Bump github.com/styrainc/regal from 0.10.1 to 0.11.0

[dependabot]

Bumps github.com/styrainc/regal from 0.10.1 to 0.11.0.

Release notes

Sourced from github.com/styrainc/regal's releases.

v0.11.0

Regal goes to v0.11.0! This release constitutes a milestone for the project, as we now ship with 50 built-in rules in total!

Regal now provides a GitHub Action for easily integrating Regal into your CI pipeline. Thanks @​charlieegan3 for your work on this!

The v0.11.0 release contains six new rules, and a number of improvements and fixes.

New rule: import-after-rule

Category: imports

While certainly not common, Rego allows including imports after rule declarations, i.e.

allow if admin in input.user.roles
import data.roles.admin

The new import-after-rule rule does not allow that.

For more information, see the docs on import-after-rule.

New rule: import-shadows-builtin

Category: imports

The new import-shadows-builtin rule prevents importing a package that shadows a built-in function, or the "namespace" of a built-in function, like http in http.send:

# Forbidden, as it prevents calling `http.send` in this file
import data.features.http

For more information, see the docs on import-shadows-builtin.

New rule: prefer-set-or-object-rule

Category: idiomatic

Prefer set or object-generating rules over using top-level comprehensions.

# Avoid
deny := {reason |
    # ...
}
Prefer
deny contains reason {
</tr></table>

... (truncated)

Commits

• 2dded6a Rule: zero-arity-function (#413)
• 67e8b33 Rule: prefer-value-in-head (#412)
• 668a952 Rule: equals-pattern-matching (#411)
• 75dbeed Rule: prefer-set-or-object-rule (#409)
• 01305e0 Docs: consistent casing of "OPA Docs" (#410)
• cf3e8a4 Rule: import-shadows-builtin (#407)
• 716f77d Fix false positive on function without body in constant-condition (#404)
• 1f199d8 Fix false positive in top-level-iteration (#402)
• 674674b Fix constant-condition flagging multi-value rules without body (#400)
• 00b9c2e no-whitespace-comment: add except-pattern config attribute (#389)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)