Merge pull request #1000 from opencloud-eu/dependabot/go_modules/github.com/open-policy-agent/opa-1.5.1

build(deps): bump github.com/open-policy-agent/opa from 1.5.0 to 1.5.1

go.mod

@@ -62,7 +62,7 @@ require (
 	github.com/onsi/ginkgo v1.16.5
 	github.com/onsi/ginkgo/v2 v2.23.4
 	github.com/onsi/gomega v1.37.0
-	github.com/open-policy-agent/opa v1.5.0
+	github.com/open-policy-agent/opa v1.5.1
 	github.com/opencloud-eu/libre-graph-api-go v1.0.8-0.20250603072916-fa601fb14450
 	github.com/opencloud-eu/reva/v2 v2.33.1-0.20250603070030-797b412f62db
 	github.com/orcaman/concurrent-map v1.0.0

go.sum

@@ -863,8 +863,8 @@ github.com/onsi/gomega v1.7.1/go.mod h1:XdKZgCCFLUoM/7CFJVPcG8C1xQ1AJ0vpAezJrB7J
 github.com/onsi/gomega v1.10.1/go.mod h1:iN09h71vgCQne3DLsj+A5owkum+a2tYe+TOCB1ybHNo=
 github.com/onsi/gomega v1.37.0 h1:CdEG8g0S133B4OswTDC/5XPSzE1OeP29QOioj2PID2Y=
 github.com/onsi/gomega v1.37.0/go.mod h1:8D9+Txp43QWKhM24yyOBEdpkzN8FvJyAwecBgsU4KU0=
-github.com/open-policy-agent/opa v1.5.0 h1:npsQMUZvafCLYHofoNrZ0cSWbvoDpasvWtrHXdEvSuM=
+github.com/open-policy-agent/opa v1.5.1 h1:LTxxBJusMVjfs67W4FoRcnMfXADIGFMzpqnfk6D08Cg=
-github.com/open-policy-agent/opa v1.5.0/go.mod h1:bYbS7u+uhTI+cxHQIpzvr5hxX0hV7urWtY+38ZtjMgk=
+github.com/open-policy-agent/opa v1.5.1/go.mod h1:bYbS7u+uhTI+cxHQIpzvr5hxX0hV7urWtY+38ZtjMgk=
 github.com/opencloud-eu/go-micro-plugins/v4/store/nats-js-kv v0.0.0-20250512152754-23325793059a h1:Sakl76blJAaM6NxylVkgSzktjo2dS504iDotEFJsh3M=
 github.com/opencloud-eu/go-micro-plugins/v4/store/nats-js-kv v0.0.0-20250512152754-23325793059a/go.mod h1:pjcozWijkNPbEtX5SIQaxEW/h8VAVZYTLx+70bmB3LY=
 github.com/opencloud-eu/libre-graph-api-go v1.0.8-0.20250603072916-fa601fb14450 h1:QWn9G2f1R/EbyZSbkjtd9jqNq9X0NIphmmD4KYLNZtA=

vendor/github.com/open-policy-agent/opa/v1/topdown/walk.go

@@ -30,7 +30,7 @@ func walk(filter, path *ast.Array, input *ast.Term, iter func(*ast.Term) error)
 			pathCopy = ast.InternedEmptyArrayValue
 		} else {
 			// Shallow copy, as while the array is modified, the elements are not
-			pathCopy = path.Slice(0, path.Len())
+			pathCopy = copyShallow(path)
 		}
 
 		// TODO(ae): I'd *really* like these terms to be retrieved from a sync.Pool, and
@@ -48,8 +48,7 @@ func walk(filter, path *ast.Array, input *ast.Term, iter func(*ast.Term) error)
 		filter = filter.Slice(1, -1)
 		if key.IsGround() {
 			if term := input.Get(key); term != nil {
-				path = pathAppend(path, key)
+				return walk(filter, pathAppend(path, key), term, iter)
-				return walk(filter, path, term, iter)
 			}
 			return nil
 		}
@@ -149,6 +148,16 @@ func pathIsWildcard(operands []*ast.Term) bool {
 	return false
 }
 
+func copyShallow(arr *ast.Array) *ast.Array {
+	cpy := make([]*ast.Term, 0, arr.Len())
+
+	arr.Foreach(func(elem *ast.Term) {
+		cpy = append(cpy, elem)
+	})
+
+	return ast.NewArray(cpy...)
+}
+
 func init() {
 	RegisterBuiltinFunc(ast.WalkBuiltin.Name, evalWalk)
 }

vendor/github.com/open-policy-agent/opa/v1/version/version.go

@@ -10,7 +10,7 @@ import (
 	"runtime/debug"
 )
 
-var Version = "1.5.0"
+var Version = "1.5.1"
 
 // GoVersion is the version of Go this was built with
 var GoVersion = runtime.Version()

vendor/modules.txt

@@ -1113,7 +1113,7 @@ github.com/onsi/gomega/matchers/support/goraph/edge
 github.com/onsi/gomega/matchers/support/goraph/node
 github.com/onsi/gomega/matchers/support/goraph/util
 github.com/onsi/gomega/types
-# github.com/open-policy-agent/opa v1.5.0
+# github.com/open-policy-agent/opa v1.5.1
 ## explicit; go 1.23.8
 github.com/open-policy-agent/opa/ast
 github.com/open-policy-agent/opa/ast/json