elastic / cloudbeat / 26644781526
76%
main: 76%

LAST BUILD BRANCH: renovate/main-aws-actions-configure-aws-credentials-6.x
DEFAULT BRANCH: main
Ran
Jobs 1
Files 235
Run time 1min
Badge
Embed ▾
README BADGES
x

If you need to use a raster PNG badge, change the '.svg' to '.png' in the link

Markdown

Textile

RDoc

HTML

Rst
coverage: 75.814% (+0.007%) from 75.807%
26644781526

push

github

web-flow 
fix(deps): update module github.com/open-policy-agent/opa to v1.17.0 (main) (#6500)

This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
|
[github.com/open-policy-agent/opa](https://redirect.github.com/open-policy-agent/opa)
| require | minor | `v1.16.2` -> `v1.17.0` |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the Dependency
Dashboard for more information.

---

### Release Notes

<details>
<summary>open-policy-agent/opa
(github.com/open-policy-agent/opa)</summary>

###
[`v1.17.0`](https://redirect.github.com/open-policy-agent/opa/releases/tag/v1.17.0)

[Compare
Source](https://redirect.github.com/open-policy-agent/opa/compare/v1.16.2...v1.17.0)

This release contains a mix of new features, performance improvements,
and bugfixes. Notably:

- A new `future.keywords.not` import that adds improved semantics to the
`not` keyword.
-   Rule Labels in Decision Logs
-   Published json schema for IR and bundle manifest
-   Dropped automaxprocs and x/net dependencies

##### Improved Negation Semantics
([#&#8203;8387](https://redirect.github.com/open-policy-agent/opa/issues/8387))

This OPA release introduces a new [`future.keywords.not`
import](https://www.openpolicyagent.org/docs/policy-reference/keywords/not#improved-negation-semantics)
that fixes a long-standing semantic issue with negation in Rego.

Without the import, the compiler expands a negated composite expression
like
`not f(g(input.x))` into a series of sub-expressions evaluated *before*
the
`not`:

    __local0__ = input.x
    g(__local0__, __local1__)
    not f(__local1__)

If any sub-expression fails — for example, `input.x` is undefined or `g`
produces an undefined result — the entire rule fails rather than the
`not` succeeding.
This is unintuitive: the user's intent is "the condition does not hold,"
but
an undefined intermediate value causes a silent failure instead of the
expected
`not` result.

With `import future.keywords... (continued)

9727 of 12830 relevant lines covered (75.81%)

16.41 hits per line

Jobs
ID Job ID Ran Files Coverage
1 26644781526.1 235
75.81
 GitHub Action Run
Source Files on build 26644781526