Open Policy Agent v1.19.0
+++~~~~~**********
Changes
- Tester: Make Result JSON round-trippablechanged
- Ast: Improve rule conflict errorchanged
- Ast: Make CogeneratedExprs return deterministic orderchanged
- Avoid allocations with custom Atoi and Atoi64 helperschanged
- Lazy init of scalars map in indexerchanged
- Reduce allocations in index lookupchanged
- Cmd/build: Add --format flag for proto/JSON plan bundles to opa buildadded
- Sdk: Allow customizing HTTP RoundTripper per Decisionadded
- Ast: Add support for Go 1.27 & jsonv2added
- Topdown+util: Add generic SliceStack/GroupStack, unify refStack/functionMocksStack/saveStackadded
- Cmd: Avoid intermediate buffer when writing bundlefixed
- Sdk: Fix deadlock between OPA.Plugin and manager onCommit (#8873) reported andfixed
31 more lines
- Topdown: Resolve ground refs in --var-values cmd outputfixed
- Ast: Fix aliased comment buffer in annotation parserfixed
- Ast: Fix non-deterministic type errors when shadowing a built-infixed
- Ast: Fix leaky future.keywords.not import in Rego v0fixed
- Ast: Fix panic when indexing composite literal values in x in [...] (#8918) reported andfixed
- Ast: Fix TermValueEqual performance regressionfixed
- Topdown: Fix "a", "a" in {"a"} not returning truefixed
- Topdown: Fix format_int precision loss for integers larger than 64 bitsfixed
- Topdown: Fix precision loss for integers larger than 64 bits in arithmetic and aggregatesfixed
- Topdown/copypropagation: Avoid circular reference in Partial-Evaluation through callfixed
- Planner: Avoid redundant ruletrie.Children() call in Depth()fixed
- A fixed SQL injection vector in the Compile APIother
- Stricter safety checking for Rego assignments (:=)other
- A cgo-free, faster WebAssembly runtime (wazero replaces wasmtime-go)other
- Startup warnings for unknown configuration optionsother
- A new strings.split_n built-in functionother
- A REPL line reader that handles pasted input correctly, migrating existing history filesother
- Cmd/check: Report wrapped structured errors individuallyother
- Compile: Preserve package annotations in wasm bundle buildsother
- Format: Keep rule body inline when the head spans multiple linesother
- Repl: Use a plain line reader for non-terminal inputother
- Server: Set ReadHeaderTimeout to 32s on all HTTP serversother
- Server/failtracer: Skip self-referential undefined-ref hintsother
- Ast: Reject partial set and -object rules sharing a nameother
- Ast: Restore location on unsafe var errors for rewritten head varsother
- Ast: Use more precise return types for object.* builtins (#8692) reported andother
- Ast+topdown: Let rule external sources distinguish absent from unknownother
- Ast+topdown: Parametrized (prefix) external rule sourcesother
- Topdown: Don't leak internal vars in Partial-Evaluation resultsother
- Topdown+util: Replace hand-rolled evalFunc/evalBuiltin pools with generic ResettablePoolother
- Planner: Unify functionMocksStack on generic GroupStack[T]other
43 maintenance lines (dependency bumps, CI, tests, docs)
- Ecosystem: Add agt-policies-africa — African data protection OPA policy packmaintenance
- Ecosystem: Add Ghostunnel and NATS Plugin to Ecosystemmaintenance
- Ecosystem: Add Sencillo projects to ecosystemmaintenance
- Add kubecon NA pagemaintenance
- Add recommendations to follow Envoy's best practicesmaintenance
- Document rule indexer support for in, bare refs; modernize regomaintenance
- Document the compile metadata annotationmaintenance
- Fix broken OAuth2/OIDC policy examplesmaintenance
- Fix decision_logs buffer_size_limit_events default in prosemaintenance
- Remove import rego.v1maintenance
- Some minor bug fixes to improve reportingmaintenance
- The Zed Rego extension link points at github.com/StyraInc/zed-rego (404). The repo now lives at github.com/StyraOSS/zed-rego.maintenance
- Update cheatsheet filesmaintenance
- Update regal and blog linksmaintenance
- Updates examples to use some...in, add link to debuggermaintenance
- Website: Improve partial evaluation / data filtering documentationmaintenance
- Website: Import blog from mediummaintenance
- Ast: Add benchmark for rule index ref orderingmaintenance
- Ast: Various style fixesmaintenance
- Add Dockerfile.rego to validate image buildsmaintenance
- Get just the needed commits for CImaintenance
- Start decommissioning test.WithTempFSmaintenance
- Topdown: Add regression test for partial eval local namesmaintenance
- Topdown: Fix Partial-Evaluation test rejected by new conflict checkmaintenance
- Topdown: Vendor a method-less text/template to restore whole-binary linker DCEmaintenance
- Workflows: Remove cpp from CodeQL language matrixmaintenance
- Workflows: Prune benchmarks to last 250 runsmaintenance
- Dependency updates; notably:maintenance
- Bump Go from 1.26.4 to 1.26.5maintenance
- Add github.com/reeflective/readline 1.3.0maintenance
- Add golang.org/x/term 0.45.0maintenance
- Bump github.com/dgraph-io/badger/v4 from 4.9.2 to 4.9.4maintenance
- Bump github.com/go-logr/logr from 1.4.3 to 1.4.4maintenance
- Bump github.com/huandu/go-sqlbuilder from 1.41.0 to 1.42.1maintenance
- Bump github.com/prometheus/client_golang from 1.23.2 to 1.24.0maintenance
- Bump github.com/vektah/gqlparser/v2 from 2.5.34 to 2.5.36maintenance
- Bump golang.org/x/sync from 0.21.0 to 0.22.0maintenance
- Bump golang.org/x/text from 0.38.0 to 0.40.0maintenance
- Bump google.golang.org/grpc from 1.81.1 to 1.82.1maintenance
- Bump oras.land/oras-go/v2 from 2.6.1 to 2.6.2maintenance
- Drop github.com/peterh/linermaintenance
- Drop github.com/KimMachineGun/automemlimitmaintenance
- Drop go.uber.org/automaxprocsmaintenance
86 lines4 added6 changed13 fixed20 other43 maintenancetyped from the source notes