Update dependencies in the Dockerfile (#4995)

Author: sandhose

.github/actions/build-policies/action.yml

@@ -12,7 +12,8 @@ runs:
     - name: Install Open Policy Agent
       uses: open-policy-agent/[email protected]
       with:
-        version: 1.1.0
+        # Keep in sync with the Dockerfile and policies/Makefile
+        version: 1.8.0
 
     - name: Build the policies
       run: make

.github/workflows/ci.yaml

@@ -41,7 +41,8 @@ jobs:
       - name: Setup Regal
         uses: StyraInc/setup-regal@v1
         with:
-          version: 0.29.2
+          # Keep in sync with policies/Makefile
+          version: 0.36.1
 
       - name: Lint policies
         working-directory: ./policies

Dockerfile

@@ -13,9 +13,10 @@
 ARG DEBIAN_VERSION=12
 ARG DEBIAN_VERSION_NAME=bookworm
 ARG RUSTC_VERSION=1.89.0
-ARG NODEJS_VERSION=20.15.0
-ARG OPA_VERSION=1.1.0
-ARG CARGO_AUDITABLE_VERSION=0.6.6
+ARG NODEJS_VERSION=22.19.0
+# Keep in sync with .github/actions/build-policies/action.yml and policies/Makefile
+ARG OPA_VERSION=1.8.0 
+ARG CARGO_AUDITABLE_VERSION=0.7.0
 
 ##########################################
 ## Build stage that builds the frontend ##
@@ -24,7 +25,7 @@ FROM --platform=${BUILDPLATFORM} docker.io/library/node:${NODEJS_VERSION}-${DEBI
 
 WORKDIR /app/frontend
 
-COPY ./frontend/package.json ./frontend/package-lock.json /app/frontend/
+COPY ./frontend/.npmrc ./frontend/package.json ./frontend/package-lock.json /app/frontend/
 # Network access: to fetch dependencies
 RUN --network=default \
   npm ci

frontend/.npmrc

@@ -0,0 +1 @@
+engine-strict=true

policies/.regal/config.yaml

@@ -4,6 +4,9 @@
 # Please see LICENSE files in the repository root for full details.
 
 rules:
+  imports:
+    unresolved-reference:
+      level: ignore
   style:
     external-reference:
       level: ignore

policies/Makefile

@@ -6,8 +6,10 @@
 # Set to 1 to run OPA through Docker
 DOCKER := 0
 PODMAN := 0
-OPA_DOCKER_IMAGE := docker.io/openpolicyagent/opa:1.1.0-debug
-REGAL_DOCKER_IMAGE := ghcr.io/styrainc/regal:0.31.0
+# Keep in sync with Dockerfile and .github/actions/build-policies/action.yml
+OPA_DOCKER_IMAGE := docker.io/openpolicyagent/opa:1.8.0-debug
+# Keep in sync with .github/workflows/ci.yaml
+REGAL_DOCKER_IMAGE := ghcr.io/open-policy-agent/regal:0.36.1
 
 INPUTS := \
 	common/common.rego \