elastic / cloudbeat / 26666846000
49%
main: 76%

LAST BUILD BRANCH: 8.19
DEFAULT BRANCH: main
Ran
Jobs 1
Files 312
Run time 1min
Badge
Embed ▾
README BADGES
x

If you need to use a raster PNG badge, change the '.svg' to '.png' in the link

Markdown

Textile

RDoc

HTML

Rst
coverage: 49.326% (+0.01%) from 49.315%
26666846000

push

github

web-flow 
fix(deps): update module github.com/open-policy-agent/opa to v1.17.0 (8.19) (#6571)

This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
|
[github.com/open-policy-agent/opa](https://redirect.github.com/open-policy-agent/opa)
| require | minor | `v1.16.2` -> `v1.17.0` |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the Dependency
Dashboard for more information.

---

### Release Notes

<details>
<summary>open-policy-agent/opa
(github.com/open-policy-agent/opa)</summary>

###
[`v1.17.0`](https://redirect.github.com/open-policy-agent/opa/releases/tag/v1.17.0)

[Compare
Source](https://redirect.github.com/open-policy-agent/opa/compare/v1.16.2...v1.17.0)

This release contains a mix of new features, performance improvements,
and bugfixes. Notably:

- A new `future.keywords.not` import that adds improved semantics to the
`not` keyword.
-   Rule Labels in Decision Logs
-   Published json schema for IR and bundle manifest
-   Dropped automaxprocs and x/net dependencies

##### Improved Negation Semantics
([#&#8203;8387](https://redirect.github.com/open-policy-agent/opa/issues/8387))

This OPA release introduces a new [`future.keywords.not`
import](https://www.openpolicyagent.org/docs/policy-reference/keywords/not#improved-negation-semantics)
that fixes a long-standing semantic issue with negation in Rego.

Without the import, the compiler expands a negated composite expression
like
`not f(g(input.x))` into a series of sub-expressions evaluated *before*
the
`not`:

    __local0__ = input.x
    g(__local0__, __local1__)
    not f(__local1__)

If any sub-expression fails — for example, `input.x` is undefined or `g`
produces an undefined result — the entire rule fails rather than the
`not` succeeding.
This is unintuitive: the user's intent is "the condition does not hold,"
but
an undefined intermediate value causes a silent failure instead of the
expected
`not` result.

With `import future.keywords... (continued)

13751 of 27878 relevant lines covered (49.33%)

9.44 hits per line

Coverage Regressions

Lines Coverage ∆ File
2
84.59
 0.98% internal/resources/providers/gcplib/inventory/provider.go
Jobs
ID Job ID Ran Files Coverage
1 26666846000.1 312
49.33
 GitHub Action Run
Source Files on build 26666846000