-
Notifications
You must be signed in to change notification settings - Fork 469
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
chore(deps): update module github.com/open-policy-agent/opa to v1 #2904
base: main
Are you sure you want to change the base?
chore(deps): update module github.com/open-policy-agent/opa to v1 #2904
Conversation
|
/gcbrun |
7b55dcb
to
77b3032
Compare
/gcbrun |
77b3032
to
47694d7
Compare
/gcbrun |
47694d7
to
ebd61df
Compare
/gcbrun |
ebd61df
to
9c281fb
Compare
/gcbrun |
9c281fb
to
751ef4e
Compare
/gcbrun |
751ef4e
to
1f1ccf5
Compare
/gcbrun |
1f1ccf5
to
5ef1207
Compare
/gcbrun |
5ef1207
to
d33dcfd
Compare
/gcbrun |
d33dcfd
to
02deabe
Compare
/gcbrun |
02deabe
to
8f0a35b
Compare
/gcbrun |
8f0a35b
to
f1898ed
Compare
/gcbrun |
f1898ed
to
d30699d
Compare
/gcbrun |
d30699d
to
36e7167
Compare
/gcbrun |
36e7167
to
fb254f2
Compare
/gcbrun |
fb254f2
to
123dba0
Compare
/gcbrun |
123dba0
to
67c9227
Compare
/gcbrun |
67c9227
to
1e2a65b
Compare
/gcbrun |
1e2a65b
to
77ae8cc
Compare
/gcbrun |
77ae8cc
to
02f77dd
Compare
/gcbrun |
02f77dd
to
3bb3540
Compare
/gcbrun |
3bb3540
to
2bb249b
Compare
/gcbrun |
This PR contains the following updates:
v0.70.0
->v1.2.0
Release Notes
open-policy-agent/opa (github.com/open-policy-agent/opa)
v1.2.0
Compare Source
This release contains a mix of features, performance improvements, and bugfixes.
Parameterized Rego Tests (#2176)
Rego tests now support parameterization, allowing a single test rule to include multiple, hierarchical, named test cases.
This feature is useful for data-driven testing, where a single test rule can be used for multiple test cases with different inputs and expected outputs.
See the documentation for more information.
Authored by @johanfylling, reported by @anderseknert
Performance Improvements
opa fmt
3x faster formatting (#7341) authored by @anderseknertTopdown and Rego
Runtime, Tooling, SDK
BuildAnnotationSet
toast
v0 (#7347) authored by @anderseknert[]byte
(#7379) authored by @dennygursky--v0-compatible
isn't respected for custom bundles (#7338) authored by @johanfyllingopa test --bench
(#7205) authored by @anderseknertopa exec
output (#7373) authored by @anderseknertDocs, Website, Ecosystem
v1 import
(#7391) authored by @charlieegan3--v1-compatible
mentions outside the v1 upgrade guide and v0 compatibility docs (#7337) authored by @johanfyllingMiscellaneous
make test-short
task (#7364) (authored by @anderseknert)TestIntraQueryCache_ClientError
andTestInterQueryCache_ClientError
(#7280) authored by @Juneezeev1.1.0
Compare Source
This release contains a mix of features, performance improvements, and bugfixes.
Performance Improvements
opa bench
(#7291) authored by @anderseknertio.jwt
token verification built-ins (#7274) authored by @johanfyllingTopdown and Rego
numbers.range
built-in (#7269) authored by @anderseknertRuntime, Tooling, SDK
opa repl
(#7301) authored by @anderseknert reported by @tsandall--v0-compatible
foropa eval
partial eval support modules (#7251) authored by @johanfyllinglinter-settings
configuration name (#7244) authored by @JuneezeeDocs, Website, Ecosystem
Miscellaneous
v1.0.1
Compare Source
This is a bug fix release addressing the following issues:
Addressing
CVE-2024-45341
andCVE-2024-45336
vulnerabilities in the Go runtime.Fixing an issue where the rego-version for individual modules was lost during bundle deactivation (bundle lifecycle) if this version diverged from the active runtime rego-version.
This could cause reloading of v0 bundles to fail when OPA was not running with the
--v0-compatible
flag.v1.0.0
Compare Source
We are excited to announce OPA 1.0, a milestone release consolidating an improved developer experience for the future of Policy as Code. The release makes new functionality designed to simplify policy writing and improve the language's consistency the default.
Changes to Rego in OPA 1.0
Below we highlight some key changes to the defaults in OPA 1.0:
if
for all rule definitions andcontains
for multi-value rules is now mandatory, not just when using therego.v1
import.every
,in
) are available without any imports.opa check --strict
) are now the default. Duplicate imports and imports which shadow each other are no longer allowed.if you must continue to support v0 Rego.
Read more about the OPA 1.0 announcement here on our blog.
Following are other changes that are included in OPA 1.0.
Improvements to memory allocations
PRs #7172, #7190, #7193, #7165, #7168, #7191 & #7222 together improve the memory performance of OPA. Key strategies
include reusing pointers and optimizing array and object operations, minimizing intermediate object creation, and using
sync.Pool
to manage memory-heavy operations. These changes cumulatively greatly reduced the number of allocations and improved
evaluation speed by 10-20%. Additional benchmarks highlighted significant memory and speed improvements in custom
function evaluation.
Authored by @anderseknert.
Wrap http.RoundTripper for SDK users
PR #7180 adds an
EvalHTTPRoundTrip
EvalOption and query-levelWithHTTPRoundTrip
option.Both use a new function type which converts an
http.Transport
configured by topdown to anhttp.RoundTripper
.This supports use cases requiring the customization of the
http.send
built in behavior.Authored by @evankanderson.
Improvements to scientific notation parsing in
units.parse
PR #7147 extends the behaviour of
extractNumAndUnit
to supportscientific notation values. This means values such as
1e3KB
can now be handled by this function.Authored by @berdanA.
Support customized buckets
bundle_loading_duration_ns
metricPR #7156 extends OPA’s Prometheus configuration to allow the
setting of user defined buckets for metrics. This aids when debugging the loading of slow bundles.
Authored by @jwu730-1.
Test suite performance improvements
PR #7126 updates tests to improve performance. Topdown and
storage/disk/
tests now run around 50% and 75% faster respectively.
Authored by @philipaconrad.
OPA 1.0 Preparation
rego.v1
andfuture.keywords
imports for v1 by @johanfylling in #7224--rego-v1
cmd flag to--v0-v1
by @johanfylling in #7225Topdown and Rego
topdown/cache
by @evankanderson in #7188to_number
now rejects "Inf", "Infinity" and "NaN" values by @sikehish in #7203Runtime, Tooling, SDK
opa build
: provide an option to preserve print statements for the "wasm" target (#7194) by @me-viper in #7195opa eval
: Return error if illegal arguments passed with--unknowns
flag by @kd-labs in #7149Docs, Website, Ecosystem
Dependency Updates
Configuration
📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR was generated by Mend Renovate. View the repository job log.