fzipi
commented
1 week ago Ugh, we want separate updates for this, probably. I mean, keep v2 updated and v3 updated.
Closed renovate[bot] closed 1 week ago
fzipi
commented
1 week ago Ugh, we want separate updates for this, probably. I mean, keep v2 updated and v3 updated.
renovate[bot]
commented
1 week ago Because you closed this PR without merging, Renovate will ignore this update. You will not get PRs for any future 3.x releases. But if you manually upgrade to 3.x then Renovate will re-enable minor and patch updates automatically.
If you accidentally closed this PR, or if you changed your mind: rename this PR to get a fresh replacement PR.
This PR contains the following updates:
v2.0.1->v3.2.1Release Notes
corazawaf/coraza (github.com/corazawaf/coraza/v2)
### [`v3.2.1`](https://togithub.com/corazawaf/coraza/releases/tag/v3.2.1): Coraza 3.2.1 [Compare Source](https://togithub.com/corazawaf/coraza/compare/v3.2.0...v3.2.1) This is a quick patch release to fix a potential data race that was noticed right after `v3.2.0` (Thanks [@MarcWort](https://togithub.com/MarcWort) for reporting it!) and a minor fix about logging. #### What's Changed - fix: race condition on StrID by [@M4tteoP](https://togithub.com/M4tteoP) in [https://github.com/corazawaf/coraza/pull/1084](https://togithub.com/corazawaf/coraza/pull/1084) - fix: makes max size log message CRS correlation rule friendly by [@M4tteoP](https://togithub.com/M4tteoP) in [https://github.com/corazawaf/coraza/pull/1085](https://togithub.com/corazawaf/coraza/pull/1085) **Full Changelog**: https://github.com/corazawaf/coraza/compare/v3.2.0...v3.2.1 ### [`v3.2.0`](https://togithub.com/corazawaf/coraza/releases/tag/v3.2.0): Version 3.2.0 [Compare Source](https://togithub.com/corazawaf/coraza/compare/v3.1.0...v3.2.0) Coraza v3.2.0 comes with: - Support for `SecRuleUpdateTargetByTag`, `Base64DecodeExt`, extended support for ranges of IDs with `SecRuleUpdateTargetByID`. - Support for case-sensitive matching for `ARGS` keys. It currently comes under the [`coraza.rule.case_sensitive_args_keys`](https://togithub.com/corazawaf/coraza?tab=readme-ov-file#build-tags). Mind that, in compliance with RFC 3986 specification, it is planned to become the default behavior starting from the next major version. - Support for auditlog formatters for tinygo builds. - Various bug fixes, among other things, around log generation and Coraza middleware. - Performance implements and reduced memory allocation mostly thanks to [@noboruma](https://togithub.com/noboruma). - Updated CRS support to the latest CRS v4.3.0 version. #### What's Changed - fix(deps): update module github.com/tidwall/gjson to v1.17.1 by [@renovate](https://togithub.com/renovate) in [https://github.com/corazawaf/coraza/pull/1004](https://togithub.com/corazawaf/coraza/pull/1004) - fix(deps): update module golang.org/x/net to v0.22.0 by [@renovate](https://togithub.com/renovate) in [https://github.com/corazawaf/coraza/pull/1011](https://togithub.com/corazawaf/coraza/pull/1011) - feat: expose expected directives for e2e test by [@fionera](https://togithub.com/fionera) in [https://github.com/corazawaf/coraza/pull/1012](https://togithub.com/corazawaf/coraza/pull/1012) - avoid executing costly With if noop logger by [@noboruma](https://togithub.com/noboruma) in [https://github.com/corazawaf/coraza/pull/1015](https://togithub.com/corazawaf/coraza/pull/1015) - tests: covers eq operator. by [@jcchavezs](https://togithub.com/jcchavezs) in [https://github.com/corazawaf/coraza/pull/1002](https://togithub.com/corazawaf/coraza/pull/1002) - fix: RegisterWriter/RegisterFormatter case insensitive by [@M4tteoP](https://togithub.com/M4tteoP) in [https://github.com/corazawaf/coraza/pull/1026](https://togithub.com/corazawaf/coraza/pull/1026) - feat: Implements SecRuleUpdateTargetByTag, extends ByID with ranges by [@M4tteoP](https://togithub.com/M4tteoP) in [https://github.com/corazawaf/coraza/pull/1020](https://togithub.com/corazawaf/coraza/pull/1020) - tests: covers zero case in eq operator. by [@jcchavezs](https://togithub.com/jcchavezs) in [https://github.com/corazawaf/coraza/pull/1029](https://togithub.com/corazawaf/coraza/pull/1029) - feat: registers `RegisterFormatter`s for tinygo by [@M4tteoP](https://togithub.com/M4tteoP) in [https://github.com/corazawaf/coraza/pull/1027](https://togithub.com/corazawaf/coraza/pull/1027) - fix(deps): update module golang.org/x/net to v0.23.0 by [@renovate](https://togithub.com/renovate) in [https://github.com/corazawaf/coraza/pull/1033](https://togithub.com/corazawaf/coraza/pull/1033) - Fix: audit logs RelevantOnly match if interruption happens by [@M4tteoP](https://togithub.com/M4tteoP) in [https://github.com/corazawaf/coraza/pull/1025](https://togithub.com/corazawaf/coraza/pull/1025) - tests: adds logs for unexpected status code. by [@jcchavezs](https://togithub.com/jcchavezs) in [https://github.com/corazawaf/coraza/pull/1037](https://togithub.com/corazawaf/coraza/pull/1037) - fix(deps): update module golang.org/x/net to v0.24.0 by [@renovate](https://togithub.com/renovate) in [https://github.com/corazawaf/coraza/pull/1035](https://togithub.com/corazawaf/coraza/pull/1035) - cache Rule ID string version by [@noboruma](https://togithub.com/noboruma) in [https://github.com/corazawaf/coraza/pull/1039](https://togithub.com/corazawaf/coraza/pull/1039) - chore: adds fs access check at startup time by [@M4tteoP](https://togithub.com/M4tteoP) in [https://github.com/corazawaf/coraza/pull/1030](https://togithub.com/corazawaf/coraza/pull/1030) - Add support for Base64DecodeExt by [@soujanyanmbri](https://togithub.com/soujanyanmbri) in [https://github.com/corazawaf/coraza/pull/1046](https://togithub.com/corazawaf/coraza/pull/1046) - fix: FuzzB64Decode regexp match for fuzzing by [@fzipi](https://togithub.com/fzipi) in [https://github.com/corazawaf/coraza/pull/1054](https://togithub.com/corazawaf/coraza/pull/1054) - chore(deps): bump golang.org/x/net from 0.22.0 to 0.23.0 in /testing/coreruleset in the go_modules group across 1 directory by [@dependabot](https://togithub.com/dependabot) in [https://github.com/corazawaf/coraza/pull/1043](https://togithub.com/corazawaf/coraza/pull/1043) - fix(deps): update module github.com/mccutchen/go-httpbin/v2 to v2.13.4 by [@renovate](https://togithub.com/renovate) in [https://github.com/corazawaf/coraza/pull/1001](https://togithub.com/corazawaf/coraza/pull/1001) - fix(deps): update module github.com/petar-dambovaliev/aho-corasick to v0.0.0-20240411101913-e07a1f0e8eb4 by [@renovate](https://togithub.com/renovate) in [https://github.com/corazawaf/coraza/pull/1057](https://togithub.com/corazawaf/coraza/pull/1057) - feat: add new maps with case sensitive keys by [@fzipi](https://togithub.com/fzipi) in [https://github.com/corazawaf/coraza/pull/1055](https://togithub.com/corazawaf/coraza/pull/1055) - fix: http parameter pollution test cases by [@fzipi](https://togithub.com/fzipi) in [https://github.com/corazawaf/coraza/pull/1058](https://togithub.com/corazawaf/coraza/pull/1058) - fix(deps): update module golang.org/x/sync to v0.7.0 by [@renovate](https://togithub.com/renovate) in [https://github.com/corazawaf/coraza/pull/1034](https://togithub.com/corazawaf/coraza/pull/1034) - fix(deps): update module golang.org/x/net to v0.25.0 by [@renovate](https://togithub.com/renovate) in [https://github.com/corazawaf/coraza/pull/1060](https://togithub.com/corazawaf/coraza/pull/1060) - fix: RemoveTargetById Args in multiphase mode by [@M4tteoP](https://togithub.com/M4tteoP) in [https://github.com/corazawaf/coraza/pull/1061](https://togithub.com/corazawaf/coraza/pull/1061) - fix: headers leaked during interruptions at phase 3/4 by [@M4tteoP](https://togithub.com/M4tteoP) in [https://github.com/corazawaf/coraza/pull/1062](https://togithub.com/corazawaf/coraza/pull/1062) - chore: deletes content temporary file on close. by [@jcchavezs](https://togithub.com/jcchavezs) in [https://github.com/corazawaf/coraza/pull/924](https://togithub.com/corazawaf/coraza/pull/924) - chore: upgrades to CRS 4.1. by [@jcchavezs](https://togithub.com/jcchavezs) in [https://github.com/corazawaf/coraza/pull/1032](https://togithub.com/corazawaf/coraza/pull/1032) - chore: updates CRS tests to CRS4.2 by [@M4tteoP](https://togithub.com/M4tteoP) in [https://github.com/corazawaf/coraza/pull/1066](https://togithub.com/corazawaf/coraza/pull/1066) - fix(deps): update module github.com/mccutchen/go-httpbin/v2 to v2.14.0 by [@renovate](https://togithub.com/renovate) in [https://github.com/corazawaf/coraza/pull/1067](https://togithub.com/corazawaf/coraza/pull/1067) - feat: add support for case sensitive args by [@fzipi](https://togithub.com/fzipi) in [https://github.com/corazawaf/coraza/pull/1059](https://togithub.com/corazawaf/coraza/pull/1059) - fix: logs multiple vars matched by same rule by [@M4tteoP](https://togithub.com/M4tteoP) in [https://github.com/corazawaf/coraza/pull/1074](https://togithub.com/corazawaf/coraza/pull/1074) - fix(deps): update module github.com/corazawaf/libinjection-go to v0.2.0 by [@renovate](https://togithub.com/renovate) in [https://github.com/corazawaf/coraza/pull/1076](https://togithub.com/corazawaf/coraza/pull/1076) - fix(deps): update module github.com/corazawaf/libinjection-go to v0.2.1 by [@renovate](https://togithub.com/renovate) in [https://github.com/corazawaf/coraza/pull/1079](https://togithub.com/corazawaf/coraza/pull/1079) - fix(deps): update module golang.org/x/net to v0.26.0 by [@renovate](https://togithub.com/renovate) in [https://github.com/corazawaf/coraza/pull/1075](https://togithub.com/corazawaf/coraza/pull/1075) - fix: setters of INBOUND_DATA_ERROR and OUTBOUND_DATA_ERROR by [@M4tteoP](https://togithub.com/M4tteoP) in [https://github.com/corazawaf/coraza/pull/1078](https://togithub.com/corazawaf/coraza/pull/1078) - fix(deps): update module github.com/rs/zerolog to v1.33.0 by [@renovate](https://togithub.com/renovate) in [https://github.com/corazawaf/coraza/pull/1073](https://togithub.com/corazawaf/coraza/pull/1073) - chore: updates CRS tests to CRS4.3 by [@M4tteoP](https://togithub.com/M4tteoP) in [https://github.com/corazawaf/coraza/pull/1081](https://togithub.com/corazawaf/coraza/pull/1081) #### New Contributors (thanks a lot!) - [@fionera](https://togithub.com/fionera) made their first contribution in [https://github.com/corazawaf/coraza/pull/1012](https://togithub.com/corazawaf/coraza/pull/1012) - [@noboruma](https://togithub.com/noboruma) made their first contribution in [https://github.com/corazawaf/coraza/pull/1015](https://togithub.com/corazawaf/coraza/pull/1015) - [@soujanyanmbri](https://togithub.com/soujanyanmbri) made their first contribution in [https://github.com/corazawaf/coraza/pull/1046](https://togithub.com/corazawaf/coraza/pull/1046) **Full Changelog**: https://github.com/corazawaf/coraza/compare/v3.1.0...v3.2.0 ### [`v3.1.0`](https://togithub.com/corazawaf/coraza/releases/tag/v3.1.0): Version 3.1.0 [Compare Source](https://togithub.com/corazawaf/coraza/compare/v3.0.4...v3.1.0) This is a new minor version release with emphasis in improving the overall logging experience, fixes for interoperability of the http middleware with other middlewares, better defaults, various fixes and a few new features like the uppercase transformation, the raw body processor (both thanks to [@blotus](https://togithub.com/blotus)) and a way to pass a context into a transaction to be later retrieved the error log callback. #### What's Changed - chore: improve GetField logic by [@jptosso](https://togithub.com/jptosso) in [https://github.com/corazawaf/coraza/pull/897](https://togithub.com/corazawaf/coraza/pull/897) - chore: setvar minor fix, tests, added warning when missing variable, deprecates usage of tx.LogData by [@M4tteoP](https://togithub.com/M4tteoP) in [https://github.com/corazawaf/coraza/pull/892](https://togithub.com/corazawaf/coraza/pull/892) - chore: fixes audit log. by [@jcchavezs](https://togithub.com/jcchavezs) in [https://github.com/corazawaf/coraza/pull/889](https://togithub.com/corazawaf/coraza/pull/889) - fix `http.Flusher` and `io.ReaderFrom` implementation by [@romainmenke](https://togithub.com/romainmenke) in [https://github.com/corazawaf/coraza/pull/923](https://togithub.com/corazawaf/coraza/pull/923) - fix: stack overflow in `ReadFrom` by [@romainmenke](https://togithub.com/romainmenke) in [https://github.com/corazawaf/coraza/pull/925](https://togithub.com/corazawaf/coraza/pull/925) - fix: Disables implicit Cookies url decoding by [@M4tteoP](https://togithub.com/M4tteoP) in [https://github.com/corazawaf/coraza/pull/928](https://togithub.com/corazawaf/coraza/pull/928) - feat: add uppercase transformation by [@blotus](https://togithub.com/blotus) in [https://github.com/corazawaf/coraza/pull/935](https://togithub.com/corazawaf/coraza/pull/935) - fix: parse multiple cookies with spaces by [@fzipi](https://togithub.com/fzipi) in [https://github.com/corazawaf/coraza/pull/943](https://togithub.com/corazawaf/coraza/pull/943) - fix: more forgiving base64 transformation \[custom implementation] by [@M4tteoP](https://togithub.com/M4tteoP) in [https://github.com/corazawaf/coraza/pull/944](https://togithub.com/corazawaf/coraza/pull/944) - fix: filling variables struct to complete audit info by [@CArellanoOrbik](https://togithub.com/CArellanoOrbik) in [https://github.com/corazawaf/coraza/pull/968](https://togithub.com/corazawaf/coraza/pull/968) - feat: adds context to transaction. by [@jcchavezs](https://togithub.com/jcchavezs) in [https://github.com/corazawaf/coraza/pull/963](https://togithub.com/corazawaf/coraza/pull/963) - feat: improves logging. by [@jcchavezs](https://togithub.com/jcchavezs) in [https://github.com/corazawaf/coraza/pull/971](https://togithub.com/corazawaf/coraza/pull/971) - feat: add raw body processor by [@blotus](https://togithub.com/blotus) in [https://github.com/corazawaf/coraza/pull/983](https://togithub.com/corazawaf/coraza/pull/983) - chore: updates CRS tests to CRS 4.0.0-rc2 by [@M4tteoP](https://togithub.com/M4tteoP) in [https://github.com/corazawaf/coraza/pull/899](https://togithub.com/corazawaf/coraza/pull/899) - fix(seclang): merge chained raw rules by [@jptosso](https://togithub.com/jptosso) in [https://github.com/corazawaf/coraza/pull/985](https://togithub.com/corazawaf/coraza/pull/985) - fix: BodyLimit related documented default values, default RequestBodyLimitAction, adds some tests by [@M4tteoP](https://togithub.com/M4tteoP) in [https://github.com/corazawaf/coraza/pull/895](https://togithub.com/corazawaf/coraza/pull/895) - chore: Go 1.20 as minimum supported version by [@jcchavezs](https://togithub.com/jcchavezs) in [https://github.com/corazawaf/coraza/pull/996](https://togithub.com/corazawaf/coraza/pull/996) - chore: upgrades go-ftw to 0.6.4. by [@jcchavezs](https://togithub.com/jcchavezs) in [https://github.com/corazawaf/coraza/pull/998](https://togithub.com/corazawaf/coraza/pull/998) #### New Contributors (thanks a lot!) - [@testwill](https://togithub.com/testwill) made their first contribution in [https://github.com/corazawaf/coraza/pull/894](https://togithub.com/corazawaf/coraza/pull/894) - [@renovate](https://togithub.com/renovate) made their first contribution in [https://github.com/corazawaf/coraza/pull/903](https://togithub.com/corazawaf/coraza/pull/903) - [@romainmenke](https://togithub.com/romainmenke) made their first contribution in [https://github.com/corazawaf/coraza/pull/923](https://togithub.com/corazawaf/coraza/pull/923) - [@blotus](https://togithub.com/blotus) made their first contribution in [https://github.com/corazawaf/coraza/pull/935](https://togithub.com/corazawaf/coraza/pull/935) - [@CArellanoOrbik](https://togithub.com/CArellanoOrbik) made their first contribution in [https://github.com/corazawaf/coraza/pull/968](https://togithub.com/corazawaf/coraza/pull/968) **Full Changelog**: https://github.com/corazawaf/coraza/compare/v3.0.4...v3.1.0 ### [`v3.0.4`](https://togithub.com/corazawaf/coraza/releases/tag/v3.0.4): Version 3.0.4 [Compare Source](https://togithub.com/corazawaf/coraza/compare/v3.0.3...v3.0.4) #### What's Changed - chore(deps): bump golang.org/x/sync from 0.1.0 to 0.3.0 by [@dependabot](https://togithub.com/dependabot) in [https://github.com/corazawaf/coraza/pull/862](https://togithub.com/corazawaf/coraza/pull/862) - chore: upgrades coraza to latest aho-corasick. by [@jcchavezs](https://togithub.com/jcchavezs) in [https://github.com/corazawaf/coraza/pull/867](https://togithub.com/corazawaf/coraza/pull/867) - fix: Logs print different messages for each the disruptive actions by [@M4tteoP](https://togithub.com/M4tteoP) in [https://github.com/corazawaf/coraza/pull/827](https://togithub.com/corazawaf/coraza/pull/827) - chore(deps): bump github.com/tidwall/gjson from 1.14.4 to 1.17.0 by [@dependabot](https://togithub.com/dependabot) in [https://github.com/corazawaf/coraza/pull/878](https://togithub.com/corazawaf/coraza/pull/878) **Full Changelog**: https://github.com/corazawaf/coraza/compare/v3.0.3...v3.0.4 ### [`v3.0.3`](https://togithub.com/corazawaf/coraza/releases/tag/v3.0.3): Version 3.0.3 [Compare Source](https://togithub.com/corazawaf/coraza/compare/v3.0.2...v3.0.3) #### What's Changed - chore(readme): explicits CRS supported version by [@M4tteoP](https://togithub.com/M4tteoP) in [https://github.com/corazawaf/coraza/pull/834](https://togithub.com/corazawaf/coraza/pull/834) - chore: adds go mod tidy and go work sync for all modules. by [@jcchavezs](https://togithub.com/jcchavezs) in [https://github.com/corazawaf/coraza/pull/835](https://togithub.com/corazawaf/coraza/pull/835) - adds more verbosity on go mod tidy errors by [@jcchavezs](https://togithub.com/jcchavezs) in [https://github.com/corazawaf/coraza/pull/837](https://togithub.com/corazawaf/coraza/pull/837) - add https audit log support by [@jptosso](https://togithub.com/jptosso) in [https://github.com/corazawaf/coraza/pull/826](https://togithub.com/corazawaf/coraza/pull/826) - chore: fixes e2e pkg. by [@jcchavezs](https://togithub.com/jcchavezs) in [https://github.com/corazawaf/coraza/pull/841](https://togithub.com/corazawaf/coraza/pull/841) - chore: updates e2e standalone command by [@M4tteoP](https://togithub.com/M4tteoP) in [https://github.com/corazawaf/coraza/pull/845](https://togithub.com/corazawaf/coraza/pull/845) - Adds Log() to MatchedRule, fixes audit log without `log` by [@M4tteoP](https://togithub.com/M4tteoP) in [https://github.com/corazawaf/coraza/pull/848](https://togithub.com/corazawaf/coraza/pull/848) - chore(e2e): check response body read error only if a body is expected by [@M4tteoP](https://togithub.com/M4tteoP) in [https://github.com/corazawaf/coraza/pull/852](https://togithub.com/corazawaf/coraza/pull/852) - chore: drops benchmark CI. by [@jcchavezs](https://togithub.com/jcchavezs) in [https://github.com/corazawaf/coraza/pull/857](https://togithub.com/corazawaf/coraza/pull/857) - implement https mime by [@jptosso](https://togithub.com/jptosso) in [https://github.com/corazawaf/coraza/pull/850](https://togithub.com/corazawaf/coraza/pull/850) - chore: adds memoize implementation for regexes and ahocorasick by [@jcchavezs](https://togithub.com/jcchavezs) in [https://github.com/corazawaf/coraza/pull/836](https://togithub.com/corazawaf/coraza/pull/836) **Full Changelog**: https://github.com/corazawaf/coraza/compare/v3.0.2...v3.0.3 ### [`v3.0.2`](https://togithub.com/corazawaf/coraza/releases/tag/v3.0.2): Version 3.0.2 [Compare Source](https://togithub.com/corazawaf/coraza/compare/v3.0.1...v3.0.2) #### What's Changed - fix: blocks body buffer reader once the body buffer has been reset. by [@jcchavezs](https://togithub.com/jcchavezs) in [https://github.com/corazawaf/coraza/pull/825](https://togithub.com/corazawaf/coraza/pull/825) - fix: benchmark and propagate the status to not to swallow the failure by [@jcchavezs](https://togithub.com/jcchavezs) in [https://github.com/corazawaf/coraza/pull/808](https://togithub.com/corazawaf/coraza/pull/808) **Full Changelog**: https://github.com/corazawaf/coraza/compare/v3.0.1...v3.0.2 ### [`v3.0.1`](https://togithub.com/corazawaf/coraza/releases/tag/v3.0.1) [Compare Source](https://togithub.com/corazawaf/coraza/compare/v3.0.0...v3.0.1) #### Important This tag fixes a high-severity vulnerability. See https://github.com/corazawaf/coraza/security/advisories/GHSA-c2pj-v37r-2p6h **Full Changelog**: https://github.com/corazawaf/coraza/compare/v3.0.0...v3.0.1 ### [`v3.0.0`](https://togithub.com/corazawaf/coraza/releases/tag/v3.0.0) [Compare Source](https://togithub.com/corazawaf/coraza/compare/v2.0.1...v3.0.0) #### What's Changed Coraza's latest **v3.0.0** release brings a highly refactored engine that offers more flexibility and major improvements. Notable changes include: - **Performance improvement**: Performance has been improved [by up to 100 times](https://medium.com/@jptosso/how-owasp-coraza-improved-performance-by-100x-38d982371ea9) due to several key enhancements such as: - New [debug logs system based on Zerolog](https://networkbuilders.intel.com/blog/coraza-performance-optimization) for a fast and with low to zero allocations. - Cache transformation logic across the same transaction. - Optimized variable collection types. - **Refactored API**: Coraza now relies on a more straightforward and user-friendly API. - **New Plugin Package:** The new package simplifies the extension of Coraza's functionalities. - **Full CRS v4 Support:** Coraza fully supports the [CRS v4 branch](https://togithub.com/coreruleset/coreruleset/tree/v4.0/dev), always making CRS compatibility of top priority. The CI now includes a CRS testing suite to guarantee a regression-free development. - **Cross-platform support:** Both `Go` and `TinyGo` for WASM builds are now supported. - **New experimental Multiphase feature**: Introducing a new way for early data evaluation and blocking. - **`Dataset` support**: designed for in-config `.data` files emulation. #### Contributors Many thanks to all the contributors and users that made this release possible: - [@anuraaga](https://togithub.com/anuraaga) - [@bxlxx](https://togithub.com/bxlxx) - [@codefromthecrypt](https://togithub.com/codefromthecrypt) - [@fzipi](https://togithub.com/fzipi) - [@Hayak3](https://togithub.com/Hayak3) - [@jcchavezs](https://togithub.com/jcchavezs) - [@jptosso](https://togithub.com/jptosso) - [@M4tteoP](https://togithub.com/M4tteoP) - [@manojgop](https://togithub.com/manojgop) - [@nacx](https://togithub.com/nacx) - [@ns-sundar](https://togithub.com/ns-sundar) - [@piyushroshan](https://togithub.com/piyushroshan) - [@ShiMing-Q](https://togithub.com/ShiMing-Q) - [@sts](https://togithub.com/sts) - [@y05h1k1ng](https://togithub.com/y05h1k1ng) - [@zc2638](https://togithub.com/zc2638)Configuration
📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR has been generated by Mend Renovate. View repository job log here.