Skip to content

Bump github.com/open-policy-agent/gatekeeper/v3 from 3.21.1 to 3.22.0#721

Open
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/go_modules/github.com/open-policy-agent/gatekeeper/v3-3.22.0
Open

Bump github.com/open-policy-agent/gatekeeper/v3 from 3.21.1 to 3.22.0#721
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/go_modules/github.com/open-policy-agent/gatekeeper/v3-3.22.0

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Mar 16, 2026

Bumps github.com/open-policy-agent/gatekeeper/v3 from 3.21.1 to 3.22.0.

Release notes

Sourced from github.com/open-policy-agent/gatekeeper/v3's releases.

v3.22.0

🚀 Notable Changes

  • sync-vap-enforcement-scope now enabled by default: The flag for syncing ValidatingAdmissionPolicy enforcement scope is now true by default, ensuring VAP resources reflect constraint enforcement actions out of the box (#4332).
  • 🏷️ Namespace support for CEL and Rego engines: CEL expressions can now access namespaceObject and Rego policies can access input.namespace for namespace-scoped policy decisions during both admission and audit (#4285)
  • gator bench — policy performance benchmarking: New CLI command to benchmark Rego and CEL engines with latency percentiles, throughput metrics, memory profiling, concurrent load testing, and baseline comparison for CI/CD regression detection (#4287)
  • 📋 gator policy — brew-inspired policy management: New CLI for discovering, installing, upgrading, and uninstalling policies from the gatekeeper-library with support for bundles (e.g., pod-security-baseline), enforcement overrides, and dry-run previews (#4331)
  • 🔇 Disable audit sidecar support: Users who have their own log monitoring (e.g., OTel collector) can now disable the forced fake-reader sidecar when audit file-based logging is enabled (#4280)
  • 🌐 Out-of-cluster / remote cluster support: New --enable-remote-cluster flag allows Gatekeeper to run outside the target cluster (e.g., nested/hosted control planes), fixing a crash when the Gatekeeper pod doesn't exist in the managed cluster (#4368)
  • ⏱️ External data provider timeout enforcement: Mutation-path requests to external data providers now enforce the provider's configured timeout (default 5s), preventing unbounded requests that could outlive the webhook timeout and cause resource exhaustion (#4351)

Features

Bug Fixes

Documentation

Continuous Integration

  • add Slack meeting reminder workflow for OPA Gatekeeper weekly meetings (#4277) #4277 (Copilot)

Chores

... (truncated)

Commits
  • b417e91 chore: Prepare v3.22.0 release (#4438)
  • a6fc13a chore: bump golang from 100774d to ab8c494 (#4429) CP (#4436)
  • 7a56f7a chore: cherry-pick trivy bump to 0.69.3 for release-3.22 (#4437)
  • 06a5842 chore: Prepare v3.22.0-rc.0 release (#4407)
  • 48d8b78 chore: bumping-cert-controller to latest (#4405)
  • c1fca88 chore: bumping opa to 1.13.2 and frameworks to latest (#4406)
  • 348c98d chore: bump the all group with 6 updates (#4403)
  • 9b237be chore: bumping otel to 1.40 to fix GO-2026-4394 (#4404)
  • 730ecb9 fix: add missing flags as helm values (#4385)
  • e73f30f chore: parallelize unit-test CI into coverage, race, and bench jobs, update G...
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [github.com/open-policy-agent/gatekeeper/v3](https://github.com/open-policy-agent/gatekeeper) from 3.21.1 to 3.22.0.
- [Release notes](https://github.com/open-policy-agent/gatekeeper/releases)
- [Changelog](https://github.com/open-policy-agent/gatekeeper/blob/master/docs/RELEASE.md)
- [Commits](open-policy-agent/gatekeeper@v3.21.1...v3.22.0)

---
updated-dependencies:
- dependency-name: github.com/open-policy-agent/gatekeeper/v3
  dependency-version: 3.22.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Mar 16, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update Go code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants