Opa Envoy Plugin Versions Save

What's Changed

• deps(build): Bump OPA v0.64.0 -> v0.64.1 by @ashutosh-narkar in https://github.com/open-policy-agent/opa-envoy-plugin/pull/545. See the OPA v0.64.1 release notes.

What's Changed

• build(deps): bump google.golang.org/grpc from 1.62.1 to 1.63.2
• build(go): bump 1.22.1 -> 1.22.2 by @ashutosh-narkar in https://github.com/open-policy-agent/opa-envoy-plugin/pull/538
• build(deps): bump golang.org/x/tools from 0.19.0 to 0.20.0
• build(deps): bump golang.org/x/net from 0.17.0 to 0.23.0
• deps(build): Bump OPA v0.63.0 -> v0.64.0 by @ashutosh-narkar in https://github.com/open-policy-agent/opa-envoy-plugin/pull/544. See the OPA v0.64.0 release notes.

NOTES:

The minimum version of Go required to build the OPA-Envoy module is 1.21

What's Changed

• build(deps): bump google.golang.org/protobuf from 1.30.0 to 1.33.0 by @dependabot in https://github.com/open-policy-agent/opa-envoy-plugin/pull/532
• build(deps): Bump OPA v0.62.1 -> v0.63.0 by @ashutosh-narkar in https://github.com/open-policy-agent/opa-envoy-plugin/pull/535

What's Changed

• build: bump golang to 1.22.1 by @johanfylling in https://github.com/open-policy-agent/opa-envoy-plugin/pull/531
• build(deps): bump github.com/open-policy-agent/opa from 0.62.0 to 0.62.1 by @dependabot in https://github.com/open-policy-agent/opa-envoy-plugin/pull/530
• build(deps): bump golang.org/x/tools from 0.18.0 to 0.19.0 by @dependabot in https://github.com/open-policy-agent/opa-envoy-plugin/pull/526
• build(deps): bump google.golang.org/protobuf from 1.32.0 to 1.33.0 by @dependabot in https://github.com/open-policy-agent/opa-envoy-plugin/pull/527
• build(deps): bump github.com/golang/protobuf from 1.5.3 to 1.5.4 by @dependabot in https://github.com/open-policy-agent/opa-envoy-plugin/pull/529
• build(deps): bump google.golang.org/grpc from 1.62.0 to 1.62.1 by @dependabot in https://github.com/open-policy-agent/opa-envoy-plugin/pull/528

NOTES:

• The minimum version of Go required to build the OPA-Envoy module is 1.20

What's Changed

• Add B3 trace header propagation support by @be-a-bee in https://github.com/open-policy-agent/opa-envoy-plugin/pull/513
• Allow to set the decisionID from an external function by @Pushpalanka in https://github.com/open-policy-agent/opa-envoy-plugin/pull/516
• bump OPA v0.61.0 -> v0.62.0 by @ashutosh-narkar in https://github.com/open-policy-agent/opa-envoy-plugin/pull/525. See the OPA v0.62.0 release notes.
• bump golang to 1.22.0 by @ashutosh-narkar in https://github.com/open-policy-agent/opa-envoy-plugin/pull/524
• bump google.golang.org/grpc from 1.61.0 to 1.61.1
• bump golang.org/x/tools from 0.17.0 to 0.18.0
• bump google.golang.org/grpc from 1.61.1 to 1.62.0
• bump github.com/prometheus/client_golang from 1.18.0 to 1.19.0

See the OPA v0.61.0 release notes.

See the OPA v0.60.0 release notes.

See the OPA v0.59.0 release notes.

See the OPA v0.58.0 release notes.

OpenTelemetry IDs in Decision Logs

opa-envoy-plugin now includes trace and span IDs in its decision logs (https://github.com/open-policy-agent/opa-envoy-plugin/pull/473, authored by @be-a-bee)

This is a bug fix release addressing the following security issue:

Golang security fix GO-2023-2102

A malicious HTTP/2 client which rapidly creates requests and immediately resets them can cause excessive server resource consumption.