Update dependency conftest to v0.67.0

[minchine]

This PR contains the following updates:

Package	Update	Change
conftest	minor	0.55.0 -> 0.67.0

---

Release Notes

open-policy-agent/conftest (conftest)

v0.67.0

Compare Source

Changelog

Bug Fixes

• 69f41ed: fix(plugin): Handle spaces in the plugin command path (#​1242) (@​jalseth)

OPA Changes

• 59cb419: build(deps): bump github.com/open-policy-agent/opa from 1.12.1 to 1.13.1 (#​1262) (@​dependabot[bot])
• 507345f: build(deps): bump github.com/open-policy-agent/opa from 1.13.1 to 1.13.2 (#​1274) (@​dependabot[bot])
• 69b7329: build(deps): bump github.com/open-policy-agent/opa from 1.13.2 to 1.14.1 (#​1282) (@​dependabot[bot])

Other Changes

• 8ec8ba0: build(deps): bump actions/checkout from 5.0.0 to 6.0.1 (#​1230) (@​dependabot[bot])
• fb1d20e: build(deps): bump alpine from 3.23.2 to 3.23.3 (#​1264) (@​dependabot[bot])
• 84ee4f1: build(deps): bump bats-core/bats-action from 3.0.1 to 4.0.0 (#​1270) (@​dependabot[bot])
• 06f26a6: build(deps): bump cuelang.org/go from 0.15.1 to 0.15.3 (#​1244) (@​dependabot[bot])
• d01f783: build(deps): bump cuelang.org/go from 0.15.3 to 0.15.4 (#​1259) (@​dependabot[bot])
• b7f9627: build(deps): bump cuelang.org/go from 0.15.4 to 0.16.0 (#​1279) (@​dependabot[bot])
• 3e4cf98: build(deps): bump docker/build-push-action from 6.18.0 to 6.19.2 (#​1273) (@​dependabot[bot])
• b7060d3: build(deps): bump github.com/CycloneDX/cyclonedx-go from 0.9.3 to 0.10.0 (#​1265) (@​dependabot[bot])
• e130513: build(deps): bump github.com/hashicorp/go-getter from 1.8.3 to 1.8.4 (#​1245) (@​dependabot[bot])
• e5afd3f: build(deps): bump github.com/hashicorp/go-getter from 1.8.4 to 1.8.5 (#​1285) (@​dependabot[bot])
• d6f5fb2: build(deps): bump github.com/moby/buildkit from 0.26.3 to 0.27.1 (#​1260) (@​dependabot[bot])
• c1ba806: build(deps): bump github.com/moby/buildkit from 0.27.1 to 0.28.0 (#​1280) (@​dependabot[bot])
• fc57996: build(deps): bump github.com/spdx/tools-golang from 0.5.5 to 0.5.6 (#​1243) (@​dependabot[bot])
• 95d756f: build(deps): bump github.com/spdx/tools-golang from 0.5.6 to 0.5.7 (#​1251) (@​dependabot[bot])
• a59b8bd: build(deps): bump golang from 1.25.5-alpine to 1.25.6-alpine (#​1256) (@​dependabot[bot])
• bde1457: build(deps): bump golang from 1.25.6-alpine to 1.26.1-alpine (#​1281) (@​dependabot[bot])
• b2e58f0: build(deps): bump golangci/golangci-lint-action from 8.0.0 to 9.2.0 (#​1231) (@​dependabot[bot])
• b1e9f30: ci: Update Dependabot config (#​1267) (@​jalseth)
• bf63002: ci: Update setup-go to use Go version from go.mod (#​1268) (@​jalseth)

v0.66.0

Compare Source

Changelog

OPA Changes

• 08529c7: build(deps): bump github.com/open-policy-agent/opa from 1.11.0 to 1.12.1 (#​1240) (@​dependabot[bot])

Other Changes

• 10434c1: build(deps): bump actions/setup-python from 6.0.0 to 6.1.0 (#​1225) (@​dependabot[bot])
• 25bee5d: build(deps): bump alpine from 3.22.2 to 3.23.0 (#​1229) (@​dependabot[bot])
• 6cafc0f: build(deps): bump github.com/BurntSushi/toml from 1.5.0 to 1.6.0 (#​1238) (@​dependabot[bot])
• f6b8fa9: build(deps): bump github.com/moby/buildkit from 0.26.2 to 0.26.3 (#​1235) (@​dependabot[bot])
• 233776f: build(deps): bump golang from 1.25.4-alpine to 1.25.5-alpine (#​1228) (@​dependabot[bot])
• 7a86f94: chore: Remove dependency on github.com/pkg/errors (#​1233) (@​jalseth)
• 5a394b8: ci(golangci-lint): Disable revive skip-package-name-collision-with-go-std (#​1232) (@​jalseth)

v0.65.0

Compare Source

Changelog

New Features

• 7de1f99: feat: Add location to SARIF output (#​1207) (@​jalseth)

Bug Fixes

• 94bb769: fix(build): Include Git version when using 'make build' (#​1218) (@​jalseth)
• ff4e456: fix(sarif): Include conftest version number (#​1206) (@​jalseth)

OPA Changes

• 8c4cfa6: build(deps): bump github.com/open-policy-agent/opa from 1.10.1 to 1.11.0 (#​1224) (@​dependabot[bot])

Other Changes

• 3dab980: build(deps): bump cuelang.org/go from 0.15.0 to 0.15.1 (#​1217) (@​dependabot[bot])
• cfa85ca: build(deps): bump github.com/moby/buildkit from 0.25.2 to 0.26.2 (#​1216) (@​dependabot[bot])
• dd7e3bc: build(deps): bump golang from 1.25.3-alpine to 1.25.4-alpine (#​1210) (@​dependabot[bot])
• bbbb04c: chore: Include goreleaser in Nix devshell (#​1219) (@​jalseth)
• ac3146f: ci: Pin GitHub Actions to the Git SHA using ratchet (#​1204) (@​jalseth)

v0.64.0

Compare Source

Changelog

New Features

• 00b02b2: feat: Include location in the result output (#​1196) (@​jalseth)
• ee91078: feat: Refactor GitHub outputter to support locations from Rego policy (#​1197) (@​jalseth)
• d359466: feat: add conftest-fmt and conftest-pull pre-commit hooks (#​1192) (@​dkolepp)

Bug Fixes

• 997f5ce: fix: Fix XDG writable check on Windows (#​1185) (@​jalseth)
• fb9c88d: fix: Only use XDG directories for plugin if they are writable (#​1182) (@​jalseth)
• 4a2ddd6: fix: Use "python3" instead of "python" in the Makefile (#​1184) (@​jalseth)

OPA Changes

• 347388d: build(deps): bump github.com/open-policy-agent/opa from 1.9.0 to 1.10.1 (#​1201) (@​dependabot[bot])

Other Changes

• 75449c3: build(deps): bump alpine from 3.22.1 to 3.22.2 (#​1191) (@​dependabot[bot])
• 0ade44b: build(deps): bump cuelang.org/go from 0.14.1 to 0.15.0 (#​1202) (@​dependabot[bot])
• 1ef4588: build(deps): bump github.com/hashicorp/go-getter from 1.8.2 to 1.8.3 (#​1199) (@​dependabot[bot])
• d2e56c3: build(deps): bump github.com/moby/buildkit from 0.25.0 to 0.25.2 (#​1200) (@​dependabot[bot])
• 5242185: build(deps): bump golang from 1.25.1-alpine to 1.25.3-alpine (#​1193) (@​dependabot[bot])
• 58ace24: build: Add Nix devshell (#​1186) (@​jalseth)
• 6189512: chore: Fix gitignore for acceptance tests (#​1195) (@​jalseth)
• 7d41238: ci: Run validation job on Linux, macOS, Windows (#​1181) (@​jalseth)

v0.63.0

Compare Source

Changelog

New Features

• 30b9a8d: feat: add reformat command for JSON output conversion (#​1153) (@​thevilledev)

Bug Fixes

• ffb6ce3: fix: Add explicit line-number to GitHub output (#​1173) (@​tun0)

OPA Changes

• 64bf641: build(deps): bump github.com/open-policy-agent/opa from 1.6.0 to 1.7.1 (#​1156) (@​dependabot[bot])
• 981983b: build(deps): bump github.com/open-policy-agent/opa from 1.7.1 to 1.8.0 (#​1165) (@​dependabot[bot])
• c7aa1d4: build(deps): bump github.com/open-policy-agent/opa from 1.8.0 to 1.9.0 (#​1175) (@​dependabot[bot])

Other Changes

• 0d903ce: build(deps): bump actions/checkout from 4 to 5 (#​1158) (@​dependabot[bot])
• 364cf32: build(deps): bump actions/setup-go from 5 to 6 (#​1171) (@​dependabot[bot])
• d4aa81f: build(deps): bump actions/setup-python from 5 to 6 (#​1172) (@​dependabot[bot])
• a1ecf3f: build(deps): bump alpine from 3.22.0 to 3.22.1 (#​1152) (@​dependabot[bot])
• b87ca5f: build(deps): bump cuelang.org/go from 0.13.2 to 0.14.1 (#​1159) (@​dependabot[bot])
• 1c5abaa: build(deps): bump github.com/CycloneDX/cyclonedx-go from 0.9.2 to 0.9.3 (#​1177) (@​dependabot[bot])
• 2a509fe: build(deps): bump github.com/hashicorp/go-getter from 1.7.8 to 1.7.9 (#​1162) (@​dependabot[bot])
• a433ed0: build(deps): bump github.com/hashicorp/go-getter from 1.7.9 to 1.8.0 (#​1169) (@​dependabot[bot])
• d9dca30: build(deps): bump github.com/hashicorp/go-getter from 1.8.0 to 1.8.1 (#​1174) (@​dependabot[bot])
• b51f6d9: build(deps): bump github.com/hashicorp/go-getter from 1.8.1 to 1.8.2 (#​1178) (@​dependabot[bot])
• c664099: build(deps): bump github.com/moby/buildkit from 0.23.2 to 0.24.0 (#​1166) (@​dependabot[bot])
• 5378cc3: build(deps): bump github.com/moby/buildkit from 0.24.0 to 0.25.0 (#​1176) (@​dependabot[bot])
• fb4c503: build(deps): bump golang from 1.25.0-alpine to 1.25.1-alpine (#​1170) (@​dependabot[bot])
• 0d6e3b4: chore(deps): bump Go version to 1.25 (#​1160) (@​thevilledev)

v0.62.0

Compare Source

Changelog

OPA Changes

• ebb167d: build(deps): bump github.com/open-policy-agent/opa from 1.5.1 to 1.6.0 (#​1149) (@​dependabot[bot])

Other Changes

• 4c22f26: build(deps): bump alpine from 3.21.3 to 3.22.0 (#​1135) (@​dependabot[bot])
• 7cf3311: build(deps): bump cuelang.org/go from 0.13.0 to 0.13.2 (#​1148) (@​dependabot[bot])
• 2d33645: build(deps): bump github.com/moby/buildkit from 0.22.0 to 0.23.2 (#​1150) (@​dependabot[bot])
• 89ef4d5: build(deps): bump golang from 1.24.3-alpine to 1.24.4-alpine (#​1140) (@​dependabot[bot])
• c7f6f8f: chore: Replace OPA v0 with v1 import paths (#​1142) (@​jalseth)
• 91d8de7: chore: Use uppercase for all Dockerfile build keywords (#​1143) (@​jalseth)
• 060ea76: ci: Run docker builds in parallel during release (#​1139) (@​jalseth)

v0.61.2

Compare Source

Changelog

Other Changes

• e156f0d: Switch back to original conftest test --update behavior (#​1138) (@​iamleot)

v0.61.1

Compare Source

Changelog

OPA Changes

• 8e47770: build(deps): bump github.com/open-policy-agent/opa from 1.5.0 to 1.5.1 (#​1137) (@​dependabot[bot])

v0.61.0

Compare Source

Changelog

Bug Fixes

• ed0ff0a: fix(test): clean updated policies after test run (#​1109) (@​kirecek)
• f82f556: fix: Use v1 as rego version for fmt, too (#​1128) (@​msw-kialo)

OPA Changes

• bcba55e: build(deps): bump github.com/open-policy-agent/opa from 1.4.2 to 1.5.0 (#​1134) (@​dependabot[bot])

Other Changes

• a826a0b: build(deps): bump cuelang.org/go from 0.12.1 to 0.13.0 (#​1131) (@​dependabot[bot])
• d44b480: build(deps): bump github.com/moby/buildkit from 0.21.1 to 0.22.0 (#​1129) (@​dependabot[bot])
• f09428f: build(deps): bump golang from 1.24.2-alpine to 1.24.3-alpine (#​1124) (@​dependabot[bot])
• 1e43dc0: deps: update jsonc import path (#​1133) (@​st3penta)

v0.60.0

Compare Source

Announcements

⚠️ Breaking Changes ⚠️

We have set the default version of Rego syntax to v1. This is a breaking change if your Rego policies are not compatible with the v1 syntax.

• Individual policies can be updated gradually, by adding import rego.v1 to the policy.
• The rego-version flag will remain available indefinitely, and users who do not wish to update their Rego policies can continue to use v0 syntax by setting this flag to v0.

For more information about upgrading to Rego v1 syntax, see the upstream docs at https://www.openpolicyagent.org/docs/latest/v0-upgrade/.

Changelog

New Features

• 06658d4: feat(output): redirect trace output to stderr (#​1084) (@​thevilledev)
• 18a0f14: feat(runner): add support for symlinks (#​1098) (@​siliconsheep)

OPA Changes

• 2797c99: build(deps): bump github.com/open-policy-agent/opa from 1.3.0 to 1.4.1 (#​1113) (@​dependabot[bot])

Other Changes

• 67a3c3e: build(deps): bump actions/setup-go from 4 to 5 (#​1102) (@​dependabot[bot])
• 609490f: build(deps): bump bats-core/bats-action from 1.5.4 to 3.0.1 (#​1104) (@​dependabot[bot])
• 9e56924: build(deps): bump github.com/google/go-jsonnet from 0.20.0 to 0.21.0 (#​1120) (@​dependabot[bot])
• 5ea0446: build(deps): bump github.com/moby/buildkit from 0.20.2 to 0.21.0 (#​1101) (@​dependabot[bot])
• 21a73eb: build(deps): bump github.com/moby/buildkit from 0.21.0 to 0.21.1 (#​1111) (@​dependabot[bot])
• b3d0491: build(deps): bump golangci/golangci-lint-action from 6 to 7 (#​1103) (@​dependabot[bot])
• e894c43: build(deps): bump golangci/golangci-lint-action from 7 to 8 (#​1119) (@​dependabot[bot])
• 3ae2e78: chore: Update Github Actions via Dependabot (#​1100) (@​mrueg)
• 4c5e5f5: ci: Move docker build to separate job in the PR workflow (#​1105) (@​jalseth)
• 3907482: cli: Make Rego v1 syntax the default (#​1114) (@​jalseth)

v0.59.0

Compare Source

Announcements

Breaking Changes ⚠️

• Bump hcl2json - This makes the behavior of the conversion more consistent by always using arrays for blocks that can be repeated. See #​1074 and #​1006 for more info.

Breaking Changes Reminder

In the v0.60 release of conftest (in May 2025), we will change the default version of Rego syntax from v0 to v1. This will be a breaking change if your Rego policies are not compatible with the v1 syntax.

• Individual policies can be updated gradually, by adding import rego.v1 to the policy.
• The rego-version flag will remain available indefinitely, and users who do not wish to update their Rego policies can continue to use v0 syntax by setting this flag to v0.

For more information about upgrading to Rego v1 syntax, see the upstream docs at https://www.openpolicyagent.org/docs/latest/v0-upgrade/.

Changelog

New Features

• 21e1163: feat: add pre-commit hook support (#​1077) (@​thevilledev)

OPA Changes

• eac6f5e: build(deps): bump github.com/open-policy-agent/opa from 1.2.0 to 1.3.0 (#​1092) (@​dependabot[bot])

Other Changes

• 813f329: build(deps): bump cuelang.org/go from 0.12.0 to 0.12.1 (#​1094) (@​dependabot[bot])
• 45bf533: build(deps): bump github.com/BurntSushi/toml from 1.4.0 to 1.5.0 (#​1089) (@​dependabot[bot])
• 19f1eaf: build(deps): bump github.com/magiconair/properties from 1.8.9 to 1.8.10 (#​1097) (@​dependabot[bot])
• a20159b: build(deps): bump github.com/moby/buildkit from 0.20.0 to 0.20.1 (#​1083) (@​dependabot[bot])
• 32aac49: build(deps): bump github.com/moby/buildkit from 0.20.1 to 0.20.2 (#​1091) (@​dependabot[bot])
• 1b1ce3a: build(deps): bump golang from 1.24.0-alpine to 1.24.1-alpine (#​1086) (@​dependabot[bot])
• cb88a17: build(deps): bump golang from 1.24.1-alpine to 1.24.2-alpine (#​1096) (@​dependabot[bot])
• 8c8b13f: ci: Remove PR workflow access to all permissions from GITHUB_TOKEN (#​1088) (@​jalseth)
• 688c88f: deps: Bump hcl2json to v0.6.7 (#​1074) (@​jalseth)
• e9612c3: refactor(ci): replace Makefile-based Docker builds with GitHub Action (#​1082) (@​Amamgbu)

v0.58.0

Compare Source

Announcements

⚠️ Upcoming Breaking Changes ⚠️

In the v0.59 release of conftest (in April 2025), we will bump the hcl2json library which is used by the HCL2 parser. This makes the behavior of the conversion more consistent by always using arrays for blocks that can be repeated. See #​1074 and #​1006 for more info.

ℹ️ Breaking Changes Reminder ℹ️

In the v0.60 release of conftest (in May 2025), we will change the default version of Rego syntax from v0 to v1. This will be a breaking change if your Rego policies are not compatible with the v1 syntax.

• Individual policies can be updated gradually, by adding import rego.v1 to the policy.
• The rego-version flag will remain available indefinitely, and users who do not wish to update their Rego policies can continue to use v0 syntax by setting this flag to v0.

For more information about upgrading to Rego v1 syntax, see the upstream docs at https://www.openpolicyagent.org/docs/latest/v0-upgrade/.

Changelog

New Features

• 4154949: feat(test): Enable inter-query cache (#​1073) (@​jalseth)
• d62aa8d: feat: add --absolute-paths flag to pull command (#​1078) (@​thevilledev)

Bug Fixes

• 4435c65: fix: Conftest can now successfully load files using a file URL (e.g., file:///C:/path/to/data.yaml) on windows (#​999) (@​pckvcode)

OPA Changes

• 6424545: build(deps): bump github.com/open-policy-agent/opa from 1.1.0 to 1.2.0 (#​1080) (@​dependabot[bot])

Other Changes

• 8e0fdf2: build(deps): bump alpine from 3.21.2 to 3.21.3 (#​1072) (@​dependabot[bot])
• 6cb9d19: build(deps): bump github.com/moby/buildkit from 0.19.0 to 0.20.0 (#​1076) (@​dependabot[bot])
• 43264f4: build(deps): bump golang from 1.23.6-alpine to 1.24.0-alpine (#​1071) (@​dependabot[bot])
• 155cd3c: chore: Change empty interface{} to any throughout the codebase (#​1057) (@​jalseth)
• 278f735: chore: Update all examples to OPA V1 syntax (#​1058) (@​jalseth)
• 39bd5fc: ci: Revert "replace Makefile-based Docker builds with GitHub Action… (#​1075)" (#​1081) (@​jalseth)
• 854183b: refactor(ci): replace Makefile-based Docker builds with GitHub Action… (#​1075) (@​Amamgbu)
• cdd65ba: refactor(output): Add CheckResults type and helpers (#​1063) (@​jalseth)

v0.57.0

Compare Source

Announcements

⚠️ Upcoming Breaking Changes ⚠️

In the May 2025 release of conftest, we will change the default version of Rego syntax from v0 to v1. This will be a breaking change if your Rego policies are not compatible with the v1 syntax.

• With this release of conftest, users may opt-in to this behavior early by setting the --rego-version flag to v1.
• Individual policies can be updated gradually, by adding import rego.v1 to the policy.
• The rego-version flag will remain available indefinitely, and users who do not wish to update their Rego policies can continue to use v0 syntax by setting this flag to v0.

For more information about upgrading to Rego v1 syntax, see the upstream docs at https://www.openpolicyagent.org/docs/latest/v0-upgrade/.

Changelog

New Features

• eacba23: feat(engine): add query metadata to evaluation results (#​1061) (@​thevilledev)
• 5decd18: feat(parser): handle UTF-8 BOM in JSON input (#​1065) (@​thevilledev)
• abad255: feat: Implement SARIF output (#​1042) (@​thevilledev)
• aa9e3c8: feat: enable relative jsonnet imports by setting a path-aware importer (@​thevilledev)
• 3f67b78: feature: Documentation command (#​1009) (@​xNok)

Bug Fixes

• 151643b: fix: add output and tests for GitHub and Azure DevOps (@​thevilledev)
• a770d29: fix: correct linters-settings in .golangci.yaml to enable misspell (@​thevilledev)
• 8e541da: fix: improve handling for YAML version directives (@​thevilledev)
• 4f6bc40: fix: make sure lookup_ip_addr throwing builtin-err in test (#​1017) (@​boranx)
• 0bbb473: fix: max stack size already set by jsonnet.MakeVM() (@​thevilledev)
• 163bdd8: fix: prevent policy file overwrite on downloads (#​1039) (@​thevilledev)
• 8b34fcb: fix: remove redundant error check in push command (@​thevilledev)
• 7428841: fix: set jsonnet VM stack limits and add test coverage (@​thevilledev)

OPA Changes

• a8d6544: build(deps): bump github.com/open-policy-agent/opa from 0.69.0 to 0.70.0 (#​1016) (@​dependabot[bot])
• 19c82bc: build(deps): bump github.com/open-policy-agent/opa from 0.70.0 to 1.1.0 (#​1050) (@​dependabot[bot])

Other Changes

• 356ede4: Merge pull request #​1035 from open-policy-agent/dependabot/docker/alpine-3.21.2 (@​anderseknert)
• d5e8a77: Merge pull request #​1036 from open-policy-agent/dependabot/go_modules/github.com/hashicorp/go-getter-1.7.8 (@​anderseknert)
• a603656: Merge pull request #​1037 from thevilledev/fix/recursive-jsonnet (@​anderseknert)
• 3096ca7: Merge pull request #​1038 from thevilledev/fix/yaml-preamble-multidoc (@​anderseknert)
• 6b31946: Merge pull request #​1040 from thevilledev/fix/missing-outputs (@​anderseknert)
• 5063084: Merge pull request #​1041 from thevilledev/fix/impossible-nil (@​anderseknert)
• 1a25844: Merge pull request #​1043 from open-policy-agent/dependabot/docker/golang-1.23.5-alpine (@​anderseknert)
• 326a1a4: Merge pull request #​1044 from thevilledev/fix/jsonnet-library-imports (@​anderseknert)
• 744f867: Merge pull request #​1046 from open-policy-agent/dependabot/go_modules/github.com/moby/buildkit-0.19.0 (@​anderseknert)
• ea55b61: Merge pull request #​1051 from open-policy-agent/dependabot/go_modules/cuelang.org/go-0.12.0 (@​anderseknert)
• 6c867fc: Merge pull request #​1052 from thevilledev/fix/linters-settings ([@​anderseknert](https://redirect.github.com

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Renovate Bot.