v0.33.1

Changelog

• f10341f Add OCI Push and Pull tests to CI (#718)
• aa11f0b Bump github.com/open-policy-agent/opa from 0.42.0 to 0.42.1 (#722)

v0.33.0

Bug Fixes

• Fix 404 error when using conftest push (#721)

Other Improvements

• Bump OPA to v0.42.0
• Bump Go to v1.18.3

Changelog

• 88e6b0e Bump github.com/open-policy-agent/opa from 0.40.0 to 0.41.0 (#713)
• 58cc3d3 Bump github.com/open-policy-agent/opa from 0.41.0 to 0.42.0 (#720)
• 4719e25 Bump golang from 1.18.2-alpine to 1.18.3-alpine (#714)
• 45f37d5 Update golang 1.18.3 (#719)
• a68cd05 bug: Fix 404 error when using the push command (#721)

v0.32.1

ℹ️ This is a security release to patch critical host path traversal and command injection vulnerabilities in the go-getter library ℹ️

More details can be found in the HCSEC-2022-13 HashiCorp Security Advisory.

Changelog

• 197f5db Bump alpine from 3.15.4 to 3.16.0 (#711)
• 8153721 Bump github.com/hashicorp/go-getter from 1.5.10 to 1.5.11 (#708)
• c9816d2 Bump github.com/hashicorp/go-getter to v1.6.1 (#712)
• 0406ed5 Bump golang from 1.18.1-alpine to 1.18.2-alpine (#710)

v0.32.0

New Features

• Support for limiting the test engine's capabilities - thank you @boranx!

Bug Fixes

• conftest push no longer creates different OCI images when run against the same policy set - thanks @macox!

Other improvements

• OPA bump from v0.39.0 to v0.40.0

Changelog

• 30ea309 Bump github.com/open-policy-agent/opa from 0.39.0 to 0.40.0 (#706)
• afd22f1 Update oras-go to v1.1.1 (#702)
• 127ae70 feat: add capabilities feature to conftest (#704)

v0.31.0

⚠️ Potentially Breaking Changes ⚠️

• JUnit output now includes OPA namespace in test name for better grouping #699
• Output for parse command only emits valid JSON #686

New Features

• Support for JSONC files #691. Thank you @greggroth!

Other Improvements

• Bump OPA to v0.39.0
• Bump Golang to v1.18.1
• Builds now include ppc64le archiecture #676 Thank you @seth-priya!

Changelog

• 7d0099b Add OPA version to --version output (#674)
• cadee70 Add parser for JSONC documents (#691)
• ce409db Adding ppc64le support (#676)
• a212330 Bump Go to 1.17.6 in pull_request and release workflows (#665)
• 89ab471 Bump Go version in GHA workflows to 1.18.1 (#703)
• 849914d Bump OPA to 0.39.0
• a934bad Bump alpine from 3.15.0 to 3.15.1 (#688)
• 92ed361 Bump alpine to 3.15.4 for release image
• c1a5ce7 Bump github.com/open-policy-agent/opa from 0.36.0 to 0.36.1 (#664)
• a42245b Bump github.com/open-policy-agent/opa from 0.36.1 to 0.37.0 (#670)
• 92e25c6 Bump github.com/open-policy-agent/opa from 0.37.0 to 0.37.1 (#672)
• e92e38e Bump github.com/open-policy-agent/opa from 0.37.1 to 0.37.2 (#677)
• 8a4cedb Bump github.com/open-policy-agent/opa from 0.37.2 to 0.38.0 (#681)
• a0f7472 Bump github.com/open-policy-agent/opa from 0.38.0 to 0.38.1 (#685)
• e064639 Bump golang from 1.17.5-alpine to 1.17.6-alpine (#663)
• 9785f05 Bump golang from 1.17.6-alpine to 1.17.7-alpine (#678)
• c9c6998 Bump golang from 1.17.7-alpine to 1.17.8-alpine (#683)
• fb8eff6 Bump golang from 1.17.8-alpine to 1.18.1-alpine (#701)
• f978235 Bump mkdocs to 1.3.0
• ede96fb Install latest conftest version (#673)
• a823584 Make runner package public
• cb5b8f1 Only emit valid JSON when using the parse command (#686)
• 63b8058 Refactor JUnit output formatting (#699)
• 18725cf Update Go version in pipelines to 1.17.7 (#679)
• 79b26df Update install.md - Fix install command (#692)

v0.30.1

This is a re-release of v0.30.0 with no code changes

See #700 for more information.

v0.30.0

Changelog

• 9e5a60c Always use ORAS context when interacting with registry (#660)
• 3b311ac Prepare v0.30.0 release (#662)
• 15dccd3 Update containerd to v1.5.9 (#661)
• 46c3178 Update dependencies (#659)

v0.29.0

Changelog

• ab9c9f1 Add check flag to fmt command (#655)
• a64f75d Add new parser for .env files. (#653)
• ba621b1 Add parser name to cyclonedx acceptance test otherwise json would be used (#646)
• 4ac11cb Bump Dockerfile to alpine 1.17.5 (#651)
• 45a9f06 Bump alpine from 3.14.2 to 3.14.3 (#638)
• 83aaa3f Bump alpine from 3.14.3 to 3.15.0 (#645)
• deb33a7 Bump github.com/open-policy-agent/opa from 0.34.0 to 0.34.2 (#634)
• b1253c3 Bump golang from 1.17.2-alpine to 1.17.3-alpine (#633)
• 36abfcc Bump golang from 1.17.3-alpine to 1.17.4-alpine (#648)
• 06793a4 Fix bug to allow for multiple plugins (#657)
• 4ef97c2 Support for terragrunt default config files (#639)
• 748e2e2 Update Building and Testing documentation (#654)
• 418c6dc Update dependencies (#643)
• 851626c add file path information in returned error message (#641)
• 7b640fb chore: point to the right channel (#630)
• 74074d7 chore: replace part of linter from golint to revive, fixed warning wh… (#635)
• a843f61 feat: add quiet flag to verify (#652)
• 88f047c feat: cyclonedx parser (#637)
• a4aab53 feat: spdx parser (#636)
• 8f2a0c2 fix(exception): support empty string (#589)

v0.28.3

Changelog

14f426b Bump github.com/open-policy-agent/opa from 0.33.1 to 0.34.0 (#627)
8fca28f DEVELOPMENT.md: bats -> bats-core (#628)
b690395 engine+reporter: enable print() output (#629)

v0.28.2

This is a maintenance release only and does not include any bug fixes or new features.

Improvements

• Bump OPA to v0.33.1
• Bump Go to v1.17.2

Changelog

6b6595d (chore) Bump Go to 1.17.2 (#625)
b721065 Bump github.com/open-policy-agent/opa from 0.32.1 to 0.33.0 (#615)
3f24df0 Bump github.com/open-policy-agent/opa from 0.33.0 to 0.33.1 (#616)
445878f Bump golang from 1.17.1-alpine to 1.17.2-alpine (#618)
186ae1b Bump mkdocs from 1.1 to 1.2.3 (#624)
19e754e Bump nltk from 3.5 to 3.6.5 (#619)
02462d5 Remove old examples (#620)
4ecfbdf upgrade Oras to oras-go v0.4.0 (#617)