…licy-agent#1025)

open-policy-agent#1027)

Bumps [github.com/magiconair/properties](https://github.com/magiconair/properties) from 1.8.7 to 1.8.9.
- [Release notes](https://github.com/magiconair/properties/releases)
- [Commits](magiconair/properties@v1.8.7...v1.8.9)

---
updated-dependencies:
- dependency-name: github.com/magiconair/properties
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

….2 (open-policy-agent#1028)

Bumps [github.com/CycloneDX/cyclonedx-go](https://github.com/CycloneDX/cyclonedx-go) from 0.9.1 to 0.9.2.
- [Release notes](https://github.com/CycloneDX/cyclonedx-go/releases)
- [Changelog](https://github.com/CycloneDX/cyclonedx-go/blob/master/.goreleaser.yml)
- [Commits](CycloneDX/cyclonedx-go@v0.9.1...v0.9.2)

---
updated-dependencies:
- dependency-name: github.com/CycloneDX/cyclonedx-go
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

- Set MaxStack to 500 frames to prevent deep recursion
- Set MaxStackTraceSize to 20 for cleaner errors
- Add test for stack overflow prevention
- Improve test structure with table-driven pattern

Signed-off-by: Ville Vesilehto <ville@vesilehto.fi>

The YAML parser was incorrectly splitting documents with version directives
(e.g. '%YAML 1.1') by treating the first '---' marker as a document separator.
This caused the version directive to be separated from its document,
resulting in parsing errors. Fixed document separation logic to keep
version directive with its document.

Added test cases for various YAML scenarios and improved test coverage.

Signed-off-by: Ville Vesilehto <ville@vesilehto.fi>

Added missing test cases for GitHub and AzureDevOps output formats in
output_test.go. Also added OutputAzureDevOps to the list of available
output formats in Outputs().

Signed-off-by: Ville Vesilehto <ville@vesilehto.fi>

Remove an unnecessary error check for configDesc creation in the push command.
The NewDescriptorFromBytes function does not return an error, so checking for
one was redundant and could never be triggered.

Signed-off-by: Ville Vesilehto <ville@vesilehto.fi>

Bumps golang from 1.23.4-alpine to 1.23.5-alpine.

---
updated-dependencies:
- dependency-name: golang
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

File existence check before downloading policies. Errors out
and no overwrites. Maintains data integrity by preventing
accidental policy overwrites.

Added a test which verified the behaviour.

Signed-off-by: Ville Vesilehto <ville@vesilehto.fi>

Signed-off-by: Ville Vesilehto <ville@vesilehto.fi>

Bumps cuelang.org/go from 0.11.0 to 0.12.0.

---
updated-dependencies:
- dependency-name: cuelang.org/go
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

…ndabot/go_modules/cuelang.org/go-0.12.0

build(deps): bump cuelang.org/go from 0.11.0 to 0.12.0

Bumps [github.com/moby/buildkit](https://github.com/moby/buildkit) from 0.18.1 to 0.19.0.
- [Release notes](https://github.com/moby/buildkit/releases)
- [Commits](moby/buildkit@v0.18.1...v0.19.0)

---
updated-dependencies:
- dependency-name: github.com/moby/buildkit
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

…ndabot/go_modules/github.com/moby/buildkit-0.19.0

build(deps): bump github.com/moby/buildkit from 0.18.1 to 0.19.0

…ndabot/docker/golang-1.23.5-alpine

build(deps): bump golang from 1.23.4-alpine to 1.23.5-alpine

Bumps alpine from 3.21.0 to 3.21.2.

---
updated-dependencies:
- dependency-name: alpine
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Bumps [github.com/hashicorp/go-getter](https://github.com/hashicorp/go-getter) from 1.7.6 to 1.7.8.
- [Release notes](https://github.com/hashicorp/go-getter/releases)
- [Changelog](https://github.com/hashicorp/go-getter/blob/main/.goreleaser.yml)
- [Commits](hashicorp/go-getter@v1.7.6...v1.7.8)

---
updated-dependencies:
- dependency-name: github.com/hashicorp/go-getter
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

…ndabot/go_modules/github.com/hashicorp/go-getter-1.7.8

build(deps): bump github.com/hashicorp/go-getter from 1.7.6 to 1.7.8

Based on PR feedback:

- use byte slices instead of string concat
- set common byte sequences as vars

Signed-off-by: Ville Vesilehto <ville@vesilehto.fi>

…reamble-multidoc

fix: improve handling for YAML version directives

…g-outputs

fix: add output and tests for GitHub and Azure DevOps

…ive-jsonnet

fix: tune jsonnet VM stack trace logging and add test coverage

- Introduce a new `PathAwareParser` interface that extends `Parser` with `SetPath(path string)`.
- Update `parseConfigurations` to detect if a parser implements `PathAwareParser`, and call `SetPath(path)`.
- Implement `SetPath` in the Jsonnet parser, setting the JPath to the file’s directory.
- Add tests to ensure that relative imports in Jsonnet now work as expected.

Signed-off-by: Ville Vesilehto <ville@vesilehto.fi>

…t-library-imports

feat: enable relative jsonnet imports by setting a path-aware importer

…ible-nil

fix: remove redundant error check in push command

* Fix typo in `.golangci.yaml` to enable linter settings
* Fix marshal/unmarshal spelling across codebase

Signed-off-by: Ville Vesilehto <ville@vesilehto.fi>

…ndabot/docker/alpine-3.21.2

build(deps): bump alpine from 3.21.0 to 3.21.2

…s-settings

fix: correct linters-settings in .golangci.yaml to enable misspell

…n-policy-agent#1091)

Bumps [github.com/moby/buildkit](https://github.com/moby/buildkit) from 0.20.1 to 0.20.2.
- [Release notes](https://github.com/moby/buildkit/releases)
- [Commits](moby/buildkit@v0.20.1...v0.20.2)

---
updated-dependencies:
- dependency-name: github.com/moby/buildkit
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

open-policy-agent#1092)

Bumps [github.com/open-policy-agent/opa](https://github.com/open-policy-agent/opa) from 1.2.0 to 1.3.0.
- [Release notes](https://github.com/open-policy-agent/opa/releases)
- [Changelog](https://github.com/open-policy-agent/opa/blob/main/CHANGELOG.md)
- [Commits](open-policy-agent/opa@v1.2.0...v1.3.0)

---
updated-dependencies:
- dependency-name: github.com/open-policy-agent/opa
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

…licy-agent#1096)

Bumps golang from 1.24.1-alpine to 1.24.2-alpine.

---
updated-dependencies:
- dependency-name: golang
  dependency-version: 1.24.2-alpine
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

…gent#1094)

Bumps cuelang.org/go from 0.12.0 to 0.12.1.

---
updated-dependencies:
- dependency-name: cuelang.org/go
  dependency-version: 0.12.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

…10 (open-policy-agent#1097)

Bumps [github.com/magiconair/properties](https://github.com/magiconair/properties) from 1.8.9 to 1.8.10.
- [Release notes](https://github.com/magiconair/properties/releases)
- [Commits](magiconair/properties@v1.8.9...v1.8.10)

---
updated-dependencies:
- dependency-name: github.com/magiconair/properties
  dependency-version: 1.8.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Signed-off-by: James Alseth <james@jalseth.me>

…open-policy-agent#1082)

Signed-off-by: Jesse Amamgbu <amamgbujesse@yahoo.com>

…gent#1099)

Change the relative link to the default template to use
an absolute URL pointing to the raw GitHub content for
better accessibility. Currently the link is broken since
the file from the relative path is not deployed to the
docs site.

Signed-off-by: Ville Vesilehto <ville@vesilehto.fi>

Signed-off-by: Manuel Rüger <manuel@rueg.eu>

…icy-agent#1103)

* build(deps): bump golangci/golangci-lint-action from 6 to 7

Bumps [golangci/golangci-lint-action](https://github.com/golangci/golangci-lint-action) from 6 to 7.
- [Release notes](https://github.com/golangci/golangci-lint-action/releases)
- [Commits](golangci/golangci-lint-action@v6...v7)

---
updated-dependencies:
- dependency-name: golangci/golangci-lint-action
  dependency-version: '7'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>

* ci: Run "golangci-lint migrate"

Signed-off-by: James Alseth <james@jalseth.me>

---------

Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: James Alseth <james@jalseth.me>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: James Alseth <james@jalseth.me>

Bumps [actions/setup-go](https://github.com/actions/setup-go) from 4 to 5.
- [Release notes](https://github.com/actions/setup-go/releases)
- [Commits](actions/setup-go@v4...v5)

---
updated-dependencies:
- dependency-name: actions/setup-go
  dependency-version: '5'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

…icy-agent#1104)

Bumps [bats-core/bats-action](https://github.com/bats-core/bats-action) from 1.5.4 to 3.0.1.
- [Release notes](https://github.com/bats-core/bats-action/releases)
- [Commits](bats-core/bats-action@1.5.4...3.0.1)

---
updated-dependencies:
- dependency-name: bats-core/bats-action
  dependency-version: 3.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

…-agent#1105)

This step is slow to run and only needs to be tested after everything
else.

Signed-off-by: James Alseth <james@jalseth.me>

Signed-off-by: Dieter Bocklandt <dieter.bocklandt@embark-studios.com>

Signed-off-by: Ville Vesilehto <ville@vesilehto.fi>

…n-policy-agent#1101)

Bumps [github.com/moby/buildkit](https://github.com/moby/buildkit) from 0.20.2 to 0.21.0.
- [Release notes](https://github.com/moby/buildkit/releases)
- [Commits](moby/buildkit@v0.20.2...v0.21.0)

---
updated-dependencies:
- dependency-name: github.com/moby/buildkit
  dependency-version: 0.21.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

…n-policy-agent#1111)

Bumps [github.com/moby/buildkit](https://github.com/moby/buildkit) from 0.21.0 to 0.21.1.
- [Release notes](https://github.com/moby/buildkit/releases)
- [Commits](moby/buildkit@v0.21.0...v0.21.1)

---
updated-dependencies:
- dependency-name: github.com/moby/buildkit
  dependency-version: 0.21.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

open-policy-agent#1113)

* build(deps): bump github.com/open-policy-agent/opa from 1.3.0 to 1.4.1

Bumps [github.com/open-policy-agent/opa](https://github.com/open-policy-agent/opa) from 1.3.0 to 1.4.1.
- [Release notes](https://github.com/open-policy-agent/opa/releases)
- [Changelog](https://github.com/open-policy-agent/opa/blob/main/CHANGELOG.md)
- [Commits](open-policy-agent/opa@v1.3.0...v1.4.1)

---
updated-dependencies:
- dependency-name: github.com/open-policy-agent/opa
  dependency-version: 1.4.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

* chore: go mod tidy

Signed-off-by: James Alseth <james@jalseth.me>

---------

Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: James Alseth <james@jalseth.me>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: James Alseth <james@jalseth.me>

…y-agent#1115)

Signed-off-by: James Alseth <james@jalseth.me>

Signed-off-by: James Alseth <james@jalseth.me>

…icy-agent#1119)

Bumps [golangci/golangci-lint-action](https://github.com/golangci/golangci-lint-action) from 7 to 8.
- [Release notes](https://github.com/golangci/golangci-lint-action/releases)
- [Commits](golangci/golangci-lint-action@v7...v8)

---
updated-dependencies:
- dependency-name: golangci/golangci-lint-action
  dependency-version: '8'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

…pen-policy-agent#1120)

Bumps [github.com/google/go-jsonnet](https://github.com/google/go-jsonnet) from 0.20.0 to 0.21.0.
- [Release notes](https://github.com/google/go-jsonnet/releases)
- [Changelog](https://github.com/google/go-jsonnet/blob/master/.goreleaser.yml)
- [Commits](google/go-jsonnet@v0.20.0...v0.21.0)

---
updated-dependencies:
- dependency-name: github.com/google/go-jsonnet
  dependency-version: 0.21.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

…icy-agent#1122)

Signed-off-by: William Burton <william17.burton@gmail.com>