chore: bump github.com/open-policy-agent/opa from 1.4.2 to 1.16.1

[dependabot]

Bumps github.com/open-policy-agent/opa from 1.4.2 to 1.16.1.

Release notes

Sourced from github.com/open-policy-agent/opa's releases.

v1.16.1

This is a patch release addressing a regression in the plugin manager that may cause the service to hang on shutdown (#8590).

v1.16.0

[!WARNING]

A regression has been found in the plugin manager, which may cause the service to hang on shutdown. Users are advised to go directly to v1.16.1.

This release contains a mix of new features, performance improvements, and bugfixes. Notably:

• New uri.parse and uri.is_valid built-in functions
• Data API Request/Response Metadata
• Prometheus metrics exported via OTLP
• Formatter improvements

NOTE:

In v1.15.x, OPA was dropping logs for bundle downloads, print() calls and other plugin-originated logs. Users are advised to update, v1.16.0 fixes this bug in (#8544).

New uri.parse and uri.is_valid built-in functions (#8263)

Two new built-in functions have been added: uri.parse for parsing a given URI, and uri.is_valid for verifying the structure of a given URI.

uri.parse

Parses a URI and returns an object containing its components according to RFC 3986. Empty components are omitted.

package example
test_uri if {
uri.parse("https://example.com:8080/api?q=1#top") == {
"scheme": "https",
"hostname": "example.com",
"port": "8080",
"path": "/api",
"raw_path": "/api",
"raw_query": "q=1",
"fragment": "top",
}
}

uri.is_valid

Returns true if the input can be parsed as a URI, false otherwise.

... (truncated)

Changelog

Sourced from github.com/open-policy-agent/opa's changelog.

1.16.1

This is a patch release addressing a regression (#8590) in the plugin manager that may cause the service to hang on shutdown.

1.16.0

This release contains a mix of new features, performance improvements, and bugfixes. Notably:

• New uri.parse and uri.is_valid built-in functions
• Data API Request/Response Metadata
• Prometheus metrics exported via OTLP
• Formatter improvements

NOTE:

In v1.15.x, OPA was dropping logs for bundle downloads, print() calls and other plugin-originated logs. Users are advised to update, v1.16.0 fixes this bug in (#8544).

New uri.parse and uri.is_valid built-in functions (#8263)

Two new built-in functions have been added: uri.parse for parsing a given URI, and uri.is_valid for verifying the structure of a given URI.

uri.parse

Parses a URI and returns an object containing its components according to RFC 3986. Empty components are omitted.

package example
test_uri if {
uri.parse("https://example.com:8080/api?q=1#top") == {
"scheme": "https",
"hostname": "example.com",
"port": "8080",
"path": "/api",
"raw_path": "/api",
"raw_query": "q=1",
"fragment": "top",
}
}

uri.is_valid

Returns true if the input can be parsed as a URI, false otherwise.

package example
deny contains "invalid URI" if {
</tr></table>

... (truncated)

Commits

• a72f9fa Prepare v1.16.1 release
• 9339812 plugins: Ensure plugin status functions don't hang after manager is stopped (...
• f3adf61 Release v1.16.0 (#8581)
• c5a446f Add regression test for comparing objects with array keys
• 7bc92c6 workflow: update benchmarks notebook generation
• 882d5a7 build(deps): bump the dependencies group across 2 directories with 9 updates ...
• b33179c docs: Fix input value type in not undefined example (#8580)
• 3d602ca perf: Add CopyNonGround() methods for Array, Set, and Object (#8323)
• 1a8e7b1 docs(policy-reference): add aggregates examples for count and sum (#8566)
• 343ddf5 builtins: Add uri.parse and uri.is_valid built in functions (#8578)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[cloudflare-workers-and-pages]

Deploying with    Cloudflare Workers

The latest updates on your project. Learn more about integrating Git with Workers.

Status	Name	Latest Commit	Updated (UTC)
❌ Deployment failed View logs	codeserver	2dc03ab	May 04 2026, 01:39 PM

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	golang/​golang.org/​x/​oauth2@​v0.29.0 ⏵ v0.35.0	+1
	golang/​github.com/​prometheus/​client_golang@​v1.22.0 ⏵ v1.23.2	+1
	golang/​golang.org/​x/​crypto@​v0.39.0 ⏵ v0.50.0	+1	+3
	golang/​golang.org/​x/​net@​v0.41.0 ⏵ v0.53.0	+1	+2
	golang/​golang.org/​x/​tools@​v0.33.0 ⏵ v0.43.0	+1
	golang/​google.golang.org/​grpc@​v1.73.0 ⏵ v1.80.0	+1	+75
	golang/​google.golang.org/​protobuf@​v1.36.6 ⏵ v1.36.11	+1
	golang/​go.opentelemetry.io/​otel@​v1.37.0 ⏵ v1.43.0	+1	+16
	golang/​github.com/​open-policy-agent/​opa@​v1.4.2 ⏵ v1.16.1	+1
	golang/​golang.org/​x/​text@​v0.26.0 ⏵ v0.36.0
	golang/​github.com/​prometheus/​client_model@​v0.6.1 ⏵ v0.6.2
	golang/​github.com/​prometheus/​common@​v0.63.0 ⏵ v0.67.5
	golang/​golang.org/​x/​sys@​v0.33.0 ⏵ v0.43.0
	golang/​github.com/​go-jose/​go-jose/​v4@​v4.1.0 ⏵ v4.1.3
	golang/​github.com/​klauspost/​compress@​v1.18.0 ⏵ v1.18.5	+1
	golang/​github.com/​stretchr/​testify@​v1.10.0 ⏵ v1.11.1	+1
	golang/​golang.org/​x/​mod@​v0.25.0 ⏵ v0.34.0
	golang/​github.com/​spf13/​pflag@​v1.0.6 ⏵ v1.0.10
	golang/​cloud.google.com/​go/​compute/​metadata@​v0.7.0 ⏵ v0.9.0	+1
	golang/​go.opentelemetry.io/​otel/​sdk@​v1.37.0 ⏵ v1.43.0	+1	+22
	golang/​go.opentelemetry.io/​otel/​exporters/​otlp/​otlptrace/​otlptracegrpc@​v1.35.0 ⏵ v1.43.0
	golang/​golang.org/​x/​sync@​v0.15.0 ⏵ v0.20.0
	golang/​go.opentelemetry.io/​otel/​trace@​v1.37.0 ⏵ v1.43.0	+1
	golang/​golang.org/​x/​term@​v0.32.0 ⏵ v0.42.0	+1
	golang/​go.opentelemetry.io/​otel/​exporters/​otlp/​otlptrace@​v1.35.0 ⏵ v1.43.0

View full report