head 1.56; access; symbols pkgsrc-2026Q2:1.53.0.2 pkgsrc-2026Q2-base:1.53 pkgsrc-2026Q1:1.50.0.2 pkgsrc-2026Q1-base:1.50 pkgsrc-2025Q4:1.44.0.2 pkgsrc-2025Q4-base:1.44 pkgsrc-2025Q3:1.40.0.2 pkgsrc-2025Q3-base:1.40 pkgsrc-2025Q2:1.36.0.2 pkgsrc-2025Q2-base:1.36 pkgsrc-2025Q1:1.31.0.2 pkgsrc-2025Q1-base:1.31 pkgsrc-2024Q4:1.27.0.2 pkgsrc-2024Q4-base:1.27 pkgsrc-2024Q3:1.25.0.2 pkgsrc-2024Q3-base:1.25 pkgsrc-2024Q2:1.20.0.2 pkgsrc-2024Q2-base:1.20 pkgsrc-2024Q1:1.17.0.2 pkgsrc-2024Q1-base:1.17 pkgsrc-2023Q4:1.11.0.2 pkgsrc-2023Q4-base:1.11 pkgsrc-2023Q3:1.5.0.2 pkgsrc-2023Q3-base:1.5; locks; strict; comment @# @; 1.56 date 2026.08.22.15.19.02; author bsiegert; state Exp; branches; next 1.55; commitid y6FJlsYJaKI18ESG; 1.55 date 2026.08.15.12.53.23; author bsiegert; state Exp; branches; next 1.54; commitid 5lqJISwxui9ZxJRG; 1.54 date 2026.07.08.18.32.28; author bsiegert; state Exp; branches; next 1.53; commitid cDbYxmIrkrXYDSMG; 1.53 date 2026.06.05.10.21.38; author bsiegert; state Exp; branches 1.53.2.1; next 1.52; commitid jt8yVpLxXvatZAIG; 1.52 date 2026.05.07.18.49.55; author bsiegert; state Exp; branches; next 1.51; commitid MMrI2EXGAt3HJUEG; 1.51 date 2026.04.08.05.44.58; author bsiegert; state Exp; branches; next 1.50; commitid FFJx9trbRMg7k7BG; 1.50 date 2026.03.15.11.46.22; author leot; state Exp; branches 1.50.2.1; next 1.49; commitid fhkZBGT6SNd164yG; 1.49 date 2026.03.06.21.07.52; author bsiegert; state Exp; branches; next 1.48; commitid AQtIeR1eh5qvuXwG; 1.48 date 2026.02.24.08.45.26; author bsiegert; state Exp; branches; next 1.47; commitid IrpU9bGVDwSIHBvG; 1.47 date 2026.01.26.19.49.19; author bsiegert; state Exp; branches; next 1.46; commitid yzzTb7tKWPopjWrG; 1.46 date 2026.01.25.11.12.44; author leot; state Exp; branches; next 1.45; commitid YgDR5PSg2io8uLrG; 1.45 date 2026.01.15.19.54.44; author bsiegert; state Exp; branches; next 1.44; commitid Zuo9UmMrkrU4HwqG; 1.44 date 2025.12.02.19.25.09; author bsiegert; state Exp; branches; next 1.43; commitid 269raRGxaHJBWRkG; 1.43 date 2025.11.27.09.45.15; author leot; state Exp; branches; next 1.42; commitid RFaHfE6VUxtHTakG; 1.42 date 2025.10.16.17.59.50; author bsiegert; state Exp; branches; next 1.41; commitid RAGpkHmyeYCUYOeG; 1.41 date 2025.10.08.06.54.26; author bsiegert; state Exp; branches; next 1.40; commitid 5p46uH9RJXSFyJdG; 1.40 date 2025.09.14.08.28.28; author leot; state Exp; branches; next 1.39; commitid R3qqoKcwdAaNQEaG; 1.39 date 2025.09.06.13.16.59; author bsiegert; state Exp; branches; next 1.38; commitid cojusOdnRBFGHE9G; 1.38 date 2025.08.31.10.02.49; author bsiegert; state Exp; branches; next 1.37; commitid SdH7Ppgppxg5PR8G; 1.37 date 2025.08.22.16.12.35; author leot; state Exp; branches; next 1.36; commitid yTA6x8wpJyLT9K7G; 1.36 date 2025.06.11.16.47.06; author leot; state Exp; branches; next 1.35; commitid Y4wUWti8HTteFuYF; 1.35 date 2025.06.06.14.01.27; author bsiegert; state Exp; branches; next 1.34; commitid JbNcx43ItkrmUPXF; 1.34 date 2025.06.01.14.18.49; author leot; state Exp; branches; next 1.33; commitid 2l9LZvSJcLPhacXF; 1.33 date 2025.04.05.18.51.16; author bsiegert; state Exp; branches; next 1.32; commitid 5KX0APffNjdlvTPF; 1.32 date 2025.03.30.11.43.38; author leot; state Exp; branches; next 1.31; commitid 30tnfaUHnhcfk5PF; 1.31 date 2025.03.07.20.54.19; author bsiegert; state Exp; branches 1.31.2.1; next 1.30; commitid rfTPfnLphAPl7bMF; 1.30 date 2025.03.02.16.04.11; author leot; state Exp; branches; next 1.29; commitid qfdwboqSwMkLFvLF; 1.29 date 2025.01.19.17.39.31; author leot; state Exp; branches; next 1.28; commitid eD3TVCrJRWyFx7GF; 1.28 date 2025.01.15.13.49.57; author leot; state Exp; branches; next 1.27; commitid HQ8VdPHhj9L9pAFF; 1.27 date 2024.11.22.17.53.40; author leot; state Exp; branches; next 1.26; commitid Gi4gPA8In38CuFyF; 1.26 date 2024.10.20.10.31.19; author leot; state Exp; branches; next 1.25; commitid F4OG5GVHoG6E6ouF; 1.25 date 2024.09.06.18.48.47; author bsiegert; state Exp; branches; next 1.24; commitid sM1YPLxu37gUgMoF; 1.24 date 2024.08.19.15.16.08; author leot; state Exp; branches; next 1.23; commitid gE08BYsZwCb6FrmF; 1.23 date 2024.08.11.15.57.01; author bsiegert; state Exp; branches; next 1.22; commitid Q02ZqKpOSdvP9qlF; 1.22 date 2024.07.17.12.37.07; author leot; state Exp; branches; next 1.21; commitid IGcH4x2Wb3Z7RbiF; 1.21 date 2024.07.03.06.59.23; author bsiegert; state Exp; branches; next 1.20; commitid clKUvbmZS6C5rmgF; 1.20 date 2024.06.13.13.47.00; author bsiegert; state Exp; branches; next 1.19; commitid JAoDOmAvI7TNkPdF; 1.19 date 2024.06.01.14.02.53; author bsiegert; state Exp; branches; next 1.18; commitid ffwNZJIDPPV5OhcF; 1.18 date 2024.04.05.19.14.00; author bsiegert; state Exp; branches; next 1.17; commitid eg3d1kDRSryvmZ4F; 1.17 date 2024.03.24.19.50.29; author leot; state Exp; branches; next 1.16; commitid u6der1InixRYWr3F; 1.16 date 2024.02.23.22.41.20; author leot; state Exp; branches; next 1.15; commitid cMsZ76iLtQanRBZE; 1.15 date 2024.02.07.14.50.50; author bsiegert; state Exp; branches; next 1.14; commitid 7gDVHFycBNsGLvXE; 1.14 date 2024.01.10.19.14.30; author bsiegert; state Exp; branches; next 1.13; commitid UV9PAPQbNGpZ7WTE; 1.13 date 2024.01.07.10.42.23; author leot; state Exp; branches; next 1.12; commitid CmHsJAthtJpoovTE; 1.12 date 2023.12.31.21.19.24; author leot; state Exp; branches; next 1.11; commitid R6o2LpGjgHPR8FSE; 1.11 date 2023.12.05.19.46.07; author bsiegert; state Exp; branches; next 1.10; commitid U47ig27ZDVHCsjPE; 1.10 date 2023.11.10.15.45.12; author bsiegert; state Exp; branches; next 1.9; commitid o3oFzjmXZZyOV4ME; 1.9 date 2023.10.29.14.48.12; author bsiegert; state Exp; branches; next 1.8; commitid jWdavz5Nyqs70xKE; 1.8 date 2023.10.15.12.04.22; author bsiegert; state Exp; branches; next 1.7; commitid ty8v2zrF0XsQxIIE; 1.7 date 2023.10.06.18.39.25; author leot; state Exp; branches; next 1.6; commitid UganqyuBFfPm1BHE; 1.6 date 2023.10.03.20.27.11; author leot; state Exp; branches; next 1.5; commitid qG2zCoNBPlamIdHE; 1.5 date 2023.09.19.18.50.40; author leot; state Exp; branches 1.5.2.1; next 1.4; commitid a3qA0E4Li1I2DpFE; 1.4 date 2023.09.08.19.06.03; author bsiegert; state Exp; branches; next 1.3; commitid c6lIkxn2TQcc40EE; 1.3 date 2023.09.06.09.42.55; author leot; state Exp; branches; next 1.2; commitid YFhzRnkm27D61HDE; 1.2 date 2023.08.26.16.31.29; author bsiegert; state Exp; branches; next 1.1; commitid g2P4Ffplg5e8DjCE; 1.1 date 2023.08.10.21.45.25; author leot; state Exp; branches; next ; commitid coadHfFe7xNQShAE; 1.53.2.1 date 2026.07.14.00.35.50; author maya; state Exp; branches; next ; commitid sHC3bIiGgkiEuyNG; 1.50.2.1 date 2026.04.22.14.32.02; author maya; state Exp; branches; next ; commitid iDHLLUhOplH6NXCG; 1.31.2.1 date 2025.04.05.20.45.00; author maya; state Exp; branches; next ; commitid ts1uPa8RLrwE7UPF; 1.5.2.1 date 2023.10.22.18.44.09; author spz; state Exp; branches; next 1.5.2.2; commitid F5xCMl0v6Vo6xEJE; 1.5.2.2 date 2023.12.06.12.08.43; author spz; state Exp; branches; next ; commitid fLEciuttqVQKToPE; desc @@ 1.56 log @Revbump all Go packages after go126 update @ text @# $NetBSD: Makefile,v 1.55 2026/08/15 12:53:23 bsiegert Exp $ DISTNAME= regal-0.39.0 PKGREVISION= 6 CATEGORIES= devel MASTER_SITES= ${MASTER_SITE_GITHUB:=open-policy-agent/} GITHUB_TAG= v${PKGVERSION_NOREV} MAINTAINER= leot@@NetBSD.org HOMEPAGE= https://github.com/open-policy-agent/regal COMMENT= Linter for Rego LICENSE= apache-2.0 GOFLAGS+= -ldflags ' \ -X github.com/open-policy-agent/regal/pkg/version.Version=${GITHUB_TAG} \ -X github.com/open-policy-agent/regal/pkg/version.Commit= \ -X github.com/open-policy-agent/regal/pkg/version.Timestamp= \ -X github.com/open-policy-agent/regal/pkg/version.Hostname=' GO_BUILD_PATTERN= . .include "go-modules.mk" .include "../../lang/go/go-module.mk" .include "../../mk/bsd.pkg.mk" @ 1.55 log @Revbump all Go packages after Go 1.26 update @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.54 2026/07/08 18:32:28 bsiegert Exp $ d4 1 a4 1 PKGREVISION= 5 @ 1.54 log @Revbump all Go packages after go126 update @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.53 2026/06/05 10:21:38 bsiegert Exp $ d4 1 a4 1 PKGREVISION= 4 @ 1.53 log @Revbump all Go packages after go126 security update @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.52 2026/05/07 18:49:55 bsiegert Exp $ d4 1 a4 1 PKGREVISION= 3 @ 1.53.2.1 log @Revbump all Go packages after go126 update @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.53 2026/06/05 10:21:38 bsiegert Exp $ d4 1 a4 1 PKGREVISION= 4 @ 1.52 log @Revbump all Go packages after go126 security update @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.51 2026/04/08 05:44:58 bsiegert Exp $ d4 1 a4 1 PKGREVISION= 2 @ 1.51 log @Revbump all Go packages after security update @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.50 2026/03/15 11:46:22 leot Exp $ d4 1 a4 1 PKGREVISION= 1 @ 1.50 log @regal: Update to 0.39.0 Changes: v0.39.0 We're happy to announce Regal v0.39.0, featuring 3 new linter rules, many language server improvements, and much faster linting! - New Rule: `use-array-flatten` - New Rule: `use-object-union-n` - New Rule: `equals-over-count` - Initial support for the rq engine has been added - thanks charlesdaniels! - Various imprevements - Bug fixes - Dependencies updates, in particular OPA v1.14.0 @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.49 2026/03/06 21:07:52 bsiegert Exp $ d4 1 @ 1.50.2.1 log @Revbump all Go packages after go126 security fix @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.50 2026/03/15 11:46:22 leot Exp $ a3 1 PKGREVISION= 1 @ 1.49 log @Revbump all Go packages after go126 update @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.48 2026/02/24 08:45:26 bsiegert Exp $ d3 1 a3 2 DISTNAME= regal-0.38.1 PKGREVISION= 2 d5 1 a5 1 MASTER_SITES= ${MASTER_SITE_GITHUB:=StyraOSS/} d9 1 a9 1 HOMEPAGE= https://github.com/StyraOSS/regal d14 4 a17 4 -X github.com/styrainc/regal/pkg/version.Version=${GITHUB_TAG} \ -X github.com/styrainc/regal/pkg/version.Commit= \ -X github.com/styrainc/regal/pkg/version.Timestamp= \ -X github.com/styrainc/regal/pkg/version.Hostname=' @ 1.48 log @Revbump all Go packages after default version bump @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.47 2026/01/26 19:49:19 bsiegert Exp $ d4 1 a4 1 PKGREVISION= 1 @ 1.47 log @Move non-pattern Go flags to GOFLAGS. GO_BUILD_PATTERN is only for patterns, as announced on tech-pkg@@. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.46 2026/01/25 11:12:44 leot Exp $ d4 1 @ 1.46 log @regal: Update to 0.38.1 Changes: v0.38.1 This patch release fixes several bugs including some found in the recent v0.38.0 release, as well some other improvements. v0.38.0 Happy New Year from the Regal maintainers! v0.38.0 of your favorite Rego linter, debugger and language server brings full support for OPA's new string interpolation feature. This means not only that Regal lints code found inside interpolated strings, but that you'll have access to all your favorite language server features within them too - like code completions, tooltips on hover, or document highlighting. You can even use the debugger to step through interpolated expressions! If you haven't yet tried it out, grab OPA v1.12.2, Regal v0.38.0 and enjoy an absolutely awesome addition to the Rego language! @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.45 2026/01/15 19:54:44 bsiegert Exp $ d13 1 a13 1 GO_BUILD_PATTERN+= -ldflags ' \ d18 1 @ 1.45 log @Revbump all Go packages after go125 update @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.44 2025/12/02 19:25:09 bsiegert Exp $ d3 1 a3 2 DISTNAME= regal-0.37.0 PKGREVISION= 2 @ 1.44 log @Revbump all Go packages after go125 update @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.43 2025/11/27 09:45:15 leot Exp $ d4 1 a4 1 PKGREVISION= 1 @ 1.43 log @regal: Update to 0.37.0 Changes: 0.37.0 This release features a new linter rule, several new language server features, and many improvements and fixes. The two major OPA versions bumped since the last release additionally contains several performance improvements that were contributed as part of developing Regal! @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.42 2025/10/16 17:59:50 bsiegert Exp $ d4 1 @ 1.42 log @Revbump all Go packages after go125 update @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.41 2025/10/08 06:54:26 bsiegert Exp $ d3 1 a3 2 DISTNAME= regal-0.36.1 PKGREVISION= 2 @ 1.41 log @Revbump all Go packages after go125 update @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.40 2025/09/14 08:28:28 leot Exp $ d4 1 a4 1 PKGREVISION= 1 @ 1.40 log @regal: Update to 0.36.1 Changes: 0.36.1 This is Regal v0.36! The first Regal release since becoming a part of the OPA project last month. This release mostly delivers a number of new language server features as well as wider improvements under the hood and to the developer experience. - Regal documentation moved to - Get contextual documentation when calling built-in functions: Regal language server now offers signatureHelp - Quickly see related fields in when editing METADATA: Regal language server now offers documentHighlight - Jump directly from ignore directives to documentation: Regal language server now offers documentLink for ignore directives - Get live diagnostics from custom rules as you type: Regal language server now offers custom lint rules too (previously they were only available in the Regal CLI) @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.39 2025/09/06 13:16:59 bsiegert Exp $ d4 1 @ 1.39 log @Revbump all Go packages after go125 security update @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.38 2025/08/31 10:02:49 bsiegert Exp $ d3 1 a3 2 DISTNAME= regal-0.35.1 PKGREVISION= 2 @ 1.38 log @Revbump all Go packages after moving to go125 @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.37 2025/08/22 16:12:35 leot Exp $ d4 1 a4 1 PKGREVISION= 1 @ 1.37 log @regal: Update to 0.35.1 pkgsrc changes: - follow StyraInc -> StyraOSS redirects, per upstream organization rename Changes: v0.35.1 We're happy to release v0.35.1, the mid-summer release of Regal! This release updates to OPA v1.6.0 bringing a number of performance improvements as well as other improvements and bug fixes: - Improved schema loading - Performance improvements - Code actions rewrite @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.36 2025/06/11 16:47:06 leot Exp $ d4 1 @ 1.36 log @regal: Update to 0.34.1 Changes: 0.34.1 This patch release fixes a bug found since v0.34.0 as well as it bumps the OPA dependency to the v1.5.1 patch also released today. While Regal's own policies were not affected by the regression in walk, custom linter rules could very well be. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.35 2025/06/06 14:01:27 bsiegert Exp $ d3 1 a3 1 DISTNAME= regal-0.34.1 d5 1 a5 1 MASTER_SITES= ${MASTER_SITE_GITHUB:=StyraInc/} d9 1 a9 1 HOMEPAGE= https://github.com/StyraInc/regal @ 1.35 log @Revbump all Go packages after go124 update @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.34 2025/06/01 14:18:49 leot Exp $ d3 1 a3 2 DISTNAME= regal-0.34.0 PKGREVISION= 1 @ 1.34 log @regal: Update to 0.34.0 Changes: 0.34.0 ------ After a month of development, we're happy to announce Regal v0.34. This version of the OPA community's favorite linter and language server brings you new 3 linter rules, performance improvements and much more. With the v0.34.0 release, Regal now ships with more than 100 linter rules! Which is pretty close to one new rule per week since the project started. New rules: - unresolved-references - pointless imports - single-item-in 0.33.0 ------ This release adds 4 new linter rules to Regal, alongside significant performance improvements and several bug fixes. New rules: - in-wildcard-key - confusing-alias - mixed-iteration - narrow-argument @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.33 2025/04/05 18:51:16 bsiegert Exp $ d4 1 @ 1.33 log @Belated revbump for all Go packages after go124 update I forgot to do the revbump again, sorry for doing it so late after the update. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.32 2025/03/30 11:43:38 leot Exp $ d3 1 a3 2 DISTNAME= regal-0.32.0 PKGREVISION= 1 @ 1.32 log @regal: Update to 0.32.0 Changes: 0.32.0 ------ - New Rule: redundant-loop-count - New Rule: import-shadows-rule - New Rule: time-now-ts-twice - Update to OPA v1.2.0 - Bug fixes @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.31 2025/03/07 20:54:19 bsiegert Exp $ d4 1 @ 1.31 log @Revbump all Go packages after go124 update I realize I forgot to do the revbump after updating the default Go version to 1.24, so let's do that now. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.30 2025/03/02 16:04:11 leot Exp $ d3 1 a3 2 DISTNAME= regal-0.31.1 PKGREVISION= 1 @ 1.31.2.1 log @Pulup ticket #6952 - Update PKGREVISION for all Go packages. Go had a security update to one of the builtin libraries. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.31 2025/03/07 20:54:19 bsiegert Exp $ d4 1 a4 1 PKGREVISION= 2 @ 1.30 log @regal: Update to 0.31.1 Changes: 0.31.1 ------ This patch release fixes some issues reported by users, as well as some encountered while working on Regal. Most notably: - Fix issue where configured `ignore` values had no effect if Regal ran from the root directory - Fix issue in language server when files with `:` in their name are present in the workspace - Fix issue in language server where Code Lens annotations (like Evaluate and Debug) would appear and reappear quickly when parse errors where encountered and fixed, leading to a "flickering" editor window 0.31.0 ------ This release of Regal updates to OPA v1.1.0, continuing to solidify support for v1 Rego with some nice new rules, performance improvements and bug fixes too. - New Rule: `use-object-keys` - New Rule: `non-loop-expression` - Fixing `non-raw-regex-pattern` - Configuration File Loading: Regal will now use a `~/.config/regal` if no parent configuration is found. This is useful when working on Rego in temporary directories. Regal's language server will now use configuration files in the workspace tree if they exist rather than only looking at parent directories. This more closely matches the behavior of the lint command. https://github.com/StyraInc/regal/pull/1372 @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.29 2025/01/19 17:39:31 leot Exp $ d4 1 @ 1.29 log @regal: Update to 0.30.2 Changes: 0.30.2 This release includes a fix for an issue where a missing Regal dir would cause a fatal error when running regal fix (1341), thanks grosser for the report again. Also included is a fix for an issue where Regal would template files without a Regal extension after renaming them from a Rego file. 0.30.1 Regal v0.30.1 is a patch release following the significant v0.30.0 release with first class OPA v1.0.0 support. This patch release addresses some issues discovered in the language server relating to the OPA update as well as a minor new feature. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.28 2025/01/15 13:49:57 leot Exp $ d3 1 a3 1 DISTNAME= regal-0.30.2 @ 1.28 log @regal: Update to 0.30.0 Changes: Regal v0.30.0 is the first release to fully support OPA 1.0 while at the same time being fully compatible with older versions of OPA and Rego. This process helped improve both Regal and OPA, as a few things to fix in both projects got identified along the way! - Full support for OPA 1.0, while maintaining compatibility with earlier versions - Much faster linting @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.27 2024/11/22 17:53:40 leot Exp $ d3 1 a3 1 DISTNAME= regal-0.30.0 @ 1.27 log @regal: Update to 0.29.2 Changes: v0.29.2 This patch release fixes an issue where the new defer-assignment rule would sometimes report a false positive when the variable was used inside of a `with` clause on the next line. v0.29.1 This patch release fixes an issue where custom (i.e. user-created) aggregate rules wouldn't work as expected when the condition for a violation was the absence of aggregated data. This could for example be a rule that says "at least one rule must be named allow, and it must have a default assignment to `false`". v0.29.0 This is a big release, spanning more than a month of development! Regal v0.29.0 brings new linter rules, performance improvements and new features to both the linter and the language server. New rules: - defer-assignment - walk-no-path - rule-assigns-default Misc improvements and bug fixes. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.26 2024/10/20 10:31:19 leot Exp $ d3 1 a3 1 DISTNAME= regal-0.29.2 @ 1.26 log @regal: Update to 0.28.0 Changes: 0.28.0 ====== New Rule: missing-metadata -------------------------- The new missing-metadata rule helps ensure policies are documented by requiring METADATA comments on public packages and rules. Metadata comments are used to explain functionality and annotate Rego constructs with other data. Note: missing-metadata is a custom rule and so is not enabled by default for all users. Fixer: Automated fixing of directory-package-mismatch ----------------------------------------------------- This release brings improvements to regal fix, the command to automatically fix supported violations (#1120, #1127). Fixes for the directory-package-mismatch violations involve moving files based on their packages. For example a file with package foo.bar in policies/policy.rego would need to be moved to foo/policy.rego. In previous versions of Regal, when multiple files in a large code base with the same filename needed to be moved to the same package directory, Regal would output a confusing error message. Regal v0.28.0 outputs a clear error message by default and adds a new --on-conflict=rename modifying flag to allow conflicting files to automatically be renamed when this scenario is encountered. Other changes ------------- - Linter improvements - Language Server Performance Improvements 0.27.0 ====== Debug Adapter Protocol Support ------------------------------ This release improves Debug Adapter Protocol making it ready for consumption in clients. New Rule: comprehension-term-assignment --------------------------------------- This rule flags cases where an intermediate assignment is used within a comprehension body when the value can be directly used as the comprehension term. It enforces the removal of redundant assignments, encouraging more concise and readable code. 0.26.2 ====== This releases contains a bug fixes for an issue introduced in v0.26.0 as well as a number of other minor improvements. 0.26.1 ====== This releases contains a bug fix for an issue introduced in v0.26.0. The bug was caused by a change the required data to complete a formatting Rego 'fix'. 0.26.0 ====== v0.26.0 brings 2 new linter rules to Regal, a debugger API backend, and noticeably faster linting. Regal v0.26.0 is likely the first consumer of the new debugger API that landed in OPA v0.68.0 just last week — and in turn uses this to expose a first ever Debug Adapter Protocol (DAP) backend for Rego! Next release of the OPA VS Code extension will leverage Regal to provide developers a first-class debugging experience for Rego. Stay tuned! New rule: directory-package-mismatch ------------------------------------ The directory-package-mismatch rule is a first of its kind in Regal, as it reports issues in project structure rather than in code. This rule codifies an old best practice in Rego projects: the package name (path) should be mirrored in the directory structure a policy resides in. Put simply, a policy declaring package rbac.user.roles should be placed in a rbac/user/roles directory. New Rule: sprintf-arguments-mismatch ------------------------------------ The new sprintf-arguments-mismatch rule checks that the formatting directives (%s, %d, etc) in a sprintf call match the supplied number arguments. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.25 2024/09/06 18:48:47 bsiegert Exp $ d3 1 a3 1 DISTNAME= regal-0.28.0 @ 1.25 log @Revbump all Go packages after go122 update @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.24 2024/08/19 15:16:08 leot Exp $ d3 1 a3 2 DISTNAME= regal-0.25.0 PKGREVISION= 1 @ 1.24 log @regal: Update to 0.25.0 Changes: 0.25.0 ------ This release brings 2 new rules to the Regal linter as well as a number of improvements to the Regal Language Server. Rules ----- - New rule unused-output-variable - New rule use-strings-count - Other Rule Updates Linter ------ - JUnit XML output format is now a supported by regal lint - Regal's version of OPA has been updated to v0.67.0 - The --var-values flag from opa test (added to OPA in v0.66.0) is now supported by the regal test command. This allows custom policy authors to see the the variable values in scope of a failed test. Regal Language Server --------------------- - Code Lens Support - Improved formatter @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.23 2024/08/11 15:57:01 bsiegert Exp $ d4 1 @ 1.23 log @Revbump all Go packages after update @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.22 2024/07/17 12:37:07 leot Exp $ d3 1 a3 2 DISTNAME= regal-0.24.0 PKGREVISION= 1 @ 1.22 log @regal: Update to 0.24.0 Changes: v0.24.0 This release brings 4 new rules to Regal's linter as well as a number of improvements to the language server. ## Rules - New Rule `if-object-literal` - New Rule `pointless-reassignment` - New Rule `argument-always-wildcard` - New Rule `annotation-without-metadata` - New Rule `var-shadows-builtin` ## Regal Language Server ### Snippet Completions We have extended the support for completions to add snippets for `some` and `every`. Both key:value and collection formats are supported. ### Example Links on Keyword and Built-in Hover We've been building out a new documentation section called Rego By Example . We have detailed guides here for some of the common keywords and built-in functions. Users can now browse directly to these from their editors by hovering over supported keywords and functions. v0.23.1 This is a patch release containing a number of fixes. Most of the issues fixed in this release were not directly related to v0.23.0, but we simply don't like the idea of waiting for the next release to address known bugs. v0.23.0 This release adds 3 new linter rules to Regal, greatly improved completion suggestions in the language server, and a number of other improvements and fixes. - New rule: `leaked-internal-reference` - New rule: `internal-entrypoint` - New rule: `ambiguous-scope` ## Language server: Greatly improved completion suggestions Last release introduced a minimal implementation of code completion, which means that the language server supports providing completion suggestions while editing Rego in an editor that supports the Regal languge server such as VS Code using the OPA VS Code extension. This release provides greatly improved completion suggestions, including: - References to packages, rules and functions (both imported and complete references) - Keywords like `import`, `default`, `contains`, `if` - Completions on `input` attributes based on those previously used - Common rule names like `allow` and `deny` - New package names based on directory structure - Many more suggestions based on the context of the cursor position Using completion suggestions now feels like a total game changer for productivity, and we really recommend trying it out! v0.22.0 This is a release brings 3 new linter rules, as well as some exciting new features, improvements and fixes to both the linter and the language server. - New rule: `impossible-not` - New rule: `messy-rule` - New rule: `trailing-default-rule` ## Language server: Code completion suggestions The Regal language server now provides a minimal implementation of the code completion feature. This first implementation will help suggest package name based on directory structure, the `rego.v1` import and built-in functions at certain locations. This provides a big productivity boost, as users no longer need to jump back to the OPA docs to find the built-in function they need. v0.21.3 No one wants to wait for bugs to get fixed! So we don't. This third patch release following v0.21.0 fixes an issue where deleted or renamed files would still have violations reported by the language server. v0.21.2 This is patch release addressing two bugs reported by users. v0.21.1 This patch releases fixes an issue in the language server, which would previously send back an error to the client (i.e. your editor) when a new and empty file was created in the workspace. This would have the server fail to read any document symbols as a result. This has now been fixed to only log the error on the server without sending it back to the client. v0.21.0 This is a big release, bringing new `regal fix` command, several features to the Regal language server, a new linter rule, and many improvements and fixes. - New command: `regal fix` The `regal fix` command allows you to automatically fix some of the (style) issues reported by the Regal linter. This command is available in the CLI and can be run on a single file or a directory. The `regal fix` command respects the `.regal/config.yaml` file, and will only fix issues that aren't ignored by configuration. - New rule: `unresolved-import` - Several Language Server features: - Code Actions - Go to Definition - Formatting - Document Symbols - Workspace Symbols - Folding Ranges v0.20.1 This release fixes a panic encountered in the language server when Regal traverses a directory it cannot read while walking the workspace. v0.20.0 This release adds various improvements to the functionality of the language server as well as also including a number of housekeeping updates and fixes. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.21 2024/07/03 06:59:23 bsiegert Exp $ d4 1 @ 1.21 log @Revbump all Go packages after go122 security update @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.20 2024/06/13 13:47:00 bsiegert Exp $ d3 1 a3 2 DISTNAME= regal-0.19.0 PKGREVISION= 4 @ 1.20 log @Revbump all Go packages after go122 update @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.19 2024/06/01 14:02:53 bsiegert Exp $ d4 1 a4 1 PKGREVISION= 3 @ 1.19 log @Revbump all Go packages, default Go version is now 1.22. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.18 2024/04/05 19:14:00 bsiegert Exp $ d4 1 a4 1 PKGREVISION= 2 @ 1.18 log @Revbump all Go packages after go121 update @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.17 2024/03/24 19:50:29 leot Exp $ d4 1 a4 1 PKGREVISION= 1 @ 1.17 log @regal: Update to 0.19.0 Changes: 0.19.0 ------ This release adds several new options for setting configuration options for rules in groups, allowing users to keep a static configuration across updates, or to ignore certainly classes of rules. v0.19.0 also includes a number of fixes to both linter rules and the language server integration, making for an even better experience when using Regal from VS Code or other LSP clients. 0.18.0 ------ Only a week after v0.17.0, this release comes a little earlier than planned as we found a few issues in the VS Code OPA extension integration that we wanted to address as soon as possible. Nothing serious, but having that extension provide a great Regal experience feels important enough for us to warrant an earlier v0.18.0 release. That's not all there is to this release though, as we have both a new linter rule as well as a bunch of fixes included here. Enjoy! @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.16 2024/02/23 22:41:20 leot Exp $ d4 1 @ 1.16 log @regal: Update to 0.17.0 Changes: v0.17.0 ------- This is a fairly big release, adding 4 new linter rules and a whole bunch of improvements and fixes. - New rule: `with-outside-test-context` - New rule: `circular-import` - New rule: `rule-name-repeats-package` - New rule: `double negative` ## Improvements * The Regal language server now supports client shutdown messages * The docs on how to ignore rules and files have been greatly improved. ## Bugs Fixed * Fix false positives in prefer-some-in-iteration * Fix false positive in external-reference rule when using `=` for assignment (although you shouldn't!) * The Regal language server now correctly handles URIs and paths on Windows ## Ecosystem The setup-regal GitHub Action has been promoted to v1. This fixes the warning in pipelines about depending on an old Node version. Make sure to update your workflows! v0.16.0 ------- This release adds 2 new linter rules and a language server protocol (LSP) implementation to Regal. - New rule: `duplicate-rule` - New rule: `use-rego-v1` ## New feature: Regal language server The Language Server Protocol (LSP) provides a way for editors to integrate support for various programming languages using a common protocol. Using an LSP server implementation rather than one built specifically for a single editor allows the same code to be used across all editors with LSP support. v0.16.0 brings a language server mode to Regal, allowing diagnostics (i.e. linting) of Rego to be performed continuously in a workspace rather than as a one-off CLI operation. This is the first step towards bringing Regal into editors like VS Code, and having linting of Rego natively supported as you work with your policies. Expect to see more in this space soon! @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.15 2024/02/07 14:50:50 bsiegert Exp $ d3 1 a3 1 DISTNAME= regal-0.17.0 @ 1.15 log @Revbump all Go packages after go121 update @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.14 2024/01/10 19:14:30 bsiegert Exp $ d3 1 a3 2 DISTNAME= regal-0.15.0 PKGREVISION= 2 @ 1.14 log @Revbump all Go packages after go121 update @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.13 2024/01/07 10:42:23 leot Exp $ d4 1 a4 1 PKGREVISION= 1 @ 1.13 log @regal: Update to 0.15.0 Changes: 0.15.0 ------ This release brings 2 new linter rules, and a few improvements and fixes. - New rule: `deprecated-builtin` - New rule: `default-over-not` - Other improvements - Ignore directives can now be placed anywhere in a comment, and not just at the start of one. - Several bugs fixes @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.12 2023/12/31 21:19:24 leot Exp $ d4 1 @ 1.12 log @regal: Update to 0.14.0 Changes: v0.14.0 ------- This release brings 2 new linter rules, a new output format, and many improvements and fixes. - New rule: `boolean-assignment` - New rule: `redundant-existence-check` - New SARIF output format - Several bug fixes - Several improvements v0.13.0 ------- This release brings 3 new linter rules, several performance improvements, and many fixes and tweaks to existing rules. - New rules: `use-if` and `use-contains` - New rule: `if-empty-object` - Performance improvements - Other improvements - Several bugs fixed v0.12.0 ------- This release adds a long-awaited **capabilities** feature to Regal. v0.12.0 also brings four new linter rules, and the usual improvements and fixes. - Capabilities: it is now possible to tell Regal which version of OPA (or other project built on top of OPA!) you are targeting For more information, see the docs on . - New rule: `inconsistent-args` - New rule: `unnecessary-some` - New rule: `yoda-condition` - New rule: `one-liner-rule` - Ignore directives improvement - Other improvements - Several bugs fixed v0.11.0 ------- Regal goes to v0.11.0! This release constitutes a milestone for the project, as we now ship with 50 built-in rules in total! Regal now provides a GitHub Action at for easily integrating Regal into your CI pipeline. The v0.11.0 release contains six new rules, and a number of improvements and fixes. - New rule: `import-after-rule` - New rule: `import-shadows-builtin` - New rule: `prefer-set-or-object-rule` - New rule: `equals-pattern-matching` - New rule: `zero-arity-function` - New rule: `prefer-value-in-head` - Other improvements - Several bugs fixed @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.11 2023/12/05 19:46:07 bsiegert Exp $ d3 1 a3 1 DISTNAME= regal-0.14.0 @ 1.11 log @Revbump all Go packages after go121 update @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.10 2023/11/10 15:45:12 bsiegert Exp $ d3 1 a3 2 DISTNAME= regal-0.10.1 PKGREVISION= 4 @ 1.10 log @Revbump all Go packages after go121 update @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.9 2023/10/29 14:48:12 bsiegert Exp $ d4 1 a4 1 PKGREVISION= 3 @ 1.9 log @Revbump all Go packages because go121 is now the default @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.8 2023/10/15 12:04:22 bsiegert Exp $ d4 1 a4 1 PKGREVISION= 2 @ 1.8 log @Revbump all Go packages after go120 security update @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.7 2023/10/06 18:39:25 leot Exp $ d4 1 a4 1 PKGREVISION= 1 @ 1.7 log @regal: Update to 0.10.1 Changes: 0.10.1 ------ This is a minor release to support the new setup-regal GitHub Action. This release improves the --format github output so that it no longer only reports violations in the form of annotations in the PR, but also prints the --format pretty table to the actions console, allowing you to quickly identify issues in either of the views. As an added bonus, this release also features new documentation for the aggregate rule rule type introduced in v0.10.0, so that custom rule authors now may try them out. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.6 2023/10/03 20:27:11 leot Exp $ d4 1 @ 1.6 log @regal: Update to 0.10.0 Changes: 0.10.0 ------ This release brings a new type of linter rule to Regal - aggregate rules. v0.10.0 also brings a number of new rules, new features, performance improvements and bug fixes. ## New rules - `prefer-package-imports` (Category: `imports`) - `no-defined-entrypoint` (Category: `idiomatic`) - `default-over-else` (Category: `style`) - `rule-length` (Category: `style`) ## Features and improvements - `regal lint --enable-print`: `regal lint` command now accepts an `--enable-print` flag to simply allow `print` statements without printing other debugging information. - `regal lint --profile`: similarly to the profiling capabilities in OPA, Regal now provides a `--profile` flag to help collect and report profiling data, helping policy authors and Regal developers to see where most of the time is spent in evaluation. - Performance improvements ## Other improvements - The `regal new rule` command now adds both a documentation page and an entry in the README table. - A `non-breakable-word-threshold` option has been added to the `line-length` rule, which allows tolerating single words that exceed the line length if they can't be broken up into several parts, like URLs. - The `top-level-iteration` incorrectly identified constants and other parameters as iteration. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.5 2023/09/19 18:50:40 leot Exp $ d3 1 a3 1 DISTNAME= regal-0.10.0 @ 1.5 log @regal: Update to 0.9.0 Changes: 0.9.0 ----- This release brings three new rules to Regal, a new Rego-based build system, and improvements to the Go API. Plus a number of improvements, features and bugfixes. The v0.9.0 release also coincides with some exciting news from our community — users of the Rego Playground now experience Regal integrated in the tool, and have linter violations reported directly in the UI! ## New rule: `dubious-print-sprintf` (Category: `testing`) This new rule will flag the use of `print` together with `sprintf` in it's argument list. The `print` function takes any number of arguments as it is, and using `sprintf` negates the benefits of the `print` functions special handling of undefined values. ## New rule: `forbidden-function-call` (Category: `custom`) In the custom category, the new `forbidden-function-call` rule will allow you to configure a list of built-in functions that should be flagged by Regal if encountered. This could for example be `http.send` calls, or JWT decoding using HMAC rather than assymetric crypto. ## New rule: `chained-rule-body` (Category: `style`) The new chained-rule-body rule will have Regal flag rules where the body is "chained", as this style isn't recommended any more. ## Go API (experimental) While integrations using the Go API is still not recommended, several steps were taken in this release in order to move it closer to a stable state. This work was done in order to get Regal integrated into the Rego Playground. ## Other improvements and fixes - Custom configuration for a rule is no longer required to provide a `level` attribute. If not provided, the level will be inherited from the default configuration for that rule. - The `walk` built-in function is now by default excepted by the `function-arg-return` rule. - The `regal lint` command now accepts a `--metrics` flag, which will provide helpful information on where Regal spends most of the time evaluating a project. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.4 2023/09/08 19:06:03 bsiegert Exp $ d3 1 a3 1 DISTNAME= regal-0.9.0 @ 1.5.2.1 log @Pullup ticket #6812 - requested by bsiegert lang/go120: security update lang/go: version info update audio/gospt: RevBump audio/ymuse: RevBump chat/coyim: RevBump chat/gomuks: RevBump chat/matterircd: RevBump chat/senpai: RevBump chat/ssh-chat: RevBump databases/go-ldap: RevBump databases/influxdb: RevBump databases/mongo-tools: RevBump databases/mysqld_exporter: RevBump databases/postgres_exporter: RevBump databases/prometheus: RevBump databases/promscale: RevBump databases/sqlc: RevBump databases/timescaledb-tune: RevBump devel/asmfmt: RevBump devel/conftest: RevBump devel/errcheck: RevBump devel/fq: RevBump devel/git-lfs: RevBump devel/go-ed25519: RevBump devel/go-gocode: RevBump devel/go-golang-lru: RevBump devel/go-gopkgs: RevBump devel/go-goptlib: RevBump devel/go-goreturns: RevBump devel/go-gox: RevBump devel/go-impl: RevBump devel/go-logrus: RevBump devel/go-nbreader: RevBump devel/go-pty: RevBump devel/go-review: RevBump devel/go-siphash: RevBump devel/go-staticcheck: RevBump devel/go-swagger: RevBump devel/go-sys: RevBump devel/go-tools: RevBump devel/go-wire: RevBump devel/go-xerrors: RevBump devel/golangci-lint: RevBump devel/golint: RevBump devel/gomodifytags: RevBump devel/gopls: RevBump devel/goredo: RevBump devel/gotags: RevBump devel/gotests: RevBump devel/govulncheck: RevBump devel/lazygit: RevBump devel/mob: RevBump devel/nancy: RevBump devel/opa: RevBump devel/packr: RevBump devel/reftools: RevBump devel/regal: RevBump devel/revive: RevBump devel/shfmt: RevBump devel/syft: RevBump editors/micro: RevBump filesystems/kubo: RevBump graphics/gif2png: RevBump lang/joker: RevBump mail/opensmtpd-filter-rspamd: RevBump mail/opensmtpd-filter-senderscore: RevBump mail/postforward: RevBump meta-pkgs/bulk-test-essential: RevBump misc/exercism: RevBump net/amazon-ecs-cli: RevBump net/amfora: RevBump net/bombadillo: RevBump net/croc: RevBump net/czds: RevBump net/dnscontrol: RevBump net/dnscrypt-proxy2: RevBump net/gh: RevBump net/go-dnstap: RevBump net/go-net: RevBump net/go-websocket: RevBump net/gunison: RevBump net/gvproxy: RevBump net/hub: RevBump net/ipget: RevBump net/kubectl: RevBump net/libquic: RevBump net/mangos: RevBump net/nats-server: RevBump net/obfs4proxy: RevBump net/rclone: RevBump net/stern: RevBump net/syncthing: RevBump net/terraform-provider-archive: RevBump net/terraform-provider-aws: RevBump net/terraform-provider-kubernetes: RevBump net/terraform-provider-local: RevBump net/terraform-provider-null: RevBump net/terraform-provider-random: RevBump net/terraform-provider-template: RevBump net/terraform-provider-vultr: RevBump net/terraform: RevBump net/tut: RevBump net/vultr-cli: RevBump pkgtools/pkglint: RevBump security/2fa: RevBump security/age: RevBump security/amass: RevBump security/authelia: RevBump security/cfssl: RevBump security/dnsx: RevBump security/go-asn1-ber: RevBump security/go-crypto: RevBump security/go-getpass: RevBump security/go-mkcert: RevBump security/gopass: RevBump security/httpx: RevBump security/nuclei: RevBump security/oauth2c: RevBump security/osv-scanner: RevBump security/subfinder: RevBump security/tlsx: RevBump security/trufflehog: RevBump security/vault: RevBump shells/elvish: RevBump shells/oh-my-posh: RevBump sysutils/beats: RevBump sysutils/consul: RevBump sysutils/direnv: RevBump sysutils/fzf: RevBump sysutils/goreman: RevBump sysutils/lf: RevBump sysutils/node_exporter: RevBump sysutils/packer: RevBump sysutils/podman: RevBump sysutils/restic: RevBump sysutils/vultr: RevBump textproc/glow: RevBump textproc/go-kr-text: RevBump textproc/go-md2man: RevBump textproc/go-mmark: RevBump textproc/go-text: RevBump textproc/miller: RevBump textproc/sift: RevBump www/apisprout: RevBump www/caddy: RevBump www/gitea: RevBump www/go-ffuf: RevBump www/go-minify: RevBump www/gotosocial: RevBump www/grafana: RevBump www/hugo: RevBump www/jira-cli: RevBump www/mycorrhiza: RevBump www/pup: RevBump www/restish: RevBump www/shoutrrr: RevBump Revisions pulled up: - lang/go/version.mk 1.190,1.192 - lang/go120/PLIST 1.9 - lang/go120/distinfo 1.10-1.11 ------------------------------------------------------------------- Module Name: pkgsrc Committed By: bsiegert Date: Sat Oct 7 18:09:35 UTC 2023 Modified Files: pkgsrc/lang/go: version.mk pkgsrc/lang/go120: PLIST distinfo Log Message: go120: update to 1.20.9 (security). cmd/go: line directives allows arbitrary execution during build "//line" directives can be used to bypass the restrictions on "//go:cgo_" directives, allowing blocked linker and compiler flags to be passed during compliation. This can result in unexpected execution of arbitrary code when running "go build". The line directive requires the absolute path of the file in which the directive lives, which makes exploting this issue significantly more complex. This is CVE-2023-39323 and Go issue https://go.dev/issue/63211. View the release notes for more information: https://go.dev/doc/devel/release#go1.20.9 To generate a diff of this commit: cvs rdiff -u -r1.189 -r1.190 pkgsrc/lang/go/version.mk cvs rdiff -u -r1.8 -r1.9 pkgsrc/lang/go120/PLIST cvs rdiff -u -r1.9 -r1.10 pkgsrc/lang/go120/distinfo ------------------------------------------------------------------- Module Name: pkgsrc Committed By: bsiegert Date: Sun Oct 15 11:02:08 UTC 2023 Modified Files: pkgsrc/lang/go: version.mk pkgsrc/lang/go120: distinfo Log Message: go120: update to 1.20.10 (security) net/http: rapid stream resets can cause excessive work A malicious HTTP/2 client which rapidly creates requests and immediately resets them can cause excessive server resource consumption. While the total number of requests is bounded to the http2.Server.MaxConcurrentStreams setting, resetting an in-progress request allows the attacker to create a new request while the existing one is still executing. HTTP/2 servers now bound the number of simultaneously executing handler goroutines to the stream concurrency limit. New requests arriving when at the limit (which can only happen after the client has reset an existing, in-flight request) will be queued until a handler exits. If the request queue grows too large, the server will terminate the connection. This issue is also fixed in golang.org/x/net/http2 v0.17.0, for users manually configuring HTTP/2. The default stream concurrency limit is 250 streams (requests) per HTTP/2 connection. This value may be adjusted using the golang.org/x/net/http2 package; see the Server.MaxConcurrentStreams setting and the ConfigureServer function. This is CVE-2023-39325 and Go issue https://go.dev/issue/63417. This is also tracked by CVE-2023-44487. To generate a diff of this commit: cvs rdiff -u -r1.191 -r1.192 pkgsrc/lang/go/version.mk cvs rdiff -u -r1.10 -r1.11 pkgsrc/lang/go120/distinfo @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.5 2023/09/19 18:50:40 leot Exp $ a3 1 PKGREVISION= 1 @ 1.5.2.2 log @Pullup ticket #6822 - requested by bsiegert lang/go120: security update lang/go121: security update lang/go: metadata update audio/gospt: revision bump audio/ymuse: revision bump chat/coyim: revision bump chat/gomuks: revision bump chat/matterircd: revision bump chat/senpai: revision bump chat/ssh-chat: revision bump databases/go-ldap: revision bump databases/influxdb: revision bump databases/mongo-tools: revision bump databases/mysqld_exporter: revision bump databases/postgres_exporter: revision bump databases/prometheus: revision bump databases/promscale: revision bump databases/sqlc: revision bump databases/timescaledb-tune: revision bump devel/asmfmt: revision bump devel/conftest: revision bump devel/errcheck: revision bump devel/fq: revision bump devel/git-lfs: revision bump devel/go-ed25519: revision bump devel/go-gocode: revision bump devel/go-golang-lru: revision bump devel/go-gopkgs: revision bump devel/go-goptlib: revision bump devel/go-goreturns: revision bump devel/go-gox: revision bump devel/go-impl: revision bump devel/go-logrus: revision bump devel/go-nbreader: revision bump devel/go-pty: revision bump devel/go-review: revision bump devel/go-siphash: revision bump devel/go-staticcheck: revision bump devel/go-swagger: revision bump devel/go-sys: revision bump devel/go-tools: revision bump devel/go-wire: revision bump devel/go-xerrors: revision bump devel/golangci-lint: revision bump devel/golint: revision bump devel/gomodifytags: revision bump devel/gopls: revision bump devel/goredo: revision bump devel/gotags: revision bump devel/gotests: revision bump devel/govulncheck: revision bump devel/lazygit: revision bump devel/mob: revision bump devel/nancy: revision bump devel/opa: revision bump devel/packr: revision bump devel/reftools: revision bump devel/regal: revision bump devel/revive: revision bump devel/shfmt: revision bump devel/syft: revision bump editors/micro: revision bump filesystems/kubo: revision bump graphics/gif2png: revision bump lang/joker: revision bump mail/opensmtpd-filter-rspamd: revision bump mail/opensmtpd-filter-senderscore: revision bump mail/postforward: revision bump misc/exercism: revision bump net/amazon-ecs-cli: revision bump net/amfora: revision bump net/bombadillo: revision bump net/croc: revision bump net/czds: revision bump net/dnscontrol: revision bump net/dnscrypt-proxy2: revision bump net/gh: revision bump net/go-dnstap: revision bump net/go-net: revision bump net/go-websocket: revision bump net/gunison: revision bump net/gvproxy: revision bump net/hub: revision bump net/ipget: revision bump net/kubectl: revision bump net/libquic: revision bump net/mangos: revision bump net/nats-server: revision bump net/obfs4proxy: revision bump net/rclone: revision bump net/stern: revision bump net/syncthing: revision bump net/terraform-provider-archive: revision bump net/terraform-provider-aws: revision bump net/terraform-provider-kubernetes: revision bump net/terraform-provider-local: revision bump net/terraform-provider-null: revision bump net/terraform-provider-random: revision bump net/terraform-provider-template: revision bump net/terraform-provider-vultr: revision bump net/terraform: revision bump net/tut: revision bump net/vultr-cli: revision bump pkgtools/pkglint: revision bump security/2fa: revision bump security/age: revision bump security/amass: revision bump security/authelia: revision bump security/cfssl: revision bump security/dnsx: revision bump security/go-asn1-ber: revision bump security/go-crypto: revision bump security/go-getpass: revision bump security/go-mkcert: revision bump security/gopass: revision bump security/httpx: revision bump security/nuclei: revision bump security/oauth2c: revision bump security/osv-scanner: revision bump security/subfinder: revision bump security/tlsx: revision bump security/trufflehog: revision bump security/vault: revision bump shells/elvish: revision bump shells/oh-my-posh: revision bump sysutils/beats: revision bump sysutils/consul: revision bump sysutils/direnv: revision bump sysutils/fzf: revision bump sysutils/goreman: revision bump sysutils/lf: revision bump sysutils/node_exporter: revision bump sysutils/packer: revision bump sysutils/podman: revision bump sysutils/restic: revision bump sysutils/vultr: revision bump textproc/glow: revision bump textproc/go-kr-text: revision bump textproc/go-md2man: revision bump textproc/go-mmark: revision bump textproc/go-text: revision bump textproc/miller: revision bump textproc/sift: revision bump www/apisprout: revision bump www/caddy: revision bump www/gitea: revision bump www/go-ffuf: revision bump www/go-minify: revision bump www/gotosocial: revision bump www/grafana: revision bump www/hugo: revision bump www/jira-cli: revision bump www/mycorrhiza: revision bump www/pup: revision bump www/restish: revision bump www/shoutrrr: revision bump Revisions pulled up: - lang/go/version.mk 1.194 - lang/go120/PLIST 1.10 - lang/go120/distinfo 1.12 - lang/go121/PLIST 1.4 - lang/go121/distinfo 1.4 - audio/gospt/Makefile by patch - audio/ymuse/Makefile by patch - chat/coyim/Makefile by patch - chat/gomuks/Makefile by patch - chat/matterircd/Makefile by patch - chat/senpai/Makefile by patch - chat/ssh-chat/Makefile by patch - databases/go-ldap/Makefile by patch - databases/influxdb/Makefile by patch - databases/mongo-tools/Makefile by patch - databases/mysqld_exporter/Makefile by patch - databases/postgres_exporter/Makefile by patch - databases/prometheus/Makefile by patch - databases/promscale/Makefile by patch - databases/sqlc/Makefile by patch - databases/timescaledb-tune/Makefile by patch - devel/asmfmt/Makefile by patch - devel/conftest/Makefile by patch - devel/errcheck/Makefile by patch - devel/fq/Makefile by patch - devel/git-lfs/Makefile by patch - devel/go-ed25519/Makefile by patch - devel/go-gocode/Makefile by patch - devel/go-golang-lru/Makefile by patch - devel/go-gopkgs/Makefile by patch - devel/go-goptlib/Makefile by patch - devel/go-goreturns/Makefile by patch - devel/go-gox/Makefile by patch - devel/go-impl/Makefile by patch - devel/go-logrus/Makefile by patch - devel/go-nbreader/Makefile by patch - devel/go-pty/Makefile by patch - devel/go-review/Makefile by patch - devel/go-siphash/Makefile by patch - devel/go-staticcheck/Makefile by patch - devel/go-swagger/Makefile by patch - devel/go-sys/Makefile by patch - devel/go-tools/Makefile by patch - devel/go-wire/Makefile by patch - devel/go-xerrors/Makefile by patch - devel/golangci-lint/Makefile by patch - devel/golint/Makefile by patch - devel/gomodifytags/Makefile by patch - devel/gopls/Makefile by patch - devel/goredo/Makefile by patch - devel/gotags/Makefile by patch - devel/gotests/Makefile by patch - devel/govulncheck/Makefile by patch - devel/lazygit/Makefile by patch - devel/mob/Makefile by patch - devel/nancy/Makefile by patch - devel/opa/Makefile by patch - devel/packr/Makefile by patch - devel/reftools/Makefile by patch - devel/regal/Makefile by patch - devel/revive/Makefile by patch - devel/shfmt/Makefile by patch - devel/syft/Makefile by patch - editors/micro/Makefile by patch - filesystems/kubo/Makefile by patch - graphics/gif2png/Makefile by patch - lang/joker/Makefile by patch - mail/opensmtpd-filter-rspamd/Makefile by patch - mail/opensmtpd-filter-senderscore/Makefile by patch - mail/postforward/Makefile by patch - misc/exercism/Makefile by patch - net/amazon-ecs-cli/Makefile by patch - net/amfora/Makefile by patch - net/bombadillo/Makefile by patch - net/croc/Makefile by patch - net/czds/Makefile by patch - net/dnscontrol/Makefile by patch - net/dnscrypt-proxy2/Makefile by patch - net/gh/Makefile by patch - net/go-dnstap/Makefile by patch - net/go-net/Makefile by patch - net/go-websocket/Makefile by patch - net/gunison/Makefile by patch - net/gvproxy/Makefile by patch - net/hub/Makefile by patch - net/ipget/Makefile by patch - net/kubectl/Makefile by patch - net/libquic/Makefile by patch - net/mangos/Makefile by patch - net/nats-server/Makefile by patch - net/obfs4proxy/Makefile by patch - net/rclone/Makefile by patch - net/stern/Makefile by patch - net/syncthing/Makefile by patch - net/terraform-provider-archive/Makefile by patch - net/terraform-provider-aws/Makefile by patch - net/terraform-provider-kubernetes/Makefile by patch - net/terraform-provider-local/Makefile by patch - net/terraform-provider-null/Makefile by patch - net/terraform-provider-random/Makefile by patch - net/terraform-provider-template/Makefile by patch - net/terraform-provider-vultr/Makefile by patch - net/terraform/Makefile by patch - net/tut/Makefile by patch - net/vultr-cli/Makefile by patch - pkgtools/pkglint/Makefile by patch - security/2fa/Makefile by patch - security/age/Makefile by patch - security/amass/Makefile by patch - security/authelia/Makefile by patch - security/cfssl/Makefile by patch - security/dnsx/Makefile by patch - security/go-asn1-ber/Makefile by patch - security/go-crypto/Makefile by patch - security/go-getpass/Makefile by patch - security/go-mkcert/Makefile by patch - security/gopass/Makefile by patch - security/httpx/Makefile by patch - security/nuclei/Makefile by patch - security/oauth2c/Makefile by patch - security/osv-scanner/Makefile by patch - security/subfinder/Makefile by patch - security/tlsx/Makefile by patch - security/trufflehog/Makefile by patch - security/vault/Makefile by patch - shells/elvish/Makefile by patch - shells/oh-my-posh/Makefile by patch - sysutils/beats/Makefile by patch - sysutils/consul/Makefile by patch - sysutils/direnv/Makefile by patch - sysutils/fzf/Makefile by patch - sysutils/goreman/Makefile by patch - sysutils/lf/Makefile by patch - sysutils/node_exporter/Makefile by patch - sysutils/packer/Makefile by patch - sysutils/podman/Makefile by patch - sysutils/restic/Makefile by patch - sysutils/vultr/Makefile by patch - textproc/glow/Makefile by patch - textproc/go-kr-text/Makefile by patch - textproc/go-md2man/Makefile by patch - textproc/go-mmark/Makefile by patch - textproc/go-text/Makefile by patch - textproc/miller/Makefile by patch - textproc/sift/Makefile by patch - www/apisprout/Makefile by patch - www/caddy/Makefile by patch - www/gitea/Makefile by patch - www/go-ffuf/Makefile by patch - www/go-minify/Makefile by patch - www/gotosocial/Makefile by patch - www/grafana/Makefile by patch - www/hugo/Makefile by patch - www/jira-cli/Makefile by patch - www/mycorrhiza/Makefile by patch - www/pup/Makefile by patch - www/restish/Makefile by patch - www/shoutrrr/Makefile by patch ------------------------------------------------------------------- Module Name: pkgsrc Committed By: bsiegert Date: Fri Nov 10 15:39:34 UTC 2023 Modified Files: pkgsrc/lang/go: version.mk pkgsrc/lang/go120: PLIST distinfo pkgsrc/lang/go121: PLIST distinfo Log Message: Update go120 to 1.20.11 and go121 to 1.21.4 (security). These minor releases include 2 security fixes following the security policy: - path/filepath: recognize \??\ as a Root Local Device path prefix. On Windows, a path beginning with \??\ is a Root Local Device path equivalent to a path beginning with \\?\. Paths with a \??\ prefix may be used to access arbitrary locations on the system. For example, the path \??\c:\x is equivalent to the more common path c:\x. The filepath package did not recognize paths with a \??\ prefix as special. Clean could convert a rooted path such as \a\..\??\b into the root local device path \??\b. It will now convert this path into .\??\b. IsAbs did not report paths beginning with \??\ as absolute. It now does so. VolumeName now reports the \??\ prefix as a volume name. Join(`\`, `??`, `b`) could convert a seemingly innocent sequence of path elements into the root local device path \??\b. It will now convert this to \.\??\b. This is CVE-2023-45283 and https://go.dev/issue/63713. - path/filepath: recognize device names with trailing spaces and superscripts The IsLocal function did not correctly detect reserved names in some cases: reserved names followed by spaces, such as "COM1 ". "COM" or "LPT" followed by a superscript 1, 2, or 3. IsLocal now correctly reports these names as non-local. This is CVE-2023-45284 and https://go.dev/issue/63713. To generate a diff of this commit: cvs rdiff -u -r1.193 -r1.194 pkgsrc/lang/go/version.mk cvs rdiff -u -r1.9 -r1.10 pkgsrc/lang/go120/PLIST cvs rdiff -u -r1.11 -r1.12 pkgsrc/lang/go120/distinfo cvs rdiff -u -r1.3 -r1.4 pkgsrc/lang/go121/PLIST pkgsrc/lang/go121/distinfo @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.5.2.1 2023/10/22 18:44:09 spz Exp $ d4 1 a4 1 PKGREVISION= 2 @ 1.4 log @Revbump all Go packages after go120 update @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.3 2023/09/06 09:42:55 leot Exp $ d3 1 a3 2 DISTNAME= regal-0.8.0 PKGREVISION= 1 @ 1.3 log @regal: Update to 0.8.0 Changes: v0.8.0 ------ This is the most feature-packed release to date, adding a new output format, four new rules, and many improvements across the board! ## New GitHub output format The `regal lint` command now accepts a new `--format` option named `github`. This is ideal for when Regal is run in CI/CD scenarios using GitHub Actions. This format will emit annotations for any violation, which will be visible in the pull request file view. In addition to this, the GitHub output format will also create a linter report visible in the "Checks" tab: This report summarizes the result of linting, with links provided to the documentation for any violation. ## New rule: use-some-for-output-vars Using `some` to declare output variables used in iteration (and elsewhere) has long been considered a best practice. Regal can now identify places where variables are introduced without `some` and treat these as errors. ## New rule: prefer-some-in-iteration Similarly, the new `prefer-some-in-iteration` rule will have Regal warn when using the "old" style of iteration which could be replaced in favor of `some ... in`. ## New rule: metasyntactic-variable Using rule and variable names like "foo", "bar" or "baz" might be convenient in examples, but rarely has a place in production policy. The new `metasyntactic-variable` rule will flag any occurences of these names. The `ignore` directive may of course be used to e.g. allow these type of variables in tests or other legitimate locations. ## New rule: file-length Having policy files span several hundred lines of code is often a signal to consider refactoring the code into smaller units, and to modularize properly using packages and imports. The new `file-length` rule by default flags any file with more than 500 lines. This number can be changed via the rule's configuration. v0.7.0 ------ This release adds a new `custom` category to the built-in rules, which allows users to easily define the most common organizational requirements, like naming conventions, by simply editing their Regal configuration. ## New custom category, and `naming-convention` rule The custom category of rules allows teams and organizations to define their own conventions for their Rego projects, without having to write custom linter policies. Naming conventions are likely the most common requirement, which is also what the new naming-convention rule helps solve by allowing users to specify their conventions in the Regal configuration using regex patterns. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.2 2023/08/26 16:31:29 bsiegert Exp $ d4 1 @ 1.2 log @Revbump all Go packages after go120 update @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.1 2023/08/10 21:45:25 leot Exp $ d3 1 a3 2 DISTNAME= regal-0.6.0 PKGREVISION= 1 @ 1.1 log @regal: Import regal-0.6.0 as devel/regal Regal is a linter for Rego, with the goal of making your Rego magnificent! Regal goals are: - Identify common mistakes, bugs and inefficiencies in Rego policies, and suggest better approaches - Provide advice on best practices, coding style, and tooling - Allow users, teams and organizations to enforce custom rules on their policy code Regal rules are to as large extent as possible written in Rego themselves, using the JSON representation of the Rego abstract syntax tree (AST) as input, a few additional custom built-in functions and some indexed data structures to help with linting. Packaged by myself in pkgsrc-wip. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.29 2023/05/05 19:37:42 bsiegert Exp $ d4 1 @