Open Policy Agent (OPA)
v1.21.2SecurityOct 12, 2026
A maintenance release with updated Go and networking dependencies and security advisory pointers. It also corrects encoded-slash handling in basic authorization policy input and the Data API.
All 2 other recorded changesfixes 1 · value changes 1
fixes (1)
- Furthermore, it addresses a mismatch in how encoded slashes were handled in the input to a basic authorization policy and the Data API (#9323, reported by @abhishekkushwaha4u, fixed by @sspaink).
value changes (1)
- This release builds the OPA binary artifacts with the latest version of Go (v1.27.2), its standard library, and the golang.org/x/net dependency (v0.60.0).
Add Open Policy Agent (OPA) to your stack
A weekly email arrives when a release needs action. Weeks with nothing to act on, like this one, send no email.