Skip to content

chore(deps): bump github.com/open-policy-agent/opa from 1.15.2 to 1.16.2#149

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/github.com/open-policy-agent/opa-1.16.1
Open

chore(deps): bump github.com/open-policy-agent/opa from 1.15.2 to 1.16.2#149
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/github.com/open-policy-agent/opa-1.16.1

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github May 3, 2026

Bumps github.com/open-policy-agent/opa from 1.15.2 to 1.16.2.

Release notes

Sourced from github.com/open-policy-agent/opa's releases.

v1.16.2

This release updates the version of Go used to build the OPA binaries and images to 1.26.3; addressing a number of vulnerabilities.

v1.16.1

This is a patch release addressing a regression in the plugin manager that may cause the service to hang on shutdown (#8590).

v1.16.0

[!WARNING]

A regression has been found in the plugin manager, which may cause the service to hang on shutdown. Users are advised to go directly to v1.16.1.

This release contains a mix of new features, performance improvements, and bugfixes. Notably:

  • New uri.parse and uri.is_valid built-in functions
  • Data API Request/Response Metadata
  • Prometheus metrics exported via OTLP
  • Formatter improvements

NOTE:

In v1.15.x, OPA was dropping logs for bundle downloads, print() calls and other plugin-originated logs. Users are advised to update, v1.16.0 fixes this bug in (#8544).

New uri.parse and uri.is_valid built-in functions (#8263)

Two new built-in functions have been added: uri.parse for parsing a given URI, and uri.is_valid for verifying the structure of a given URI.

uri.parse

Parses a URI and returns an object containing its components according to RFC 3986. Empty components are omitted.

package example
test_uri if {
uri.parse("https://example.com:8080/api?q=1#top") == {
"scheme": "https",
"hostname": "example.com",
"port": "8080",
"path": "/api",
"raw_path": "/api",
"raw_query": "q=1",
"fragment": "top",
}
}

... (truncated)

Changelog

Sourced from github.com/open-policy-agent/opa's changelog.

1.16.2

This release updates the version of Go used to build the OPA binaries and images to 1.26.3; addressing a number of vulnerabilities.

1.16.1

This is a patch release addressing a regression (#8590) in the plugin manager that may cause the service to hang on shutdown.

1.16.0

This release contains a mix of new features, performance improvements, and bugfixes. Notably:

  • New uri.parse and uri.is_valid built-in functions
  • Data API Request/Response Metadata
  • Prometheus metrics exported via OTLP
  • Formatter improvements

NOTE:

In v1.15.x, OPA was dropping logs for bundle downloads, print() calls and other plugin-originated logs. Users are advised to update, v1.16.0 fixes this bug in (#8544).

New uri.parse and uri.is_valid built-in functions (#8263)

Two new built-in functions have been added: uri.parse for parsing a given URI, and uri.is_valid for verifying the structure of a given URI.

uri.parse

Parses a URI and returns an object containing its components according to RFC 3986. Empty components are omitted.

package example
test_uri if {
uri.parse("https://example.com:8080/api?q=1#top") == {
"scheme": "https",
"hostname": "example.com",
"port": "8080",
"path": "/api",
"raw_path": "/api",
"raw_query": "q=1",
"fragment": "top",
}
}

uri.is_valid

Returns true if the input can be parsed as a URI, false otherwise.

... (truncated)

Commits
  • 85f6d99 Prepare v1.16.2 release
  • 1466714 build: bump go 1.26.2 -> 1.26.3
  • a72f9fa Prepare v1.16.1 release
  • 9339812 plugins: Ensure plugin status functions don't hang after manager is stopped (...
  • f3adf61 Release v1.16.0 (#8581)
  • c5a446f Add regression test for comparing objects with array keys
  • 7bc92c6 workflow: update benchmarks notebook generation
  • 882d5a7 build(deps): bump the dependencies group across 2 directories with 9 updates ...
  • b33179c docs: Fix input value type in not undefined example (#8580)
  • 3d602ca perf: Add CopyNonGround() methods for Array, Set, and Object (#8323)
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels May 3, 2026
Bumps [github.com/open-policy-agent/opa](https://github.com/open-policy-agent/opa) from 1.15.2 to 1.16.2.
- [Release notes](https://github.com/open-policy-agent/opa/releases)
- [Changelog](https://github.com/open-policy-agent/opa/blob/main/CHANGELOG.md)
- [Commits](open-policy-agent/opa@v1.15.2...v1.16.2)

---
updated-dependencies:
- dependency-name: github.com/open-policy-agent/opa
  dependency-version: 1.16.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title chore(deps): bump github.com/open-policy-agent/opa from 1.15.2 to 1.16.1 chore(deps): bump github.com/open-policy-agent/opa from 1.15.2 to 1.16.2 May 17, 2026
@dependabot dependabot Bot force-pushed the dependabot/go_modules/github.com/open-policy-agent/opa-1.16.1 branch from 172b891 to 52513a5 Compare May 17, 2026 01:57
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update go code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants