[CSPM] bump github.com/open-policy-agent/opa to v0.43.1 (#13492)

* [CSPM] bump `github.com/open-policy-agent/opa` to v0.43.1 * add release note * fix release note
DataDog · Sep 15, 2022 · ce9091f · ce9091f
1 parent 84cdac4
commit ce9091f
Show file tree

Hide file tree

Showing 3 changed files with 14 additions and 3 deletions.
diff --git a/go.mod b/go.mod
@@ -133,7 +133,7 @@ require (
 	github.com/moby/sys/mountinfo v0.6.2
 	github.com/mohae/deepcopy v0.0.0-20170603005431-491d3605edfb
 	github.com/olekukonko/tablewriter v0.0.5
-	github.com/open-policy-agent/opa v0.43.0
+	github.com/open-policy-agent/opa v0.43.1
 	github.com/open-telemetry/opentelemetry-collector-contrib/pkg/resourcetotelemetry v0.56.0
 	github.com/opencontainers/runtime-spec v1.0.3-0.20210326190908-1c3f411f0417
 	github.com/openshift/api v3.9.0+incompatible

diff --git a/go.sum b/go.sum
diff --git a/releasenotes/notes/bump-opa-rego-43-1-82ab33b58485e6b6.yaml b/releasenotes/notes/bump-opa-rego-43-1-82ab33b58485e6b6.yaml
@@ -0,0 +1,11 @@
+# Each section from every release note are combined when the
+# CHANGELOG.rst is rendered. So the text needs to be worded so that
+# it does not depend on any information only available in another
+# section. This may mean repeating some details, but each section
+# must be readable independently of the other.
+#
+# Each section note must be formatted as reStructuredText.
+---
+security:
+  - |
+    Bump ``github.com/open-policy-agent/opa`` to `v0.43.1 <https://github.com/open-policy-agent/opa/releases/tag/v0.43.1>`_ to patch CVE-2022-36085.