kata-containers/regorus
1
0
Fork 0
mirror of https://github.com/microsoft/regorus.git synced 2026-08-05 02:16:11 +00:00
Code Issues Packages Projects Releases Wiki Activity
429 Commits 25 Branches 26 Tags
898643129e3652efd43e596f978d99f85e770235
Commit Graph

429 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Anand Krishnamoorthi 4d2b205ef4 fix!: Update ruby json dependency (#381) 
Previous version has Out-of-bounds Read in Ruby JSON Parser

Signed-off-by: Anand Krishnamoorthi <anakrish@microsoft.com>
 2025-03-14 13:31:12 -07:00
Anand Krishnamoorthi 4f7b9a4292 fix!: Remove ring dependency (#380) 
Remove dependency on jsonwebtoken which brings in the ring crate.
Ring crate triggers governance violations.

Support for JWT will be implemented in future using a more governance
compliant crate.

BREAKING CHANGE

Prior to this PR, support for jwt builtins was minimially implemented.
Only io.jwt.decode and io.jwt.decode_verify was implemented.
With this PR, those builtins will no longer be available. They are
planned to be implemented in the future. In the meantime, they can be
brought back in via Engine::add_extension.

Signed-off-by: Anand Krishnamoorthi <anakrish@microsoft.com>
 2025-03-14 10:49:57 -07:00
Anand Krishnamoorthi 4a2df93ae2 fix!: Remove sha1 dependency (#379) 
Removed cryptographically insecure sha1. This existed only for OPA
compatibility.

Also exclude bindings from main workspace

Signed-off-by: Anand Krishnamoorthi <anakrish@microsoft.com>
 2025-03-13 12:34:11 -07:00
Anand Krishnamoorthi c6a5f1d852 build: Specify optimization flags (#378) 
In release profile, enable lto and codgen-units = 1 to enable more
optimizations.

Signed-off-by: Anand Krishnamoorthi <anakrish@microsoft.com>
 2025-03-10 17:50:31 -07:00
Anand Krishnamoorthi 2901481c51 chore: release (#376) 
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
regorus-v0.3.0 		2025-03-10 12:33:59 -07:00
Anand Krishnamoorthi c963e477a3 feat: Update to OPA v1.2.0 (#373) 
Regorus now defaults to rego v1. `import rego.v1` is no longer needed.
Additionally, `future` keywords are automatically imported.

See
https://www.openpolicyagent.org/docs/latest/v0-upgrade/#changes-to-rego-in-opa-v10
to understand the differences between rego v1 and v0.

BREAKING CHANGE:

v0 style policies will error out by default. To enable v0 behavior, call engine.set_rego_v0(true) before
loading policies.

Signed-off-by: Anand Krishnamoorthi <anakrish@microsoft.com>
 2025-03-10 11:56:01 -07:00
dependabot[bot] cbd772623a build(deps): update pyo3 requirement from 0.23.5 to 0.24.0 (#375) 
Updates the requirements on [pyo3](https://github.com/pyo3/pyo3) to permit the latest version.
- [Release notes](https://github.com/pyo3/pyo3/releases)
- [Changelog](https://github.com/PyO3/pyo3/blob/main/CHANGELOG.md)
- [Commits](https://github.com/pyo3/pyo3/compare/v0.23.5...v0.24.0)

---
updated-dependencies:
- dependency-name: pyo3
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2025-03-09 20:25:44 -07:00
thedavemarshall a07beca983 Update ruby binding deps, ruby gem version 0.2.3 (#374) 
* Update ruby binding deps, ruby gem version 0.2.3

* and gem version to 0.2.3

* specify bunlder and rubygems version for CI
 2025-03-07 16:24:29 -08:00
Anand Krishnamoorthi a3edb6c88c build(deps): update pyo3 requirement from 0.22.0 to 0.23.5 (#372) 
Signed-off-by: Anand Krishnamoorthi <anakrish@microsoft.com>
 2025-03-04 15:44:24 -08:00
Anand Krishnamoorthi a1777fb7d3 build(deps): update rand requirement from 0.8.5 to 0.9.0 (#370) 
Signed-off-by: Anand Krishnamoorthi <anakrish@microsoft.com>
 2025-03-04 07:06:43 -08:00
dependabot[bot] 11aaa555aa build(deps): update cbindgen requirement from 0.27.0 to 0.28.0 (#361) 
Updates the requirements on [cbindgen](https://github.com/mozilla/cbindgen) to permit the latest version.
- [Release notes](https://github.com/mozilla/cbindgen/releases)
- [Changelog](https://github.com/mozilla/cbindgen/blob/master/CHANGES)
- [Commits](https://github.com/mozilla/cbindgen/compare/v0.27.0...0.28.0)

---
updated-dependencies:
- dependency-name: cbindgen
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2025-03-03 16:23:44 -08:00
Amaury Chamayou f1580a55a3 Fix typo in README.md (#366) 
Force merging since it is only a typo fix.

Signed-off-by: Amaury Chamayou <amaury@xargs.fr>
 2025-03-03 15:58:31 -08:00
Anand Krishnamoorthi 6174af1781 Update dependencies (#369) 
Specify `js` feature for `uuid` when building wasm by
specifying it as a non-optional dependency in wasm binding's Cargo.toml.

Signed-off-by: Anand Krishnamoorthi <anakrish@microsoft.com>
 2025-03-03 15:53:47 -08:00
thedavemarshall 5fa55d7274 Fix clippy warning for result? (#362) 2025-01-21 08:37:54 -08:00
dependabot[bot] 748c11cfa1 build(deps): update itertools requirement from 0.13.0 to 0.14.0 (#357) 
Updates the requirements on [itertools](https://github.com/rust-itertools/itertools) to permit the latest version.
- [Changelog](https://github.com/rust-itertools/itertools/blob/master/CHANGELOG.md)
- [Commits](https://github.com/rust-itertools/itertools/compare/v0.13.0...v0.14.0)

---
updated-dependencies:
- dependency-name: itertools
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2025-01-06 10:35:00 -08:00
dependabot[bot] fb035d3d93 build(deps): update jsonschema requirement from 0.26.1 to 0.28.1 (#356) 
Updates the requirements on [jsonschema](https://github.com/Stranger6667/jsonschema) to permit the latest version.
- [Release notes](https://github.com/Stranger6667/jsonschema/releases)
- [Changelog](https://github.com/Stranger6667/jsonschema/blob/master/CHANGELOG.md)
- [Commits](https://github.com/Stranger6667/jsonschema/compare/rust-v0.26.1...rust-v0.28.1)

---
updated-dependencies:
- dependency-name: jsonschema
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2025-01-06 10:01:06 -08:00
thedavemarshall ba3a128e84 resolve anyhow compile errors (#355) 2025-01-06 09:13:01 -08:00
dependabot[bot] d955ae10a5 build(deps): update prettydiff requirement from 0.7.0 to 0.8.0 (#348) 
---
updated-dependencies:
- dependency-name: prettydiff
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2024-11-25 09:39:27 -08:00
Anand Krishnamoorthi cabd086619 chore: release (#344) 
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
regorus-v0.2.8 		2024-11-06 13:28:25 -08:00
Anand Krishnamoorthi 4ec25f37a1 build(deps): update jsonschema requirement from 0.24.0 to 0.26.1 (#343) 
Signed-off-by: Anand Krishnamoorthi <anakrish@microsoft.com>
 2024-11-06 13:05:48 -08:00
Anand Krishnamoorthi c281d28474 chore: Update to OPA v0.70.0 (#341) 
Signed-off-by: Anand Krishnamoorthi <anakrish@microsoft.com>
 2024-11-06 12:20:11 -08:00
Anand Krishnamoorthi 1bfe38f9af fix: Lock wasm-bindgen version to 0.2.94 (#342) 
v0.2.95 causes a crash with wasm tests in CI

Signed-off-by: Anand Krishnamoorthi <anakrish@microsoft.com>
 2024-11-06 12:04:59 -08:00
dependabot[bot] 5bf7cd7cc8 build(deps): bump rexml (#337) 
Bumps the bundler group with 1 update in the /bindings/ruby directory: [rexml](https://github.com/ruby/rexml).


Updates `rexml` from 3.3.6 to 3.3.9
- [Release notes](https://github.com/ruby/rexml/releases)
- [Changelog](https://github.com/ruby/rexml/blob/master/NEWS.md)
- [Commits](https://github.com/ruby/rexml/compare/v3.3.6...v3.3.9)

---
updated-dependencies:
- dependency-name: rexml
  dependency-type: indirect
  dependency-group: bundler
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2024-11-04 08:53:08 -08:00
Anand Krishnamoorthi c56da34843 chore: release (#335) 
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
regorus-v0.2.7 		2024-10-22 14:05:26 -07:00
Anand Krishnamoorthi 61f82d1b34 fix: docs failing to build (#334) 
Added #![cfg_attr(docsrs, feature(doc_cfg))]

fixes #333
Signed-off-by: Anand Krishnamoorthi <anakrish@microsoft.com>
 2024-10-22 13:37:31 -07:00
dependabot[bot] 00f45c70fe build(deps): update jsonschema requirement from 0.23.0 to 0.24.0 (#332) 
Updates the requirements on [jsonschema](https://github.com/Stranger6667/jsonschema-rs) to permit the latest version.
- [Release notes](https://github.com/Stranger6667/jsonschema-rs/releases)
- [Changelog](https://github.com/Stranger6667/jsonschema-rs/blob/master/CHANGELOG.md)
- [Commits](https://github.com/Stranger6667/jsonschema-rs/compare/rust-v0.23.0...rust-v0.24.0)

---
updated-dependencies:
- dependency-name: jsonschema
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2024-10-21 07:30:12 -07:00
Anand Krishnamoorthi df73b20192 build(deps): update jsonschema requirement from 0.22.3 to 0.23.0 (#331) 2024-10-15 10:29:41 -07:00
Anand Krishnamoorthi 992b202f60 chore: release (#329) 
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
regorus-v0.2.6 		2024-10-09 12:52:25 -07:00
Anand Krishnamoorthi ce6ecd6fd6 feat: integer conversion functions for Value (#328) 
closes #324

Signed-off-by: Anand Krishnamoorthi <anakrish@microsoft.com>
 2024-10-09 12:19:54 -07:00
Anand Krishnamoorthi 37262ccf8f chore: update to OPA v0.69.0 (#327) 
Also fix CRLF vs LF related test failures in two doc tests on Windows

Signed-off-by: Anand Krishnamoorthi <anakrish@microsoft.com>
 2024-10-09 10:57:09 -07:00
dependabot[bot] dcd040cf40 build(deps): update jsonschema requirement from 0.21.0 to 0.22.3 (#326) 
Updates the requirements on [jsonschema](https://github.com/Stranger6667/jsonschema-rs) to permit the latest version.
- [Release notes](https://github.com/Stranger6667/jsonschema-rs/releases)
- [Changelog](https://github.com/Stranger6667/jsonschema-rs/blob/master/CHANGELOG.md)
- [Commits](https://github.com/Stranger6667/jsonschema-rs/compare/rust-v0.21.0...rust-v0.22.3)

---
updated-dependencies:
- dependency-name: jsonschema
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2024-10-07 13:30:05 -07:00
dependabot[bot] f0a3cf26a0 build(deps): update jsonschema requirement from 0.20.0 to 0.21.0 (#325) 
Updates the requirements on [jsonschema](https://github.com/Stranger6667/jsonschema-rs) to permit the latest version.
- [Release notes](https://github.com/Stranger6667/jsonschema-rs/releases)
- [Changelog](https://github.com/Stranger6667/jsonschema-rs/blob/master/CHANGELOG.md)
- [Commits](https://github.com/Stranger6667/jsonschema-rs/compare/rust-v0.20.0...rust-v0.21.0)

---
updated-dependencies:
- dependency-name: jsonschema
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2024-09-30 08:34:48 -07:00
Anand Krishnamoorthi 13d8289a58 chore: update to jsonschema 0.20.0 (#323) 2024-09-23 13:01:24 -07:00
Anand Krishnamoorthi d2b27ee512 chore: release (#320) 
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
regorus-v0.2.5 		2024-09-18 14:17:17 -07:00
Anand Krishnamoorthi adb9da0c0c fix: Null terminate C# strings in Rust boundary (#318) 
Signed-off-by: Anand Krishnamoorthi <anakrish@microsoft.com>
 2024-09-18 13:58:51 -07:00
dependabot[bot] dc0f48f6bc Update jsonschema requirement from 0.18.0 to 0.19.1 (#317) 
Updates the requirements on [jsonschema](https://github.com/Stranger6667/jsonschema-rs) to permit the latest version.
- [Release notes](https://github.com/Stranger6667/jsonschema-rs/releases)
- [Changelog](https://github.com/Stranger6667/jsonschema-rs/blob/master/CHANGELOG.md)
- [Commits](https://github.com/Stranger6667/jsonschema-rs/compare/rust-v0.18.0...rust-v0.19.1)

---
updated-dependencies:
- dependency-name: jsonschema
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2024-09-16 09:12:00 -07:00
dependabot[bot] 334db3d6ce Update chrono-tz requirement from 0.8.5 to 0.10.0 (#316) 
Updates the requirements on [chrono-tz](https://github.com/chronotope/chrono-tz) to permit the latest version.
- [Release notes](https://github.com/chronotope/chrono-tz/releases)
- [Commits](https://github.com/chronotope/chrono-tz/compare/v0.8.5...v0.10.0)

---
updated-dependencies:
- dependency-name: chrono-tz
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2024-09-16 08:42:19 -07:00
Anand Krishnamoorthi 7565ec3ecf feat: or keyword (#315) 
Add `or` operator to Rego languages. Available via `rego-extensions`
Cargo feature.

If the evaluated lhs value is not false, null or undefined it is returned.
Otherwise rhs is evaluated and returned.

or operator has least precedence, and is left-associative.

closes #314
 2024-09-13 16:39:19 -07:00
Sumedh Alok Sharma 8498274356 Add tests for builtin strings::lower method (#313) 
Signed-off-by: Sumedh Alok Sharma <sumsharma@microsoft.com>
 2024-09-11 09:15:28 -07:00
Sumedh Alok Sharma ecd341bbcc Add tests for builtin strings::indexof method (#311) 
Signed-off-by: Sumedh Alok Sharma <sumsharma@microsoft.com>
 2024-09-11 09:14:21 -07:00
Anand Krishnamoorthi b6935d1add fix: Update readme with correct path to example policy (#312) 
Also add test to lock down example policy path.
Also Fix clippy warning by using unwrap_or_default

Signed-off-by: Anand Krishnamoorthi <anakrish@microsoft.com>
 2024-09-10 11:47:46 -07:00
Anand Krishnamoorthi 502b830c19 chore: release (#310) 
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
regorus-v0.2.4 		2024-09-04 10:22:55 -07:00
Anand Krishnamoorthi 8003cfc5b7 fix: Handle parsing corner cases (#309) 
A block with a single or expression needs to be treated as a comprehension instead of a
set/array with 1 item. e.g.: {1 | 1 }, [2 | foo]

Allow successfully parsing object comprehensions as rule body
x if { 1:2 | 1 }

fixes #306, fixes #307

Signed-off-by: Anand Krishnamoorthi <anakrish@microsoft.com>
 2024-09-04 10:02:14 -07:00
Anand Krishnamoorthi a4a80d7fc6 fix: Propagate errors encountered in argument evaluation (#308) 
fixes #301

Signed-off-by: Anand Krishnamoorthi <anakrish@microsoft.com>
 2024-08-31 13:46:55 -07:00
Anand Krishnamoorthi af5071446b feat: OPA v0.68.0. Engine::set_rego_v1 (#305) 
Provide ability in the engine to treat subsequently loaded policies
as rego.v1.

Signed-off-by: Anand Krishnamoorthi <anakrish@microsoft.com>
 2024-08-30 15:11:09 -07:00
Anand Krishnamoorthi edd0ccca5b fix: Issues #302, #303 (#304) 
Handle undefined values correctly in ordered-else. Previously an undefined value
in one of the blocks could cause the entire rule to evaluate to undefined.

Handle undefined values correctly in generic rule refs to prevent them from
propagating to output.

Signed-off-by: Anand Krishnamoorthi <anakrish@microsoft.com>
 2024-08-29 09:47:45 -07:00
dependabot[bot] fec6f8f8b4 Bump rexml in /bindings/ruby in the bundler group across 1 directory (#300) 
Bumps the bundler group with 1 update in the /bindings/ruby directory: [rexml](https://github.com/ruby/rexml).


Updates `rexml` from 3.3.3 to 3.3.6
- [Release notes](https://github.com/ruby/rexml/releases)
- [Changelog](https://github.com/ruby/rexml/blob/master/NEWS.md)
- [Commits](https://github.com/ruby/rexml/compare/v3.3.3...v3.3.6)

---
updated-dependencies:
- dependency-name: rexml
  dependency-type: indirect
  dependency-group: bundler
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2024-08-22 14:13:29 -07:00
Anand Krishnamoorthi dff65f0329 chore: release (#298) 
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
regorus-v0.2.3 		2024-08-16 08:45:52 -07:00
dependabot[bot] 6bf40c7394 Update cbindgen requirement from 0.26.0 to 0.27.0 (#296) 
Updates the requirements on [cbindgen](https://github.com/mozilla/cbindgen) to permit the latest version.
- [Release notes](https://github.com/mozilla/cbindgen/releases)
- [Changelog](https://github.com/mozilla/cbindgen/blob/master/CHANGES)
- [Commits](https://github.com/mozilla/cbindgen/compare/0.26.0...v0.27.0)

---
updated-dependencies:
- dependency-name: cbindgen
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2024-08-12 09:09:53 -07:00
Anand Krishnamoorthi a488a84969 fix: Match OPA behavior for split (#295) 
In case of empty delimiter, Rust's split returns leading and trailing
empty strings whereas Golang's doesn't.
Change behavior to match Golang/OPA.

fixes #291

Signed-off-by: Anand Krishnamoorthi <anakrish@microsoft.com>
 2024-08-08 14:53:01 -07:00