v0.66.0

Changelog

OPA Changes

• 08529c7: build(deps): bump github.com/open-policy-agent/opa from 1.11.0 to 1.12.1 (#1240) (@dependabot[bot])

Other Changes

• 10434c1: build(deps): bump actions/setup-python from 6.0.0 to 6.1.0 (#1225) (@dependabot[bot])
• 25bee5d: build(deps): bump alpine from 3.22.2 to 3.23.0 (#1229) (@dependabot[bot])
• 6cafc0f: build(deps): bump github.com/BurntSushi/toml from 1.5.0 to 1.6.0 (#1238) (@dependabot[bot])
• f6b8fa9: build(deps): bump github.com/moby/buildkit from 0.26.2 to 0.26.3 (#1235) (@dependabot[bot])
• 233776f: build(deps): bump golang from 1.25.4-alpine to 1.25.5-alpine (#1228) (@dependabot[bot])
• 7a86f94: chore: Remove dependency on github.com/pkg/errors (#1233) (@jalseth)
• 5a394b8: ci(golangci-lint): Disable revive skip-package-name-collision-with-go-std (#1232) (@jalseth)

v0.65.0

Changelog

New Features

• 7de1f99: feat: Add location to SARIF output (#1207) (@jalseth)

Bug Fixes

• 94bb769: fix(build): Include Git version when using 'make build' (#1218) (@jalseth)
• ff4e456: fix(sarif): Include conftest version number (#1206) (@jalseth)

OPA Changes

• 8c4cfa6: build(deps): bump github.com/open-policy-agent/opa from 1.10.1 to 1.11.0 (#1224) (@dependabot[bot])

Other Changes

• 3dab980: build(deps): bump cuelang.org/go from 0.15.0 to 0.15.1 (#1217) (@dependabot[bot])
• cfa85ca: build(deps): bump github.com/moby/buildkit from 0.25.2 to 0.26.2 (#1216) (@dependabot[bot])
• dd7e3bc: build(deps): bump golang from 1.25.3-alpine to 1.25.4-alpine (#1210) (@dependabot[bot])
• bbbb04c: chore: Include goreleaser in Nix devshell (#1219) (@jalseth)
• ac3146f: ci: Pin GitHub Actions to the Git SHA using ratchet (#1204) (@jalseth)

v0.64.0

Changelog

New Features

• 00b02b2: feat: Include location in the result output (#1196) (@jalseth)
• ee91078: feat: Refactor GitHub outputter to support locations from Rego policy (#1197) (@jalseth)
• d359466: feat: add conftest-fmt and conftest-pull pre-commit hooks (#1192) (@dkolepp)

Bug Fixes

• 997f5ce: fix: Fix XDG writable check on Windows (#1185) (@jalseth)
• fb9c88d: fix: Only use XDG directories for plugin if they are writable (#1182) (@jalseth)
• 4a2ddd6: fix: Use "python3" instead of "python" in the Makefile (#1184) (@jalseth)

OPA Changes

• 347388d: build(deps): bump github.com/open-policy-agent/opa from 1.9.0 to 1.10.1 (#1201) (@dependabot[bot])

Other Changes

• 75449c3: build(deps): bump alpine from 3.22.1 to 3.22.2 (#1191) (@dependabot[bot])
• 0ade44b: build(deps): bump cuelang.org/go from 0.14.1 to 0.15.0 (#1202) (@dependabot[bot])
• 1ef4588: build(deps): bump github.com/hashicorp/go-getter from 1.8.2 to 1.8.3 (#1199) (@dependabot[bot])
• d2e56c3: build(deps): bump github.com/moby/buildkit from 0.25.0 to 0.25.2 (#1200) (@dependabot[bot])
• 5242185: build(deps): bump golang from 1.25.1-alpine to 1.25.3-alpine (#1193) (@dependabot[bot])
• 58ace24: build: Add Nix devshell (#1186) (@jalseth)
• 6189512: chore: Fix gitignore for acceptance tests (#1195) (@jalseth)
• 7d41238: ci: Run validation job on Linux, macOS, Windows (#1181) (@jalseth)

v0.63.0

Changelog

New Features

• 30b9a8d: feat: add reformat command for JSON output conversion (#1153) (@thevilledev)

Bug Fixes

• ffb6ce3: fix: Add explicit line-number to GitHub output (#1173) (@tun0)

OPA Changes

• 64bf641: build(deps): bump github.com/open-policy-agent/opa from 1.6.0 to 1.7.1 (#1156) (@dependabot[bot])
• 981983b: build(deps): bump github.com/open-policy-agent/opa from 1.7.1 to 1.8.0 (#1165) (@dependabot[bot])
• c7aa1d4: build(deps): bump github.com/open-policy-agent/opa from 1.8.0 to 1.9.0 (#1175) (@dependabot[bot])

Other Changes

• 0d903ce: build(deps): bump actions/checkout from 4 to 5 (#1158) (@dependabot[bot])
• 364cf32: build(deps): bump actions/setup-go from 5 to 6 (#1171) (@dependabot[bot])
• d4aa81f: build(deps): bump actions/setup-python from 5 to 6 (#1172) (@dependabot[bot])
• a1ecf3f: build(deps): bump alpine from 3.22.0 to 3.22.1 (#1152) (@dependabot[bot])
• b87ca5f: build(deps): bump cuelang.org/go from 0.13.2 to 0.14.1 (#1159) (@dependabot[bot])
• 1c5abaa: build(deps): bump github.com/CycloneDX/cyclonedx-go from 0.9.2 to 0.9.3 (#1177) (@dependabot[bot])
• 2a509fe: build(deps): bump github.com/hashicorp/go-getter from 1.7.8 to 1.7.9 (#1162) (@dependabot[bot])
• a433ed0: build(deps): bump github.com/hashicorp/go-getter from 1.7.9 to 1.8.0 (#1169) (@dependabot[bot])
• d9dca30: build(deps): bump github.com/hashicorp/go-getter from 1.8.0 to 1.8.1 (#1174) (@dependabot[bot])
• b51f6d9: build(deps): bump github.com/hashicorp/go-getter from 1.8.1 to 1.8.2 (#1178) (@dependabot[bot])
• c664099: build(deps): bump github.com/moby/buildkit from 0.23.2 to 0.24.0 (#1166) (@dependabot[bot])
• 5378cc3: build(deps): bump github.com/moby/buildkit from 0.24.0 to 0.25.0 (#1176) (@dependabot[bot])
• fb4c503: build(deps): bump golang from 1.25.0-alpine to 1.25.1-alpine (#1170) (@dependabot[bot])
• 0d6e3b4: chore(deps): bump Go version to 1.25 (#1160) (@thevilledev)

v0.62.0

Changelog

OPA Changes

• ebb167d: build(deps): bump github.com/open-policy-agent/opa from 1.5.1 to 1.6.0 (#1149) (@dependabot[bot])

Other Changes

• 4c22f26: build(deps): bump alpine from 3.21.3 to 3.22.0 (#1135) (@dependabot[bot])
• 7cf3311: build(deps): bump cuelang.org/go from 0.13.0 to 0.13.2 (#1148) (@dependabot[bot])
• 2d33645: build(deps): bump github.com/moby/buildkit from 0.22.0 to 0.23.2 (#1150) (@dependabot[bot])
• 89ef4d5: build(deps): bump golang from 1.24.3-alpine to 1.24.4-alpine (#1140) (@dependabot[bot])
• c7f6f8f: chore: Replace OPA v0 with v1 import paths (#1142) (@jalseth)
• 91d8de7: chore: Use uppercase for all Dockerfile build keywords (#1143) (@jalseth)
• 060ea76: ci: Run docker builds in parallel during release (#1139) (@jalseth)

v0.61.2

Changelog

Other Changes

• e156f0d: Switch back to original conftest test --update behavior (#1138) (@iamleot)

v0.61.1

Changelog

OPA Changes

• 8e47770: build(deps): bump github.com/open-policy-agent/opa from 1.5.0 to 1.5.1 (#1137) (@dependabot[bot])

v0.61.0

Changelog

Bug Fixes

• ed0ff0a: fix(test): clean updated policies after test run (#1109) (@kirecek)
• f82f556: fix: Use v1 as rego version for fmt, too (#1128) (@msw-kialo)

OPA Changes

• bcba55e: build(deps): bump github.com/open-policy-agent/opa from 1.4.2 to 1.5.0 (#1134) (@dependabot[bot])

Other Changes

• a826a0b: build(deps): bump cuelang.org/go from 0.12.1 to 0.13.0 (#1131) (@dependabot[bot])
• d44b480: build(deps): bump github.com/moby/buildkit from 0.21.1 to 0.22.0 (#1129) (@dependabot[bot])
• f09428f: build(deps): bump golang from 1.24.2-alpine to 1.24.3-alpine (#1124) (@dependabot[bot])
• 1e43dc0: deps: update jsonc import path (#1133) (@st3penta)

v0.60.0

Announcements

⚠️ Breaking Changes ⚠️

We have set the default version of Rego syntax to v1. This is a breaking change if your Rego policies are not compatible with the v1 syntax.

• Individual policies can be updated gradually, by adding import rego.v1 to the policy.
• The rego-version flag will remain available indefinitely, and users who do not wish to update their Rego policies can continue to use v0 syntax by setting this flag to v0.

For more information about upgrading to Rego v1 syntax, see the upstream docs at https://www.openpolicyagent.org/docs/latest/v0-upgrade/.

Changelog

New Features

• 06658d4: feat(output): redirect trace output to stderr (#1084) (@thevilledev)
• 18a0f14: feat(runner): add support for symlinks (#1098) (@siliconsheep)

OPA Changes

• 2797c99: build(deps): bump github.com/open-policy-agent/opa from 1.3.0 to 1.4.1 (#1113) (@dependabot[bot])

Other Changes

• 67a3c3e: build(deps): bump actions/setup-go from 4 to 5 (#1102) (@dependabot[bot])
• 609490f: build(deps): bump bats-core/bats-action from 1.5.4 to 3.0.1 (#1104) (@dependabot[bot])
• 9e56924: build(deps): bump github.com/google/go-jsonnet from 0.20.0 to 0.21.0 (#1120) (@dependabot[bot])
• 5ea0446: build(deps): bump github.com/moby/buildkit from 0.20.2 to 0.21.0 (#1101) (@dependabot[bot])
• 21a73eb: build(deps): bump github.com/moby/buildkit from 0.21.0 to 0.21.1 (#1111) (@dependabot[bot])
• b3d0491: build(deps): bump golangci/golangci-lint-action from 6 to 7 (#1103) (@dependabot[bot])
• e894c43: build(deps): bump golangci/golangci-lint-action from 7 to 8 (#1119) (@dependabot[bot])
• 3ae2e78: chore: Update Github Actions via Dependabot (#1100) (@mrueg)
• 4c5e5f5: ci: Move docker build to separate job in the PR workflow (#1105) (@jalseth)
• 3907482: cli: Make Rego v1 syntax the default (#1114) (@jalseth)

v0.59.0

Announcements

Breaking Changes ⚠️

• Bump hcl2json - This makes the behavior of the conversion more consistent by always using arrays for blocks that can be repeated. See #1074 and #1006 for more info.

Breaking Changes Reminder

In the v0.60 release of conftest (in May 2025), we will change the default version of Rego syntax from v0 to v1. This will be a breaking change if your Rego policies are not compatible with the v1 syntax.

• Individual policies can be updated gradually, by adding import rego.v1 to the policy.
• The rego-version flag will remain available indefinitely, and users who do not wish to update their Rego policies can continue to use v0 syntax by setting this flag to v0.

For more information about upgrading to Rego v1 syntax, see the upstream docs at https://www.openpolicyagent.org/docs/latest/v0-upgrade/.

Changelog

New Features

• 21e1163: feat: add pre-commit hook support (#1077) (@thevilledev)

OPA Changes

• eac6f5e: build(deps): bump github.com/open-policy-agent/opa from 1.2.0 to 1.3.0 (#1092) (@dependabot[bot])

Other Changes

• 813f329: build(deps): bump cuelang.org/go from 0.12.0 to 0.12.1 (#1094) (@dependabot[bot])
• 45bf533: build(deps): bump github.com/BurntSushi/toml from 1.4.0 to 1.5.0 (#1089) (@dependabot[bot])
• 19f1eaf: build(deps): bump github.com/magiconair/properties from 1.8.9 to 1.8.10 (#1097) (@dependabot[bot])
• a20159b: build(deps): bump github.com/moby/buildkit from 0.20.0 to 0.20.1 (#1083) (@dependabot[bot])
• 32aac49: build(deps): bump github.com/moby/buildkit from 0.20.1 to 0.20.2 (#1091) (@dependabot[bot])
• 1b1ce3a: build(deps): bump golang from 1.24.0-alpine to 1.24.1-alpine (#1086) (@dependabot[bot])
• cb88a17: build(deps): bump golang from 1.24.1-alpine to 1.24.2-alpine (#1096) (@dependabot[bot])
• 8c8b13f: ci: Remove PR workflow access to all permissions from GITHUB_TOKEN (#1088) (@jalseth)
• 688c88f: deps: Bump hcl2json to v0.6.7 (#1074) (@jalseth)
• e9612c3: refactor(ci): replace Makefile-based Docker builds with GitHub Action (#1082) (@Amamgbu)