corazawaf / coraza-caddy

OWASP Coraza middleware for Caddy. It provides Web Application Firewall capabilities
https://www.coraza.io/
Apache License 2.0
284 stars 35 forks source link

fix(deps): update module github.com/caddyserver/caddy/v2 to v2.7.6 #111

Closed renovate[bot] closed 6 months ago

renovate[bot] commented 7 months ago

Mend Renovate

This PR contains the following updates:

Package Type Update Change
github.com/caddyserver/caddy/v2 require patch v2.7.3 -> v2.7.6

Release Notes

caddyserver/caddy (github.com/caddyserver/caddy/v2) ### [`v2.7.6`](https://togithub.com/caddyserver/caddy/releases/tag/v2.7.6) [Compare Source](https://togithub.com/caddyserver/caddy/compare/v2.7.5...v2.7.6) In this version we've made several fixes and enhancements with help from several contributors. Most changes are small, but some notable ones: - The `templates` middleware is now officially extensible (experimentally). This means modules can add custom functions/actions for templates to execute. - TLS storage cleaning is now synchronized across the cluster and remembered across restarts. This should greatly lower costs for expensive storage backends like DynamoDB. - Placeholders are now evaluated in config for certificate loaders. - Numerous bug fixes. Thank you to everyone who contributed! #### Changelog - [`65c489a`](https://togithub.com/caddyserver/caddy/commit/65c489a0) Upgrade acmeserver to github.com/go-chi/chi/v5 ([#​5913](https://togithub.com/caddyserver/caddy/issues/5913)) - [`ae5e2d9`](https://togithub.com/caddyserver/caddy/commit/ae5e2d96) caddyfile: Fix variadic placeholder false positive when token contains `:` ([#​5883](https://togithub.com/caddyserver/caddy/issues/5883)) - [`db55da5`](https://togithub.com/caddyserver/caddy/commit/db55da59) caddyhttp: Adjust `scheme` placeholder docs ([#​5910](https://togithub.com/caddyserver/caddy/issues/5910)) - [`df5edf6`](https://togithub.com/caddyserver/caddy/commit/df5edf6b) caddytls: Context to DecisionFunc ([#​5923](https://togithub.com/caddyserver/caddy/issues/5923)) - [`6d9a833`](https://togithub.com/caddyserver/caddy/commit/6d9a8337) caddytls: Sync distributed storage cleaning ([#​5940](https://togithub.com/caddyserver/caddy/issues/5940)) - [`11a082c`](https://togithub.com/caddyserver/caddy/commit/11a082c0) cmd: Add newline character to version string in CLI output ([#​5895](https://togithub.com/caddyserver/caddy/issues/5895)) - [`979c413`](https://togithub.com/caddyserver/caddy/commit/979c413f) cmd: upgrade: resolve symlink of the executable ([#​5891](https://togithub.com/caddyserver/caddy/issues/5891)) - [`6482070`](https://togithub.com/caddyserver/caddy/commit/64820706) core: Apply SO_REUSEPORT to UDP sockets ([#​5725](https://togithub.com/caddyserver/caddy/issues/5725)) - [`15adb89`](https://togithub.com/caddyserver/caddy/commit/15adb893) core: quic listener will manage the underlying socket by itself ([#​5749](https://togithub.com/caddyserver/caddy/issues/5749)) - [`801ec75`](https://togithub.com/caddyserver/caddy/commit/801ec756) fileserver: Add .m4v for browse template icon - [`b809ed7`](https://togithub.com/caddyserver/caddy/commit/b809ed71) go.mod: CVE-2023-45142 Update opentelemetry ([#​5908](https://togithub.com/caddyserver/caddy/issues/5908)) - [`b4c7313`](https://togithub.com/caddyserver/caddy/commit/b4c7313c) go.mod: Upgrade quic-go to v0.39.1 - [`36fce3f`](https://togithub.com/caddyserver/caddy/commit/36fce3fa) go.mod: update quic-go version to v0.40.0 ([#​5922](https://togithub.com/caddyserver/caddy/issues/5922)) - [`ec2de22`](https://togithub.com/caddyserver/caddy/commit/ec2de22a) httpcaddyfile: Fix TLS automation policy merging with get_certificate ([#​5896](https://togithub.com/caddyserver/caddy/issues/5896)) - [`f0ea489`](https://togithub.com/caddyserver/caddy/commit/f0ea489d) httpcaddyfile: Remove port from logger names ([#​5881](https://togithub.com/caddyserver/caddy/issues/5881)) - [`87f63b1`](https://togithub.com/caddyserver/caddy/commit/87f63b12) httpredirectlistener: Only set read limit for when request is HTTP ([#​5917](https://togithub.com/caddyserver/caddy/issues/5917)) - [`16834d6`](https://togithub.com/caddyserver/caddy/commit/16834d64) templates: Clarify `include` args docs, add `.ClientIP` ([#​5898](https://togithub.com/caddyserver/caddy/issues/5898)) - [`0259853`](https://togithub.com/caddyserver/caddy/commit/0259853a) templates: Delete headers on `httpError` to reset to clean slate ([#​5905](https://togithub.com/caddyserver/caddy/issues/5905)) - [`2f7ceb5`](https://togithub.com/caddyserver/caddy/commit/2f7ceb57) templates: Offically make templates extensible ([#​5939](https://togithub.com/caddyserver/caddy/issues/5939)) - [`908e956`](https://togithub.com/caddyserver/caddy/commit/908e9569) tls: accept placeholders in string values of certificate loaders ([#​5963](https://togithub.com/caddyserver/caddy/issues/5963)) **Full Changelog**: https://github.com/caddyserver/caddy/compare/v2.7.5...v2.7.6 ### [`v2.7.5`](https://togithub.com/caddyserver/caddy/releases/tag/v2.7.5) [Compare Source](https://togithub.com/caddyserver/caddy/compare/v2.7.4...v2.7.5) In this release, we've fixed quite a few small bugs and annoyances, including HTTP/2 Rapid Reset which affected most HTTP/2 implementations. *On a personal note (from [@​mholt](https://togithub.com/mholt)): I recently became a dad! I want to thank our maintainers for helping in so many ways while I've been taking extra time for family. Francis, Matthew, Mohammed, and others -- including all the contributors below, and then some -- are to thank for shipping this release.* #### Highlights - Updated https://github.com/quic-go/quic-go from v0.37.5 to v0.39.0, including many performance improvements. GSO and ECN are now enabled by default, but you may turn them off by setting the `QUIC_GO_DISABLE_GSO=true` and `QUIC_GO_DISABLE_ECN=true` environment variables respectively, if they cause you problems. See the [`quic-go` release notes](https://togithub.com/quic-go/quic-go/releases) for more details. - The file server's `fileserver.BrowseTemplate` is now exported, so it may be customized by programs embedding Caddy. ([`ed8bb13`](https://togithub.com/caddyserver/caddy/commit/ed8bb13c5df7656647ca7fc1fd09237631a6767c)) - Environment variables loaded with `--envfile` no longer override existing variables. ([#​5803](https://togithub.com/caddyserver/caddy/issues/5803)) - The `encode` handler now compresses `application/wasm*` content types by default. ([#​5869](https://togithub.com/caddyserver/caddy/issues/5869)) - The `reverse_proxy` handler can now emit very detailed logs for debugging streaming and buffering. To enable it, set the `verbose_logs` subdirective, and set logging to `debug` level. Since the logs from this are very noisy, using `verbose_logs` to opt-in is necessary. We may ask you to enable this when asking for support! ([#​5793](https://togithub.com/caddyserver/caddy/issues/5793)) - You can now check the version with `caddy -v`, like most other CLI utilities! ([#​5874](https://togithub.com/caddyserver/caddy/issues/5874)) [Caddy is on feature freeze until after 2.8](https://togithub.com/caddyserver/caddy/issues/5704) so we can improve our testing situation. These patches have all been tried to ensure they work as intended, but if you notice any issues please report them! #### Changelog - [`0e204b7`](https://togithub.com/caddyserver/caddy/commit/0e204b73) admin: Respond with 4xx on non-existing config path ([#​5870](https://togithub.com/caddyserver/caddy/issues/5870)) - [`89c407a`](https://togithub.com/caddyserver/caddy/commit/89c407aa) build(deps): bump actions/checkout from 3 to 4 ([#​5846](https://togithub.com/caddyserver/caddy/issues/5846)) - [`1405683`](https://togithub.com/caddyserver/caddy/commit/1405683c) build(deps): bump goreleaser/goreleaser-action from 4 to 5 ([#​5847](https://togithub.com/caddyserver/caddy/issues/5847)) - [`38a7b6b`](https://togithub.com/caddyserver/caddy/commit/38a7b6b3) caddyfile: Adjust error formatting ([#​5765](https://togithub.com/caddyserver/caddy/issues/5765)) - [`7103ea0`](https://togithub.com/caddyserver/caddy/commit/7103ea09) caddyfile: Fix case where heredoc marker is empty after newline ([#​5769](https://togithub.com/caddyserver/caddy/issues/5769)) - [`10053f7`](https://togithub.com/caddyserver/caddy/commit/10053f75) caddyfile: Loosen heredoc parsing ([#​5761](https://togithub.com/caddyserver/caddy/issues/5761)) - [`58ab3a0`](https://togithub.com/caddyserver/caddy/commit/58ab3a01) caddyhttp: Use LimitedReader for HTTPRedirectListener *(thank you to Bartek Nowotarski for reporting)* - [`9c419f1`](https://togithub.com/caddyserver/caddy/commit/9c419f1e) cmd: Fix exiting with custom status code, add `caddy -v` ([#​5874](https://togithub.com/caddyserver/caddy/issues/5874)) - [`f2ab709`](https://togithub.com/caddyserver/caddy/commit/f2ab7099) cmd: Prevent overwriting existing env vars with `--envfile` ([#​5803](https://togithub.com/caddyserver/caddy/issues/5803)) - [`e0aaefa`](https://togithub.com/caddyserver/caddy/commit/e0aaefab) encode: Add `application/wasm*` to the default content types ([#​5869](https://togithub.com/caddyserver/caddy/issues/5869)) - [`fa5a579`](https://togithub.com/caddyserver/caddy/commit/fa5a579b) fileserver: Add command shortcuts `-l` and `-a` ([#​5854](https://togithub.com/caddyserver/caddy/issues/5854)) - [`ed8bb13`](https://togithub.com/caddyserver/caddy/commit/ed8bb13c) fileserver: Export BrowseTemplate - [`130f6d1`](https://togithub.com/caddyserver/caddy/commit/130f6d1f) fileserver: Set canonical URL on browse template ([#​5867](https://togithub.com/caddyserver/caddy/issues/5867)) - [`a306c5f`](https://togithub.com/caddyserver/caddy/commit/a306c5f7) fileserver: browse template SVG icons and UI tweaks ([#​5812](https://togithub.com/caddyserver/caddy/issues/5812)) - [`0a6d333`](https://togithub.com/caddyserver/caddy/commit/0a6d3333) fileserver: docs: clarify the ability to produce JSON array with `browse` ([#​5751](https://togithub.com/caddyserver/caddy/issues/5751)) - [`82c356f`](https://togithub.com/caddyserver/caddy/commit/82c356f2) fix: caddytest.AssertResponseCode error message ([#​5853](https://togithub.com/caddyserver/caddy/issues/5853)) - [`888c6d7`](https://togithub.com/caddyserver/caddy/commit/888c6d7e) go.mod: Update quic-go to v0.38.0 ([#​5772](https://togithub.com/caddyserver/caddy/issues/5772)) - [`88b4fbf`](https://togithub.com/caddyserver/caddy/commit/88b4fbf2) go.mod: Upgrade dependencies incl. x/net/http - [`df99502`](https://togithub.com/caddyserver/caddy/commit/df995029) httpcaddyfile: Enable TLS for catch-all site if `tls` directive is specified ([#​5808](https://togithub.com/caddyserver/caddy/issues/5808)) - [`33d8d2c`](https://togithub.com/caddyserver/caddy/commit/33d8d2c6) httpcaddyfile: Sort TLS SNI matcher for deterministic JSON output ([#​5860](https://togithub.com/caddyserver/caddy/issues/5860)) - [`288216e`](https://togithub.com/caddyserver/caddy/commit/288216e1) httpcaddyfile: Stricter errors for site and upstream address schemes ([#​5757](https://togithub.com/caddyserver/caddy/issues/5757)) - [`2cac3c5`](https://togithub.com/caddyserver/caddy/commit/2cac3c54) httpcaddyfile: fix placeholder shorthands in named routes ([#​5791](https://togithub.com/caddyserver/caddy/issues/5791)) - [`c46ec3b`](https://togithub.com/caddyserver/caddy/commit/c46ec3b5) logging: Clone array on log filters, prevent side-effects ([#​5786](https://togithub.com/caddyserver/caddy/issues/5786)) - [`1b73e38`](https://togithub.com/caddyserver/caddy/commit/1b73e386) logging: query filter for array of strings ([#​5779](https://togithub.com/caddyserver/caddy/issues/5779)) - [`4776f62`](https://togithub.com/caddyserver/caddy/commit/4776f62c) replacer: change timezone to UTC for "time.now.http" placeholders ([#​5774](https://togithub.com/caddyserver/caddy/issues/5774)) - [`a8586b0`](https://togithub.com/caddyserver/caddy/commit/a8586b05) reverseproxy: Add logging for dynamic A upstreams ([#​5857](https://togithub.com/caddyserver/caddy/issues/5857)) - [`3a3182f`](https://togithub.com/caddyserver/caddy/commit/3a3182fb) reverseproxy: Add more debug logs ([#​5793](https://togithub.com/caddyserver/caddy/issues/5793)) - [`4feac4d`](https://togithub.com/caddyserver/caddy/commit/4feac4d8) reverseproxy: Allow fallthrough for response handlers without routes ([#​5780](https://togithub.com/caddyserver/caddy/issues/5780)) - [`e8b8d4a`](https://togithub.com/caddyserver/caddy/commit/e8b8d4a8) reverseproxy: Fix `least_conn` policy regression ([#​5862](https://togithub.com/caddyserver/caddy/issues/5862)) - [`2a6859a`](https://togithub.com/caddyserver/caddy/commit/2a6859a5) reverseproxy: Fix retries on "upstreams unavailable" error ([#​5841](https://togithub.com/caddyserver/caddy/issues/5841)) - [`05dbe1c`](https://togithub.com/caddyserver/caddy/commit/05dbe1c1) reverseproxy: Replace health header placeholders ([#​5861](https://togithub.com/caddyserver/caddy/issues/5861)) - [`1e0dea5`](https://togithub.com/caddyserver/caddy/commit/1e0dea59) reverseproxy: fix nil pointer dereference in AUpstreams.GetUpstreams ([#​5811](https://togithub.com/caddyserver/caddy/issues/5811)) - [`b245ecd`](https://togithub.com/caddyserver/caddy/commit/b245ecd3) reverseproxy: fix parsing Caddyfile fails for unlimited request/response buffers ([#​5828](https://togithub.com/caddyserver/caddy/issues/5828)) - [`5653c36`](https://togithub.com/caddyserver/caddy/commit/5653c36b) templates: Add dummy `RemoteAddr` to `httpInclude` request, proxy compatibility ([#​5845](https://togithub.com/caddyserver/caddy/issues/5845)) - [`289934f`](https://togithub.com/caddyserver/caddy/commit/289934f3) tls: Add X25519Kyber768Draft00 PQ "curve" behind build tag ([#​5852](https://togithub.com/caddyserver/caddy/issues/5852)) #### New Contributors - [@​singhalkarun](https://togithub.com/singhalkarun) made their first contribution in [https://github.com/caddyserver/caddy/pull/5757](https://togithub.com/caddyserver/caddy/pull/5757) - [@​pauljeannot](https://togithub.com/pauljeannot) made their first contribution in [https://github.com/caddyserver/caddy/pull/5779](https://togithub.com/caddyserver/caddy/pull/5779) - [@​hainenber](https://togithub.com/hainenber) made their first contribution in [https://github.com/caddyserver/caddy/pull/5790](https://togithub.com/caddyserver/caddy/pull/5790) - [@​evandam](https://togithub.com/evandam) made their first contribution in [https://github.com/caddyserver/caddy/pull/5803](https://togithub.com/caddyserver/caddy/pull/5803) - [@​FossoresLP](https://togithub.com/FossoresLP) made their first contribution in [https://github.com/caddyserver/caddy/pull/5811](https://togithub.com/caddyserver/caddy/pull/5811) - [@​glowinthedark](https://togithub.com/glowinthedark) made their first contribution in [https://github.com/caddyserver/caddy/pull/5812](https://togithub.com/caddyserver/caddy/pull/5812) - [@​pkoenig10](https://togithub.com/pkoenig10) made their first contribution in [https://github.com/caddyserver/caddy/pull/5780](https://togithub.com/caddyserver/caddy/pull/5780) - [@​ThanmayNath](https://togithub.com/ThanmayNath) made their first contribution in [https://github.com/caddyserver/caddy/pull/5845](https://togithub.com/caddyserver/caddy/pull/5845) - [@​Christoph-D](https://togithub.com/Christoph-D) made their first contribution in [https://github.com/caddyserver/caddy/pull/5869](https://togithub.com/caddyserver/caddy/pull/5869) - [@​mcfedr](https://togithub.com/mcfedr) made their first contribution in [https://github.com/caddyserver/caddy/pull/5828](https://togithub.com/caddyserver/caddy/pull/5828) - [@​bwesterb](https://togithub.com/bwesterb) made their first contribution in [https://github.com/caddyserver/caddy/pull/5852](https://togithub.com/caddyserver/caddy/pull/5852) - [@​Forza-tng](https://togithub.com/Forza-tng) made their first contribution in [https://github.com/caddyserver/caddy/pull/5867](https://togithub.com/caddyserver/caddy/pull/5867) - [@​BattleRattle](https://togithub.com/BattleRattle) made their first contribution in [https://github.com/caddyserver/caddy/pull/5870](https://togithub.com/caddyserver/caddy/pull/5870) **Full Changelog**: https://github.com/caddyserver/caddy/compare/v2.7.4...v2.7.5 ### [`v2.7.4`](https://togithub.com/caddyserver/caddy/releases/tag/v2.7.4) [Compare Source](https://togithub.com/caddyserver/caddy/compare/v2.7.3...v2.7.4) Caddy 2.7.4 rounds out some bug fixes from the 2.7 release. For example, [Go made a last-minute breaking change to a new API](https://togithub.com/quic-go/quic-go/releases/tag/v0.37.4) that broke quic-go (HTTP/3) on Go 1.21 just before Go 1.21 was released; we resolved a few issues with on-demand TLS that are now much improved from the 2.6 tree; a couple race conditions were fixed in dynamic reverse proxy upstreams. We hope you will be pleased with this new version! [Caddy is on feature freeze until after 2.8](https://togithub.com/caddyserver/caddy/issues/5704) so we can improve our testing situation. These patches have all been tried to ensure they work as intended, but if you notice any issues please report them! We encourage all users to test this new version and then upgrade. Thanks to all who get involved! #### Changelog - [`080db93`](https://togithub.com/caddyserver/caddy/commit/080db938) caddytls: Update docs for on-demand config - [`d813550`](https://togithub.com/caddyserver/caddy/commit/d8135505) cmd: Require config for caddy validate (fix [#​5612](https://togithub.com/caddyserver/caddy/issues/5612)) ([#​5614](https://togithub.com/caddyserver/caddy/issues/5614)) - [`a8492c0`](https://togithub.com/caddyserver/caddy/commit/a8492c06) fileserver: Don't repeat error for invalid method inside error context ([#​5705](https://togithub.com/caddyserver/caddy/issues/5705)) - [`2d7d806`](https://togithub.com/caddyserver/caddy/commit/2d7d806f) fileserver: Slightly more fitting icons - [`f11c3c9`](https://togithub.com/caddyserver/caddy/commit/f11c3c9f) go.mod: Upgrade CertMagic and quic-go - [`5b9c850`](https://togithub.com/caddyserver/caddy/commit/5b9c850a) go.mod: Upgrade golang.org/x/net to 0.14.0 ([#​5718](https://togithub.com/caddyserver/caddy/issues/5718)) - [`936ee91`](https://togithub.com/caddyserver/caddy/commit/936ee918) reverseproxy: Always return new upstreams (fix [#​5736](https://togithub.com/caddyserver/caddy/issues/5736)) ([#​5752](https://togithub.com/caddyserver/caddy/issues/5752)) - [`431adc0`](https://togithub.com/caddyserver/caddy/commit/431adc09) templates: Fix httpInclude (fix [#​5698](https://togithub.com/caddyserver/caddy/issues/5698)) #### New Contributors - [@​faddat](https://togithub.com/faddat) made their first contribution in [https://github.com/caddyserver/caddy/pull/5707](https://togithub.com/caddyserver/caddy/pull/5707) - [@​shyim](https://togithub.com/shyim) made their first contribution in [https://github.com/caddyserver/caddy/pull/5718](https://togithub.com/caddyserver/caddy/pull/5718) - [@​AaronDewes](https://togithub.com/AaronDewes) made their first contribution in [https://github.com/caddyserver/caddy/pull/5720](https://togithub.com/caddyserver/caddy/pull/5720) **Full Changelog**: https://github.com/caddyserver/caddy/compare/v2.7.3...v2.7.4

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.



This PR has been generated by Mend Renovate. View repository job log here.

sonarcloud[bot] commented 6 months ago

Quality Gate Passed Quality Gate passed

Kudos, no new issues were introduced!

0 New issues
0 Security Hotspots
No data about Coverage
No data about Duplication

See analysis details on SonarCloud

renovate[bot] commented 6 months ago

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

Warning: custom changes will be lost.