RATATOSKRATATOSK
Sign in

Open Policy Agent (OPA)

v1.22.3Security
Nov 10, 2026

ACTION 1OTHER 28

A maintenance bugfix release corrects a type-checking regression and addresses a flagged compression dependency advisory. It also includes routine dependency updates.

Action needed (1)

All 28 other recorded changesvalue changes 26 · fixes 2

value changes (26)

  • - build(deps): Bump github.com/agnivade/levenshtein from 1.2.1 to 1.2.2
  • - build(deps): Bump github.com/foxcpp/go-mockdns from 1.2.0 to 1.3.0
  • - build(deps): Bump github.com/gobwas/glob from 1.0.0 to 1.1.0
  • - build(deps): Bump github.com/huandu/go-sqlbuilder from 1.43.0 to 1.44.1
  • - build(deps): Bump github.com/lestrrat-go/jwx/v3 from 3.3.0 to 3.4.0
  • - build(deps): Bump github.com/prometheus/client_golang from 1.24.1 to 1.25.0
  • - build(deps): Bump github.com/spf13/pflag from 1.0.10 to 1.1.0
  • - build(deps): Bump github.com/vektah/gqlparser/v2 from 2.5.58 to 2.5.64
  • - build(deps): Bump go.opentelemetry.io/contrib/bridges/prometheus from 0.71.0 to 0.72.0
  • - build(deps): Bump go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp from 0.71.0 to 0.72.0
  • - build(deps): Bump go.opentelemetry.io/otel from 1.46.0 to 1.47.0
  • - build(deps): Bump go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc from 1.46.0 to 1.47.0
  • - build(deps): Bump go.opentelemetry.io/otel/exporters/otlp/otlptrace from 1.46.0 to 1.47.0
  • - build(deps): Bump go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc from 1.46.0 to 1.47.0
  • - build(deps): Bump go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp from 1.46.0 to 1.47.0
  • - build(deps): Bump go.opentelemetry.io/otel/sdk from 1.46.0 to 1.47.0
  • - build(deps): Bump go.opentelemetry.io/otel/sdk/metric from 1.46.0 to 1.47.0
  • - build(deps): Bump go.opentelemetry.io/otel/trace from 1.46.0 to 1.47.0
  • - build(deps): Bump go.opentelemetry.io/proto/otlp from 1.11.0 to 1.11.1
  • - build(deps): Bump go.yaml.in/yaml/v3 from 3.0.5 to 3.0.6
  • - build(deps): Bump golang.org/x/sync from 0.23.0 to 0.24.0
  • - build(deps): Bump golang.org/x/term from 0.46.0 to 0.47.0
  • - build(deps): Bump golang.org/x/text from 0.42.0 to 0.43.0
  • - build(deps): Bump google.golang.org/grpc from 1.84.0 to 1.85.0
  • - build(deps): Bump oras.land/oras-go/v2 from 2.6.2 to 2.7.0
  • Bump go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp from 1.46.0 to 1.47.0

fixes (2)

  • This is a bugfix release for a type checker regression in v1.22.0.
  • Empty collections in the types of rules that a with modifier targets are now typed as any.
Add Open Policy Agent (OPA) to your stack

A weekly email arrives when a release needs action. Like the security patches in this release.

Add to stack →
Official release note ↗All Open Policy Agent (OPA) releases →