Open Policy Agent v1.16.0
security++++++~-*********!
Changes
- Security policy updatesecurity
- Server: Drop HTML index page query formremoved
- Add CopyNonGround() methods for Array, Set, and Objectchanged
- New uri.parse and uri.is_valid built-in functionsadded
- Format: Add new line between METADATA blocksadded
- Format: Allow indenting all with s in expressionadded
- Ast: Allow Back-to-back metadata blocksadded
- Ast: Support recursive JSON Schemasadded
- Builtins: Add support for days, weeks and years in time.parse_duration_ns built-in functionadded
- Resolver/wasm: Add NewWithContext to allow passing contextadded
- Format: Fix dropping comments after handling unexpectedCommentErrorfixed
- Format: Prevent opa fmt from formatting single attribute objects with commentsfixed
24 more lines
- Plugins/logs: Fix logBuffer eviction loop only dropping one elementfixed
- Plugins/logs: Fix out-of-order plugin status notificationsfixed
- Storage/inmem: Avoid allocations from Read() in MakeDir()fixed
- Ast: Fix parenthesis in String() of {obj,arr,set} comprehensionsfixed
- Ast: Fix parsing of unary - in front of a reffixed
- Ast: Fix type checker match error for objects with set keysfixed
- Ast: Fix type checker to recognize numeric index in generated mapfixed
- Ast: Handle underdetermined function argsfixed
- Builtins: Fix graph.reachable_paths to return all reachable pathsfixed
- Data API Request/Response Metadataother
- Prometheus metrics exported via OTLPother
- Formatter improvementsother
- Request metadata: parsed from extra top-level keys in the request body, made available to builtins via BuiltinContext.RequestMetadata. Logged in the decision log under Custom["request_metadata"].other
- Response metadata: a separate map (BuiltinContext.ResponseMetadata) that builtins can populate during evaluation. Only included in the API response and decision log if non-empty.other
- Distributedtracing: Export Prometheus metrics via OTLP (#7591) reported andother
- Cmd,tester: Update opa test to stream test case resultsother
- Cmd,tester: Show full errors when test fails and using --coverageother
- Format: Preserve location of trailing comments inside every bodyother
- Logging: Keep forwarding from BufferedLogger after Flush()other
- Plugins/rest: Carry over all of *tls.Configother
- Server: Skip chmod for abstract Unix domain socketsother
- Ast: Catch functions in dynamic extent of ref head ruleother
- Ast: Identify compatible type from reference in type checkerother
- Builtins: Limit exponent size in units.parse_bytes built-in function to prevent timeout bypassother
29 maintenance lines (dependency bumps, CI, tests, docs)
- Tester: Add method to match tests by ref prefixesmaintenance
- Add aggregates examples for count and sum built-in functionsmaintenance
- Add generated output.jsons for docs examplesmaintenance
- Add spec for OCP bundle status tracking APImaintenance
- Add the latest videos to the README presentations sectionmaintenance
- Add Windows development notes to dev reference guidemaintenance
- Fix input value type in not undefined examplemaintenance
- Update Regal docs to v0.40.0maintenance
- Updated roadmap linkmaintenance
- Various typo fixesmaintenance
- Ecosystem: Add vulnetix ecosystem entrymaintenance
- Ecosystem: Add KubeStellar Consolemaintenance
- Website: Add banner to show when event has passedmaintenance
- Website: Add copy-as-markdown button to doc pagesmaintenance
- Website: Copy button improvementsmaintenance
- Website: Remove old redirects, add new management redirectmaintenance
- Website: Update intro video on homepagemaintenance
- Exclude domains that cause false positives (#8533)maintenance
- E2e/cli: Add test for debug print() loggingmaintenance
- E2e/cli: Start CLI E2E testsmaintenance
- Github: declare formatted rego as regomaintenance
- Dependency updates; notably:maintenance
- Bump go 1.26.2maintenance
- Bump wasmtime-go from v39.0.1 to v43.0.2maintenance
- Bump go.opentelemetry.io deps from 1.40.0/0.65.0 to 1.43.0/0.68.0maintenance
- Bump github.com/containerd/containerd/v2 from 2.2.1 to 2.2.3maintenance
- Bump ithub.com/huandu/go-sqlbuilder from 1.39.1 to 1.40.2maintenance
- Bump golang.org/x/net from 0.51.0 to 0.53.0maintenance
- Bump golang.org/x/text from 0.34.0 to 0.36.0maintenance
65 lines1 security1 removed7 added1 changed11 fixed15 other29 maintenancetyped from the source notes