chore(deps): update all non-major dockerfile dependencies

[red-hat-konflux]

This PR contains the following updates:

Package	Type	Update	Change
ghcr.io/astral-sh/uv	final	patch	0.9.6 -> 0.9.7
ghcr.io/astral-sh/uv	stage	patch	0.9.6 -> 0.9.7
openpolicyagent/opa (source)	stage	minor	1.9.0-static -> 1.10.0-static

---

Release Notes

astral-sh/uv (ghcr.io/astral-sh/uv)

v0.9.7

Compare Source

Released on 2025-10-30.

Enhancements

• Add Windows x86-32 emulation support to interpreter architecture checks (#​13475)
• Improve readability of progress bars (#​16509)
• Add GitHub attestations for uv release artifacts (#​11357)

Bug fixes

• Drop terminal coloring from uv auth token output (#​16504)
• Don't use UV_LOCKED to enable --check flag (#​16521)

open-policy-agent/opa (openpolicyagent/opa)

v1.10.0

Compare Source

This release contains a mix of new features, performance improvements, and bugfixes. Notably:

• Non-static arm64 executables for linux and darwin
• Performance improvements to the formatter, compiler, and runtime
• A new --fail-on-empty flag for opa test
• Support for IS NOT NULL query statements in the Compile API

Non-static OPA binaries for linux/arm64 and darwin/arm64

Starting with this release, OPA will ship non-static arm64 executables for linux and darwin.
Furthermore, the openpolicyagent/opa:latest docker image is a multi-platform image with arm64 support.

Runtime, Tooling

• cmd: Add opa test --fail-on-empty to allow making bad -r or empty folders fail (#​7943) reported and authored by @​grosser
• format: Performance improvements in formatter (#​7967) authored by @​anderseknert
• repl: Check usage of with keyword (#​7942) authored by @​sspaink
• server/failtracer: don't assume only being fed two-elem calls (#​7995) authored by @​srenatus
• storage: Improve performance of storage operations (#​7957) authored by @​anderseknert
• storage: Some small improvements to inmem storage (#​7944) authored by @​anderseknert
• util: Fix race condition in ReadMaybeCompressedBody (#​7966) authored by @​anderseknert

Compiler, Topdown and Rego

• ast: Fix undeclared error when printing nested comprehension (#​7647) authored by @​schmitd reported by @​charlesdaniels
• ast: Raise parse error on infix operator in rule name (#​7433) authored by @​mmzzuu
• ast: Refactor hash key equality function (#​7969) authored by @​anderseknert
• ast,topdown: Ref String() and greatly improved builtin lookup cost (#​7961) authored by @​anderseknert
• compile: Add support for "any value at all", as IS NOT NULL (#​7998) authored by @​srenatus
• eval: Lazy init of eval.Time term (#​7968) authored by @​anderseknert
• perf: Zero alloc AST store lookups of interned path terms (#​7979) authored by @​anderseknert
• perf: Cheaper split built-in calls (#​7962) authored by @​anderseknert

Docs, Website, Ecosystem

• docs: Add Compile API data filtering docs (#​7939) authored by @​srenatus
• docs: Add ecosystem project Moat (#​7963) authored by @​jcoenraadts
• docs: Address broken anchors (#​8000) authored by @​charlieegan3
• docs: Correction in OCP docs information regarding supported datasources (#​7964) authored by @​irodzik
• docs: Moving CLI Reference to Operations in TOC (#​8001) authored by @​johanfylling
• docs: OCP HTTP API updates (#​7951) authored by @​srenatus
• docs: Remove k8s primer line numbers comments (#​7946) authored by @​charlieegan3
• docs: Update based on Slack feedback (#​7990) authored by @​charlieegan3
• docs: Update link checker config (#​7949) authored by @​charlieegan3
• docs: Updated AI guidelines (#​7945) authored by @​charlieegan3
• docs/ocp/deployment: Add segment on database migrations (#​7952) authored by @​srenatus
• website: Fix build issues (#​7999) authored by @​charlieegan3
• website: FOUC squashing on the homepage (#​7948) authored by @​charlieegan3
• website: Show latest release rather than edge (#​7988) authored by @​charlieegan3
• website: Update docusaurus (#​7947) authored by @​charlieegan3

Miscellaneous

• ast/capabilities: Remove stale comment (#​7994) authored by @​srenatus
• build: Non-static images for linux/arm64 (#​7977) authored by @​srenatus
• ci: Add zig to post-merge github action (#​7983) authored by @​sspaink
• e2e/authz,topdown: Fix benchmarks (#​7980) authored by @​srenatus
• runtime: Fixing tests by closing watcher & set default GracefulShutdownPeriod (#​7991) authored by @​rMaxiQp
• test/e2e: move http.DefaultTransport fix to init() (#​7955) authored by @​srenatus
• Remove vendor/ (#​7975) authored by @​srenatus
• Modernize analyzer fixes (#​7965) authored by @​anderseknert
• Dependency updates; notably:
  • build: bump golang 1.25.1 -> 1.25.3 authored by @​srenatus
  • build(deps): Bump github.com/olekukonko/tablewriter from 0.0.5 to 1.1.0 (#​7937) authored by @​jh125486
    This is a major version update containing breaking API changes. If you're affected by this, please consult the tablewriter migration guide.
  • deps(build): Bump github.com/bytecodealliance/wasmtime-go from v3.0.2 to v37.0.0 authored by @​srenatus

Optionally fail when opa test did not run any tests

With the new --fail-on-empty flag, accidentally running opa test in a directory without any tests or
with a -r that did not match any test names, can be caught by making the test fail instead.

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

To execute skipped test pipelines write comment /ok-to-test.

This PR has been generated by MintMaker (powered by Renovate Bot).