feat: kubesphere 4.0 (#6115)

* feat: kubesphere 4.0

Signed-off-by: ci-bot <ci-bot@kubesphere.io>

* feat: kubesphere 4.0

Signed-off-by: ci-bot <ci-bot@kubesphere.io>

---------

Signed-off-by: ci-bot <ci-bot@kubesphere.io>
Co-authored-by: ks-ci-bot <ks-ci-bot@example.com>
Co-authored-by: joyceliu <joyceliu@yunify.com>

vendor/github.com/open-policy-agent/opa/internal/compiler/wasm/opa/callgraph.csv

@@ -344,12 +344,18 @@ opa_json_writer_write,opa_json_writer_emit_value
 opa_json_writer_write,opa_free
 opa_json_dump,opa_json_writer_write
 opa_value_dump,opa_json_writer_write
+move_freelists,opa_abort
+opa_heap_blocks_stash,move_freelists
+opa_heap_blocks_restore,move_freelists
+opa_malloc,opa_free_bulk_commit
 opa_malloc,opa_abort
+opa_free_bulk_commit,merge_sort_blocks
 opa_realloc,opa_malloc
 opa_realloc,memcpy
 opa_realloc,opa_free
 opa_builtin_cache_get,opa_abort
 opa_builtin_cache_set,opa_abort
+merge_sort_blocks,merge_sort_blocks
 opa_memoize_init,opa_malloc
 opa_memoize_init,opa_object
 opa_memoize_push,opa_malloc
@@ -545,6 +551,10 @@ __merge,opa_value_type
 __merge,__merge
 __merge,opa_object_insert
 __merge,opa_value_get
+builtin_object_union_n,opa_value_iter
+builtin_object_union_n,opa_value_get
+builtin_object_union_n,opa_value_type
+builtin_object_union_n,__merge
 builtin_json_remove,opa_value_type
 builtin_json_remove,__get_json_paths
 builtin_json_remove,__paths_to_object
@@ -565,14 +575,14 @@ opa_sets_intersection,opa_value_type
 opa_sets_intersection,opa_set
 opa_sets_intersection,opa_set_union
 opa_sets_intersection,opa_set_intersection
-opa_sets_intersection,opa_value_free
+opa_sets_intersection,opa_value_free_shallow
 opa_set_union,opa_value_type
 opa_set_union,opa_set
 opa_set_union,opa_set_add
 opa_sets_union,opa_value_type
 opa_sets_union,opa_set
 opa_sets_union,opa_set_add
-opa_sets_union,opa_value_free
+opa_sets_union,opa_value_free_shallow
 opa_strings_any_prefix_match,opa_value_type
 opa_strings_any_prefix_match,opa_value_iter
 opa_strings_any_prefix_match,opa_value_get
@@ -781,10 +791,31 @@ opa_object_keys,opa_strncmp
 opa_object_keys,opa_value_compare_object
 opa_object_keys,opa_abort
 opa_object_keys,opa_value_compare_set
-opa_value_free,opa_free
+opa_array_free,__opa_value_free
+opa_array_free,opa_free
+opa_array_free,opa_free_bulk
+__opa_value_free,opa_free_bulk
+__opa_value_free,opa_free
+__opa_value_free,opa_array_free
+__opa_value_free,__opa_object_buckets_free
+__opa_value_free,__opa_set_buckets_free
+__opa_object_buckets_free,opa_free
+__opa_object_buckets_free,opa_array_free
+__opa_object_buckets_free,__opa_object_buckets_free
+__opa_object_buckets_free,__opa_set_buckets_free
+__opa_object_buckets_free,__opa_value_free
+__opa_object_buckets_free,opa_free_bulk
+__opa_set_buckets_free,opa_free
+__opa_set_buckets_free,opa_array_free
+__opa_set_buckets_free,__opa_object_buckets_free
+__opa_set_buckets_free,__opa_set_buckets_free
+__opa_set_buckets_free,__opa_value_free
+__opa_set_buckets_free,opa_free_bulk
+opa_value_free,__opa_value_free
+opa_value_free_shallow,__opa_value_free
 opa_value_merge,opa_malloc
 opa_value_merge,opa_value_get
-opa_value_merge,opa_object_insert
+opa_value_merge,__opa_object_insert
 opa_value_merge,opa_value_merge
 opa_value_merge,opa_abort
 opa_value_merge,opa_atoi64
@@ -794,19 +825,12 @@ opa_value_merge,opa_strncmp
 opa_value_merge,opa_value_compare
 opa_value_merge,opa_value_compare_object
 opa_value_merge,opa_value_compare_set
-opa_object_insert,opa_value_hash
-opa_object_insert,opa_value_compare
-opa_object_insert,__opa_object_grow
-opa_object_insert,opa_malloc
-__opa_object_grow,opa_malloc
-__opa_object_grow,opa_value_hash
-__opa_object_grow,opa_value_compare_number
-__opa_object_grow,opa_strncmp
-__opa_object_grow,opa_value_compare
-__opa_object_grow,opa_value_compare_object
-__opa_object_grow,opa_value_compare_set
-__opa_object_grow,opa_abort
-__opa_object_grow,opa_free
+__opa_object_insert,opa_value_hash
+__opa_object_insert,opa_value_compare
+__opa_object_insert,__opa_value_free
+__opa_object_insert,__opa_object_grow
+__opa_object_insert,opa_malloc
+opa_object_insert,__opa_object_insert
 opa_boolean,opa_malloc
 opa_number_ref,opa_malloc
 opa_number_int,opa_malloc
@@ -814,7 +838,7 @@ opa_string,opa_malloc
 opa_value_shallow_copy_object,opa_malloc
 opa_value_shallow_copy_object,opa_value_iter
 opa_value_shallow_copy_object,opa_value_get
-opa_value_shallow_copy_object,opa_object_insert
+opa_value_shallow_copy_object,__opa_object_insert
 opa_value_shallow_copy_set,opa_malloc
 opa_value_shallow_copy_set,opa_value_iter
 opa_value_shallow_copy_set,opa_set_add
@@ -857,15 +881,27 @@ opa_array_with_cap,opa_free
 opa_object,opa_malloc
 opa_set,opa_malloc
 opa_set_with_cap,opa_malloc
+__opa_object_grow,opa_malloc
+__opa_object_grow,opa_value_hash
+__opa_object_grow,opa_value_compare_number
+__opa_object_grow,opa_strncmp
+__opa_object_grow,opa_value_compare
+__opa_object_grow,opa_value_compare_object
+__opa_object_grow,opa_value_compare_set
+__opa_object_grow,opa_abort
+__opa_object_grow,opa_free
+opa_object_remove,opa_value_hash
+opa_object_remove,opa_value_compare
+opa_object_remove,__opa_value_free
+opa_object_remove,opa_free_bulk
+opa_object_remove,opa_free
+opa_string_copy,opa_malloc
 opa_value_add_path,opa_value_get
 opa_value_add_path,opa_malloc
-opa_value_add_path,opa_object_insert
-opa_value_add_path,opa_value_free
+opa_value_add_path,__opa_object_insert
+opa_value_add_path,__opa_value_free
 opa_value_remove_path,opa_value_get
-opa_value_remove_path,opa_value_hash
-opa_value_remove_path,opa_value_compare
-opa_value_remove_path,opa_value_free
-opa_value_remove_path,opa_free
+opa_value_remove_path,opa_object_remove
 opa_lookup,opa_value_get
 opa_lookup,opa_value_iter
 opa_lookup,opa_atoi64
@@ -1032,7 +1068,6 @@ opa_regex_find_all_string_submatch,memcpy
 opa_regex_find_all_string_submatch,compile\28char\20const*\29
 opa_regex_find_all_string_submatch,opa_array
 opa_regex_find_all_string_submatch,memset
-opa_regex_find_all_string_submatch,strlen
 opa_regex_find_all_string_submatch,re2::RE2::Match\28re2::StringPiece\20const&\2c\20unsigned\20long\2c\20unsigned\20long\2c\20re2::RE2::Anchor\2c\20re2::StringPiece*\2c\20int\29\20const
 opa_regex_find_all_string_submatch,fullrune
 opa_regex_find_all_string_submatch,chartorune

vendor/github.com/open-policy-agent/opa/internal/compiler/wasm/wasm.go

@@ -28,7 +28,7 @@ import (
 const (
 	opaWasmABIVersionVal      = 1
 	opaWasmABIVersionVar      = "opa_wasm_abi_version"
-	opaWasmABIMinorVersionVal = 2
+	opaWasmABIMinorVersionVal = 3
 	opaWasmABIMinorVersionVar = "opa_wasm_abi_minor_version"
 )
 
@@ -142,6 +142,7 @@ var builtinsFunctions = map[string]string{
 	ast.ObjectKeys.Name:                 "builtin_object_keys",
 	ast.ObjectRemove.Name:               "builtin_object_remove",
 	ast.ObjectUnion.Name:                "builtin_object_union",
+	ast.ObjectUnionN.Name:               "builtin_object_union_n",
 	ast.Concat.Name:                     "opa_strings_concat",
 	ast.FormatInt.Name:                  "opa_strings_format_int",
 	ast.IndexOf.Name:                    "opa_strings_indexof",
@@ -1084,27 +1085,11 @@ func (c *Compiler) compileBlock(block *ir.Block) ([]instruction.Instruction, err
 			instrs = append(instrs, instruction.Call{Index: c.function(opaNumberSize)})
 			instrs = append(instrs, instruction.SetLocal{Index: c.local(stmt.Target)})
 		case *ir.EqualStmt:
-			if stmt.A != stmt.B { // constants, or locals, being equal here can skip the check
-				instrs = append(instrs, c.instrRead(stmt.A))
-				instrs = append(instrs, c.instrRead(stmt.B))
-				instrs = append(instrs, instruction.Call{Index: c.function(opaValueCompare)})
-				instrs = append(instrs, instruction.BrIf{Index: 0})
-			}
+			instrs = append(instrs, c.instrRead(stmt.A))
+			instrs = append(instrs, c.instrRead(stmt.B))
+			instrs = append(instrs, instruction.Call{Index: c.function(opaValueCompare)})
+			instrs = append(instrs, instruction.BrIf{Index: 0})
 		case *ir.NotEqualStmt:
-			if stmt.A == stmt.B { // same local, same bool constant, or same string constant
-				instrs = append(instrs, instruction.Br{Index: 0})
-				continue
-			}
-			_, okA := stmt.A.Value.(ir.Bool)
-			if _, okB := stmt.B.Value.(ir.Bool); okA && okB {
-				// not equal (checked above), but both booleans => not equal
-				continue
-			}
-			_, okA = stmt.A.Value.(ir.StringIndex)
-			if _, okB := stmt.B.Value.(ir.StringIndex); okA && okB {
-				// not equal (checked above), but both strings => not equal
-				continue
-			}
 			instrs = append(instrs, c.instrRead(stmt.A))
 			instrs = append(instrs, c.instrRead(stmt.B))
 			instrs = append(instrs, instruction.Call{Index: c.function(opaValueCompare)})