OCP Release v0.3.0 + v0.4.0

[srenatus]

Please Note! 📜

v0.4.0 was released yesterday! I've also forgotten to post an announcement for v0.3.0, be sure to check out its release notes: It came with a broad database upgrade that may need your attention ⚠️

This is what's new in the latest release, v0.4.0:

Build Targets: IR and WASM

You can now specify a build target for bundles, enabling support for OPA's IR plans and WebAssembly (Wasm) bundles.

Example configuration:

bundles:
  ir-bundle:
    object_storage:
      filesystem:
        path: bundles/ir-bundle/bundle.tar.gz
    options:
      target: "ir"  # "rego" (default), "ir" or "plan" (synnonymous), "wasm"
    requirements:
    - source: my-source

Authored by @srenatus, see open-policy-agent/opa-control-plane#220 for all details.

Path Glob Patterns in Sources

Sources now support glob patterns for selecting files, giving you more control over which files are included in bundles:

sources:
  glob-paths:
    directory: files/sources/my-policies
    paths:
    - "**/*.rego"
    - "**/*.json"

This allows you to selectively include files matching specific patterns, making it easier to exclude unwanted files (like test files or documentation) from your bundles.

Reported by @gusega, authored by @srenatus

Add Pluggable Authorization Model for Data Layer

Previously, the authorization logic within OCP was tightly coupled with the database package.
This change adds support for a pluggable authorization model in order to decouple the data layer from authorization logic.

Authored by @ashutosh-narkar

Various version updates

Notable:

• Go 1.25.6 for building images and binaries
• OPA v1.13.1 (plus a fix from main)

Full Changelog: open-policy-agent/opa-control-plane@v0.3.0...v0.4.0