Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package opa for openSUSE:Factory checked in at 2026-05-04 12:50:16 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/opa (Old) and /work/SRC/openSUSE:Factory/.opa.new.30200 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "opa" Mon May 4 12:50:16 2026 rev:19 rq:1350371 version:1.16.1 Changes: -------- --- /work/SRC/openSUSE:Factory/opa/opa.changes 2026-04-09 16:25:15.043761243 +0200 +++ /work/SRC/openSUSE:Factory/.opa.new.30200/opa.changes 2026-05-04 12:51:36.632769885 +0200 @@ -1,0 +2,232 @@ +Fri May 01 14:00:56 UTC 2026 - Johannes Kastl <[email protected]> + +- Update to version 1.16.1: + This is a patch release addressing a regression in the plugin + manager that may cause the service to hang on shutdown (#8590). + +------------------------------------------------------------------- +Thu Apr 30 17:19:23 UTC 2026 - Johannes Kastl <[email protected]> + +- Update to version 1.16.0: + This release contains a mix of new features, performance + improvements, and bugfixes. Notably: + - New uri.parse and uri.is_valid built-in functions + - Data API Request/Response Metadata + - Prometheus metrics exported via OTLP + - Formatter improvements + + NOTE: + In v1.15.x, OPA was dropping logs for bundle downloads, print() + calls and other plugin-originated logs. + Users are advised to update, v1.16.0 fixes this bug in (#8544). + * New uri.parse and uri.is_valid built-in functions (#8263) + Two new built-in functions have been added: uri.parse for + parsing a given URI, and uri.is_valid for verifying the + structure of a given URI. + - uri.parse + Parses a URI and returns an object containing its components + according to RFC 3986. Empty components are omitted. + + package example + + test_uri if { + uri.parse("https://example.com:8080/api?q=1#top";) == { + "scheme": "https", + "hostname": "example.com", + "port": "8080", + "path": "/api", + "raw_path": "/api", + "raw_query": "q=1", + "fragment": "top", + } + } + + - uri.is_valid + Returns true if the input can be parsed as a URI, false otherwise. + + package example + + deny contains "invalid URI" if { + not uri.is_valid("http://[invalid";) + } + + * Data API Request/Response Metadata (#8570) + Wrapping projects can now attach custom metadata to Data API + requests and have evaluation produce response metadata. + Two distinct metadata paths are introduced: + - Request metadata: parsed from extra top-level keys in the + request body, made available to builtins via + BuiltinContext.RequestMetadata. Logged in the decision log + under Custom["request_metadata"]. + - Response metadata: a separate map + (BuiltinContext.ResponseMetadata) that builtins can populate + during evaluation. Only included in the API response and + decision log if non-empty. + In vanilla OPA, no builtins write response metadata, so + responses are unchanged. The request metadata map is only + allocated when the request carries extra fields; the response + map is one empty map per request. + To avoid conflicts with future OPA top-level keys, callers + should use a namespaced key: {"input": {...}, + "com.example.opa/md": {...}}. + + Request with metadata: + + curl -H 'Content-Type: application/json' \ + -d '{"input": {"user": "alice"}, "com.example.opa/metadata": {"corp-id": "acme-42"}}' \ + http://localhost:8181/v1/data/example/allow + + Response (response metadata included if, for example, set by a + custom builtin): + + { + "decision_id": "04789f85-de5a-477b-8aa5-6d59d7742135", + "result": true, + "com.example.opa/response": { + "snapshot_version": "v3" + } + } + + Decision log entry: + + { + "custom": { + "request_metadata": { + "com.example.opa/metadata": { + "corp-id": "acme-42" + } + }, + "response_metadata": { + "com.example.opa/response": { + "snapshot_version": "v3" + } + } + }, + "decision_id": "04789f85-de5a-477b-8aa5-6d59d7742135", + "input": { "user": "alice" }, + "msg": "Decision Log", + "path": "example/allow", + "result": true + } + + * Runtime, SDK, Tooling + - distributedtracing: Export Prometheus metrics via OTLP + (#7591) reported and authored by @Munken + - cmd,tester: Update opa test to stream test case results + (#3676) authored by @sspaink reported by @tsandall + - cmd,tester: Show full errors when test fails and using + --coverage (#8438) authored by @grosser + - format: Add new line between METADATA blocks (#8483) authored + by @sspaink + - format: Allow indenting all withs in expression (#8508) + authored by @anderseknert + - format: Fix dropping comments after handling + unexpectedCommentError (#8553) authored by @sspaink + - format: Preserve location of trailing comments inside every + body (#8558) authored by @johanfylling + - format: Prevent opa fmt from formatting single attribute + objects with comments (#7565) authored by @sspaink reported + by @anderseknert + - logging: Keep forwarding from BufferedLogger after Flush() + (#8544) authored by @srenatus reported by @annieyhuang + - plugins/logs: Fix logBuffer eviction loop only dropping one + element (#8543) authored by @sspaink + - plugins/logs: Fix out-of-order plugin status notifications + (#8009) authored by @sspaink reported by @Pushpalanka + - plugins/rest: Carry over all of *tls.Config (#8473) authored + by @srenatus reported by @ashu2496 + - server: Drop HTML index page query form (#8477) authored by + @johanfylling reported by @srenatus and @r0binak + - server: Skip chmod for abstract Unix domain sockets (#8536) + authored by @bakayolo + - storage/inmem: Avoid allocations from Read() in MakeDir() + (#8561) authored by @srenatus + - tester: Add method to match tests by ref prefixes (#6696) + authored by @anderseknert + - Note: Experimental. + * Compiler, Topdown and Rego + - ast: Allow Back-to-back metadata blocks (#8482) authored by + @sspaink reported by @johanfylling + - ast: Catch functions in dynamic extent of ref head rule + (#8461) authored by @srenatus reported by @johanfylling + - ast: Fix parenthesis in String() of {obj,arr,set} + comprehensions (#8511) authored by @srenatus + - ast: Fix parsing of unary - in front of a ref (#5014) + authored by @mmzzuu reported by @philipaconrad + - ast: Fix type checker match error for objects with set keys + (#6260) authored by @sspaink reported by @tsandall + - ast: Fix type checker to recognize numeric index in generated + map (#6736) authored by @sspaink reported by @anderseknert + - ast: Handle underdetermined function args (#5234) authored by + @sspaink reported by @obataku + - ast: Identify compatible type from reference in type checker + (#7273) authored by @sspaink reported by @anderseknert + - ast: Support recursive JSON Schemas (#6099) authored by + @sspaink reported by @anderseknert + - builtins: Add support for days, weeks and years in + time.parse_duration_ns built-in function (#2719) authored by + @sspaink reported by @freeseacher + - builtins: Fix graph.reachable_paths to return all reachable + paths (#5871) authored by @davidmarne-wf reported by + @ericjkao + - builtins: Limit exponent size in units.parse_bytes built-in + function to prevent timeout bypass (#8326) authored by + @isaiahvita reported by @anderseknert + - perf: Add CopyNonGround() methods for Array, Set, and Object + (#8323) authored by @alex60217101990 + - resolver/wasm: Add NewWithContext to allow passing context + (#8499) authored by @dominikschulz + * Docs, Website, Ecosystem + - docs: Add aggregates examples for count and sum built-in + functions (#8566) authored by @alliasgher reported by + @srenatus + - docs: Add generated output.jsons for docs examples (#8535) + authored by @charlieegan3 + - docs: Add spec for OCP bundle status tracking API (#8502) + authored by @ashutosh-narkar + - docs: Add the latest videos to the README presentations + section (#8523) authored by @sspaink + - docs: Add Windows development notes to dev reference guide + (#8422) authored by @raajheshkannaa + - docs: Fix input value type in not undefined example (#8580) + authored by @menma1234 + - docs: Update Regal docs to v0.40.0 (#8538) authored by + @charlieegan3 + - docs: Updated roadmap link (#8501) authored by @johanfylling + - docs: Various typo fixes (#8529) authored by @sspaink + - ecosystem: Add vulnetix ecosystem entry (#8532) authored by + @0x73746F66 + - ecosystem: Add KubeStellar Console (#8560) authored by + @clubanderson + - website: Add banner to show when event has passed (#8493) + authored by @charlieegan3 + - website: Add copy-as-markdown button to doc pages (#8540) + authored by @charlieegan3 + - website: Copy button improvements (#8577) authored by + @charlieegan3 + - website: Remove old redirects, add new management redirect + (#8424) authored by @charlieegan3 reported by @narainar + - website: Update intro video on homepage (#8547) authored by + @charlieegan3 + * Miscellaneous + - build: Exclude domains that cause false positives (#8533) + (#8495) authored by @charlieegan3 + - e2e/cli: Add test for debug print() logging (#8567) authored + by @srenatus + - e2e/cli: Start CLI E2E tests (#8545) authored by @srenatus + - github: declare formatted rego as rego (#8564) authored by + @srenatus + - Security policy update (#8479) authored by @anderseknert + - Dependency updates; notably: + - build: bump go 1.26.2 (#8497) authored by @sspaink + - build(deps): bump wasmtime-go from v39.0.1 to v43.0.2 + - build(deps): bump go.opentelemetry.io deps from + 1.40.0/0.65.0 to 1.43.0/0.68.0 + - build(deps): bump github.com/containerd/containerd/v2 from + 2.2.1 to 2.2.3 + - build(deps): bump ithub.com/huandu/go-sqlbuilder from + 1.39.1 to 1.40.2 + - build(deps): bump golang.org/x/net from 0.51.0 to 0.53.0 + - build(deps): bump golang.org/x/text from 0.34.0 to 0.36.0 + +------------------------------------------------------------------- Old: ---- opa-1.15.2.obscpio New: ---- opa-1.16.1.obscpio ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ opa.spec ++++++ --- /var/tmp/diff_new_pack.avgNwJ/_old 2026-05-04 12:51:39.980907741 +0200 +++ /var/tmp/diff_new_pack.avgNwJ/_new 2026-05-04 12:51:40.000908564 +0200 @@ -17,7 +17,7 @@ Name: opa -Version: 1.15.2 +Version: 1.16.1 Release: 0 Summary: Open source, general-purpose policy engine License: Apache-2.0 ++++++ _service ++++++ --- /var/tmp/diff_new_pack.avgNwJ/_old 2026-05-04 12:51:40.316921576 +0200 +++ /var/tmp/diff_new_pack.avgNwJ/_new 2026-05-04 12:51:40.356923223 +0200 @@ -3,7 +3,7 @@ <param name="url">https://github.com/open-policy-agent/opa</param> <param name="scm">git</param> <param name="exclude">.git</param> - <param name="revision">v1.15.2</param> + <param name="revision">v1.16.1</param> <param name="versionformat">@PARENT_TAG@</param> <param name="versionrewrite-pattern">v(.*)</param> <param name="changesgenerate">enable</param> ++++++ _servicedata ++++++ --- /var/tmp/diff_new_pack.avgNwJ/_old 2026-05-04 12:51:40.556931457 +0200 +++ /var/tmp/diff_new_pack.avgNwJ/_new 2026-05-04 12:51:40.604933434 +0200 @@ -1,6 +1,6 @@ <servicedata> <service name="tar_scm"> <param name="url">https://github.com/open-policy-agent/opa</param> - <param name="changesrevision">37b80cb7b620c82049fb5775fe83b841ff3677ba</param></service></servicedata> + <param name="changesrevision">a72f9fa5e7c5e10a614f44dbe40700f90816d59d</param></service></servicedata> (No newline at EOF) ++++++ opa-1.15.2.obscpio -> opa-1.16.1.obscpio ++++++ ++++ 41064 lines of diff (skipped) ++++++ opa.obsinfo ++++++ --- /var/tmp/diff_new_pack.avgNwJ/_old 2026-05-04 12:51:49.017279803 +0200 +++ /var/tmp/diff_new_pack.avgNwJ/_new 2026-05-04 12:51:49.045280955 +0200 @@ -1,5 +1,5 @@ name: opa -version: 1.15.2 -mtime: 1775653516 -commit: 37b80cb7b620c82049fb5775fe83b841ff3677ba +version: 1.16.1 +mtime: 1777636739 +commit: a72f9fa5e7c5e10a614f44dbe40700f90816d59d ++++++ vendor.tar.gz ++++++ /work/SRC/openSUSE:Factory/opa/vendor.tar.gz /work/SRC/openSUSE:Factory/.opa.new.30200/vendor.tar.gz differ: char 13, line 1
