diff --git a/CHANGELOG.md b/CHANGELOG.md
index 11e0057e..6eebcb81 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -40,6 +40,7 @@
   group listener, so those are no longer optional fields that the worker and beat roles leave unset
   ([#791]).
 - test: Bump vector-aggregator to 0.58.0 ([#800]).
+- test: Update OPA to 1.20.2 in integration tests ([#803]).
 - All pods now set `securityContext.seccompProfile.type` to `RuntimeDefault` ([#802]).
 - Replace the unmaintained `serde_yaml` with `yaml_serde` ([#802]).
 
@@ -73,6 +74,7 @@
 [#796]: https://github.com/stackabletech/superset-operator/pull/796
 [#800]: https://github.com/stackabletech/superset-operator/pull/800
 [#802]: https://github.com/stackabletech/superset-operator/pull/802
+[#803]: https://github.com/stackabletech/superset-operator/pull/803
 
 ## [26.7.0] - 2026-07-21
 
diff --git a/tests/test-definition.yaml b/tests/test-definition.yaml
index 89439a55..ba90c764 100644
--- a/tests/test-definition.yaml
+++ b/tests/test-definition.yaml
@@ -34,7 +34,7 @@ dimensions:
       - oidc
   - name: opa-latest
     values:
-      - 1.16.2
+      - 1.20.2
   - name: openshift
     values:
       - "false"