Upgrade OPA and regal to latest versions

.github/actions/build-policies/action.yml

@@ -12,7 +12,8 @@ runs:
     - name: Install Open Policy Agent
       uses: open-policy-agent/setup-opa@v2.2.0
       with:
-        version: 1.1.0
+        # Keep in sync with the Dockerfile and policies/Makefile
+        version: 1.8.0
 
     - name: Build the policies
       run: make

.github/workflows/ci.yaml

@@ -41,7 +41,8 @@ jobs:
       - name: Setup Regal
         uses: StyraInc/setup-regal@v1
         with:
-          version: 0.29.2
+          # Keep in sync with policies/Makefile
+          version: 0.36.1
 
       - name: Lint policies
         working-directory: ./policies

Dockerfile

@@ -14,7 +14,8 @@ ARG DEBIAN_VERSION=12
 ARG DEBIAN_VERSION_NAME=bookworm
 ARG RUSTC_VERSION=1.89.0
 ARG NODEJS_VERSION=22.19.0
-ARG OPA_VERSION=1.1.0
+# Keep in sync with .github/actions/build-policies/action.yml and policies/Makefile
+ARG OPA_VERSION=1.8.0 
 ARG CARGO_AUDITABLE_VERSION=0.7.0
 
 ##########################################

policies/.regal/config.yaml

@@ -4,6 +4,9 @@
 # Please see LICENSE files in the repository root for full details.
 
 rules:
+  imports:
+    unresolved-reference:
+      level: ignore
   style:
     external-reference:
       level: ignore

policies/Makefile

@@ -6,8 +6,10 @@
 # Set to 1 to run OPA through Docker
 DOCKER := 0
 PODMAN := 0
-OPA_DOCKER_IMAGE := docker.io/openpolicyagent/opa:1.1.0-debug
+# Keep in sync with Dockerfile and .github/actions/build-policies/action.yml
-REGAL_DOCKER_IMAGE := ghcr.io/styrainc/regal:0.31.0
+OPA_DOCKER_IMAGE := docker.io/openpolicyagent/opa:1.8.0-debug
+# Keep in sync with .github/workflows/ci.yaml
+REGAL_DOCKER_IMAGE := ghcr.io/styrainc/regal:0.36.1
 
 INPUTS := \
 	common/common.rego \