Skip to content

build(deps): bump the go group across 1 directory with 4 updates#1183

Merged
kenjenkins merged 1 commit into
mainfrom
dependabot/go_modules/go-5e14ff0aae
Jul 3, 2025
Merged

build(deps): bump the go group across 1 directory with 4 updates#1183
kenjenkins merged 1 commit into
mainfrom
dependabot/go_modules/go-5e14ff0aae

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 3, 2025 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the go group with 4 updates in the / directory: github.com/go-playground/validator/v10, github.com/open-policy-agent/opa, github.com/sergi/go-diff and google.golang.org/grpc.

Updates github.com/go-playground/validator/v10 from 10.26.0 to 10.27.0

Release notes

Sourced from github.com/go-playground/validator/v10's releases.

Release 10.27.0

What's Changed

New Contributors

Full Changelog: go-playground/validator@v10.26.0...v10.27.0

Commits
  • bc77d03 use golangci lint file for disables (#1447)
  • 4a1bc2f disable way too aggressive and disagreeable linters (#1445)
  • cf2267f fix: make "file://" fail url validation (#1444)
  • 3fd4678 docs: typos (#1440)
  • ec374ef Fix: Validator panics when 'nil' is used along with required if for slices an...
  • 0e3e2f9 Omitzero does not work with slice and map bug (#1436)
  • dfc7ccd Fix: support validation for map values with struct types (#1433)
  • 5b9542b fix: panics when private field is validated (#1423)
  • f9a5a1f feat(translation): add en translation for urn_rfc2141 (#1431)
  • 20f7df6 Bump golangci/golangci-lint-action from 7 to 8 (#1425)
  • Additional commits viewable in compare view

Updates github.com/open-policy-agent/opa from 1.5.0 to 1.6.0

Release notes

Sourced from github.com/open-policy-agent/opa's releases.

v1.6.0

This release contains a mix of new features, performance improvements, and bugfixes. Notably:

  • Improvements to the OPA website and documentation
  • Allowing keywords in Rego references
  • Parallel test execution
  • Faster built-in function execution

Modernized OPA Website (#7037)

We're continuing to modernize the OPA website with a new design and improved user experience.

Some highlights:

  • Builtins: You can now search them on the docs page!
  • Sidebar redesign: Making it easier to find what you're looking for in our docs
  • Feedback forms: Closing the feedback loop between docs authors and readers -- Please let us know if you dislike, or like, a docs page.
  • Downloads page: Find your OS' installation instructions on a less cluttered page!
  • And much more

Authored by @​sky3n3t and @​charlieegan3

Allowing keywords in Rego references (#7709)

Previously, Rego references could not contain terms that conflict with Rego keywords such as package, if, else, not, etc. in certain constructs:

package example
allow if {
input.package.source         # not allowed (before v1.6.0)
input["package"].destination # allowed
}

The constraints for valid Rego references have been relaxed to allow keywords. The above example is now valid and will no longer cause a compilation error.

Authored by @​johanfylling

Parallel Test Execution (#7442)

By default, OPA will now run tests in parallel (defaulting to one parallel execution thread per available CPU core), significantly speeding up test execution time for large test suites. The performance boost is closely tied to the number of tests in your project and your selected parallelism level. For larger projects and default settings, 2-3x performance gains have been measured on a MacBook Pro.

Parallelism can be disabled to run tests sequentially by setting the --parallel flag to 1. E.g. opa test . --parallel=1.

Authored by @​sspaink reported by @​anderseknert

... (truncated)

Changelog

Sourced from github.com/open-policy-agent/opa's changelog.

1.6.0

This release contains a mix of new features, performance improvements, and bugfixes. Notably:

  • Improvements to the OPA website and documentation
  • Allowing keywords in Rego references
  • Parallel test execution
  • Faster built-in function execution

Modernized OPA Website (#7037)

We're continuing to modernize the OPA website with a new design and improved user experience.

Some highlights:

  • Builtins: You can now search them on the docs page!
  • Sidebar redesign: Making it easier to find what you're looking for in our docs
  • Feedback forms: Closing the feedback loop between docs authors and readers -- Please let us know if you dislike, or like, a docs page.
  • Downloads page: Find your OS' installation instructions on a less cluttered page!
  • And much more

Authored by @​sky3n3t and @​charlieegan3

Allowing keywords in Rego references (#7709)

Previously, Rego references could not contain terms that conflict with Rego keywords such as package, if, else, not, etc. in certain constructs:

package example
allow if {
input.package.source         # not allowed (before v1.6.0)
input["package"].destination # allowed
}

The constraints for valid Rego references have been relaxed to allow keywords. The above example is now valid and will no longer cause a compilation error.

Authored by @​johanfylling

Parallel Test Execution (#7442)

By default, OPA will now run tests in parallel (defaulting to one parallel execution thread per available CPU core), significantly speeding up test execution time for large test suites. The performance boost is closely tied to the number of tests in your project and your selected parallelism level. For larger projects and default settings, 2-3x performance gains have been measured on a MacBook Pro.

Parallelism can be disabled to run tests sequentially by setting the --parallel flag to 1. E.g. opa test . --parallel=1.

Authored by @​sspaink reported by @​anderseknert

... (truncated)

Commits
  • 710b5a6 Prepare v1.6.0 release (#7732)
  • d3e83fb website: add titles back to the sidebar
  • fc51c9c docs: Revise sidebar order and layout
  • 13b9e52 ast: Ensure surplus leading zeros always error (#7726)
  • 9750787 perf: Only pass built-in context to calls depending on it (#7728)
  • 2b4722e docs: Redirect old admission control link (#7730)
  • 3a560fa docs: Update sidebar (#7723)
  • d917e3a plugin/decision: check if event is too large after compression (#7521)
  • 817b663 ast,format: Allowing keywords in Rego references (#7709)
  • 1679d79 docs: Move code example data inside the PlaygroundComponent (#7724)
  • Additional commits viewable in compare view

Updates github.com/sergi/go-diff from 1.3.1 to 1.4.0

Commits
  • 57c41f4 Merge branch 'iambus-master'
  • feac906 Merge pull request #139 from michaelcheah/fix_newline_diffs_colored_text
  • 5b0b94c Merge pull request #136 from kdarkhan/master
  • 4ebce9c fix: colored display for diffs with newlines
  • a674b30 Fix line diff by using runes without separators
  • 74798f5 Add a failing line diff test case
  • db9db17 Merge branch 'master' into master
  • ff0d34b skip invalid unicode code point to fix TestMassiveRuneDiffConversion
  • 3403a16 update tests
  • 3202072 fix panic: runtime error: slice bounds out of range
  • See full diff in compare view

Updates google.golang.org/grpc from 1.72.2 to 1.73.0

Release notes

Sourced from google.golang.org/grpc's releases.

Release 1.73.0

New Features

  • balancer/ringhash: move LB policy from xds/internal to exported path to facilitate use without xds (#8249)
  • xds: enable least request LB policy by default. It can be disabled by setting GRPC_EXPERIMENTAL_ENABLE_LEAST_REQUEST=false in your environment. (#8253)
  • grpc: add a CallAuthority Call Option that can be used to overwrite the http :authority header on per-RPC basis. (#8068)
  • stats/opentelemetry: add trace event for name resolution delay. (#8074)
  • health: added List method to gRPC Health service. (#8155)
  • ringhash: implement features from gRFC A76. (#8159)
  • xds: add functionality to support SPIFFE Bundle Maps as roots of trust in XDS which can be enabled by setting GRPC_EXPERIMENTAL_XDS_MTLS_SPIFFE=true. (#8167, #8180, #8229, #8343)

Bug Fixes

  • xds: locality ID metric label is changed to make it consistent with gRFC A78. (#8256)
  • client: fail RPCs on the client when using extremely short contexts that expire before the grpc-timeout header is created. (#8312)
  • server: non-positive grpc-timeout header values are now rejected. This is consistent with the gRPC protocol spec. (#8290)
  • xds: fix reported error string when LRS load reporting interval is invalid. (#8224)

Performance Improvements

  • credentials/alts: improve read performance by optimizing buffer copies and allocations. (#8271)
  • server: improve performance of RPC handling by avoid a status proto copy (#8282)

Documentation

  • examples/features/opentelemetry: modify example to demonstrate tracing using OpenTelemtry plugin. (#8056)
Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Jul 3, 2025
@dependabot
dependabot Bot requested a review from a team as a code owner July 3, 2025 15:33
@dependabot
dependabot Bot requested review from kenjenkins and removed request for a team July 3, 2025 15:33
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Jul 3, 2025
@kenjenkins

kenjenkins commented Jul 3, 2025

Copy link
Copy Markdown
Contributor

@dependabot rebase

@dependabot
build(deps): bump the go group across 1 directory with 4 updates
f9d9ce1 
Bumps the go group with 4 updates in the / directory: [github.com/go-playground/validator/v10](https://github.com/go-playground/validator), [github.com/open-policy-agent/opa](https://github.com/open-policy-agent/opa), [github.com/sergi/go-diff](https://github.com/sergi/go-diff) and [google.golang.org/grpc](https://github.com/grpc/grpc-go).


Updates `github.com/go-playground/validator/v10` from 10.26.0 to 10.27.0
- [Release notes](https://github.com/go-playground/validator/releases)
- [Commits](go-playground/validator@v10.26.0...v10.27.0)

Updates `github.com/open-policy-agent/opa` from 1.5.0 to 1.6.0
- [Release notes](https://github.com/open-policy-agent/opa/releases)
- [Changelog](https://github.com/open-policy-agent/opa/blob/main/CHANGELOG.md)
- [Commits](open-policy-agent/opa@v1.5.0...v1.6.0)

Updates `github.com/sergi/go-diff` from 1.3.1 to 1.4.0
- [Commits](sergi/go-diff@v1.3.1...v1.4.0)

Updates `google.golang.org/grpc` from 1.72.2 to 1.73.0
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](grpc/grpc-go@v1.72.2...v1.73.0)

---
updated-dependencies:
- dependency-name: github.com/go-playground/validator/v10
  dependency-version: 10.27.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/open-policy-agent/opa
  dependency-version: 1.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/sergi/go-diff
  dependency-version: 1.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: google.golang.org/grpc
  dependency-version: 1.73.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/go_modules/go-5e14ff0aae branch from 014201b to f9d9ce1 Compare July 3, 2025 17:34
@kenjenkins
kenjenkins merged commit 806297d into main Jul 3, 2025
6 checks passed
@kenjenkins
kenjenkins deleted the dependabot/go_modules/go-5e14ff0aae branch July 3, 2025 19:19
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@kenjenkins kenjenkins kenjenkins approved these changes

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file go Pull requests that update Go code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@kenjenkins