Issues

• Basic authorizer and Data API resolve encoded slashes to different documents

  Bug

  open-policy-agent/opa#9323 · Filter by author abhishekkushwaha4u opened on Oct 2, 2026

• Security bug: allow_net does not restrict unix:// destinations in http.send: one allowed hostname reaches any local UNIX socket

  Bug

  open-policy-agent/opa#9320 · Filter by author adelzaitri opened on Oct 2, 2026

• bundle: data.yml files are not canonicalized for bundle signatures

  bugdistribution
  Bug

  open-policy-agent/opa#9301 · Filter by author philipaconrad opened on Sep 30, 2026
  

• bundle verify: *signatures.json filename lookup is too permissive

  bugdistribution
  Bug

  open-policy-agent/opa#9289 · Filter by author philipaconrad opened on Sep 30, 2026
  

• v2: Add v2 rego-version to Go API

  Feature

  open-policy-agent/opa#9269 · Filter by author johanfylling opened on Sep 25, 2026 · OPA 2.0
  

• v2: Add --v2-compatible flag

  Feature

  open-policy-agent/opa#9251 · Filter by author johanfylling opened on Sep 23, 2026 · OPA 2.0

• Partial evaluation of rules with else

  partial-eval
  Feature

  open-policy-agent/opa#9238 · Filter by author saluc28 opened on Sep 19, 2026
  3

• v2: Make the v2 package the default for CMD

  runtime
  Feature

  open-policy-agent/opa#9227 · Filter by author johanfylling opened on Sep 17, 2026 · OPA 2.0

• v2: Create OPA 2.0 documentation

  docs
  Feature

  open-policy-agent/opa#9226 · Filter by author johanfylling opened on Sep 17, 2026 · OPA 2.0

• v2: Add v2 Go package

  Feature

  open-policy-agent/opa#9225 · Filter by author johanfylling opened on Sep 17, 2026 · OPA 2.0

• Migrate to use json/v2

  Feature

  open-policy-agent/opa#9200 · Filter by author anderseknert opened on Sep 14, 2026

• config: support reloading config.yaml via fsnotify watcher

  Feature

  open-policy-agent/opa#9184 · Filter by author charlieegan3 opened on Sep 9, 2026
  1

• make *ast.Compiler context-aware

  Feature

  open-policy-agent/opa#9088 · Filter by author charlesdaniels opened on Aug 25, 2026
  4

• Add ML-DSA (RFC9881) signature support

  Feature

  open-policy-agent/opa#9085 · Filter by author deeglaze opened on Aug 25, 2026
  2

• Same var bound in some .. in shouldn't be allowed in same some .. in expression

  Bug

  open-policy-agent/opa#9052 · Filter by author anderseknert opened on Aug 20, 2026

• allow_net does not restrict file:// $refs in schema built-ins

  Bug

  open-policy-agent/opa#9000 · Filter by author sspaink opened on Aug 11, 2026
  1

• docs: Link Checker Report

  automated issuereport
  open-policy-agent/opa#8960 · Filter by author github-actions opened on Aug 1, 2026

• Bundle plugin: O(n²) compilation cost during initial multi-bundle activation

  Feature

  open-policy-agent/opa#8911 · Filter by author jsteinberg opened on Jul 20, 2026
  4

• repl: bracketed paste of multi-rule policies fails when rules reference each other

  open-policy-agent/opa#8896 · Filter by author sspaink opened on Jul 14, 2026
  1

• Support basic expression evaluation in debug session

  debugging
  Feature

  open-policy-agent/opa#8893 · Filter by author anderseknert opened on Jul 14, 2026
  1

• Allow more breakpoint types

  debugging
  Feature

  open-policy-agent/opa#8892 · Filter by author anderseknert opened on Jul 14, 2026

• Unexpected in vs == operator precedence

  rego
  Bug

  open-policy-agent/opa#8859 · Filter by author anderseknert opened on Jul 5, 2026
  7

• Warp errors instead of embedding error messages

  Feature

  open-policy-agent/opa#8856 · Filter by author yan-foto opened on Jul 3, 2026
  2

• docs: add "AI Agent Policy Enforcement" use case guide

  open-policy-agent/opa#8851 · Filter by author kingztech2019 opened on Jul 2, 2026
  1

• fmt: allow early exit on fail condition

  Feature

  open-policy-agent/opa#8841 · Filter by author anderseknert opened on Jul 1, 2026