v0.59.0

Announcements

Breaking Changes ⚠️

• Bump hcl2json - This makes the behavior of the conversion more consistent by always using arrays for blocks that can be repeated. See #1074 and #1006 for more info.

Breaking Changes Reminder

In the v0.60 release of conftest (in May 2025), we will change the default version of Rego syntax from v0 to v1. This will be a breaking change if your Rego policies are not compatible with the v1 syntax.

• Individual policies can be updated gradually, by adding import rego.v1 to the policy.
• The rego-version flag will remain available indefinitely, and users who do not wish to update their Rego policies can continue to use v0 syntax by setting this flag to v0.

For more information about upgrading to Rego v1 syntax, see the upstream docs at https://www.openpolicyagent.org/docs/latest/v0-upgrade/.

Changelog

New Features

• 21e1163: feat: add pre-commit hook support (#1077) (@thevilledev)

OPA Changes

• eac6f5e: build(deps): bump github.com/open-policy-agent/opa from 1.2.0 to 1.3.0 (#1092) (@dependabot[bot])

Other Changes

• 813f329: build(deps): bump cuelang.org/go from 0.12.0 to 0.12.1 (#1094) (@dependabot[bot])
• 45bf533: build(deps): bump github.com/BurntSushi/toml from 1.4.0 to 1.5.0 (#1089) (@dependabot[bot])
• 19f1eaf: build(deps): bump github.com/magiconair/properties from 1.8.9 to 1.8.10 (#1097) (@dependabot[bot])
• a20159b: build(deps): bump github.com/moby/buildkit from 0.20.0 to 0.20.1 (#1083) (@dependabot[bot])
• 32aac49: build(deps): bump github.com/moby/buildkit from 0.20.1 to 0.20.2 (#1091) (@dependabot[bot])
• 1b1ce3a: build(deps): bump golang from 1.24.0-alpine to 1.24.1-alpine (#1086) (@dependabot[bot])
• cb88a17: build(deps): bump golang from 1.24.1-alpine to 1.24.2-alpine (#1096) (@dependabot[bot])
• 8c8b13f: ci: Remove PR workflow access to all permissions from GITHUB_TOKEN (#1088) (@jalseth)
• 688c88f: deps: Bump hcl2json to v0.6.7 (#1074) (@jalseth)
• e9612c3: refactor(ci): replace Makefile-based Docker builds with GitHub Action (#1082) (@Amamgbu)