Prepare v1.0.1 release

Signed-off-by: Johan Fylling <[email protected]>
open-policy-agent · Jan 21, 2025 · a5afc5a · a5afc5a
1 parent a6bc629
commit a5afc5a
Show file tree

Hide file tree

Showing 4 changed files with 5,045 additions and 1 deletion.
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -3,6 +3,16 @@
 All notable changes to this project will be documented in this file. This
 project adheres to [Semantic Versioning](http://semver.org/).
 
+## 1.0.1
+
+This is a bug fix release addressing the following issues:
+
+- build(go): bump to 1.23.5 (authored by @srenatus).
+  Addressing `CVE-2024-45341` and `CVE-2024-45336` vulnerabilities in the Go runtime.
+- bundle: Add info about the correct rego version to parse modules on the store, co-authored by @ashutosh-narkar and @johanfylling in [#7278](https://github.com/open-policy-agent/opa/pull/7278).
+  Fixing an issue where the rego-version for individual modules was lost during bundle deactivation (bundle lifecycle) if this version diverged from the active runtime rego-version. 
+  This could cause reloading of v0 bundles to fail when OPA was not running with the `--v0-compatible` flag.
+
 ## 1.0.0
 
 > **_NOTES:_**