Open Policy Agent v1.11.0
security++++**!
Changes
- Bump glob dep (CVE-2025-64756)security
- Ast: Support custom builtins in CompileModulesWithOptadded
- Cmd: Support --ignore in eval cmd when using bundle flag (--bundle)added
- Storage/inmem: Allow passing triggers (AST) data without conversionadded
- Topdown: New custom SemVer implementationadded
- V1/ast: Fix Call parsing Text attribute including an extra characterfixed
- Topdown: Avoid unnecessary use of custom http.Transport in http.send built-infixed
- More efficient connection management in the http.send built-in functionother
- More performant loading of large bundles containing multiple Rego filesother
- Ast: Export built-in deprecated fieldother
- Ast: Intern common var values + some parser improvementsother
- Bundle: Concurrent Rego parsing in bundle loaderother
1 more lines
- Topdown: Use sync.Pool for eval func objectsother
31 maintenance lines (dependency bumps, CI, tests, docs)
- Add example for Compile API's table mappingmaintenance
- Address pages with similar titlesmaintenance
- Address some broken linksmaintenance
- Improve ground value and assignment docsmaintenance
- Make iteration content flow bettermaintenance
- Note package repos are community maintainedmaintenance
- Update terraform guide with notes about planmaintenance
- Update the archive to have an edge linkmaintenance
- Update the policy language intromaintenance
- Ocp: Datasource example uses wrong AWS S3 URLmaintenance
- Regal: Replicate sidebar fixesmaintenance
- Website: Various fixes and improvementsmaintenance
- Bump golangci-lint, more gocritic lintersmaintenance
- Tidy up and unify sync pool handlingmaintenance
- Builtins: Add StringOperandByteSlice helpermaintenance
- Add test cases for consistent cache behaviormaintenance
- Util/performance: Remove math.Log10, remove unused KeysCountmaintenance
- Workflow: Add Benchmarks workflowmaintenance
- Workflows/pull-request: Update macos versionsmaintenance
- Dependency updates; notably:maintenance
- Golang 1.25.3 -> 1.25.4maintenance
- Bump github.com/bytecodealliance/wasmtime-go from v37.0.0 to v39.0.1maintenance
- Bump github.com/containerd/containerd/v2 from 2.1.4 to 2.2.0maintenance
- Bump github.com/huandu/go-sqlbuilder from 1.37.0 to 1.38.1maintenance
- Bump github.com/lestrrat-go/jwx/v3 from 3.0.11 to 3.0.12maintenance
- Bump github.com/vektah/gqlparser/v2 from 2.5.30 to 2.5.31maintenance
- Bump golang.org/x/crypto from 0.43.0 to 0.45.0maintenance
- Bump golang.org/x/net from 0.44.0 to 0.45.0maintenance
- Bump golang.org/x/time from 0.13.0 to 0.14.0maintenance
- Bump google.golang.org/grpc from 1.75.1 to 1.76.0maintenance
- Bump google.golang.org/protobuf from 1.36.9 to 1.36.10maintenance
44 lines1 security4 added2 fixed6 other31 maintenancetyped from the source notes