# Open Policy Agent (OPA) v1.22.0

> Security · 2026-10-29

A feature-rich release adds Rego v2 and observability improvements alongside dependency, toolchain, and correctness updates. Bundle-signature validation is stricter because bundles with `*signatures.json` files may no longer verify, and static binaries are deprecated.

## Check if affected
- **[breaking]** Bundle signing and verification correction
  - Applies if your bundles contain files matching the suffix pattern `*signatures.json`.
  - Bundle signing and verification now rejects bundles containing files matching the suffix pattern `*signatures.json` in newer OPA versions. This corrects a long-standing signing and verification bug.

## Plan ahead
- **[deprecated]** Static binaries deprecation
  - Applies if you use the static binaries.
  - The static binaries are deprecated in this release.

## Other recorded changes
- 38 (defect_corrected 13, value_changed 12, added 10, constraint_changed 3)

[Full analysis](https://ratatosk.io/en/releases/opa/v1.22.0)

[Original release notes](https://github.com/open-policy-agent/opa/releases/tag/v1.22.0)