RATATOSKRATATOSK
ログイン

Open Policy Agent (OPA)

v1.22.3Security
2026年11月10日

ACTION 1OTHER 28

型チェックの回帰を修正する保守的なバグ修正版です。圧縮ライブラリの依存関係に関するセキュリティアドバイザリへの対応と、依存関係の定期更新が含まれます。

要対応 (1)

その他の記録済み変更 28 件すべてvalue changes 26 · fixes 2

value changes (26)

  • - build(deps): Bump github.com/agnivade/levenshtein from 1.2.1 to 1.2.2
  • - build(deps): Bump github.com/foxcpp/go-mockdns from 1.2.0 to 1.3.0
  • - build(deps): Bump github.com/gobwas/glob from 1.0.0 to 1.1.0
  • - build(deps): Bump github.com/huandu/go-sqlbuilder from 1.43.0 to 1.44.1
  • - build(deps): Bump github.com/lestrrat-go/jwx/v3 from 3.3.0 to 3.4.0
  • - build(deps): Bump github.com/prometheus/client_golang from 1.24.1 to 1.25.0
  • - build(deps): Bump github.com/spf13/pflag from 1.0.10 to 1.1.0
  • - build(deps): Bump github.com/vektah/gqlparser/v2 from 2.5.58 to 2.5.64
  • - build(deps): Bump go.opentelemetry.io/contrib/bridges/prometheus from 0.71.0 to 0.72.0
  • - build(deps): Bump go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp from 0.71.0 to 0.72.0
  • - build(deps): Bump go.opentelemetry.io/otel from 1.46.0 to 1.47.0
  • - build(deps): Bump go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc from 1.46.0 to 1.47.0
  • - build(deps): Bump go.opentelemetry.io/otel/exporters/otlp/otlptrace from 1.46.0 to 1.47.0
  • - build(deps): Bump go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc from 1.46.0 to 1.47.0
  • - build(deps): Bump go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp from 1.46.0 to 1.47.0
  • - build(deps): Bump go.opentelemetry.io/otel/sdk from 1.46.0 to 1.47.0
  • - build(deps): Bump go.opentelemetry.io/otel/sdk/metric from 1.46.0 to 1.47.0
  • - build(deps): Bump go.opentelemetry.io/otel/trace from 1.46.0 to 1.47.0
  • - build(deps): Bump go.opentelemetry.io/proto/otlp from 1.11.0 to 1.11.1
  • - build(deps): Bump go.yaml.in/yaml/v3 from 3.0.5 to 3.0.6
  • - build(deps): Bump golang.org/x/sync from 0.23.0 to 0.24.0
  • - build(deps): Bump golang.org/x/term from 0.46.0 to 0.47.0
  • - build(deps): Bump golang.org/x/text from 0.42.0 to 0.43.0
  • - build(deps): Bump google.golang.org/grpc from 1.84.0 to 1.85.0
  • - build(deps): Bump oras.land/oras-go/v2 from 2.6.2 to 2.7.0
  • Bump go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp from 1.46.0 to 1.47.0

fixes (2)

  • This is a bugfix release for a type checker regression in v1.22.0.
  • Empty collections in the types of rules that a with modifier targets are now typed as any.
Open Policy Agent (OPA)をスタックに追加

対応が必要なリリースが出たときに、週次メールでお知らせします。 今回のセキュリティパッチも、その一例です。

スタックに追加 →
公式リリースノート ↗Open Policy Agent (OPA)のリリース一覧 →