chore: bump github.com/open-policy-agent/opa from 1.4.2 to 1.15.2

[dependabot]

Bumps github.com/open-policy-agent/opa from 1.4.2 to 1.15.2.

Release notes

Sourced from github.com/open-policy-agent/opa's releases.

v1.15.2

This release updates the version of Go used to build the OPA binaries and images to 1.26.2. This version of Go contains multiple security fixes.

v1.15.1

This patch release fixes a backwards-incompatible change in the v1/logging.Logger interface that inadvertently made it into Release v1.15.0. When using OPA as Go module, and when providing custom Logger implementations, this change would break your build.

[!TIP] Users of the binaries or Docker images can ignore this, the code is otherwise the same as v1.15.0.

Miscellaneous

• logging: make WithContext() optional (authored by @​srenatus)

v1.15.0

This release contains a mix of new features, performance improvements, and bugfixes. Notably:

• Add logger plugin interface and file logger implementation with log rotation
• Custom HTTPAuthPlugin behavior change, all per-request authentication logic must be moved from NewClient() to Prepare()
• AWS signing supports for web identity for assume role credentials

Logger Plugin Support (#8434) (authored by @​srenatus)

OPA now supports pluggable logging implementations via the logger plugin interface, which is based on Go's standard log/slog.Handler interface. This allows any slog.Handler implementation to be used as a logger plugin. Loggers can be configured via the server.logger_plugin configuration option and used for both runtime logging and decision logs. OPA includes a built-in file logger plugin (file_logger) that writes structured JSON logs with rotation support using lumberjack. Users can also implement and register custom logger plugins when building OPA.

Example configuration for server logging:

server:
  logger_plugin: file_logger
plugins:
file_logger:
path: /var/log/opa/server.log
max_size_mb: 100
max_age_days: 28
max_backups: 3
compress: true
level: info

Example configuration for decision logs using the same plugin:

server:
  logger_plugin: file_logger
</tr></table> 

... (truncated)

Changelog

Sourced from github.com/open-policy-agent/opa's changelog.

1.15.2

This release updates the version of Go used to build the OPA binaries and images to 1.26.2. This version of Go contains multiple security fixes.

1.15.1

This patch release fixes a backwards-incompatible change in the v1/logging.Logger interface that inadvertently made it into Release v1.15.0. When using OPA as Go module, and when providing custom Logger implementations, this change would break your build.

Users of the binaries or Docker images can ignore this, the code is otherwise the same as v1.15.0.

Miscellaneous

• logging: make WithContext() optional (authored by @​srenatus)

1.15.0

This release contains a mix of new features, performance improvements, and bugfixes. Notably:

• Add logger plugin interface and file logger implementation with log rotation
• Custom HTTPAuthPlugin behavior change, all per-request authentication logic must be moved from NewClient() to Prepare()
• AWS signing supports for web identity for assume role credentials

Logger Plugin Support (#8434) (authored by @​srenatus)

OPA now supports pluggable logging implementations via the logger plugin interface, which is based on Go's standard log/slog.Handler interface. This allows any slog.Handler implementation to be used as a logger plugin. Loggers can be configured via the server.logger_plugin configuration option and used for both runtime logging and decision logs. OPA includes a built-in file logger plugin (file_logger) that writes structured JSON logs with rotation support using lumberjack. Users can also implement and register custom logger plugins when building OPA.

Example configuration for server logging:

server:
  logger_plugin: file_logger
plugins:
file_logger:
path: /var/log/opa/server.log
max_size_mb: 100
max_age_days: 28
max_backups: 3
compress: true
level: info

Example configuration for decision logs using the same plugin:

server:
  logger_plugin: file_logger
</tr></table> 

... (truncated)

Commits

• 37b80cb Prepare v1.15.2 release
• 537e12d build: bump go 1.26.2 (#8497)
• 2120bd8 Patch v1.15.1
• 251ba9d logging: make WithContext() optional
• f9e7302 Prepare v1.15.0 release (#8446)
• d0041c6 runtime+server: logger plugins (#8434)
• 8954525 build(deps): bump picomatch from 2.3.1 to 2.3.2 in /docs (#8443)
• 39a4c0e optimized bundles: filter metadata comments properly (#8388)
• 9fd6f93 build(deps): bump the gha-dependencies group with 5 updates (#8440)
• 01814e9 docs: Update KubeCon event listing (#8439)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[cloudflare-workers-and-pages]

Deploying with    Cloudflare Workers

The latest updates on your project. Learn more about integrating Git with Workers.

Status	Name	Latest Commit	Updated (UTC)
❌ Deployment failed View logs	codeserver	c064c59	Apr 27 2026, 01:00 PM

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	golang/​golang.org/​x/​oauth2@​v0.29.0 ⏵ v0.34.0	+1
	golang/​github.com/​prometheus/​client_golang@​v1.22.0 ⏵ v1.23.2	+1
	golang/​golang.org/​x/​crypto@​v0.39.0 ⏵ v0.48.0	+1	+3
	golang/​golang.org/​x/​net@​v0.41.0 ⏵ v0.51.0	+1	+2
	golang/​golang.org/​x/​tools@​v0.33.0 ⏵ v0.41.0	+1
	golang/​google.golang.org/​grpc@​v1.73.0 ⏵ v1.79.3	+1	+75
	golang/​google.golang.org/​protobuf@​v1.36.6 ⏵ v1.36.11	+1
	golang/​go.opentelemetry.io/​otel@​v1.37.0 ⏵ v1.40.0	+1
	golang/​github.com/​open-policy-agent/​opa@​v1.4.2 ⏵ v1.15.2	+1
	golang/​golang.org/​x/​text@​v0.26.0 ⏵ v0.34.0
	golang/​github.com/​prometheus/​client_model@​v0.6.1 ⏵ v0.6.2
	golang/​github.com/​prometheus/​common@​v0.63.0 ⏵ v0.66.1	+1
	golang/​golang.org/​x/​sys@​v0.33.0 ⏵ v0.41.0
	golang/​github.com/​go-jose/​go-jose/​v4@​v4.1.0 ⏵ v4.1.3
	golang/​go.opentelemetry.io/​otel/​sdk@​v1.37.0 ⏵ v1.40.0	+1	+6
	golang/​github.com/​klauspost/​compress@​v1.18.0 ⏵ v1.18.2	+1
	golang/​github.com/​stretchr/​testify@​v1.10.0 ⏵ v1.11.1	+1
	golang/​golang.org/​x/​mod@​v0.25.0 ⏵ v0.32.0
	golang/​github.com/​spf13/​pflag@​v1.0.6 ⏵ v1.0.10
	golang/​cloud.google.com/​go/​compute/​metadata@​v0.7.0 ⏵ v0.9.0	+1
	golang/​go.opentelemetry.io/​otel/​exporters/​otlp/​otlptrace/​otlptracegrpc@​v1.35.0 ⏵ v1.40.0
	golang/​golang.org/​x/​sync@​v0.15.0 ⏵ v0.20.0
	golang/​go.opentelemetry.io/​otel/​trace@​v1.37.0 ⏵ v1.40.0	+1
	golang/​golang.org/​x/​term@​v0.32.0 ⏵ v0.40.0	+1
	golang/​go.opentelemetry.io/​otel/​exporters/​otlp/​otlptrace@​v1.35.0 ⏵ v1.40.0

View full report