conftest

Changelog

• 03626f5 Added helper method to load combined config files for Rego unit tests (#762)
• 3d77256 Allow data-only bundles (#754)
• 70bee0f Bump OPA to 0.47.2 (#759)
• 6675693 build(deps): bump alpine from 3.16.3 to 3.17.0 (#756)
• b2f1368 build(deps): bump github.com/open-policy-agent/opa from 0.46.1 to 0.47.0 (#757)
• 7420b77 build(deps): bump github.com/open-policy-agent/opa from 0.47.0 to 0.47.1 (#758)
• dcb2c52 build(deps): bump github.com/open-policy-agent/opa from 0.47.2 to 0.47.3 (#760)
• 39cf509 build(deps): bump golang from 1.18.5-alpine to 1.19.4-alpine (#761)

Changelog

• df0b7b1 Adding data flag to conftest push (#749)
• f6d9e05 Detect Quay.io OCI registry in downloader (#747)
• f5980ad build(deps): bump alpine from 3.16.2 to 3.16.3 (#753)
• cbe257c build(deps): bump github.com/open-policy-agent/opa from 0.45.0 to 0.46.1 (#751)
• eb7ef1a ci: [draft/test] fix runtime to 3.8 as it's default in focal (#755)
• f18b7bb fix: preserve metadata annotations on OCI registry push (#750)

Changelog

• 8ba562b Bump Go to v1.18.5 (#735)
• f13022c Bump x/net and opa to patch CVEs (#743)
• 733e102 Merge pull request #744 from open-policy-agent/dependabot/go_modules/github.com/open-policy-agent/opa-0.45.0
• 6771fdf build(deps): bump alpine from 3.16.1 to 3.16.2 (#736)
• 108edfe build(deps): bump github.com/open-policy-agent/opa from 0.43.0 to 0.44.0 (#739)
• 3532e7f build(deps): bump github.com/open-policy-agent/opa from 0.44.0 to 0.45.0
• 92735d0 workflow: update set-output usage (#745)

New Features

• Add parse_config and parse_config_file Rego functions to allow unit testing using config file snippets. Find out how to use these at https://www.conftest.dev/#writing-unit-tests.

Changelog

• 6c782e8 Add parse_config and parse_config_file builtins (#726)
• 0f2537f Bump alpine from 3.16.0 to 3.16.1 (#727)
• b671542 Bump golang from 1.18.3-alpine to 1.18.4-alpine (#724)
• 25abb63 Use pkg.go.dev for constants reference (#728)
• 3aada8c build(deps): bump github.com/open-policy-agent/opa from 0.42.2 to 0.43.0 (#732)

Changelog

• f5130af Bump github.com/open-policy-agent/opa from 0.42.1 to 0.42.2 (#723)

Changelog

• f10341f Add OCI Push and Pull tests to CI (#718)
• aa11f0b Bump github.com/open-policy-agent/opa from 0.42.0 to 0.42.1 (#722)

Bug Fixes

• Fix 404 error when using conftest push (#721)

Other Improvements

• Bump OPA to v0.42.0
• Bump Go to v1.18.3

Changelog

• 88e6b0e Bump github.com/open-policy-agent/opa from 0.40.0 to 0.41.0 (#713)
• 58cc3d3 Bump github.com/open-policy-agent/opa from 0.41.0 to 0.42.0 (#720)
• 4719e25 Bump golang from 1.18.2-alpine to 1.18.3-alpine (#714)
• 45f37d5 Update golang 1.18.3 (#719)
• a68cd05 bug: Fix 404 error when using the push command (#721)

ℹ️ This is a security release to patch critical host path traversal and command injection vulnerabilities in the go-getter library ℹ️

More details can be found in the HCSEC-2022-13 HashiCorp Security Advisory.

Changelog

• 197f5db Bump alpine from 3.15.4 to 3.16.0 (#711)
• 8153721 Bump github.com/hashicorp/go-getter from 1.5.10 to 1.5.11 (#708)
• c9816d2 Bump github.com/hashicorp/go-getter to v1.6.1 (#712)
• 0406ed5 Bump golang from 1.18.1-alpine to 1.18.2-alpine (#710)

New Features

• Support for limiting the test engine's capabilities - thank you @boranx!

Bug Fixes

• conftest push no longer creates different OCI images when run against the same policy set - thanks @macox!

Other improvements

• OPA bump from v0.39.0 to v0.40.0

Changelog

• 30ea309 Bump github.com/open-policy-agent/opa from 0.39.0 to 0.40.0 (#706)
• afd22f1 Update oras-go to v1.1.1 (#702)
• 127ae70 feat: add capabilities feature to conftest (#704)

⚠️ Potentially Breaking Changes ⚠️

• JUnit output now includes OPA namespace in test name for better grouping #699
• Output for parse command only emits valid JSON #686

New Features

• Support for JSONC files #691. Thank you @greggroth!

Other Improvements

• Bump OPA to v0.39.0
• Bump Golang to v1.18.1
• Builds now include ppc64le archiecture #676 Thank you @seth-priya!

Changelog

• 7d0099b Add OPA version to --version output (#674)
• cadee70 Add parser for JSONC documents (#691)
• ce409db Adding ppc64le support (#676)
• a212330 Bump Go to 1.17.6 in pull_request and release workflows (#665)
• 89ab471 Bump Go version in GHA workflows to 1.18.1 (#703)
• 849914d Bump OPA to 0.39.0
• a934bad Bump alpine from 3.15.0 to 3.15.1 (#688)
• 92ed361 Bump alpine to 3.15.4 for release image
• c1a5ce7 Bump github.com/open-policy-agent/opa from 0.36.0 to 0.36.1 (#664)
• a42245b Bump github.com/open-policy-agent/opa from 0.36.1 to 0.37.0 (#670)
• 92e25c6 Bump github.com/open-policy-agent/opa from 0.37.0 to 0.37.1 (#672)
• e92e38e Bump github.com/open-policy-agent/opa from 0.37.1 to 0.37.2 (#677)
• 8a4cedb Bump github.com/open-policy-agent/opa from 0.37.2 to 0.38.0 (#681)
• a0f7472 Bump github.com/open-policy-agent/opa from 0.38.0 to 0.38.1 (#685)
• e064639 Bump golang from 1.17.5-alpine to 1.17.6-alpine (#663)
• 9785f05 Bump golang from 1.17.6-alpine to 1.17.7-alpine (#678)
• c9c6998 Bump golang from 1.17.7-alpine to 1.17.8-alpine (#683)
• fb8eff6 Bump golang from 1.17.8-alpine to 1.18.1-alpine (#701)
• f978235 Bump mkdocs to 1.3.0
• ede96fb Install latest conftest version (#673)
• a823584 Make runner package public
• cb5b8f1 Only emit valid JSON when using the parse command (#686)
• 63b8058 Refactor JUnit output formatting (#699)
• 18725cf Update Go version in pipelines to 1.17.7 (#679)
• 79b26df Update install.md - Fix install command (#692)

This is a re-release of v0.30.0 with no code changes

See https://github.com/open-policy-agent/conftest/issues/700 for more information.

Changelog

• 9e5a60c Always use ORAS context when interacting with registry (#660)
• 3b311ac Prepare v0.30.0 release (#662)
• 15dccd3 Update containerd to v1.5.9 (#661)
• 46c3178 Update dependencies (#659)

Changelog

• ab9c9f1 Add check flag to fmt command (#655)
• a64f75d Add new parser for .env files. (#653)
• ba621b1 Add parser name to cyclonedx acceptance test otherwise json would be used (#646)
• 4ac11cb Bump Dockerfile to alpine 1.17.5 (#651)
• 45a9f06 Bump alpine from 3.14.2 to 3.14.3 (#638)
• 83aaa3f Bump alpine from 3.14.3 to 3.15.0 (#645)
• deb33a7 Bump github.com/open-policy-agent/opa from 0.34.0 to 0.34.2 (#634)
• b1253c3 Bump golang from 1.17.2-alpine to 1.17.3-alpine (#633)
• 36abfcc Bump golang from 1.17.3-alpine to 1.17.4-alpine (#648)
• 06793a4 Fix bug to allow for multiple plugins (#657)
• 4ef97c2 Support for terragrunt default config files (#639)
• 748e2e2 Update Building and Testing documentation (#654)
• 418c6dc Update dependencies (#643)
• 851626c add file path information in returned error message (#641)
• 7b640fb chore: point to the right channel (#630)
• 74074d7 chore: replace part of linter from golint to revive, fixed warning wh… (#635)
• a843f61 feat: add quiet flag to verify (#652)
• 88f047c feat: cyclonedx parser (#637)
• a4aab53 feat: spdx parser (#636)
• 8f2a0c2 fix(exception): support empty string (#589)

Changelog

14f426b Bump github.com/open-policy-agent/opa from 0.33.1 to 0.34.0 (#627)
8fca28f DEVELOPMENT.md: bats -> bats-core (#628)
b690395 engine+reporter: enable print() output (#629)

This is a maintenance release only and does not include any bug fixes or new features.

Improvements

• Bump OPA to v0.33.1
• Bump Go to v1.17.2

Changelog

6b6595d (chore) Bump Go to 1.17.2 (#625)
b721065 Bump github.com/open-policy-agent/opa from 0.32.1 to 0.33.0 (#615)
3f24df0 Bump github.com/open-policy-agent/opa from 0.33.0 to 0.33.1 (#616)
445878f Bump golang from 1.17.1-alpine to 1.17.2-alpine (#618)
186ae1b Bump mkdocs from 1.1 to 1.2.3 (#624)
19e754e Bump nltk from 3.5 to 3.6.5 (#619)
02462d5 Remove old examples (#620)
4ecfbdf upgrade Oras to oras-go v0.4.0 (#617)

Bug Fixes

• Bumps OPA to v0.32.1 to prevent a build issue due to different Go modules proxies in use in some scenarios

Changelog

e2f086c Bump github.com/open-policy-agent/opa from 0.32.0 to 0.32.1 (#614)

New Features

• Add default data.conftest.file document with the name and dir of the configuration being tested

Bug Fixes

• Fixed incorrect handling of flags containing a hyphen when they are configured using environment variables

Other Improvements

• Bump Go to 1.17
• Bump OPA to 0.32.0

Changelog

662a1e1 Bump alpine from 3.14.1 to 3.14.2 (#605)
8a463d7 Bump github.com/open-policy-agent/opa from 0.31.0 to 0.32.0 (#607)
842ecc5 Bump golang from 1.16.7-alpine to 1.17.0-alpine (#603)
52669c0 build: Specify Go 1.17 in the release workflow (#608)
cb8274c build: bump to use go1.17 (#606)
ad06e3d ci: Limit the permissions of the GITHUB_TOKEN in the PR workflow (#609)
8ae303b engine: Add default conftest document during evaluation (#610)
7b733da fix: Flags with hyphens were skipped with config from ENV (#612)
fb7a9fc fix: Incorrect hash in go.sum (#613)

⚠️ Potentially Breaking Updates ⚠️

• Bump OPA to v0.31.0, which now catches undefined variables at compile time rather than when they're referenced. For more information, see the OPA change log.

New Features

• GitHub output format (🎉 thanks @koozz!)

Other Improvements

• Bump Go and Alpine versions to address potential security issues
• Bump OPA, improving partial evaluation performance

Changelog

cea3d72 Add GitHub workflow commands output. (#586)
f68c925 Bump alpine from 3.14.0 to 3.14.1 (#601)
51320a0 Bump github.com/open-policy-agent/opa from 0.30.2 to 0.31.0 (#599)
be0ec55 Bump golang from 1.16.6-alpine to 1.16.7-alpine (#600)

Changelog

a242a61 Add Dependabot monitoring for Dockerfile
4340b53 Add conftest test flag to suppress exceptions
babc73d Add newline to TAP output (#573)
774c275 Add support for properties files.
0ae5f14 Bump Go version to 1.16 (#557)
ce5016d Bump github.com/open-policy-agent/opa from 0.28.0 to 0.29.1 (#569)
bf13740 Bump github.com/open-policy-agent/opa from 0.29.1 to 0.29.4 (#574)
ee9e96f Bump github.com/open-policy-agent/opa from 0.29.4 to 0.30.0
120d034 Bump github.com/open-policy-agent/opa from 0.30.0 to 0.30.1
f3bf4fc Bump github.com/open-policy-agent/opa from 0.30.1 to 0.30.2
8787be2 Bump golang from 1.16.5-alpine to 1.16.6-alpine
c55d00e Change to using LoadString & handling the error.
0f795bf Organize golangci-lint linters (#564)
1bcf5ac Show usage when required parameters are not supplied
5935455 Specify versions of base images in Dockerfile
274ab0c Update docs/install.md (to 0.25.0)
a901976 Update documentation for file extensions (#563)
a3ab727 Update parser documentation for parser flag (#562)
9d56c39 Upgrade cuelang parser to 0.4.0 (#572)
cb7f07f added report flag to conftest verify with fails,notes and full options to output a clear report and traces similar to opa

Features

• Add the --no-fail flag to the test command that will always return an exit code of zero (#547)

Performance

• Only calculate traces if the --trace flag is provided (#556) [thanks @msarvar 🎉]

Documentation

• Improve the documentation when using the --combine flag (#542) [thanks @shteou 🎉]

Changelog

16cbb1b Add no-fail flag (#547)
ee86fa8 Adding brief documentation on verify in the usage docs (#543)
8b09609 Bump github.com/open-policy-agent/opa from 0.27.1 to 0.28.0 (#554)
a7464de Do not make rego trace unless --trace flag is passed in (#556)
fdf26e4 Fix example in documentation (#552)
5389a37 Merge pull request #542 from shteou/improve-combined-input-examples
1c476fe Update data loading test case (#536)
3c4554d Update error message for invalid parse (#546)
0f47a0c Update sharing example when using a PAT (#553)