chore(deps): update docker.io/openpolicyagent/opa docker tag to v1 #2431

renovate · 2025-01-16T17:07:06Z

This PR contains the following updates:

Package	Update	Change
docker.io/openpolicyagent/opa (source)	major	`0.70.0` -> `1.0.0`
docker.io/openpolicyagent/opa (source)	major	`0.70.0-static` -> `1.0.0-static`

Release Notes

open-policy-agent/opa (docker.io/openpolicyagent/opa)

`v1.0.0`

Compare Source

NOTES:

The minimum version of Go required to build the OPA module is 1.22

We are excited to announce OPA 1.0, a milestone release consolidating an improved developer experience for the future of Policy as Code.
The release makes new functionality designed to simplify policy writing and improve the language's consistency the default.

Changes to Rego in OPA 1.0

Below we highlight some key changes to the defaults in OPA 1.0:

Using if for all rule definitions and contains for multi-value rules is now mandatory, not just when using the rego.v1 import.
Other new keywords (every, in) are available without any imports.
Previously requirements that were only run in "strict mode" (like opa check --strict) are now the default. Duplicate imports and imports which shadow each other are no longer allowed.
OPA 1.0 comes with a range of backwards compatibility features to aid your migrations, please see the v0 compatibility guide
if you must continue to support v0 Rego.

Read more about the OPA 1.0 announcement on the OPA blog.

Following are other changes that are included in OPA 1.0.

Improvements to memory allocations

PRs #7172, #7190,
#7193, #7165,
#7168, #7191 &
#7222 together improve the memory performance of OPA. Key strategies
include reusing pointers and optimizing array and object operations, minimizing intermediate object creation, and using sync.Pool
to manage memory-heavy operations. These changes cumulatively greatly reduced the number of allocations and improved
evaluation speed by 10-20%. Additional benchmarks highlighted significant memory and speed improvements in custom
function evaluation.

Authored by @anderseknert.

Wrap http.RoundTripper for SDK users

PR #7180 adds an EvalHTTPRoundTrip EvalOption and query-level WithHTTPRoundTrip option.
Both use a new function type which converts an http.Transport configured by topdown to an http.RoundTripper.
This supports use cases requiring the customization of the http.send built in behavior.

Authored by @evankanderson.

Improvements to scientific notation parsing in `units.parse`

PR #7147 extends the behaviour of extractNumAndUnit to support
scientific notation values. This means values such as 1e3KB can now be handled by this function.

Authored by @berdanA.

Support customized buckets `bundle_loading_duration_ns` metric

PR #7156 extends OPA’s Prometheus configuration to allow the
setting of user defined buckets for metrics. This aids when debugging the loading of slow bundles.

Authored by @jwu730-1.

Test suite performance improvements

PR #7126 updates tests to improve performance. Topdown and storage/disk/
tests now run around 50% and 75% faster respectively.

Authored by @philipaconrad.

OPA 1.0 Preparation

Update v1 capabilities by @johanfylling in #7216
v1 API by @johanfylling in #7215
Updating formatter to not drop rego.v1 and future.keywords imports for v1 by @johanfylling in #7224
Update docs and server binding address per OPA 1.0 specs by @ashutosh-narkar & @charlieegan3 in #7140
Renaming --rego-v1 cmd flag to --v0-v1 by @johanfylling in #7225

Topdown and Rego

Provide a more useful error message when there are conflicting default rules by @tjons in #7164
Fix test flakes in topdown/cache by @evankanderson in #7188
Add description to all built-in function args and return values by @anderseknert in #7153
Built-in function to_number now rejects "Inf", "Infinity" and "NaN" values by @sikehish in #7203
Update eval_cancel_error logic to separate context canceled, timeout errors by @mchitten in #7202

Runtime, Tooling, SDK

Respect runtime rego-version in RESTful policy API by @johanfylling in #7183
Debugger: allow YAML to be used as input by @anderseknert in #7178
opa build: provide an option to preserve print statements for the "wasm" target (#7194) by @me-viper in #7195
Fix improper formatter behavior when comprehension contains comment by @tjons in #7169
runtime: send version report less often when OPA long-running by @srenatus in #7211
opa eval: Return error if illegal arguments passed with --unknowns flag by @kd-labs in #7149
Enable direct error handling for bundle plugin trigger method by @torwunder in #7143

Docs, Website, Ecosystem

Add VodafoneZiggo as adopters by @Parsifal-M in #7154
Add opa-java-wasm to docs by @andreaTP in #7199

Dependency Updates

(build) golangci-lint: v1.59.1 -> v1.60.1 by @srenatus in #7175
github.com/containerd/containerd: v1.7.23 -> v1.7.24
github.com/fsnotify/fsnotify: v1.7.0 -> v1.8.0
golang.org/x/net: v0.30.0 -> v0.33.0
golang.org/x/time: v0.7.0 -> v0.8.0
google.golang.org/grpc: v1.67.1 -> v1.69.2
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp: v0.53.0 -> v0.58.0
go.opentelemetry.io/otel: v1.28.0 -> v1.33.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace: v1.28.0 -> v1.33.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc: v1.28.0 -> v1.33.0
go.opentelemetry.io/otel/sdk: v1.28.0 -> v1.33.0
go.opentelemetry.io/otel/trace: v1.28.0 -> v1.33.0

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

github-actions · 2025-01-16T17:15:14Z

unit-test-results

78 files ±0 105 suites ±0 2m 2s ⏱️ -1s
365 tests ±0 364 ✅ ±0 1 💤 ±0 0 ❌ ±0
455 runs ±0 453 ✅ ±0 2 💤 ±0 0 ❌ ±0

Results for commit 38b360c. ± Comparison against base commit 4d45fd9.

♻️ This comment has been updated with latest results.

github-actions · 2025-01-16T17:17:43Z

integration-test-results

1 files - 26 1 suites - 26 0s ⏱️ -35s
1 tests - 105 0 ✅ - 106 0 💤 ±0 1 ❌ +1
1 runs - 118 0 ✅ - 119 0 💤 ±0 1 ❌ +1

For more details on these failures, see this check.

Results for commit 38b360c. ± Comparison against base commit 4d45fd9.

This pull request removes 106 and adds 1 tests. Note that renamed tests count towards both.

nl.info.zac.itest.AanvullendeInformatieTaskCompleteTest ‑ Then: the taken toelichting and status are updated
nl.info.zac.itest.AppContainerTest ‑ Then: the response should be ok and the status should be UP
nl.info.zac.itest.AppContainerTest ‑ Then: the response should be ok and the the uptime var should be present
nl.info.zac.itest.ConfigurationRestServiceTest ‑ Then: 'false' is returned because BPMN support is disabled by default
nl.info.zac.itest.ConfigurationRestServiceTest ‑ Then: no additional file types are returned because ZAC does not provide any by default
nl.info.zac.itest.ConfigurationRestServiceTest ‑ Then: the available talen are returned
nl.info.zac.itest.ConfigurationRestServiceTest ‑ Then: the default taal is returned
nl.info.zac.itest.ConfigurationRestServiceTest ‑ Then: the gemeente code is returned
nl.info.zac.itest.ConfigurationRestServiceTest ‑ Then: the gemeente name is returned
nl.info.zac.itest.ConfigurationRestServiceTest ‑ Then: the max file size is returned
…

io.kotest.runner.junit.platform.JUnitTestEngineListener ‑ initializationError

♻️ This comment has been updated with latest results.

renovate · 2025-01-20T09:48:27Z

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.

edgarvonk

Nice. Finally a version 1 :-)

edgarvonk

We need to upgrade our Rego files for this to work!

…expose port (also needs to be done in our OPA provisioning script?!)

renovate · 2025-01-21T08:07:00Z

Renovate Ignore Notification

Because you closed this PR without merging, Renovate will ignore this update. You will not get PRs for any future 1.x releases. But if you manually upgrade to 1.x then Renovate will re-enable minor and patch updates automatically.

If you accidentally closed this PR, or if you changed your mind: rename this PR to get a fresh replacement PR.

chore(deps): update docker.io/openpolicyagent/opa docker tag to v1

58226f6

renovate bot requested review from hsiliev and a team as code owners January 16, 2025 17:07

Merge branch 'main' into renovate/docker.io-openpolicyagent-opa-1.x

c6e3b47

Merge branch 'main' into renovate/docker.io-openpolicyagent-opa-1.x

5922446

edgarvonk approved these changes Jan 20, 2025

View reviewed changes

edgarvonk self-requested a review January 20, 2025 11:15

edgarvonk requested changes Jan 20, 2025

View reviewed changes

chore: added new command line option to OPA Docker image in order to …

38b360c

…expose port (also needs to be done in our OPA provisioning script?!)

edgarvonk closed this Jan 21, 2025

renovate bot deleted the renovate/docker.io-openpolicyagent-opa-1.x branch January 21, 2025 08:07

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore(deps): update docker.io/openpolicyagent/opa docker tag to v1 #2431

chore(deps): update docker.io/openpolicyagent/opa docker tag to v1 #2431

renovate bot commented Jan 16, 2025

github-actions bot commented Jan 16, 2025 •

edited

Loading

github-actions bot commented Jan 16, 2025 •

edited

Loading

renovate bot commented Jan 20, 2025

edgarvonk left a comment

edgarvonk left a comment

renovate bot commented Jan 21, 2025

chore(deps): update docker.io/openpolicyagent/opa docker tag to v1 #2431

chore(deps): update docker.io/openpolicyagent/opa docker tag to v1 #2431

Conversation

renovate bot commented Jan 16, 2025

Release Notes

v1.0.0

Changes to Rego in OPA 1.0

Improvements to memory allocations

Wrap http.RoundTripper for SDK users

Improvements to scientific notation parsing in units.parse

Support customized buckets bundle_loading_duration_ns metric

Test suite performance improvements

OPA 1.0 Preparation

Topdown and Rego

Runtime, Tooling, SDK

Docs, Website, Ecosystem

Dependency Updates

Configuration

github-actions bot commented Jan 16, 2025 • edited Loading

unit-test-results

github-actions bot commented Jan 16, 2025 • edited Loading

integration-test-results

renovate bot commented Jan 20, 2025

Edited/Blocked Notification

edgarvonk left a comment

Choose a reason for hiding this comment

edgarvonk left a comment

Choose a reason for hiding this comment

renovate bot commented Jan 21, 2025

Renovate Ignore Notification

`v1.0.0`

Improvements to scientific notation parsing in `units.parse`

Support customized buckets `bundle_loading_duration_ns` metric

github-actions bot commented Jan 16, 2025 •

edited

Loading

github-actions bot commented Jan 16, 2025 •

edited

Loading