chore(deps): bump github.com/open-policy-agent/opa from 0.46.1 to 0.47.0

[dependabot]

Bumps github.com/open-policy-agent/opa from 0.46.1 to 0.47.0.

Release notes

Sourced from github.com/open-policy-agent/opa's releases.

v0.47.0

This release contains a mix of bugfixes, optimizations, and new features.

New Built-in Function: object.keys

It is now possible to conveniently retrieve an object's keys via a built-in function.

Before, you had to resort to constructs like

import future.keywords.in
keys[k] {
_ = input[k]
}
allow if "my_key" in keys

Now, you can simply do

import future.keywords.in
allow if "my_key" in object.keys(input)

See the documentation for all details.

Implemented by @​kevinswiber.

New Built-in Function: AWS Signature v4 Request Signing

It is now possible to use a built-in function to prepare a request with a signature, so that it can be used with AWS endpoints that use request signing for authentication.

See this example:

req := {"method": "get", "url": "https://examplebucket.s3.amazonaws.com/data"}
aws_config := {
    "aws_access_key": "MYAWSACCESSKEYGOESHERE",
    "aws_secret_access_key": "MYAWSSECRETACCESSKEYGOESHERE",
    "aws_service": "s3",
    "aws_region": "us-east-1",
}
example_verify_resource {
    resp := http.send(providers.aws.sign_req(req, aws_config, time.now_ns()))
    # process response from AWS ...
}

... (truncated)

Changelog

Sourced from github.com/open-policy-agent/opa's changelog.

0.47.0

This release contains a mix of bugfixes, optimizations, and new features.

New Built-in Function: object.keys

It is now possible to conveniently retrieve an object's keys via a built-in function.

Before, you had to resort to constructs like

import future.keywords.in
keys[k] {
_ = input[k]
}
allow if "my_key" in keys

Now, you can simply do

import future.keywords.in
allow if "my_key" in object.keys(input)

See the documentation for all details.

Implemented by @​kevinswiber.

New Built-in Function: AWS Signature v4 Request Signing

It is now possible to use a built-in function to prepare a request with a signature, so that it can be used with AWS endpoints that use request signing for authentication.

See this example:

req := {"method": "get", "url": "https://examplebucket.s3.amazonaws.com/data"}
aws_config := {
    "aws_access_key": "MYAWSACCESSKEYGOESHERE",
    "aws_secret_access_key": "MYAWSSECRETACCESSKEYGOESHERE",
    "aws_service": "s3",
    "aws_region": "us-east-1",
}
example_verify_resource {
    resp := http.send(providers.aws.sign_req(req, aws_config, time.now_ns()))
</tr></table> 

... (truncated)

Commits

• 09019be Prepare v0.47.0 release (#5431)
• 009a954 docs: update integration page (#5434)
• 6798ec7 build(deps): bump wasmtime-go to v3 (#5422)
• 9354f89 ast/parser: fresh wildcards for chained function heads (#5426)
• 50b9a9d json.patch: update docs to include behavior with sets (#5427)
• 7540f11 ast/parser: fix else handling with ref heads (#5425)
• 00f91dd website/edge: fix badge function schemaVersion (#5424)
• e681a16 website: experiment with badge endpoint (#5423)
• 518507b server: differentiate between missing and undefined doc in default decision (...
• d0026f4 add easegress to ecosystem (#5421)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)