Skip to content
This repository has been archived by the owner on Oct 24, 2024. It is now read-only.

fix(deps): update module github.com/corazawaf/coraza/v2 to v3 #16

Closed
wants to merge 1 commit into from

Conversation

renovate[bot]
Copy link
Contributor

@renovate renovate bot commented Jul 3, 2024

Mend Renovate

This PR contains the following updates:

Package Change Age Adoption Passing Confidence
github.com/corazawaf/coraza/v2 v2.0.1 -> v3.2.1 age adoption passing confidence

Release Notes

corazawaf/coraza (github.com/corazawaf/coraza/v2)

v3.2.1: Coraza 3.2.1

Compare Source

This is a quick patch release to fix a potential data race that was noticed right after v3.2.0 (Thanks @​MarcWort for reporting it!) and a minor fix about logging.

What's Changed

Full Changelog: corazawaf/coraza@v3.2.0...v3.2.1

v3.2.0: Version 3.2.0

Compare Source

Coraza v3.2.0 comes with:

  • Support for SecRuleUpdateTargetByTag, Base64DecodeExt, extended support for ranges of IDs with SecRuleUpdateTargetByID.
  • Support for case-sensitive matching for ARGS keys. It currently comes under the coraza.rule.case_sensitive_args_keys. Mind that, in compliance with RFC 3986 specification, it is planned to become the default behavior starting from the next major version.
  • Support for auditlog formatters for tinygo builds.
  • Various bug fixes, among other things, around log generation and Coraza middleware.
  • Performance implements and reduced memory allocation mostly thanks to @​noboruma.
  • Updated CRS support to the latest CRS v4.3.0 version.

What's Changed

New Contributors (thanks a lot!)

Full Changelog: corazawaf/coraza@v3.1.0...v3.2.0

v3.1.0: Version 3.1.0

Compare Source

This is a new minor version release with emphasis in improving the overall logging experience, fixes for interoperability of the http middleware with other middlewares, better defaults, various fixes and a few new features like the uppercase transformation, the raw body processor (both thanks to @​blotus) and a way to pass a context into a transaction to be later retrieved the error log callback.

What's Changed

New Contributors (thanks a lot!)

Full Changelog: corazawaf/coraza@v3.0.4...v3.1.0

v3.0.4: Version 3.0.4

Compare Source

What's Changed

Full Changelog: corazawaf/coraza@v3.0.3...v3.0.4

v3.0.3: Version 3.0.3

Compare Source

What's Changed

Full Changelog: corazawaf/coraza@v3.0.2...v3.0.3

v3.0.2: Version 3.0.2

Compare Source

What's Changed

Full Changelog: corazawaf/coraza@v3.0.1...v3.0.2

v3.0.1

Compare Source

Important

This tag fixes a high-severity vulnerability. See GHSA-c2pj-v37r-2p6h

Full Changelog: corazawaf/coraza@v3.0.0...v3.0.1

v3.0.0

Compare Source

What's Changed

Coraza's latest v3.0.0 release brings a highly refactored engine that offers more flexibility and major improvements.

Notable changes include:

  • Performance improvement: Performance has been improved by up to 100 times due to several key enhancements such as:
    • New debug logs system based on Zerolog for a fast and with low to zero allocations.
    • Cache transformation logic across the same transaction.
    • Optimized variable collection types.
  • Refactored API: Coraza now relies on a more straightforward and user-friendly API.
  • New Plugin Package: The new package simplifies the extension of Coraza's functionalities.
  • Full CRS v4 Support: Coraza fully supports the CRS v4 branch, always making CRS compatibility of top priority. The CI now includes a CRS testing suite to guarantee a regression-free development.
  • Cross-platform support: Both Go and TinyGo for WASM builds are now supported.
  • New experimental Multiphase feature: Introducing a new way for early data evaluation and blocking.
  • Dataset support: designed for in-config .data files emulation.

Contributors

Many thanks to all the contributors and users that made this release possible:


Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate. View repository job log here.

@fzipi
Copy link
Member

fzipi commented Jul 3, 2024

Ugh, we want separate updates for this, probably. I mean, keep v2 updated and v3 updated.

@fzipi fzipi closed this Jul 3, 2024
Copy link
Contributor Author

renovate bot commented Jul 3, 2024

Renovate Ignore Notification

Because you closed this PR without merging, Renovate will ignore this update. You will not get PRs for any future 3.x releases. But if you manually upgrade to 3.x then Renovate will re-enable minor and patch updates automatically.

If you accidentally closed this PR, or if you changed your mind: rename this PR to get a fresh replacement PR.

@renovate renovate bot deleted the renovate/github.com-corazawaf-coraza-v2-3.x branch July 3, 2024 17:44
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant