Sourced from github.com/open-policy-agent/opa's releases.

v1.14.0

This release contains a mix of new features, performance improvements, and bugfixes. Notably:

• Improved rule indexing of variable assignments and x in {...} expressions
• Support for --h2c with unix domain socket for opa run
• A new glossary tooltip for technical terms in the docs
• Fixes published in the v1.13.1 and v1.13.2 releases

Improved rule indexing of variable assignments and x in {...} expressions (#1841)

With this change, the rule indexer will index expressions like:

allow if input.role in {"admin", "user"}

On lookup, the rule body will only be returned if input.role is either one of "admin" or "user".

The reverse case is also indexed:

allow if "admin" in input.roles

in which the searched collection is unknown.

Authored by @​srenatus reported by @​nischalsheth

Runtime, SDK, Tooling

• cmd,run: Support --h2c with unix domain socket (UDS) (#8282) authored by @​srenatus reported by @​theJC
• cmd,tester: Add line number next to test file in pretty format (#8328) authored by @​sspaink reported by @​anderseknert
• plugins: Fix race accessing registeredTriggers (#8363) reported and authored by @​szuecs
• rego: Add ResultValue[T]() helper method (#8320) authored by @​srenatus
• runtime: Add custom storage backend registration API (#8277) authored and reported by @​alex60217101990
• topdown: Add config option to disable named inter-query built-in cache (#7519) authored by @​sspaink reported by @​johanfylling

Compiler, Topdown and Rego

• ast: Add index else == nil test, fix it (#8348) authored by @​srenatus

• ast: Add scaffolding to introspect and skip compiler stages (#8304) (authored by @​srenatus)

• ast: Ensure term values implement ast.StringLengther (#8374) authored by @​charlieegan3

• ast: Fix double-fix for refs["with-a"].dash as package (#8286) authored by @​srenatus

• ast: Optimized template-expression handling of values known to be defined (#8310) authored by @​anderseknert

• ast: Put rule indices into rule tree, change Values to []*Rule (#8298) authored by @​srenatus

• ast: Replace true expr when appending to empty body (#8299) authored by @​anderseknert

• ast: Return correct location of unsafe var in object (#7935) authored by @​sspaink reported by @​anderseknert

• ast: Use StageID in WithStageAfterID, also for QueryCompiler (follow-up) (#8306) authored by @​srenatus

• compile: Add StringLength to lazy object (#8369) authored by @​charlieegan3 reported by @​robmyersrobmyers

... (truncated)

Sourced from github.com/open-policy-agent/opa's changelog.

1.14.0

This release contains a mix of new features, performance improvements, and bugfixes. Notably:

• Improved rule indexing of variable assignments and x in {...} expressions
• Support for --h2c with unix domain socket for opa run
• A new glossary tooltip for technical terms in the docs
• Fixes published in the v1.13.1 and v1.13.2 releases

Improved rule indexing of variable assignments and x in {...} expressions (#1841)

With this change, the rule indexer will index expressions like:

allow if input.role in {"admin", "user"}

On lookup, the rule body will only be returned if input.role is either one of "admin" or "user".

The reverse case is also indexed:

allow if "admin" in input.roles

in which the searched collection is unknown.

Authored by @​srenatus reported by @​nischalsheth

Runtime, SDK, Tooling

• cmd,run: Support --h2c with unix domain socket (UDS) (#8282) authored by @​srenatus reported by @​theJC
• cmd,tester: Add line number next to test file in pretty format (#8328) authored by @​sspaink reported by @​anderseknert
• plugins: Fix race accessing registeredTriggers (#8363) reported and authored by @​szuecs
• rego: Add ResultValue[T]() helper method (#8320) authored by @​srenatus
• runtime: Add custom storage backend registration API (#8277) authored and reported by @​alex60217101990
• topdown: Add config option to disable named inter-query built-in cache (#7519) authored by @​sspaink reported by @​johanfylling

Compiler, Topdown and Rego

• ast: Add index else == nil test, fix it (#8348) authored by @​srenatus

• ast: Add scaffolding to introspect and skip compiler stages (#8304) (authored by @​srenatus)

• ast: Ensure term values implement ast.StringLengther (#8374) authored by @​charlieegan3

• ast: Fix double-fix for refs["with-a"].dash as package (#8286) authored by @​srenatus

• ast: Optimized template-expression handling of values known to be defined (#8310) authored by @​anderseknert

• ast: Put rule indices into rule tree, change Values to []*Rule (#8298) authored by @​srenatus

• ast: Replace true expr when appending to empty body (#8299) authored by @​anderseknert

• ast: Return correct location of unsafe var in object (#7935) authored by @​sspaink reported by @​anderseknert

• ast: Use StageID in WithStageAfterID, also for QueryCompiler (follow-up) (#8306) authored by @​srenatus

... (truncated)

• acf81e8 Release v1.14.0 (#8379)
• b4b04a6 ci: Fix check-changes job skipping over YAML changes. (#8377)
• 3c5b7c6 docs: Document metrics for http.send, regex, and glob builtins (#8103)
• 29918f9 rego: disable rule indexing for benchmark
• 9d124cb ast: Ensure term values implement string lengther (#8374)
• 32b97ae ast: make rule index track var assignments and x in {...} (#8341)
• 7cfd092 docs: update interface{} -> any in golang snippets (#8373)
• 98f7752 Return correct location of unsafe var in object (#8371)
• 299bbd4 compile: Add StringLength to lazy object (#8370)
• dc7995e workflows/benchmark: persist credentials, we need them for pushing
• Additional commits viewable in compare view

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)