Bump github.com/open-policy-agent/opa from 0.42.2 to 0.62.0

[dependabot]

Bumps github.com/open-policy-agent/opa from 0.42.2 to 0.62.0.

Release notes

Sourced from github.com/open-policy-agent/opa's releases.

v0.62.0

NOTES:

• The minimum version of Go required to build the OPA module is 1.20

This release contains a mix of improvements and bugfixes.

Runtime, Tooling, SDK

• cmd: Add environment variable backups for command-line flags (#6508) authored by @​colinjlacy
• download/oci: Add missing WithBundleParserOpts method to OCI downloader (#6571) authored by @​slonka
• logging: avoid %!F(MISSING) in logs by skipping calls to the {Debug,Info,Warn,Error}f functions when there are no arguments (#6555) authored by @​srenatus

Topdown and Rego

• ast+cmd: Allow bundle to contain calls to unknown Rego functions when inspected (#6591) authored by @​johanfylling
• topdown/http: Respect raise_error flag during input validation (#6553) authored by @​ashutosh-narkar

Docs + Website + Ecosystem

• Add OpaDotNet to ecosystem projects (#6554) authored by @​me-viper
• Add updated logos for Permit.io and OPAL (#6562) authored by @​danielbass37
• docs: Update description of the url path usage when accessing values inside object and array documents for v1/data GET and POST (#6567) authored by @​ashutosh-narkar
• docs: Use application/yaml instead of application/x-yaml as the former is now a recognized content type (#6565) authored by @​anderseknert

Miscellaneous

• Add Elastic to ADOPTERS.md (#6568) authored by @​orouz
• Dependency updates; notably:
  • bump golang 1.21.5 -> 1.22 (#6595) authored by @​srenatus
  • bump google.golang.org/grpc from 1.61.0 to 1.62.0
  • bump golang.org/x/net from 0.19.0 to 0.21.0
  • bump github.com/containerd/containerd from 1.7.12 to 1.7.13
  • bump aquasecurity/trivy-action from 0.16.1 to 0.17.0
  • bump github.com/prometheus/client_golang from 1.18.0 to 1.19.0
  • bump github.com/opencontainers/image-spec from 1.1.0-rc5 to 1.1.0-rc6

v0.61.0

This release contains a mix of new features and bugfixes.

Runtime, SDK

• Adding --v1-compatible flag to all previously unsupported command line commands (#6520) authored by @​johanfylling
• Don't load files in tarball exceeding size_limit_bytes (#6514) authored by @​anderseknert reported by @​dolevf
• Allow TLS cipher suites to be set for the OPA server (#6537) authored by @​ashutosh-narkar
• Removing deprecated fields and functions related to rego-v1 compatibility (#6542) authored by @​johanfylling
• bundle: Make func newDescriptor and withCloser public (#6517) authored by @​antgubarev
• runtime/logging: Do not panic when rctx is missing (#6506) authored by @​srenatus

... (truncated)

Changelog

Sourced from github.com/open-policy-agent/opa's changelog.

0.62.0

NOTES:

• The minimum version of Go required to build the OPA module is 1.20

This release contains a mix of improvements and bugfixes.

Runtime, Tooling, SDK

• cmd: Add environment variable backups for command-line flags (#6508) authored by @​colinjlacy
• download/oci: Add missing WithBundleParserOpts method to OCI downloader (#6571) authored by @​slonka
• logging: avoid %!F(MISSING) in logs by skipping calls to the {Debug,Info,Warn,Error}f functions when there are no arguments (#6555) authored by @​srenatus

Topdown and Rego

• ast+cmd: Allow bundle to contain calls to unknown Rego functions when inspected (#6591) authored by @​johanfylling
• topdown/http: Respect raise_error flag during input validation (#6553) authored by @​ashutosh-narkar

Docs + Website + Ecosystem

• Add OpaDotNet to ecosystem projects (#6554) authored by @​me-viper
• Add updated logos for Permit.io and OPAL (#6562) authored by @​danielbass37
• docs: Update description of the url path usage when accessing values inside object and array documents for v1/data GET and POST (#6567) authored by @​ashutosh-narkar
• docs: Use application/yaml instead of application/x-yaml as the former is now a recognized content type (#6565) authored by @​anderseknert

Miscellaneous

• Add Elastic to ADOPTERS.md (#6568) authored by @​orouz
• Dependency updates; notably:
  • bump golang 1.21.5 -> 1.22 (#6595) authored by @​srenatus
  • bump google.golang.org/grpc from 1.61.0 to 1.62.0
  • bump golang.org/x/net from 0.19.0 to 0.21.0
  • bump github.com/containerd/containerd from 1.7.12 to 1.7.13
  • bump aquasecurity/trivy-action from 0.16.1 to 0.17.0
  • bump github.com/prometheus/client_golang from 1.18.0 to 1.19.0
  • bump github.com/opencontainers/image-spec from 1.1.0-rc5 to 1.1.0-rc6

0.61.0

This release contains a mix of new features and bugfixes.

Runtime, SDK

• Adding --v1-compatible flag to all previously unsupported command line commands (#6520) authored by @​johanfylling
• Don't load files in tarball exceeding size_limit_bytes (#6514) authored by @​anderseknert reported by @​dolevf
• Allow TLS cipher suites to be set for the OPA server (#6537) authored by @​ashutosh-narkar
• Removing deprecated fields and functions related to rego-v1 compatibility (#6542) authored by @​johanfylling
• bundle: Make func newDescriptor and withCloser public (#6517) authored by @​antgubarev
• runtime/logging: Do not panic when rctx is missing (#6506) authored by @​srenatus

... (truncated)

Commits

• 1d0ab93 Prepare v0.62.0 release
• e1a3b9b build: update .go-version to unblock netlify build (#6605)
• 7fc9df8 build(deps): bump github.com/prometheus/client_golang
• d978deb cleanup: use errors.Join
• 28a14a3 build(deps): bump google.golang.org/grpc from 1.61.1 to 1.62.0
• 963f5ea build(go): bump golang, build with 1.22, support 1.20+ (#6595)
• 0d70329 ast+cmd: Allowing bundle to contain calls to unknown Rego functions when insp...
• 1f6b75c build(deps): bump google.golang.org/grpc from 1.61.0 to 1.61.1
• c8f7244 fix(oci): add missing method WithBundleParserOpts to oci_downloader_unavailable
• 75f3507 build(deps): bump golang.org/x/net from 0.19.0 to 0.21.0
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

Superseded by #2055.