conftest

Changelog

Bug Fixes

• 1989c6c7a2ddbecf15f6b736978a468777694562: fix: Only raise problematic if error when rule has no name set (#935) (@jalseth)

OPA Changes

• 6609893ae256424714b43f3a54feb9da97804ffb: build(deps): bump github.com/open-policy-agent/opa from 0.62.1 to 0.63.0 (#933) (@dependabot[bot])

Other Changes

• 06e3f8d1e4de112effa58924c61e72d493794ffc: build(deps): bump cuelang.org/go from 0.7.1 to 0.8.0 (#930) (@dependabot[bot])
• bece944a615fffdf96d971e7fb05e98600bffe20: build(deps): bump github.com/moby/buildkit from 0.13.0 to 0.13.1 (#931) (@dependabot[bot])
• 515feda4311e2ac62b062d1002a9a70a8cd9177d: build(deps): bump golang from 1.22.0-alpine to 1.22.1-alpine (#929) (@dependabot[bot])
• 86afe2f34ba2d567ed99c85e363c3b6457e82ef9: ci: Pin bats version to work around broken CI (#936) (@jalseth)

Changelog

New Features

• bbee30386c35d26288bb375b808075236e3b8afa: feat: Use ORAS credentials (#917) (@zregvart)

Bug Fixes

• dfcc0d9a00f332faf38ee599bfe3817f8dc3b1d4: fix: Catch Google Artifact Registry URL during OCI detection (#921) (@jpreese)

OPA Changes

• 4c74c13b745c5b5b8b34d5dfcbd7470e259310ac: build(deps): bump github.com/open-policy-agent/opa from 0.61.0 to 0.62.0 (#925) (@dependabot[bot])
• d6c450d127fd7131d4c142ff0701c2b934aa5b22: build(deps): bump github.com/open-policy-agent/opa from 0.62.0 to 0.62.1 (#927) (@dependabot[bot])

Other Changes

• 324d7fb0ccbfab95bad182e87f3d732e427b2b62: Update workflow action versions (#914) (@jpreese)
• 291f011d5e897e51f514b8d6f9d6ab31c697fd8a: build(deps): bump cuelang.org/go from 0.7.0 to 0.7.1 (#916) (@dependabot[bot])
• a12c5367d1f56bfbb2d1855a16470daffbbbfee3: build(deps): bump github.com/moby/buildkit from 0.12.5 to 0.13.0 (#926) (@dependabot[bot])
• e20f3ee57305fb94395aead2069999a7719a0890: build(deps): bump golang from 1.21.6-alpine to 1.22.0-alpine (#913) (@dependabot[bot])
• 42b8513644ae25253a23b1fc757c2eb266d0188a: build: Bump Go to 1.22.x (#915) (@jalseth)
• d5dc9f8220c0ba497972603dbdecfe2d931b41b8: chore: Update setup-regal and golangci-lint actions to latest (#918) (@jpreese)
• 343d0248de2f172be3ed3777a6d7ef49be2aebd6: cmd(verify): Enable show-builtin-errors by default (#922) (@jalseth)

Changelog

Other Changes

• 15019c2855a82a41ed1a09b8f1003bda7e319064: chore: Update buildkit and allow dependabot (#911) (@erpel)

⚠️ Potentially breaking change reminder ⚠️
The show-builtin-errors flag will be enabled by default in the next version of conftest.

Changelog

New Features

• 50c3df5073848467b3e184e907898c1a0c114368: feat: Raise error when problematic use of the if keyword is encountered (#902) (@jalseth)

Bug Fixes

• b9d91d0a98e64fc38946e030634ecf6a3f8b7890: fix: Add tls flag to test command (#908) (@oblogic7)

OPA Changes

• 872035d5161cbf8db05e42e15e93371ce846ea05: build(deps): bump github.com/open-policy-agent/opa from 0.60.0 to 0.61.0 (#909) (@dependabot[bot])

Other Changes

• 0ee46b5e42adfac53237a1471ef5f9f2ae2ea05e: build(deps): bump alpine from 3.19.0 to 3.19.1 (#910) (@dependabot[bot])
• 82fd2dbc50cd17ebabbe8da0af3cf80f20d6b585: build(deps): bump golang from 1.21.5-alpine to 1.21.6-alpine (#906) (@dependabot[bot])
• 0d3d448f9db8380ba030e4ced1447aedad1c7237: ci: s390x architecture added in the goarch list (#905) (@harpaldhillon)

Changelog

New Features

• 0b9b2c69f0366bdf326f994a4bf354e24657e32d: feat: Add show-builtin-errors flag for the verify command (#901) (@jalseth) ⚠️ This flag will be enabled by default in a future version of conftest ⚠️

Bug Fixes

• 8a6e121535b53a042ac121a4ea10a98f68f8a95d: fix: Fix regexp for Goreleaser groups (#892) (@jalseth)

OPA Changes

• 6e5f656f6c356e8f143a9edc60c287c84d66d5ec: build(deps): bump github.com/open-policy-agent/opa from 0.59.0 to 0.60.0 (#900) (@dependabot[bot])

Other Changes

• 7ac3a5b9322e1a84a77d3ad79f93aabf84b11ad4: build(deps): bump alpine from 3.18.4 to 3.19.0 (#896) (@dependabot[bot])
• 92c05944a507667981c921dc99a989cc9ff3ed5c: build(deps): bump cuelang.org/go from 0.6.0 to 0.7.0 (#894) (@dependabot[bot])
• f222d948ac8603b5b714d87684b8266c1bdd920b: build(deps): bump github.com/CycloneDX/cyclonedx-go from 0.7.2 to 0.8.0 (#895) (@dependabot[bot])
• 433560f1025e569cecdfecfc38146b3d330d8af3: build(deps): bump github.com/hashicorp/go-getter to v1.7.3 (#899) (@jalseth)
• a5526733b4bb5f1b04348409e368c76be75d0d1d: build(deps): bump golang from 1.21.4-alpine to 1.21.5-alpine (#897) (@dependabot[bot])

Changelog

OPA Changes

• cee69611075a855e6c1b47a5bca83e50a947642d: build(deps): bump github.com/open-policy-agent/opa from 0.57.0 to 0.57.1 (#880) (@dependabot[bot])
• a0cb00ab70d86303b9943363f8228db9c75a2e3b: build(deps): bump github.com/open-policy-agent/opa from 0.57.1 to 0.58.0 (#882) (@dependabot[bot])
• 6667f0336875761a10086107039679bfb5fc83e2: build(deps): bump github.com/open-policy-agent/opa from 0.58.0 to 0.59.0 (#891) (@dependabot[bot])

Other Changes

• 423875016675c468a5f9ca42f8c0400b59a754a4: build(deps): bump alpine from 3.18.3 to 3.18.4 (#875) (@dependabot[bot])
• e082ab69d309bb09c3e23955da1859d8d8c174c6: build(deps): bump golang from 1.21.1-alpine to 1.21.3-alpine (#878) (@dependabot[bot])
• 5326a5adcf6dc881993a332404123b0a2a379ad0: build(deps): bump golang from 1.21.3-alpine to 1.21.4-alpine (#884) (@dependabot[bot])
• 7b6b9557bfebb36b7cb215217bd54eb19ee90b0d: ci: Bump Go to 1.21.x (#890) (@jalseth)
• 23039c608ba48014d19ffa2ee94b39c155df2ff5: ci: Bump setup-go and checkout to v4 (#889) (@jalseth)
• 7f56296f3296a16d73553f9d510b435a1c15e73a: ci: Have Dependabot auto-update upstream parser libraries (#886) (@jalseth)
• 68e075c067f82f415a070ce019554894a8228cf7: docts: update install.md (#883) (@rgs1)
• ce7592e8fbdfed7780bfe7412e40335bce645784: feat: Implement option for custom output destinations (#877) (@mbestavros)
• 14e95ad18798535ac779a5741d5d13478693f10e: feat: Use Regal for Rego linting (#881) (@anderseknert)
• 1815e914befd2690b85b3b6a14fa273ea0a7fd3b: fix: Unmarshal error for Dockerfile in parse_config builtins (#887) (@jalseth)

Changelog

OPA Changes

• 79220b5b2de5fb851aaaacebb2568353251432cb: build(deps): bump github.com/open-policy-agent/opa from 0.56.0 to 0.57.0 (#873) (@dependabot[bot])

Other Changes

• 65c119227dc9041f053c025662b8286bc8a9e32e: build(deps): bump golang from 1.21.0-alpine to 1.21.1-alpine (#867) (@dependabot[bot])
• 38853e11e63c7131979c2ba38a50a60c8f43b9ee: chore: Update dependencies (#863) (@mrueg)
• c7eb6b6bf845c40299428699cbf8cefde5f8f702: chore: Update github.com/spdx/tools-golang to current version (#868) (@02strich)
• 1d387bc40e4151d1212e91481ce7823d5e7eee52: fix: --strict flag when using conftest verify (#866) (@samcrang)
• 10ac2ec37123df4c029a7d6165cd4a43fc3115ea: fix: cover built-in errors with a flag, suppress unless it's passed (#871) (@boranx)
• 6d15a3636adc877e168aba08c38f4fdc3f7977b9: fix: examples documentation (#869) (@ortizf3)

Changelog

New Features

• 5ca1f6dab5108065e004b0c8fb1e60d1e2fde507: feat: added support for Azure DevOps output (#853) (@milanmayr)

OPA Changes

• be28ed17c2bb63402dcd135fc7edf4e130fe64a8: build(deps): bump github.com/open-policy-agent/opa from 0.54.0 to 0.55.0 (#848) (@dependabot[bot])
• a6b1eeae0763f511dfa5b60df6762e9f0be57c35: build(deps): bump github.com/open-policy-agent/opa from 0.55.0 to 0.56.0 (#860) (@dependabot[bot])

Other Changes

• b9a9e7a177109370e74f582512be7026848e48e3: build(deps): bump alpine from 3.18.2 to 3.18.3 (#851) (@dependabot[bot])
• 31dad3bab989f113fe3d3597640433f8f353ffd7: build(deps): bump golang from 1.20.5-alpine to 1.20.6-alpine (#845) (@dependabot[bot])
• 851e66ac91279fe06b522c81875a81ca7a6f7007: build(deps): bump golang from 1.20.6-alpine to 1.20.7-alpine (#849) (@dependabot[bot])
• 92862f5c1af6ad5200e971d08bc66ede4984120d: build(deps): bump golang from 1.20.7-alpine to 1.21.0-alpine (#850) (@dependabot[bot])
• 97b393eff26b7cfab7c61e8babed09efc5cf863a: chore: Replace ghodss/yaml with sigs.k8s.io/yaml (#858) (@mrueg)
• c7e9f0557a46c3436f26ad6f076a55e275a176f3: ci: Bump Go to 1.21.0 (#855) (@jalseth)
• d1a9f79da876fa8e9323f10be8d8cd7c2593360e: ci: Check GoReleaser config before performing any release actions (#843) (@jalseth)
• fe4c225342eaaf2b45d9c46de44a6666281e29d5: cleanup: Use generics to simplify code for parse_config and related builtins (#857) (@jalseth)
• 00f791bda21a60e3e1d30e1d26fc779626421a4d: fix: Use Bool instead of BoolP for three flags (#847) (@simonbaird)

⚠️ This release ran into issues, please see v0.44.1 for a fixed release with assets ⚠️

What's Changed

• build(deps): bump golang from 1.20.4-alpine to 1.20.5-alpine by @dependabot in https://github.com/open-policy-agent/conftest/pull/834
• build(deps): bump alpine from 3.18.0 to 3.18.2 by @dependabot in https://github.com/open-policy-agent/conftest/pull/835
• chore(tests): fix typo in hcl2 acceptance tests by @boranx in https://github.com/open-policy-agent/conftest/pull/836
• fix: pretty print the built-in err structure by @boranx in https://github.com/open-policy-agent/conftest/pull/839
• build(deps): bump github.com/open-policy-agent/opa from 0.53.1 to 0.54.0 by @dependabot in https://github.com/open-policy-agent/conftest/pull/838
• fix: examples/compose - a deny rule was incorrectly implemented by @dennisg in https://github.com/open-policy-agent/conftest/pull/841

New Contributors

• @dennisg made their first contribution in https://github.com/open-policy-agent/conftest/pull/841

Full Changelog: https://github.com/open-policy-agent/conftest/compare/v0.43.1...v0.44.0

Changelog

ℹ️ This is a re-release of v0.44.0 with no code changes. Please see the previous release for the full change log. ℹ️

Other Changes

• ffb3c96d83b2eac43f44c39fb0009054e369ac67: ci: Migrate off of deprecated GoReleaser options (#842) (@jalseth)

Changelog

OPA Changes

• 1f00a2e2e4c140f5271524bfc156b8eca39a4f7a: build(deps): bump github.com/open-policy-agent/opa from 0.53.0 to 0.53.1 (#833) (@dependabot[bot])

Changelog

OPA Changes

• 4b7cc1c2a84df4d267e228707f6ff40a6a5d4693: build(deps): bump github.com/open-policy-agent/opa from 0.52.0 to 0.53.0 (#830) (@dependabot[bot])

Other Changes

• 3cc4518a2008ac226c1c1f28195f42dc256ef7ee: build(deps): bump alpine from 3.17.3 to 3.18.0 (#827) (@dependabot[bot])
• dd0239ae868b8b0844a06ccd5f60418531337f1c: feat: Add textproto support (#828) (@jalseth)

Changelog

Other Changes

• af6a868708642dcf7863012c115a671606bde9cd: build: Bump hashicorp/go-getter to v1.7.1 (#825) (@jalseth)

Changelog

OPA Changes

• ec608b251766770db97e38df4e193d6082a1752f: build(deps): bump github.com/open-policy-agent/opa from 0.51.0 to 0.52.0 (#821) (@dependabot[bot])

Other Changes

• 94d3bc622ee1438790c29cf5895e1d9fdf0f8b09: build(deps): bump alpine from 3.17.2 to 3.17.3 (#809) (@dependabot[bot])
• e5fceb4351a98a8a862d9966826383b1ffbade04: build(deps): bump golang from 1.20.2-alpine to 1.20.3-alpine (#810) (@dependabot[bot])
• 28f02fd4c3c6cdf6535fe0ecec4cb54802bc2669: build: Bump Go to 1.20.4 (#824) (@jalseth)
• d5789773c93fb53df0d4986bb170fdc0c7fcbf52: feat: Add exceptions to GitHub output (#818) (@shayyxi)
• 33ce843db61677072111b15e6ef7556e2631c958: feat: added quiet command to standard test output (#785) (@AlexanderRasmussen)
• 6650c4c0f89a0719a204171cf2b2b61aaa2ee66d: fix: Fixes a broken emoji in the NOTES section under Testing/Verifying Policies (#816) (@Parsifal-M)
• f2563719103aa504a9ff65ffda1108682450add5: fix: handle builtin errors returned from the rego evaluation (#812) (@boranx)
• 399cbe0d18013034d5b6e01956156728d9c897df: fix: plugins install command (#822) (@pankajmt)

Changelog

OPA Changes

• fc4ccc8c29502c23ef7274e7d2662f6048ebabee: build(deps): bump github.com/open-policy-agent/opa from 0.50.2 to 0.51.0 (#808) (@dependabot[bot])

Other Changes

• 2a7c88e6bdc0c55750464a0e1d3e48650638dd87: bump-up(docker): update parser to the latest to be able to parse all keywords (#805) (@boranx)
• 9a3dfe46dcb80b81928ad8285db3d3cd0db2bdc7: fix: detect regardless of port and loopback (#806) (@zregvart)

Changelog

OPA Changes

• 70810f1cebae0133d04d661b8cfadc74eda112d8: build(deps): bump github.com/open-policy-agent/opa from 0.49.0 to 0.49.1 (#779) (@dependabot[bot])
• 3392e219c86c0d06f116dee54bcf475561b424ff: build(deps): bump github.com/open-policy-agent/opa from 0.49.1 to 0.49.2 (#784) (@dependabot[bot])
• dfefaf49212ba7a63c8d69ea3fa104c98d1d238e: build(deps): bump github.com/open-policy-agent/opa from 0.49.2 to 0.50.2 (#797) (@dependabot[bot])

Other Changes

• 0e6576adcad7cdf2df941235441fc351d1694488: Use docker buildx for multi-platform builds (@jalseth)
• 72667ce84fa437db831dc3a41ed5e30c4030d7a5: build(deps): bump alpine from 3.17.1 to 3.17.2 (#774) (@dependabot[bot])
• 7b4d18d485391732b35ef731c99712e4026971f0: build(deps): bump golang from 1.19.5-alpine to 1.20.1-alpine (#777) (@dependabot[bot])
• c0ef54f10ddc00bf1c45cec41dcf8d5a3a931bc9: build(deps): bump golang from 1.20.1-alpine to 1.20.2-alpine (#792) (@dependabot[bot])
• 2d6f45319b089d84ff0ab4ba7cb32f74846836f5: ci: Bump Go in CI to v1.20.1 (#778) (@jalseth)
• ff9edd15f94c64690530c0549394796328cb843d: cleanup: Address issues from golang-lint (#799) (@jalseth)
• e6c5bac6cf93a376c0da91856eff20c81c0c930d: feat: Add --config-file, -c; allow users to set the config file (#787) (@s33dunda)
• 3de2c904847e0e6d2c468c1fe7e4d5e1273e3d80: feat: add strict compilation rules to policies being evaluated (#798) (@boranx)
• 496585fe6edbd77d27a75073c210c462b93cc2db: feat: support multi-arch docker build (linux/arm64 and linux/amd64) (#789) (@vtorikianupgrade)
• 347708d2fd1326263b74a7ba6defc00c89e0d676: feat: upgrade to ORAS Go v2 (#788) (@zregvart)
• 13c4bed6600218a70d7127e49b7a909e67b88938: fix: Remove scheme from OCI URL before parsing it (#796) (@lcarva)
• a9b07e7837d8752251cd73a35c7bcb381e69a778: fix: Use docker buildx for multi-platform builds (#804) (@jalseth)
• 96c44d360a2e3c524f4157dc1c8e46b3d775cdd4: fix: no policies found (#794) (@boranx)

Changelog

OPA Changes

• 0c20ce451602c5bcb28be64e8cbaa69407a805a9: build(deps): bump github.com/open-policy-agent/opa from 0.49.1 to 0.49.2 (#784) (@dependabot[bot])

Changelog

OPA Changes

• da2f4473a6b8b920bc64243fdd4a482ba8009e50: build(deps): bump github.com/open-policy-agent/opa from 0.49.0 to 0.49.1 (#779) (@dependabot[bot])

Other Changes

• ced42687ef4ba8332ce9638b44da21d51cd7e061: build(deps): bump alpine from 3.17.1 to 3.17.2 (#774) (@dependabot[bot])
• 1a60bb2bd0d720425e4dca95916ffdeebe814606: build(deps): bump golang from 1.19.5-alpine to 1.20.1-alpine (#777) (@dependabot[bot])
• afcbe231b44a14cd6d635f909c892a5b7f16927b: ci: Bump Go in CI to v1.20.1 (#778) (@jalseth)

Changelog

OPA Changes

• 74583df4c00d77173a775845d708788eb576cd67: build(deps): bump github.com/open-policy-agent/opa from 0.48.0 to 0.49.0 (#773) (@dependabot[bot])

Other Changes

• 55834493ce76e76241479ede4e3c711010a7bf5c: build(deps): bump golang from 1.19.4-alpine to 1.19.5-alpine (#770) (@dependabot[bot])
• 2aec436aae9d2b096a928e03b2333647a3786d88: build: support arm64 architecture (#768) (@fengshunli)

Changelog

OPA Changes

• 04c24a0456cb407f967fc3b2698b33cd93f5e763: build(deps): bump github.com/open-policy-agent/opa from 0.47.3 to 0.47.4 (#764) (@dependabot[bot])
• efe8033b22c814beb0027e8d5e46ecfe4fe0aa1e: build(deps): bump github.com/open-policy-agent/opa from 0.47.4 to 0.48.0 (#767) (@dependabot[bot])

Other Changes

• 3b6c62519fad21badf7c976789bb81fb064736c1: ci: Require commits to have conventional commit prefix (#766) (@jalseth)