chore: upgrade opa to 0.63.0

Author: ffortier

opa/private/opa_rules_dependencies.bzl

@@ -1,9 +1,19 @@
 load("@bazel_tools//tools/build_defs/repo:http.bzl", "http_file")
 load("@bazel_tools//tools/build_defs/repo:utils.bzl", "maybe")
 
-DEFAULT_VERSION = "0.60.0"
+DEFAULT_VERSION = "0.63.0"
 
 _OPA_SHA256 = {
+    "0.63.0": {
+        "opa_darwin_amd64": "236b2644541021aa7f0995fb0a0792bfb427e9a2d5417626f7c17d875f433ca6",
+        "opa_darwin_arm64_static": "5c707597ce6e65e74f3a01fafee0f98e6276f0f66dd3d459ebc52997adac2b0e",
+        "opa_linux_amd64": "20ab8e7ea816f9abd89d850656ff4ea08e5b7f2929720d6f5f20770d79800117",
+        "opa_linux_amd64_static": "af1a9d13611974ff18c529dea3592512dd46f80a4fba95969cebccd2b0ddca64",
+        "opa_linux_arm64_static": "0162d324e6578279072fda4a3eb69cd935a73512289135bef0c3bfe7aa1aaa2f",
+        "opa_windows_amd64": "eb49d9bf98ca21be55c71bf033ed4b058aa1ffdec9b182cb66ae42c007e43074",
+        "opa_capabilities_json": "4e43bd196f78e2210097e2e3bbce25512ef7783c48922be9e2ac0af8ad2fa7c8",
+        "opa_builtin_metadata_json": "3c3bee9988c8d1d7784969a68eadd365fa9e56dd4cefe5b083de9e96f0ab431e",
+    },
     "0.60.0": {
         "opa_darwin_amd64": "1b96cb23a63700b75f670e6bca1e3f8e9e7930c29b095753a9f978ce88828fa0",
         "opa_darwin_arm64_static": "27c1209fda3a5b8d7ec158b3696246ce7d1bf3f0f08f3698a23bf7dada5a618b",

tools/opa_upgrade.py

@@ -15,7 +15,7 @@
     "opa_windows_amd64",
 ]
 
-T = TypeVar('T')
+T = TypeVar("T")
 
 
 def required(value: Optional[T], name: str) -> T:
@@ -28,55 +28,65 @@ def required(value: Optional[T], name: str) -> T:
 def get_sha256(artifact_name: str, version: str) -> str:
     ext = ".exe" if "windows" in artifact_name else ""
 
-    with urlopen(f"https://github.com/open-policy-agent/opa/releases/download/v{version}/{artifact_name}{ext}.sha256") as res:
-        return res.read().decode().split(' ')[0]
+    with urlopen(
+        f"https://github.com/open-policy-agent/opa/releases/download/v{version}/{artifact_name}{ext}.sha256"
+    ) as res:
+        return res.read().decode().split(" ")[0]
 
 
 def get_sha256_file(file: str, version: str) -> str:
-    file_url = f"https://raw.githubusercontent.com/open-policy-agent/opa/v{version}/{file}"
+    file_url = (
+        f"https://raw.githubusercontent.com/open-policy-agent/opa/v{version}/{file}"
+    )
 
     with urlopen(file_url) as res:
         return sha256(res.read()).hexdigest()
 
 
 def main(args: Namespace):
-    d = dict([
-        (artifact_name, get_sha256(artifact_name, args.version))
-        for artifact_name in ARTIFACTS
-    ])
+    d = dict(
+        [
+            (artifact_name, get_sha256(artifact_name, args.version))
+            for artifact_name in ARTIFACTS
+        ]
+    )
 
-    bzl_path = WORKSPACE_ROOT.joinpath(
-        'opa', 'private', 'opa_rules_dependencies.bzl')
+    bzl_path = WORKSPACE_ROOT.joinpath("opa", "private", "opa_rules_dependencies.bzl")
 
     with open(bzl_path) as bzl_file:
         bzl_content = bzl_file.read()
 
-    version_match = re.search(
-        r"DEFAULT_VERSION\s*=\s*[\"'](.*?)[\"']", bzl_content)
+    version_match = re.search(r"DEFAULT_VERSION\s*=\s*[\"'](.*?)[\"']", bzl_content)
 
     if version_match is None:
         raise ValueError(f"Could not find DEFAULT_VERSION in file {bzl_path}")
 
     start_version = version_match.start(1)
     end_version = version_match.end(1)
 
-    bzl_content = bzl_content[:start_version] + \
-        args.version + bzl_content[end_version:]
+    bzl_content = bzl_content[:start_version] + args.version + bzl_content[end_version:]
 
-    dict_match = re.search(
-        r"^_OPA_SHA256\s*=\s*{\s*$", bzl_content, re.MULTILINE)
+    dict_match = re.search(r"^_OPA_SHA256\s*=\s*{\s*$", bzl_content, re.MULTILINE)
 
     if dict_match is None:
         raise ValueError(f"Could not find _OPA_SHA256 in file {bzl_path}")
 
-    bzl_content = bzl_content[:dict_match.end(
-    )] + f"\n    \"{args.version}\": {{\n" + '\n'.join([
-        f"        \"{artifact_name}\": \"{sha256}\","
-        for artifact_name, sha256 in d.items()
-    ] + [
-        f"        \"opa_capabilities_json\": \"{get_sha256_file('capabilities.json', args.version)}\",",
-        f"        \"opa_builtin_metadata_json\": \"{get_sha256_file('builtin_metadata.json', args.version)}\",",
-    ]) + "\n    }," + bzl_content[dict_match.end():]
+    bzl_content = (
+        bzl_content[: dict_match.end()]
+        + f'\n    "{args.version}": {{\n'
+        + "\n".join(
+            [
+                f'        "{artifact_name}": "{sha256}",'
+                for artifact_name, sha256 in d.items()
+            ]
+            + [
+                f"        \"opa_capabilities_json\": \"{get_sha256_file('capabilities.json', args.version)}\",",
+                f"        \"opa_builtin_metadata_json\": \"{get_sha256_file('builtin_metadata.json', args.version)}\",",
+            ]
+        )
+        + "\n    },"
+        + bzl_content[dict_match.end() :]
+    )
 
     with open(bzl_path, "w", encoding="utf-8") as bzl_file:
         bzl_file.write(bzl_content)
@@ -89,13 +99,13 @@ def get_workspace_root(wd: Path) -> Path:
     return wd
 
 
-BUILD_WORKING_DIRECTORY = Path(
-    required(os.getenv("BUILD_WORKING_DIRECTORY"), "BUILD_WORKING_DIRECTORY"))
-WORKSPACE_ROOT = get_workspace_root(BUILD_WORKING_DIRECTORY)
+WORKSPACE_ROOT = Path(
+    required(os.getenv("BUILD_WORKSPACE_DIRECTORY"), "BUILD_WORKSPACE_DIRECTORY")
+)
 
-if __name__ == '__main__':
+if __name__ == "__main__":
 
     parser = ArgumentParser()
-    parser.add_argument('--version', '-v', required=True)
+    parser.add_argument("--version", "-v", required=True)
 
     main(parser.parse_args())