Skip to content

Upgrade OPA from v0.67.1 to v1.4.0 and update to v1 SDK#41

Merged
yale3450 merged 8 commits intomarqeta:mainfrom
yale3450:main
Jan 22, 2026
Merged

Upgrade OPA from v0.67.1 to v1.4.0 and update to v1 SDK#41
yale3450 merged 8 commits intomarqeta:mainfrom
yale3450:main

Conversation

@yale3450
Copy link
Contributor

@yale3450 yale3450 commented Jan 7, 2026

Upgraded in go.mod and go.sum files,
ran go tidy

JunxiHe459
JunxiHe459 previously approved these changes Jan 7, 2026
yanzhou2004
yanzhou2004 previously approved these changes Jan 15, 2026
@yale3450 yale3450 closed this Jan 20, 2026
@yale3450 yale3450 reopened this Jan 20, 2026
- Upgrade open-policy-agent/opa from v0.60.0 to v1.4.0
- Add replace directives to fix Snyk vulnerabilities:
  - go-jose/v3 to v3.0.4
  - go-jose/v4 to v4.0.5
  - go-viper/mapstructure/v2 to v2.3.0
  - containerd to v1.7.30
- Update go.mod and vendor dependencies
- All tests passing
ywang3 added 2 commits January 20, 2026 05:39
The vulnerabilities are fixed via replace directive in go.mod forcing v4.0.5,
but Snyk's static analysis doesn't recognize replace directives.
JunxiHe459
JunxiHe459 previously approved these changes Jan 20, 2026
@yale3450 yale3450 merged commit e9abc8a into marqeta:main Jan 22, 2026
4 of 5 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants