v0.69.0

Changelog

New Features

• 55d9a7b: feat(verify): Add --var-values flag (#1288) (@jalseth)
• 81f1ce4: feat: support glob wildcards in --namespace (#1343) (@arpitjain099)

Bug Fixes

• cd348b8: fix(ci): update setup-regal action to open-policy-agent org (#1368) (@boranx)
• 0e38a95: fix(verify): default --show-builtin-errors to false (#1325) (@dgeorgievski)

OPA Changes

• c0aceef: build(deps): bump github.com/open-policy-agent/opa from 1.15.2 to 1.17.1 (#1346) (@dependabot[bot])
• a41c3a9: build(deps): bump github.com/open-policy-agent/opa from 1.17.1 to 1.18.2 (#1363) (@dependabot[bot])
• 4130398: build(deps): bump github.com/open-policy-agent/opa to v1.19.0 (#1385) (@johanfylling)

Other Changes

• 6b381ad: Pre commit conftest docs integration (#1263) (@jrottenberg)
• 107ec8e: build(deps): bump actions/checkout from 6.0.1 to 6.0.3 (#1352) (@dependabot[bot])
• 0b9a9be: build(deps): bump actions/checkout from 6.0.3 to 7.0.0 (#1358) (@dependabot[bot])
• a2ddb01: build(deps): bump alpine from 3.23.3 to 3.23.4 (#1316) (@dependabot[bot])
• cbe17f2: build(deps): bump alpine from 3.23.4 to 3.24.0 (#1351) (@dependabot[bot])
• 15ddb9d: build(deps): bump alpine from 3.24.0 to 3.24.1 (#1357) (@dependabot[bot])
• 313bf0a: build(deps): bump cachix/install-nix-action from 31.10.1 to 31.10.6 (#1329) (@dependabot[bot])
• cab3aa1: build(deps): bump cuelang.org/go from 0.16.0 to 0.16.1 (#1310) (@dependabot[bot])
• bee01de: build(deps): bump cuelang.org/go from 0.16.1 to 0.17.0 (#1362) (@dependabot[bot])
• 7797f79: build(deps): bump cuelang.org/go from 0.17.0 to 0.17.1 (#1373) (@dependabot[bot])
• 8cd5347: build(deps): bump docker/build-push-action from 7.0.0 to 7.1.0 (#1314) (@dependabot[bot])
• 92db984: build(deps): bump docker/build-push-action from 7.1.0 to 7.2.0 (#1337) (@dependabot[bot])
• 55eeab0: build(deps): bump docker/login-action from 4.0.0 to 4.1.0 (#1309) (@dependabot[bot])
• 8d864f0: build(deps): bump docker/login-action from 4.1.0 to 4.2.0 (#1339) (@dependabot[bot])
• 9f57449: build(deps): bump docker/login-action from 4.2.0 to 4.4.0 (#1370) (@dependabot[bot])
• 026dc0d: build(deps): bump github.com/CycloneDX/cyclonedx-go (#1333) (@dependabot[bot])
• 8293d77: build(deps): bump github.com/moby/buildkit from 0.29.0 to 0.30.0 (#1331) (@dependabot[bot])
• 2f126ef: build(deps): bump golang from 1.26.1-alpine to 1.26.2-alpine (#1312) (@dependabot[bot])
• 1f45387: build(deps): bump golang from 1.26.2-alpine to 1.26.4-alpine (#1344) (@dependabot[bot])
• fb6fbdd: build(deps): bump golang from 1.26.4-alpine to 1.26.5-alpine (#1371) (@dependabot[bot])
• 30ed475: build(deps): bump golangci/golangci-lint-action from 9.2.1 to 9.3.0 (#1364) (@dependabot[bot])
• d099ca1: build(deps): bump goreleaser/goreleaser-action from 7.0.0 to 7.2.2 (#1334) (@dependabot[bot])
• eb7ca3e: build(deps): bump goreleaser/goreleaser-action from 7.2.2 to 7.2.3 (#1366) (@dependabot[bot])
• d07ab51: build(deps): bump js-yaml from 3.13.1 to 4.2.0 in /examples/ts (#1353) (@dependabot[bot])
• 8314227: build(deps): bump sethvargo/ratchet from 0.11.4 to 0.12.0 (#1374) (@dependabot[bot])
• 9abd9c4: ci: Use only-new-issues to prevent existing lint violations from blocking CI (#1340) (@boranx)
• 169a2e4: perf(engine): Move Input AST conversion to occur before rule loop (#1348) (@brittandeyoung)

v0.68.2

Changelog

OPA Changes

• 36f23bf: build(deps): bump github.com/open-policy-agent/opa from 1.15.1 to 1.15.2 (#1311) (@dependabot[bot])

Other Changes

• 479de13: build(deps): bump github.com/hashicorp/go-getter from 1.8.5 to 1.8.6 (#1307) (@dependabot[bot])

v0.68.1

Changelog

Bug Fixes

• 2631477: fix(push): Use Rego v1 by default (#1290) (@jalseth)

v0.68.0

Changelog

New Features

• a604f55: feat(parser): Add nginx parser (#1289) (@jalseth)

Bug Fixes

• 487a2e1: fix: Skip extensionless files that are not recognized types (#1302) (@ricardbejarano)

OPA Changes

• 472e4e3: build(deps): bump github.com/open-policy-agent/opa from 1.14.1 to 1.15.1 (#1303) (@dependabot[bot])

Other Changes

• 6d521ef: build(deps): bump github.com/google/go-jsonnet from 0.21.0 to 0.22.0 (#1299) (@dependabot[bot])
• 2d5f1c2: build(deps): bump github.com/moby/buildkit from 0.28.0 to 0.29.0 (#1306) (@dependabot[bot])

v0.67.1

Changelog

Bug Fixes

• 9cef5a2: fix(releasing): Ensure GoReleaser creates a tar for linux_amd64 (#1294) (@jalseth)

Other Changes

• 8bc9477: build(deps): bump actions/setup-go from 6.0.0 to 6.3.0 (#1278) (@dependabot[bot])
• 7655171: build(deps): bump docker/build-push-action from 6.19.2 to 7.0.0 (#1284) (@dependabot[bot])
• 35ab0ca: build(deps): bump docker/login-action from 3.6.0 to 4.0.0 (#1283) (@dependabot[bot])
• 94e5286: build(deps): bump goreleaser/goreleaser-action from 6.4.0 to 7.0.0 (#1275) (@dependabot[bot])
• 45a3835: ci: Update Nix devshell to use go-overlay (#1287) (@jalseth)

v0.67.0

Changelog

Bug Fixes

• 69f41ed: fix(plugin): Handle spaces in the plugin command path (#1242) (@jalseth)

OPA Changes

• 59cb419: build(deps): bump github.com/open-policy-agent/opa from 1.12.1 to 1.13.1 (#1262) (@dependabot[bot])
• 507345f: build(deps): bump github.com/open-policy-agent/opa from 1.13.1 to 1.13.2 (#1274) (@dependabot[bot])
• 69b7329: build(deps): bump github.com/open-policy-agent/opa from 1.13.2 to 1.14.1 (#1282) (@dependabot[bot])

Other Changes

• 8ec8ba0: build(deps): bump actions/checkout from 5.0.0 to 6.0.1 (#1230) (@dependabot[bot])
• fb1d20e: build(deps): bump alpine from 3.23.2 to 3.23.3 (#1264) (@dependabot[bot])
• 84ee4f1: build(deps): bump bats-core/bats-action from 3.0.1 to 4.0.0 (#1270) (@dependabot[bot])
• 06f26a6: build(deps): bump cuelang.org/go from 0.15.1 to 0.15.3 (#1244) (@dependabot[bot])
• d01f783: build(deps): bump cuelang.org/go from 0.15.3 to 0.15.4 (#1259) (@dependabot[bot])
• b7f9627: build(deps): bump cuelang.org/go from 0.15.4 to 0.16.0 (#1279) (@dependabot[bot])
• 3e4cf98: build(deps): bump docker/build-push-action from 6.18.0 to 6.19.2 (#1273) (@dependabot[bot])
• b7060d3: build(deps): bump github.com/CycloneDX/cyclonedx-go from 0.9.3 to 0.10.0 (#1265) (@dependabot[bot])
• e130513: build(deps): bump github.com/hashicorp/go-getter from 1.8.3 to 1.8.4 (#1245) (@dependabot[bot])
• e5afd3f: build(deps): bump github.com/hashicorp/go-getter from 1.8.4 to 1.8.5 (#1285) (@dependabot[bot])
• d6f5fb2: build(deps): bump github.com/moby/buildkit from 0.26.3 to 0.27.1 (#1260) (@dependabot[bot])
• c1ba806: build(deps): bump github.com/moby/buildkit from 0.27.1 to 0.28.0 (#1280) (@dependabot[bot])
• fc57996: build(deps): bump github.com/spdx/tools-golang from 0.5.5 to 0.5.6 (#1243) (@dependabot[bot])
• 95d756f: build(deps): bump github.com/spdx/tools-golang from 0.5.6 to 0.5.7 (#1251) (@dependabot[bot])
• a59b8bd: build(deps): bump golang from 1.25.5-alpine to 1.25.6-alpine (#1256) (@dependabot[bot])
• bde1457: build(deps): bump golang from 1.25.6-alpine to 1.26.1-alpine (#1281) (@dependabot[bot])
• b2e58f0: build(deps): bump golangci/golangci-lint-action from 8.0.0 to 9.2.0 (#1231) (@dependabot[bot])
• b1e9f30: ci: Update Dependabot config (#1267) (@jalseth)
• bf63002: ci: Update setup-go to use Go version from go.mod (#1268) (@jalseth)

v0.66.0

Changelog

OPA Changes

• 08529c7: build(deps): bump github.com/open-policy-agent/opa from 1.11.0 to 1.12.1 (#1240) (@dependabot[bot])

Other Changes

• 10434c1: build(deps): bump actions/setup-python from 6.0.0 to 6.1.0 (#1225) (@dependabot[bot])
• 25bee5d: build(deps): bump alpine from 3.22.2 to 3.23.0 (#1229) (@dependabot[bot])
• 6cafc0f: build(deps): bump github.com/BurntSushi/toml from 1.5.0 to 1.6.0 (#1238) (@dependabot[bot])
• f6b8fa9: build(deps): bump github.com/moby/buildkit from 0.26.2 to 0.26.3 (#1235) (@dependabot[bot])
• 233776f: build(deps): bump golang from 1.25.4-alpine to 1.25.5-alpine (#1228) (@dependabot[bot])
• 7a86f94: chore: Remove dependency on github.com/pkg/errors (#1233) (@jalseth)
• 5a394b8: ci(golangci-lint): Disable revive skip-package-name-collision-with-go-std (#1232) (@jalseth)

v0.65.0

Changelog

New Features

• 7de1f99: feat: Add location to SARIF output (#1207) (@jalseth)

Bug Fixes

• 94bb769: fix(build): Include Git version when using 'make build' (#1218) (@jalseth)
• ff4e456: fix(sarif): Include conftest version number (#1206) (@jalseth)

OPA Changes

• 8c4cfa6: build(deps): bump github.com/open-policy-agent/opa from 1.10.1 to 1.11.0 (#1224) (@dependabot[bot])

Other Changes

• 3dab980: build(deps): bump cuelang.org/go from 0.15.0 to 0.15.1 (#1217) (@dependabot[bot])
• cfa85ca: build(deps): bump github.com/moby/buildkit from 0.25.2 to 0.26.2 (#1216) (@dependabot[bot])
• dd7e3bc: build(deps): bump golang from 1.25.3-alpine to 1.25.4-alpine (#1210) (@dependabot[bot])
• bbbb04c: chore: Include goreleaser in Nix devshell (#1219) (@jalseth)
• ac3146f: ci: Pin GitHub Actions to the Git SHA using ratchet (#1204) (@jalseth)

v0.64.0

Changelog

New Features

• 00b02b2: feat: Include location in the result output (#1196) (@jalseth)
• ee91078: feat: Refactor GitHub outputter to support locations from Rego policy (#1197) (@jalseth)
• d359466: feat: add conftest-fmt and conftest-pull pre-commit hooks (#1192) (@dkolepp)

Bug Fixes

• 997f5ce: fix: Fix XDG writable check on Windows (#1185) (@jalseth)
• fb9c88d: fix: Only use XDG directories for plugin if they are writable (#1182) (@jalseth)
• 4a2ddd6: fix: Use "python3" instead of "python" in the Makefile (#1184) (@jalseth)

OPA Changes

• 347388d: build(deps): bump github.com/open-policy-agent/opa from 1.9.0 to 1.10.1 (#1201) (@dependabot[bot])

Other Changes

• 75449c3: build(deps): bump alpine from 3.22.1 to 3.22.2 (#1191) (@dependabot[bot])
• 0ade44b: build(deps): bump cuelang.org/go from 0.14.1 to 0.15.0 (#1202) (@dependabot[bot])
• 1ef4588: build(deps): bump github.com/hashicorp/go-getter from 1.8.2 to 1.8.3 (#1199) (@dependabot[bot])
• d2e56c3: build(deps): bump github.com/moby/buildkit from 0.25.0 to 0.25.2 (#1200) (@dependabot[bot])
• 5242185: build(deps): bump golang from 1.25.1-alpine to 1.25.3-alpine (#1193) (@dependabot[bot])
• 58ace24: build: Add Nix devshell (#1186) (@jalseth)
• 6189512: chore: Fix gitignore for acceptance tests (#1195) (@jalseth)
• 7d41238: ci: Run validation job on Linux, macOS, Windows (#1181) (@jalseth)

v0.63.0

Changelog

New Features

• 30b9a8d: feat: add reformat command for JSON output conversion (#1153) (@thevilledev)

Bug Fixes

• ffb6ce3: fix: Add explicit line-number to GitHub output (#1173) (@tun0)

OPA Changes

• 64bf641: build(deps): bump github.com/open-policy-agent/opa from 1.6.0 to 1.7.1 (#1156) (@dependabot[bot])
• 981983b: build(deps): bump github.com/open-policy-agent/opa from 1.7.1 to 1.8.0 (#1165) (@dependabot[bot])
• c7aa1d4: build(deps): bump github.com/open-policy-agent/opa from 1.8.0 to 1.9.0 (#1175) (@dependabot[bot])

Other Changes

• 0d903ce: build(deps): bump actions/checkout from 4 to 5 (#1158) (@dependabot[bot])
• 364cf32: build(deps): bump actions/setup-go from 5 to 6 (#1171) (@dependabot[bot])
• d4aa81f: build(deps): bump actions/setup-python from 5 to 6 (#1172) (@dependabot[bot])
• a1ecf3f: build(deps): bump alpine from 3.22.0 to 3.22.1 (#1152) (@dependabot[bot])
• b87ca5f: build(deps): bump cuelang.org/go from 0.13.2 to 0.14.1 (#1159) (@dependabot[bot])
• 1c5abaa: build(deps): bump github.com/CycloneDX/cyclonedx-go from 0.9.2 to 0.9.3 (#1177) (@dependabot[bot])
• 2a509fe: build(deps): bump github.com/hashicorp/go-getter from 1.7.8 to 1.7.9 (#1162) (@dependabot[bot])
• a433ed0: build(deps): bump github.com/hashicorp/go-getter from 1.7.9 to 1.8.0 (#1169) (@dependabot[bot])
• d9dca30: build(deps): bump github.com/hashicorp/go-getter from 1.8.0 to 1.8.1 (#1174) (@dependabot[bot])
• b51f6d9: build(deps): bump github.com/hashicorp/go-getter from 1.8.1 to 1.8.2 (#1178) (@dependabot[bot])
• c664099: build(deps): bump github.com/moby/buildkit from 0.23.2 to 0.24.0 (#1166) (@dependabot[bot])
• 5378cc3: build(deps): bump github.com/moby/buildkit from 0.24.0 to 0.25.0 (#1176) (@dependabot[bot])
• fb4c503: build(deps): bump golang from 1.25.0-alpine to 1.25.1-alpine (#1170) (@dependabot[bot])
• 0d6e3b4: chore(deps): bump Go version to 1.25 (#1160) (@thevilledev)