Releases

AI-analyzed release notes for CNCF graduated and incubating projects.

URGENCY

All Action needed Check if affected Plan ahead

KIND

Category

All AI & ML CI/CD & App Delivery Kubernetes Core Networking & Messaging Observability Orchestration & Management Provisioning & Runtime Security Storage & Data

Mar 2026Clear ×Project: Open Policy Agent (OPA)Clear ×

Open Policy Agent (OPA)v1.15.1SecurityMar 30, 2026

OTHER 1View full analysis

OPA v1.15.1 is a patch release that corrects a backwards-incompatible v1/logging.Logger interface change from v1.15.0. The fix concerns Go module users with custom Logger implementations; binary and Docker image behavior is unchanged.

Source ↗

Open Policy Agent (OPA)v1.15.0SecurityMar 26, 2026

CHECK 1OTHER 16View full analysis

OPA v1.15.0 adds pluggable logging and AWS web-identity signing support, changes the custom HTTPAuthPlugin lifecycle contract, and adds TLS certificate reread configuration. It also includes correctness fixes and dependency updates; no security advisories or vulnerability disclosures are stated.

Check if affected (1)

breakingCustom HTTPAuthPlugin lifecycle contract
Applies if you use custom HTTPAuthPlugin implementations.
In v1.15.0, all per-request authentication logic for custom HTTPAuthPlugin implementations must move from NewClient() to Prepare().

Source ↗

Open Policy Agent (OPA)v1.14.1SecurityMar 9, 2026

ACTION 1OTHER 3View full analysis

OPA v1.14.1 is a patch release focused on bug fixes and dependency updates. It includes dependency work related to the Go standard library and common package vulnerabilities.

Action needed (1)

securityGolang standard library dependency updates
This patch release collects two bug fixes and dependency updates for the Golang standard library and common package vulnerabilities. The change ships in OPA v1.14.1.

Source ↗

Browse by month