0 Rego.

Read more about the OPA 1.0 announcement here on our blog.

Following are other changes that are included in OPA 1.0.

Improvements to memory allocations

PRs #​7172, #​7190, #​7193, #​7165, #​7168, #​7191 & #​7222 together improve the memory performance of OPA. Key strategies
include reusing pointers and optimizing array and object operations, minimizing intermediate object creation, and using sync.Pool
to manage memory-heavy operations. These changes cumulatively greatly reduced the number of allocations and improved
evaluation speed by 10-20%. Additional benchmarks highlighted significant memory and speed improvements in custom
function evaluation.

Authored by @​anderseknert.

Wrap http.RoundTripper for SDK users

PR #​7180 adds an EvalHTTPRoundTrip EvalOption and query-level WithHTTPRoundTrip option.
Both use a new function type which converts an http.Transport configured by topdown to an http.RoundTripper.
This supports use cases requiring the customization of the http.send built in behavior.

Authored by @​evankanderson.

Improvements to scientific notation parsing in units.parse

PR #​7147 extends the behaviour of extractNumAndUnit to support
scientific notation values. This means values such as 1e3KB can now be handled by this function.

Authored by @​berdanA.

Support customized buckets bundle_loading_duration_ns metric

PR #​7156 extends OPA’s Prometheus configuration to allow the
setting of user defined buckets for metrics. This aids when debugging the loading of slow bundles.

Authored by @​jwu730-1.

Test suite performance improvements

PR #​7126 updates tests to improve performance. Topdown and storage/disk/
tests now run around 50% and 75% faster respectively.

Authored by @​philipaconrad.

OPA 1.0 Preparation
Topdown and Rego
Runtime, Tooling, SDK
Docs, Website, Ecosystem
Dependency Updates
  • (build) golangci-lint: v1.59.1 -> v1.60.1 by @​srenatus in #​7175
  • github.com/containerd/containerd: v1.7.23 -> v1.7.24
  • github.com/fsnotify/fsnotify: v1.7.0 -> v1.8.0
  • golang.org/x/net: v0.30.0 -> v0.33.0
  • golang.org/x/time: v0.7.0 -> v0.8.0
  • google.golang.org/grpc: v1.67.1 -> v1.69.2
  • go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp: v0.53.0 -> v0.58.0
  • go.opentelemetry.io/otel: v1.28.0 -> v1.33.0
  • go.opentelemetry.io/otel/exporters/otlp/otlptrace: v1.28.0 -> v1.33.0
  • go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc: v1.28.0 -> v1.33.0
  • go.opentelemetry.io/otel/sdk: v1.28.0 -> v1.33.0
  • go.opentelemetry.io/otel/trace: v1.28.0 -> v1.33.0

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate-bot renovate-bot requested review from q2w and a team as code owners March 3, 2025 08:04
@forking-renovate forking-renovate bot added the dependencies Pull requests that update a dependency file label Mar 3, 2025
Copy link

forking-renovate bot commented Mar 3, 2025

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

  • any of the package files in this branch needs updating, or
  • the branch becomes conflicted, or
  • you click the rebase/retry checkbox if found above, or
  • you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: cli/go.sum
Command failed: go get -d -t ./...
go: -d flag is deprecated. -d=true is a no-op
go: downloading github.com/open-policy-agent/opa v1.3.0
go: downloading google.golang.org/genproto/googleapis/api v0.0.0-20250218202821-56aae31c358a
go: downloading google.golang.org/genproto/googleapis/rpc v0.0.0-20250218202821-56aae31c358a
go: downloading go.opentelemetry.io/otel v1.35.0
go: downloading go.opentelemetry.io/otel/sdk/metric v1.35.0
go: downloading go.opentelemetry.io/otel/sdk v1.35.0
go: downloading go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.60.0
go: downloading github.com/tchap/go-patricia/v2 v2.3.2
go: downloading go.opentelemetry.io/otel/trace v1.35.0
go: downloading go.opentelemetry.io/otel/metric v1.35.0
go: downloading github.com/klauspost/compress v1.18.0
go: downloading github.com/prometheus/client_golang v1.21.1
go: downloading github.com/agnivade/levenshtein v1.2.1
go: downloading github.com/prometheus/common v0.62.0
go: downloading go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc v1.35.0
go: downloading go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.35.0
go: downloading go.opentelemetry.io/proto/otlp v1.5.0
go: downloading github.com/grpc-ecosystem/grpc-gateway/v2 v2.26.1
go: github.com/GoogleCloudPlatform/cloud-foundation-toolkit/cli/scorecard imports
	cloud.google.com/go/storage imports
	google.golang.org/grpc/stats/opentelemetry: ambiguous import: found package google.golang.org/grpc/stats/opentelemetry in multiple modules:
	google.golang.org/grpc v1.71.0 (/runner/cache/others/go/pkg/mod/google.golang.org/[email protected]/stats/opentelemetry)
	google.golang.org/grpc/stats/opentelemetry v0.0.0-20241028142157-ada6787961b3 (/runner/cache/others/go/pkg/mod/google.golang.org/grpc/stats/[email protected])

@dpebot
Copy link
Collaborator

dpebot commented Mar 3, 2025

/gcbrun

@renovate-bot renovate-bot force-pushed the renovate/cli-github.com-open-policy-agent-opa-1.x branch from 7b55dcb to 77b3032 Compare March 5, 2025 23:10
@dpebot
Copy link
Collaborator

dpebot commented Mar 5, 2025

/gcbrun

@renovate-bot renovate-bot force-pushed the renovate/cli-github.com-open-policy-agent-opa-1.x branch from 77b3032 to 47694d7 Compare March 6, 2025 00:17
@dpebot
Copy link
Collaborator

dpebot commented Mar 6, 2025

/gcbrun

@renovate-bot renovate-bot force-pushed the renovate/cli-github.com-open-policy-agent-opa-1.x branch from 47694d7 to ebd61df Compare March 6, 2025 16:53
@dpebot
Copy link
Collaborator

dpebot commented Mar 6, 2025

/gcbrun

@renovate-bot renovate-bot force-pushed the renovate/cli-github.com-open-policy-agent-opa-1.x branch from ebd61df to 9c281fb Compare March 6, 2025 17:39
@dpebot
Copy link
Collaborator

dpebot commented Mar 6, 2025

/gcbrun

@renovate-bot renovate-bot force-pushed the renovate/cli-github.com-open-policy-agent-opa-1.x branch from 9c281fb to 751ef4e Compare March 7, 2025 17:09
@dpebot
Copy link
Collaborator

dpebot commented Mar 7, 2025

/gcbrun

@renovate-bot renovate-bot force-pushed the renovate/cli-github.com-open-policy-agent-opa-1.x branch from 751ef4e to 1f1ccf5 Compare March 13, 2025 16:04
@dpebot
Copy link
Collaborator

dpebot commented Mar 13, 2025

/gcbrun

@renovate-bot renovate-bot force-pushed the renovate/cli-github.com-open-policy-agent-opa-1.x branch from 1f1ccf5 to 5ef1207 Compare March 14, 2025 04:21
@dpebot
Copy link
Collaborator

dpebot commented Mar 14, 2025

/gcbrun

@renovate-bot renovate-bot force-pushed the renovate/cli-github.com-open-policy-agent-opa-1.x branch from 5ef1207 to d33dcfd Compare March 14, 2025 23:39
@dpebot
Copy link
Collaborator

dpebot commented Mar 14, 2025

/gcbrun

@renovate-bot renovate-bot force-pushed the renovate/cli-github.com-open-policy-agent-opa-1.x branch from d33dcfd to 02deabe Compare March 18, 2025 15:27
@dpebot
Copy link
Collaborator

dpebot commented Mar 18, 2025

/gcbrun

@renovate-bot renovate-bot force-pushed the renovate/cli-github.com-open-policy-agent-opa-1.x branch from 02deabe to 8f0a35b Compare March 18, 2025 16:09
@dpebot
Copy link
Collaborator

dpebot commented Mar 18, 2025

/gcbrun

@renovate-bot renovate-bot force-pushed the renovate/cli-github.com-open-policy-agent-opa-1.x branch from 8f0a35b to f1898ed Compare March 19, 2025 16:46
@dpebot
Copy link
Collaborator

dpebot commented Mar 19, 2025

/gcbrun

@renovate-bot renovate-bot force-pushed the renovate/cli-github.com-open-policy-agent-opa-1.x branch from f1898ed to d30699d Compare March 19, 2025 22:00
@dpebot
Copy link
Collaborator

dpebot commented Mar 19, 2025

/gcbrun

@renovate-bot renovate-bot force-pushed the renovate/cli-github.com-open-policy-agent-opa-1.x branch from d30699d to 36e7167 Compare March 20, 2025 16:04
@dpebot
Copy link
Collaborator

dpebot commented Apr 14, 2025

/gcbrun

@renovate-bot renovate-bot force-pushed the renovate/cli-github.com-open-policy-agent-opa-1.x branch from cf44e91 to 212f502 Compare April 14, 2025 21:33
@dpebot
Copy link
Collaborator

dpebot commented Apr 14, 2025

/gcbrun

@renovate-bot renovate-bot force-pushed the renovate/cli-github.com-open-policy-agent-opa-1.x branch from 212f502 to 79ebe16 Compare April 15, 2025 00:08
@dpebot
Copy link
Collaborator

dpebot commented Apr 15, 2025

/gcbrun

@renovate-bot renovate-bot force-pushed the renovate/cli-github.com-open-policy-agent-opa-1.x branch from 79ebe16 to 72d5c52 Compare April 15, 2025 16:49
@dpebot
Copy link
Collaborator

dpebot commented Apr 15, 2025

/gcbrun

@renovate-bot renovate-bot force-pushed the renovate/cli-github.com-open-policy-agent-opa-1.x branch from 72d5c52 to 80688d2 Compare April 15, 2025 17:17
@dpebot
Copy link
Collaborator

dpebot commented Apr 15, 2025

/gcbrun

@renovate-bot renovate-bot force-pushed the renovate/cli-github.com-open-policy-agent-opa-1.x branch from 80688d2 to 8180fb2 Compare April 15, 2025 20:05
@dpebot
Copy link
Collaborator

dpebot commented Apr 15, 2025

/gcbrun

@renovate-bot renovate-bot force-pushed the renovate/cli-github.com-open-policy-agent-opa-1.x branch from 8180fb2 to 0f378d5 Compare April 15, 2025 20:19
@dpebot
Copy link
Collaborator

dpebot commented Apr 15, 2025

/gcbrun

@renovate-bot renovate-bot force-pushed the renovate/cli-github.com-open-policy-agent-opa-1.x branch from 0f378d5 to c947462 Compare April 16, 2025 00:18
@dpebot
Copy link
Collaborator

dpebot commented Apr 16, 2025

/gcbrun

@renovate-bot renovate-bot force-pushed the renovate/cli-github.com-open-policy-agent-opa-1.x branch from c947462 to 92463ea Compare April 16, 2025 18:49
@dpebot
Copy link
Collaborator

dpebot commented Apr 16, 2025

/gcbrun

@renovate-bot renovate-bot force-pushed the renovate/cli-github.com-open-policy-agent-opa-1.x branch from 92463ea to 1c49274 Compare April 16, 2025 18:58
@dpebot
Copy link
Collaborator

dpebot commented Apr 16, 2025

/gcbrun

@renovate-bot renovate-bot force-pushed the renovate/cli-github.com-open-policy-agent-opa-1.x branch from 1c49274 to 6c25ef0 Compare April 16, 2025 21:40
@dpebot
Copy link
Collaborator

dpebot commented Apr 16, 2025

/gcbrun

@renovate-bot renovate-bot force-pushed the renovate/cli-github.com-open-policy-agent-opa-1.x branch from 6c25ef0 to 55843e2 Compare April 16, 2025 22:42
@dpebot
Copy link
Collaborator

dpebot commented Apr 16, 2025

/gcbrun

@renovate-bot renovate-bot force-pushed the renovate/cli-github.com-open-policy-agent-opa-1.x branch from 55843e2 to 832ca0e Compare April 16, 2025 23:16
@dpebot
Copy link
Collaborator

dpebot commented Apr 16, 2025

/gcbrun

@renovate-bot renovate-bot force-pushed the renovate/cli-github.com-open-policy-agent-opa-1.x branch from 832ca0e to ff3a7b5 Compare April 17, 2025 17:16
@dpebot
Copy link
Collaborator

dpebot commented Apr 17, 2025

/gcbrun

@renovate-bot renovate-bot force-pushed the renovate/cli-github.com-open-policy-agent-opa-1.x branch from ff3a7b5 to 0eb5f73 Compare April 17, 2025 17:34
@dpebot
Copy link
Collaborator

dpebot commented Apr 17, 2025

/gcbrun

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants