open-policy-agent/opa v1.22.1

on GitHub

This is a bugfix release for a rule indexer regression in v1.21.0.

x in {"a", input.y} never matches for a ref x

allow if {
	input.x in {"a", input.y}
}

For an input of {"x": "b", "y": "b"}, this should evaluate to true. Due to a bug in the
rule indexer, the rule body hadn't been returned, and allow thus evaluated to undefined.

Reported by @kholia.