Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

fix(deps): update module github.com/corazawaf/coraza/v3 to v3.2.1 #1082

Closed
wants to merge 1 commit into from

Conversation

renovate[bot]
Copy link
Contributor

@renovate renovate bot commented Jun 20, 2024

Mend Renovate

This PR contains the following updates:

Package Change Age Adoption Passing Confidence
github.com/corazawaf/coraza/v3 v3.0.0-00010101000000-000000000000 -> v3.2.1 age adoption passing confidence

Release Notes

corazawaf/coraza (github.com/corazawaf/coraza/v3)

v3.2.1: Coraza 3.2.1

Compare Source

This is a quick patch release to fix a potential data race that was noticed right after v3.2.0 (Thanks @​MarcWort for reporting it!) and a minor fix about logging.

What's Changed

Full Changelog: v3.2.0...v3.2.1

v3.2.0: Version 3.2.0

Compare Source

Coraza v3.2.0 comes with:

  • Support for SecRuleUpdateTargetByTag, Base64DecodeExt, extended support for ranges of IDs with SecRuleUpdateTargetByID.
  • Support for case-sensitive matching for ARGS keys. It currently comes under the coraza.rule.case_sensitive_args_keys. Mind that, in compliance with RFC 3986 specification, it is planned to become the default behavior starting from the next major version.
  • Support for auditlog formatters for tinygo builds.
  • Various bug fixes, among other things, around log generation and Coraza middleware.
  • Performance implements and reduced memory allocation mostly thanks to @​noboruma.
  • Updated CRS support to the latest CRS v4.3.0 version.

What's Changed

New Contributors (thanks a lot!)

Full Changelog: v3.1.0...v3.2.0

v3.1.0: Version 3.1.0

Compare Source

This is a new minor version release with emphasis in improving the overall logging experience, fixes for interoperability of the http middleware with other middlewares, better defaults, various fixes and a few new features like the uppercase transformation, the raw body processor (both thanks to @​blotus) and a way to pass a context into a transaction to be later retrieved the error log callback.

What's Changed

New Contributors (thanks a lot!)

Full Changelog: v3.0.4...v3.1.0

v3.0.4: Version 3.0.4

Compare Source

What's Changed

Full Changelog: v3.0.3...v3.0.4

v3.0.3: Version 3.0.3

Compare Source

What's Changed

Full Changelog: v3.0.2...v3.0.3

v3.0.2: Version 3.0.2

Compare Source

What's Changed

Full Changelog: v3.0.1...v3.0.2

v3.0.1

Compare Source

Important

This tag fixes a high-severity vulnerability. See GHSA-c2pj-v37r-2p6h

Full Changelog: v3.0.0...v3.0.1

v3.0.0

Compare Source

What's Changed

Coraza's latest v3.0.0 release brings a highly refactored engine that offers more flexibility and major improvements.

Notable changes include:

  • Performance improvement: Performance has been improved by up to 100 times due to several key enhancements such as:
    • New debug logs system based on Zerolog for a fast and with low to zero allocations.
    • Cache transformation logic across the same transaction.
    • Optimized variable collection types.
  • Refactored API: Coraza now relies on a more straightforward and user-friendly API.
  • New Plugin Package: The new package simplifies the extension of Coraza's functionalities.
  • Full CRS v4 Support: Coraza fully supports the CRS v4 branch, always making CRS compatibility of top priority. The CI now includes a CRS testing suite to guarantee a regression-free development.
  • Cross-platform support: Both Go and TinyGo for WASM builds are now supported.
  • New experimental Multiphase feature: Introducing a new way for early data evaluation and blocking.
  • Dataset support: designed for in-config .data files emulation.

Contributors

Many thanks to all the contributors and users that made this release possible:

v3.0.0-rc.3

Compare Source

What's Changed

New Contributors

Full Changelog: v3.0.0-rc.2...v3.0.0-rc.3

v3.0.0-rc.2

Compare Source

What's Changed

Full Changelog: v3.0.0-rc.1...v3.0.0-rc.2


Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate. View repository job log here.

@renovate renovate bot requested a review from a team as a code owner June 20, 2024 13:56
@renovate renovate bot force-pushed the renovate/github.com-corazawaf-coraza-v3-3.x branch 3 times, most recently from 690720d to b4539aa Compare June 23, 2024 16:16
@renovate renovate bot changed the title fix(deps): update module github.com/corazawaf/coraza/v3 to v3.2.0 fix(deps): update module github.com/corazawaf/coraza/v3 to v3.2.1 Jun 23, 2024
@renovate renovate bot force-pushed the renovate/github.com-corazawaf-coraza-v3-3.x branch from b4539aa to b556326 Compare June 26, 2024 09:39
@renovate renovate bot force-pushed the renovate/github.com-corazawaf-coraza-v3-3.x branch 4 times, most recently from c8b1ccb to bb88295 Compare July 18, 2024 21:36
@renovate renovate bot force-pushed the renovate/github.com-corazawaf-coraza-v3-3.x branch from bb88295 to 2ccf91c Compare July 19, 2024 12:51
@M4tteoP M4tteoP closed this Jul 19, 2024
Copy link
Contributor Author

renovate bot commented Jul 19, 2024

Renovate Ignore Notification

Because you closed this PR without merging, Renovate will ignore this update (v3.2.1). You will get a PR once a newer version is released. To ignore this dependency forever, add it to the ignoreDeps array of your Renovate config.

If you accidentally closed this PR, or if you changed your mind: rename this PR to get a fresh replacement PR.

@renovate renovate bot deleted the renovate/github.com-corazawaf-coraza-v3-3.x branch July 19, 2024 12:53
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

1 participant