Update dependency open-policy-agent/opa to v1.3.0

[renovate]

This PR contains the following updates:

Package	Update	Change
open-policy-agent/opa	minor	v1.1.0 -> v1.3.0

---

Release Notes

open-policy-agent/opa (open-policy-agent/opa)

v1.3.0

Compare Source

This release contains a mix of features, bugfixes, and dependency updates.

New Buffer Option for Decision Logs (#​5724)

A new, optional, buffering mechanism has been added to decision logging.
The default buffer is designed around making precise memory footprint guarantees, which can produce lock contention at high loads, negatively impacting query performance.
The new event-based buffer is designed to reduce lock contention and improve performance at high loads, but sacrifices the memory footprint guarantees of the default buffer.

The new event-based buffer is enabled by setting the decision_logs.reporting.buffer_type configuration option to event.

For more details, see the decision log plugin README.

Reported by @​mjungsbluth, authored by @​sspaink

OpenTelemetry: HTTP Support and Expanded Batch Span Configuration (#​7412)

Distributed tracing through OpenTelemetry has been extended to support HTTP collectors (enabled by setting the distributed_tracing.type configuration option to http).
Additionally, configuration has been expanded with fine-grained batch span processor options.

Authored and reported by @​sqyang94

Runtime, Tooling, SDK

• compile: Require multi-term entrypoint paths for optimized bundle building (#​7321) authored by @​johanfylling reported by @​nikpivkin
• fmt: Allow one liner rule grouping (#​6760) authored by @​anderseknert
• fmt: Fix v0-compatible fmt with stdin (#​7409) authored and reported by @​charlieegan3
• ir: Fix nil pointer deref in Unmarshal() when handling IsSetStmt (#​7415) authored and reported by @​KrisKennawayDD
• planner: Fix Wasm vs non-Wasm evaluation difference bug related to the overeager optimization of ref head rules (#​7439) authored by @​srenatus
• sdk: Removing repeat args from sub-func call (#​7443) authored by @​alingse
• tester: Including parameterized test cases in test report counter (#​7407) authored by @​johanfylling
• tester: Only including failed sub-test cases in report summary when non-verbose (#​7426) authored by @​johanfylling

Docs, Website, Ecosystem

• docs: Add some notes about AI assisted patches (#​7436) authored by @​charlieegan3
• docs: Add query_parameters_to_set (#​7405) authored by @​sedovmik
• docs: Delete reference to license key in Envoy tutorial (#​7466) authored by @​joostholslag
• docs: Fix typo in Envoy tutorial (#​7464) authored by @​joostholslag
• docs: Update slack inviter link (#​7450) authored by @​charlieegan3
• docs: Update terraform examples (#​7429) authored by @​charlieegan3
• docs: Simplify kind usage instruction in Envoy tutorial (#​7465) authored by @​joostholslag

Miscellaneous

• Enable unused-receiver linter (revive) (#​7448) authored by @​anderseknert
• Dependency updates; notably:
  • build(deps): bump github.com/containerd/containerd from 1.7.26 to 1.7.27
  • build(deps): bump github.com/dgraph-io/badger/v4 from 4.5.1 to 4.6.0
  • build(deps): bump github.com/opencontainers/image-spec from 1.1.0 to 1.1.1
  • build(deps): bump github.com/prometheus/client_golang 1.21.0 to 1.21.1
  • build(deps): bump golang.org/x/net from 0.35.0 to 0.37.0
  • build(deps): bump golang.org/x/time from 0.10.0 to 0.11.0
  • build(deps): bump google.golang.org/grpc from 1.70.0 to 1.71.0
  • build(deps): bump go.opentelemetry.io deps to 1.35.0/0.60.0

v1.2.0

Compare Source

This release contains a mix of features, performance improvements, and bugfixes.

Parameterized Rego Tests (#​2176)

Rego tests now support parameterization, allowing a single test rule to include multiple, hierarchical, named test cases.
This feature is useful for data-driven testing, where a single test rule can be used for multiple test cases with different inputs and expected outputs.

package example_test

test_concat[note] if {
	some note, tc in {
		"empty + empty": {
			"a": [],
			"b": [],
			"exp": [],
		},
		"empty + filled": {
			"a": [],
			"b": [1, 2],
			"exp": [1, 2],
		},
		"filled + filled": {
			"a": [1, 2],
			"b": [3, 4],
			"exp": [1, 2, 3], # Faulty expectation, this test case will fail
		},
	}

	act := array.concat(tc.a, tc.b)
	act == tc.exp
}

$ opa test example_test.rego
example_test.rego:
data.example_test.test_concat: FAIL (263.375µs)
  empty + empty: PASS
  empty + filled: PASS
  filled + filled: FAIL
--------------------------------------------------------------------------------
FAIL: 1/1

See the documentation for more information.

Authored by @​johanfylling, reported by @​anderseknert

Performance Improvements

• perf: Add ref.CopyNonGround (#​7350) authored by @​anderseknert
• perf: opa fmt 3x faster formatting (#​7341) authored by @​anderseknert
• perf: Cost of indexing greatly reduced (#​7370) authored by @​anderseknert
• perf: Eval optimizations (#​7367) authored by @​anderseknert
• perf: Intern annotation terms (#​7365) authored by @​anderseknert
• perf: Slightly more efficient policy scanning (#​7368) authored by @​anderseknert
• perf: Switch to a faster xxhash package (7362) authored by @​Juneezee
• perf: Use GetByValue to avoid boxing to interface{} (#​7372) authored by @​anderseknert
• perf: Various small improvements (#​7357) authored by @​anderseknert
• perf: Improve storage lookup performance (#​7336) authored by @​anderseknert
• perf: optimize iteration (#​7327) authored by @​anderseknert

Topdown and Rego

• rego+topdown: Allow providing custom base cache (#​7329) authored by @​anderseknert

Runtime, Tooling, SDK

• ast: Add missing BuildAnnotationSet to ast v0 (#​7347) authored by @​anderseknert
• ast: Eliminate allocation in Value.Find, and other improvements (#​7319) authored by @​anderseknert
• ast: Use byte for RuleKind and DocKind (#​7332) authored by @​anderseknert
• ast.InterfaceToValue: add test case for []byte (#​7379) authored by @​dennygursky
• ast: support []string and ast.Value in ast.InterfaceToValue (#​7306) authored by @​regeda
• bundle: Fixing issue where --v0-compatible isn't respected for custom bundles (#​7338) authored by @​johanfylling
• cmd: Handle failing tests in opa test --bench (#​7205) authored by @​anderseknert
• cmd: Add decision ID to opa exec output (#​7373) authored by @​anderseknert
• oracle: Make oracle public under v1/ast/oracle (#​7265) authored by @​anderseknert
• oracle: Allow passing own compiler to oracle (#​7354) authored by @​anderseknert
• plugins/discovery: Enable tracing for discovery plugin (#​7299) authored by @​mjungsbluth
• plugins/rest: Do not attach authorization header in bearerAuthPlugin if response is a redirect (#​7308) authored by @​carabasdaniel
• server+distributedtracing: Add Additional Resource Attributes for OpenTelemetry (#​7322) authored by @​briankahoot reported by @​briankahoot
• util: Add util.HasherMap (#​7363) authored by @​anderseknert

Docs, Website, Ecosystem

• docs: Add support link to README (#​7359) (authored by @​anderseknert)
• docs: Update example bundle to be v1 compatible (#​7342) authored by @​ashutosh-narkar
• docs: Add note about v1.0 addr behaviour (#​7360) authored by @​charlieegan3 reported by @​ali-jalaal
• docs: Update homepage examples to drop v1 import (#​7391) authored by @​charlieegan3
• docs: Updating --v1-compatible mentions outside the v1 upgrade guide and v0 compatibility docs (#​7337) authored by @​johanfylling
• docs: Fixed invalid links to examples (#​7326) authored by @​JonathanDeLaCruzEncora
• MAINTAINERS: Add Anders and Charlie as maintainers (#​7318) authored by @​charlieegan3

Miscellaneous

• build+test: Add make test-short task (#​7364) (authored by @​anderseknert)
• build: Add gocritic linter (#​7377) authored by @​anderseknert
• build: Add nilness linter from govet (#​7335) authored by @​anderseknert
• build: Add perfsprint linter (#​7334) authored by @​anderseknert
• ci: Tagging release binaries with build version (#​7395, #​7397, #​7400) authored by @​johanfylling
• test: fix race in TestIntraQueryCache_ClientError and TestInterQueryCache_ClientError (#​7280) authored by @​Juneezee
• misc: Use Go 1.22+ int ranges (#​7328) authored by @​anderseknert
• Dependency updates; notably:
  • build: bump go from 1.23.5 to 1.24.0
  • build(deps): bump github.com/agnivade/levenshtein from 1.2.0 to 1.2.1
  • build(deps): bump github.com/containerd/containerd from 1.7.25 to 1.7.26
  • build(deps): bump github.com/google/go-cmp from 0.6.0 to 0.7.0
  • build(deps): bump github.com/prometheus/client_golang
  • build(deps): bump github.com/spf13/cobra from 1.8.1 to 1.9.1
  • build(deps): bump github.com/spf13/pflag from 1.0.5 to 1.0.6
  • build(deps): bump golang.org/x/net from 0.34.0 to 0.35.0
  • build(deps): bump golang.org/x/time from 0.9.0 to 0.10.0
  • build(deps): bump ossf/scorecard-action from 2.4.0 to 2.4.1
  • Bump golangci-lint from v1.60.1 to 1.64.5

---

Configuration

📅 Schedule: Branch creation - "* 0-3 * * 1" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.