All pull requests

Pull requests

• topdown: fix net.cidr_contains for CIDRs with IPv4-mapped boundary addresses

  #9398·choksi2212 opened Oct 18, 2026·

  ·
  1

• Fix net.cidr_contains false negatives on IPv6 subnets ending at ::ffff:ffff:ffff

  #9397·7-Bala opened Oct 17, 2026·

  ·
  1

  1

• ast: don't keep the statements a module was parsed from

  #9395·srenatus opened Oct 16, 2026Contributor·

  ·

• metrics_export: support resource attributes on exported metrics

  #9393·srenatus opened Oct 16, 2026Contributor·

  ·
  1

• ast: decode related-resource URI references

  #9389·autoCAT6 opened Oct 16, 2026·

  ·
  1

• topdown: fix partial eval panic on negated every

  #9388·choksi2212 opened Oct 15, 2026·

  ·
  1

  5

• topdown: various tweaks

  #9384·srenatus opened Oct 15, 2026Contributor·

  ·

• Adding ast.RegoV2 enum to Go API

  #9377·johanfylling opened Oct 14, 2026Contributor·

  ·
  7

• compile: support generating Lucene (Solr) filters

  #9376·srenatus opened Oct 14, 2026Contributor·

  ·
  1

• topdown: unroll every over a known domain

  partial-eval
  #9374·srenatus opened Oct 14, 2026Contributor·

  ·
  1

• docs: add Authz Playground to the OPA ecosystem

  #9372·kanywst opened Oct 13, 2026Contributor·

  ·
  1

• plugins/bundle: optionally send superseded etags in If-None-Match

  #9370·srenatus opened Oct 13, 2026Contributor·

  ·
  1

• plugins/logs: include metrics and error in mask and drop policy input

  #9364·girishkvs opened Oct 12, 2026Contributor·1 task done·

  ·
  1

  2

• plugins/logs: support masking array-rooted input and result

  #9363·girishkvs opened Oct 12, 2026Contributor·1 task done·

  ·
  1

  2

• sdk: convert ND builtins cache so decision log mask rules apply

  #9362·girishkvs opened Oct 12, 2026Contributor·1 task done·

  ·
  1

  5

• docs: add Rego Policy Libraries to the ecosystem page

  #9360·ynotbhatc opened Oct 12, 2026·

  ·
  1

• allow rego reuse in bundles

  #9359·srenatus opened Oct 12, 2026Contributor·

  ·
  1

• ast: allow mixed rule kinds on disjoint ref heads

  #9351·oleksii-udovychenko opened Oct 10, 2026Contributor·

  ·
  1

• ast: Reject negations that can never succeed

  #9348·sspaink opened Oct 9, 2026Member·

  ·
  1

  5

• topdown: deny unix:// http.send when allow_net is set

  #9324·Anandb71 opened Oct 4, 2026·

  ·
  1

  1

• Externalize parser and compiler tests

  #9173·johanfylling opened Sep 8, 2026Contributor·

  ·

• Inline aliases in compiler

  #9073·DrewCorlin opened Aug 24, 2026·

  ·
  30

• fix: reject some-in bindings that also appear in the domain

  #9062·BetterAndBetterII opened Aug 20, 2026·

  ·
  1

  4

• security: make allow_net restrict file:// refs in JSON schemas

  #9044·HarnageaGabriel opened Aug 18, 2026·

  ·
  1

  17

• docs: add examples for numbers, types, and uuid builtins

  #9042·VedantMadane opened Aug 18, 2026·

  ·
  1

  55