chore(deps): update openpolicyagent/opa docker tag to v1.18.2 #45
Loading…
Add table
Add a link
Reference in a new issue
No description provided.
Delete branch "renovate/openpolicyagent-opa-1.x"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
This PR contains the following updates:
1.17.1→1.18.2Release Notes
open-policy-agent/opa (openpolicyagent/opa)
v1.18.2Compare Source
This release includes a bug fix for a
opa fmtregression introduced in v1.18.0.The original fix for #8557 had the formatter enforce newlines in single-item
collections (arrays, objects, sets) rather than merely honoring existing ones.
As a result, running
opa fmton already-formatted policies could introducea large number of unwanted changes. This patch release restores the intended
behavior: only newlines already present in the source determine whether a
single-item collection is formatted on one line or across multiple lines.
Fixes
v1.18.1Compare Source
This release fixes a memory leak introduced in OPA v1.17.0.
It is advised to update if you notice excess memory usage when running OPA server.
Fixes
v1.18.0Compare Source
This release contains a mix of bugfixes and small features. Notably:
User-Agentheader so it conforms to RFC 9110 (see below)GOMAXPROCSis restored and automaticGOMEMLIMITis now supportedopa fmtcorrectness fixesopa test --coverage(ranges in report, inline rule head tracking, conjunction-expression coverage)Breaking: Fix User-Agent according to RFC9110 (#8792)
OPA's outbound HTTP requests (bundle, discovery, decision log, status,
http.send, AWS KMS/ECR)previously sent
User-Agent: Open Policy Agent/<version> (<os>, <arch>), which is not a validRFC 9110
User-Agentvalue because theproducttoken cannot contain spaces. The header is nowOpen-Policy-Agent/<version> (<os>, <arch>). Server-side log filters or WAF rules thatexact-match the old string will need to be updated.
Authored by @sspaink, reported by @SpecLad
Runtime, SDK, Tooling
file_rego_versionspatterns with overlap (#8733) authored by @philipaconradwithon the closing-bracket line of multi-line expressions (#8804) authored by @anneheartrecord, reported by @burnsterast.Notnodes (#8731) authored by @johanfyllingCompiler, Topdown and Rego
ast.Notexpressions (#8717) authored by @johanfylling, reported by @anderseknertfuture.keywords.notnegation insideevery(#8781) authored by @johanfyllingplan/wasmbundle builds (#8732) authored by @philipaconradobject.get(#8729) authored by @anderseknertevery(#8816) authored by @johanfyllingdst.Compare(src)shortcut (#8739) authored by @srenatusDocs, Website, Ecosystem
Miscellaneous
go-version-filewithactions/setup-go(#8751) authored by @srenatusWebAssembly runtime: wasmtime-go replaced with wazero
OPA's WebAssembly runtime — used by the
wasmevaluation target and the WASM SDK — now runs onthe pure-Go wazero runtime instead of
bytecodealliance/wasmtime-go. Thisremoves the cgo dependency from this path, so
wasm-enabled builds no longer need a C toolchain.Compiled policy modules are now cached process-wide, so repeated VM creation for the same policy
skips recompilation. On an Apple M4 Max this makes wasm cold start (compile + instantiate + first
eval) about 73% faster, and warm evaluation about 29% faster with ~28% fewer allocations.
One side effect worth noting: wasm linear memory is now allocated on the Go heap rather than in C,
so memory profiles and
B/opfigures for wasm evaluations account for it (it was previouslyinvisible to Go's allocator).
Configuration
📅 Schedule: (UTC)
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR has been generated by Mend Renovate.
5fca2c77a7to00ff215c47chore(deps): update openpolicyagent/opa docker tag to v1.18.0to chore(deps): update openpolicyagent/opa docker tag to v1.18.100ff215c47tofb6a704784chore(deps): update openpolicyagent/opa docker tag to v1.18.1to chore(deps): update openpolicyagent/opa docker tag to v1.18.2View command line instructions
Checkout
From your project repository, check out a new branch and test the changes.Merge
Merge the changes and update on Forgejo.Warning: The "Autodetect manual merge" setting is not enabled for this repository, you will have to mark this pull request as manually merged afterwards.