Skip to content

chore: bump github.com/open-policy-agent/opa from 0.44.0 to 0.51.0 #6947

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Apr 1, 2023

Bumps github.com/open-policy-agent/opa from 0.44.0 to 0.51.0.

Release notes

Sourced from github.com/open-policy-agent/opa's releases.

v0.51.0

This release contains improvements to monitoring and an assortment of fixes and improvements.

Monitoring

Surface unauthorized request count from OPA HTTP API authz handler via Status API

Currently when OPA's HTTP server rejects requests per the authz policy, this is not accounted for via the management APIs. This change adds that count in the metric registry that is part of the Status API for more visibility.

(#3378) authored by @​ashutosh-narkar.

Surface more decision log errors via Status API

Previously in 5732, we updated the decision log plugin to surface errors via the Status API. However, in that change certain events like encoder errors and log drops due to buffer size limits had no metrics associated with them. This change adds more metrics for these events so that they can be surfaced via the Status API.

(#5637) authored by @​ashutosh-narkar.

Include truncated HTTP response in logs

This change updates the client debug log to include the full HTTP response in case of non-200 status codes. Recording the response in the logs can help to provide more information to debug error scenarios.

(#2961) authored by @​ashutosh-narkar reported by @​gshively11.

Topdown and Rego

  • Wasm: Add native support for object.union_n built-in function (authored by @​Azanul)

Fixes

  • ast: Properly set the reported location of unused variables in strict-mode errors. (#5662) authored by @​boranx
  • fmt: report wrong arity for built-in functions. (#5646) authored by @​Trolloldem
  • topdown: http.send(): Ensuring intra-query caching consistency. (#5736) authored by @​johanfylling
  • Performance improvements to decision logging. Specifically, by removing superfluous json encoding roundtrip and double work in AST conversion of to-be-logged events. (authored by @​srenatus)

Docs, Website, and Ecosystem

... (truncated)

Changelog

Sourced from github.com/open-policy-agent/opa's changelog.

0.51.0

This release contains improvements to monitoring and an assortment of fixes and improvements.

Monitoring

Surface unauthorized request count from OPA HTTP API authz handler via Status API

Currently when OPA's HTTP server rejects requests per the authz policy, this is not accounted for via the management APIs. This change adds that count in the metric registry that is part of the Status API for more visibility.

(#3378) authored by @​ashutosh-narkar.

Surface more decision log errors via Status API

Previously in 5732, we updated the decision log plugin to surface errors via the Status API. However, in that change certain events like encoder errors and log drops due to buffer size limits had no metrics associated with them. This change adds more metrics for these events so that they can be surfaced via the Status API.

(#5637) authored by @​ashutosh-narkar.

Include truncated HTTP response in logs

This change updates the client debug log to include the full HTTP response in case of non-200 status codes. Recording the response in the logs can help to provide more information to debug error scenarios.

(#2961) authored by @​ashutosh-narkar reported by @​gshively11.

Topdown and Rego

  • Wasm: Add native support for object.union_n built-in function (authored by @​Azanul)

Fixes

  • ast: Properly set the reported location of unused variables in strict-mode errors. (#5662) authored by @​boranx
  • fmt: report wrong arity for built-in functions. (#5646) authored by @​Trolloldem
  • topdown: http.send(): Ensuring intra-query caching consistency. (#5736) authored by @​johanfylling
  • Performance improvements to decision logging. Specifically, by removing superfluous json encoding roundtrip and double work in AST conversion of to-be-logged events. (authored by @​srenatus)

Docs, Website, and Ecosystem

... (truncated)

Commits
  • 1f52ea1 Prepare v0.51.0 release (#5804)
  • 007a0f2 Update _index.md
  • c858397 plugins: Surface more decision log errors via status API
  • 06a55f6 build(deps): bump github.com/go-logr/logr from 1.2.3 to 1.2.4 (#5800)
  • 7abe178 [docs] Fix dashboard height issue (#5799)
  • 2d1583e Add Quali Torque to the ecosystem page (#5794)
  • 2b2cb12 [docs] Address anchor linking issue (#5795)
  • fee3563 topdown: http.send(): Ensuring intra-query caching concistency (#5738)
  • 9e28c5e Surface unauthorized response count from OPA API authz handler
  • 76e5fda fmt: report wrong arity for built-in functions
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot dependabot bot force-pushed the dependabot/go_modules/github.com/open-policy-agent/opa-0.51.0 branch 3 times, most recently from c0e4df2 to cf9fea2 Compare April 1, 2023 21:39
Bumps [github.com/open-policy-agent/opa](https://github.com/open-policy-agent/opa) from 0.44.0 to 0.51.0.
- [Release notes](https://github.com/open-policy-agent/opa/releases)
- [Changelog](https://github.com/open-policy-agent/opa/blob/main/CHANGELOG.md)
- [Commits](open-policy-agent/opa@v0.44.0...v0.51.0)

---
updated-dependencies:
- dependency-name: github.com/open-policy-agent/opa
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot force-pushed the dependabot/go_modules/github.com/open-policy-agent/opa-0.51.0 branch from cf9fea2 to ee13d21 Compare April 3, 2023 05:10
@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Apr 3, 2023

Dependabot tried to update this pull request, but something went wrong. We're looking into it, but in the meantime you can retry the update by commenting @dependabot rebase.

3 similar comments
@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Apr 3, 2023

Dependabot tried to update this pull request, but something went wrong. We're looking into it, but in the meantime you can retry the update by commenting @dependabot rebase.

@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Apr 3, 2023

Dependabot tried to update this pull request, but something went wrong. We're looking into it, but in the meantime you can retry the update by commenting @dependabot rebase.

@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Apr 3, 2023

Dependabot tried to update this pull request, but something went wrong. We're looking into it, but in the meantime you can retry the update by commenting @dependabot rebase.

@coadler
Copy link
Contributor

coadler commented Apr 5, 2023

@dependabot recreate

@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Apr 5, 2023

Dependabot tried to update this pull request, but something went wrong. We're looking into it, but in the meantime you can retry the update by commenting @dependabot rebase.

5 similar comments
@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Apr 5, 2023

Dependabot tried to update this pull request, but something went wrong. We're looking into it, but in the meantime you can retry the update by commenting @dependabot rebase.

@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Apr 7, 2023

Dependabot tried to update this pull request, but something went wrong. We're looking into it, but in the meantime you can retry the update by commenting @dependabot rebase.

@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Apr 11, 2023

Dependabot tried to update this pull request, but something went wrong. We're looking into it, but in the meantime you can retry the update by commenting @dependabot rebase.

@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Apr 17, 2023

Dependabot tried to update this pull request, but something went wrong. We're looking into it, but in the meantime you can retry the update by commenting @dependabot rebase.

@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Apr 18, 2023

Dependabot tried to update this pull request, but something went wrong. We're looking into it, but in the meantime you can retry the update by commenting @dependabot rebase.

coadler added a commit that referenced this pull request Apr 19, 2023
Dependabot is having trouble updating this: #6947
@coadler
Copy link
Contributor

coadler commented Apr 19, 2023

Superseded by #7204

@coadler coadler closed this Apr 19, 2023
@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Apr 19, 2023

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

@dependabot dependabot bot deleted the dependabot/go_modules/github.com/open-policy-agent/opa-0.51.0 branch April 19, 2023 16:23
@github-actions github-actions bot locked and limited conversation to collaborators Apr 19, 2023
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant