Skip to content

Bump wiremock-jre8 from 2.32.0 to 2.35.1

dependabot requested to merge dependabot-maven-com.github.tomakehurst-wiremock-jre8-2.35.1 into main

Bumps wiremock-jre8 from 2.32.0 to 2.35.1.

Release notes

Sourced from wiremock-jre8's releases.

2.35.0

Enhancements

  • Add a negative contains matcher - thanks Damian Orzepowski
  • Expose a Java API method for removing stubs by ID - thanks Patryk Fraczek
  • Document the import API in the OpenAPI doc - thanks to user i-whammy
  • Added the ability to restrict the addresses WireMock can proxy/record to, as a security measure.

Fixes

  • Strip Maven directories from the standalone JAR as some were appearing that weren't related to dependencies actually present, confusing scanning tools - thanks to user krageon
  • Dropped back to slf4j 1.7.36 and relocate it in the standalone JAR (ensuring 2.x users won't experience conflicts).

2.34.0

This will be the final 2.x.x release and also the last to support Java 8.

Fixes

  • Fixed #1689 - incorrect HTTP version header - thanks to user Poojitha
  • Fixed #1882 - bug preventing matching of date/time query params/headers with custom format - thanks Klaas Dellschaft
  • #1930 - Fixed a partial path traversal vulnerability in the file source code - thanks Jonathan Leitschuh
  • Fixed #1783 - proxyUrlPrefixToRemove ignored when using a response definition transformer - thanks to user Ross-H-Projects
  • Fixed #1872 - create a request entity for POST, PUT etc. proxied requests when a content-length header is present, regardless of whether the size is 0.
  • Fixed #1946 - maths helper now supports epoch dates as inputs.

Enhancements

  • Added a public, non-static getScenarios() method allowing access to all scenarios.

All dependencies brought up to date including Jetty to 9.4.48.v20220622.

2.33.2

WireMock 2.33.1 was accidentally released using Java 11 rather than 8, resulting in class incompatibilities in places.

This release is functionally identical but built using Java 8.

2.33.1

Fixes

  • Put name field back on scenario API object having accidentally removed it.
  • Improved validation of scenario set and reset so that reasonable errors are returned when attempting to use non-existent scenario names or states.

2.33.0

This is primarily a maintenance release that brings all dependency versions up to date including a version of Jackson containing the fix for CVE-2020-36518.

Enhancements

  • Added the ability to set and reset a single scenario's state
  • Proxy will now send a request body for any request method.
  • CORS response headers are now passed back from proxy responses when stub CORS is disabled.

Performance

  • Improved performance of Request.getHeaders() - thanks Doug Roper.

... (truncated)

Commits
  • 8706343 Bumped patch version
  • 20adc25 Stop NetworkAddressRules doing DNS lookups
  • aa29d9c Make NetworkAddressRulesAdheringDnsResolver testable
  • 90a37e1 Applied DNS resolver enforcement to webhooks extension
  • d9fd0b4 Moved enforcement of network address rules to Apache client DNS resolver to a...
  • eac439f Prevent webhook calling forbidden endpoints
  • 9ba86d6 Rename poorly named method
  • ef5b722 spotless apply
  • 5412ed1 Fixed some formatting in NetworkAddressRulesTest
  • 295ad5c Added some extra NetworkAddressRules test cases
  • Additional commits viewable in compare view

Dependabot commands
You can trigger Dependabot actions by commenting on this MR
  • $dependabot rebase will rebase this MR
  • $dependabot recreate will recreate this MR rewriting all the manual changes and resolving conflicts

Merge request reports