chore(deps): bump github.com/open-policy-agent/opa from 1.21.1 to 1.21.3 - #74

Kusari Analysis Results:

✅ No Flagged Issues Detected
All values appear to be within acceptable risk parameters.

Both analyses recommend proceeding. The dependency update moves opa from 1.21.1 to 1.21.3 and golang.org/x/crypto from 0.55.0 to 0.57.0. Both use permissive licenses (Apache-2.0, BSD-3-Clause), and there are no typosquat or blocked signals. opa has no advisories. The x/crypto update remediates two ssh DoS deadlock advisories, GO-2026-6354 (CVE-2026-78662) and GO-2026-6355 (CVE-2026-56855). GO-2026-5932 (the unmaintained openpgp package) is carried over from before this PR, and no fix is available, so it is context only and does not change the risk. The code analysis found no code issues, exposed secrets, or workflow issues. Both packages are slightly behind their latest versions (opa v1.21.4, x/crypto v0.58.0), which is a minor note only. Combined, the PR reduces risk and adds no new concerns.

@kusari-inspector rerun - Trigger a re-analysis of this PR
@kusari-inspector feedback [your message] - Send feedback to our AI and team
See Kusari's documentation for setup and configuration.
Commit: d76035c, performed at: 2026-10-25T05:53:42Z