chore(deps): update dependency org.wiremock:wiremock-standalone to v3.2.0

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
org.wiremock:wiremock-standalone (source)	3.0.1 -> 3.2.0

---

Release Notes

wiremock/wiremock (org.wiremock:wiremock-standalone)

v3.2.0

Compare Source

💥 Breaking changes

• Enable local response templating by default in standalone (#​2386) @​tomakehurst
• Add startup option to enable/disable extension scanning and set to disabled by default when running from Java (#​2385) @​tomakehurst

🚀 New features and improvements

• Exposing MappingsLoader as an extension point (#​2334) @​bharatnpti
• Include more info when webhook refusal logged (#​2389) @​Mahoney
• HTTP Server Factory as an extension point (#​2391) @​tomakehurst
• Print loaded extensions at startup (#​2381) @​tomakehurst

🐛 Bug fixes

• Fix json string schema rejecting numbers (#​2390) @​Mahoney
• Fix FileSource backed blobstore keys bug (#​2392) @​tomakehurst
• Fixed #​2388 - empty getPath() returned from new FileStore implementation passed to transformers (#​2396) @​tomakehurst

📦 Dependency updates

• Bump io.netty:netty-all from 4.1.97.Final to 4.1.98.Final (#​2394) @​dependabot

v3.1.0

Compare Source

🚀 New features and improvements

• Move webhooks to the WireMock core (#​2376) @​tomakehurst
• Added a setter for max template cache entries in WireMockConfiguration (#​2365) @​tomakehurst
• Add working equals & readable toString to NetworkAddressRange (#​2358) @​Mahoney

💥 Breaking changes

• Move webhooks to the WireMock core. Users of the extension should remove the dependency when updating to the new version (#​2376) @​tomakehurst

🐛 Bug fixes

• Fixed #​2364 - scenarios produced by recorder play back in reverse order (#​2377) @​tomakehurst
• Fix admin requests with empty body to avoid response code 411 (#​1738) @​danielimre
• Fix standalone missing filename extension bug (#​2366) @​tomakehurst

👻 Maintenance

• Fix markdown links (#​2375) @​pks-1981
• Add tests proving we match on request bodies (#​2367) @​Mahoney
• Replace Guava by JDK (Partly) (#​2380) @​pks-1981

📦 Dependency updates

• Bump org.junit-pioneer:junit-pioneer from 2.0.1 to 2.1.0 (#​2370) @​dependabot
• Bump com.github.tomakehurst:wiremock-jre8-standalone from 2.33.2 to 2.35.1 in /testlogging (#​2368) @​dependabot
• Bump com.networknt:json-schema-validator from 1.0.86 to 1.0.87 (#​2371) @​dependabot

v3.0.4

Compare Source

🚀 New features and improvements

• Add working equals & readable toString to NetworkAddressRange (#​2358) @​Mahoney

🐛 Bug fixes

• Fix standalone missing filename extension bug (#​2366) @​tomakehurst
• Added a setter for max template cache entries in WireMockConfiguration (#​2365) @​tomakehurst
• Second attempt at fixing shaded webhooks plugin (#​2362) @​tomakehurst

👻 Maintenance

• Bump org.scala-lang:scala-library test dependency from 2.13.11 to 2.13.12 (#​2360) @​dependabot

✍ Other changes

• Add tests proving we match on request bodies (#​2367) @​Mahoney

v3.0.3: - Security Release

Compare Source

🔒 Security

This security release addresses the following issues

• CVE-2023-41327 - Controlled SSRF through URL in the WireMock Webhooks Extension and WireMock Studio
  • Base CVSS Score: 4.6 (AV:A/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L/E:F/RL:O/RC:C)
• CVE-2023-41329 - Domain restrictions bypass via DNS Rebinding in WireMock and WireMock Studio webhooks, proxy and recorder modes
  • Base CVSS Score: 3.9 (AV:A/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:L/E:F/RL:O/RC:C)

NOTE: WireMock Studio, a proprietary distribution discontinued in 2022, is also affected by those issues and also affected by CVE-2023-39967 - Overall CVSS Score 8.6 - “Controlled and full-read SSRF through URL parameter when testing a request, webhooks and proxy mode”. The fixes will not be provided. The vendor recommends migrating to WireMock Cloud which is available as SaaS and private beta for on-premises deployments

🔗 Related releases

• WireMock Docker 3.0.3-1 - Docker Image with the Patch
• WireMock 2.35.1 / WireMock Docker 2.35.1-1 - Backport to WireMock 2.x
• Python WireMock 2.6.1 - Python library that bundles the WireMock JAR file
• NOTE: Other distributions like Testcontainers modules or Helm chart need explicit version declaration, and hence a user action is needed to update the dependencies should they be considered a risk

Credits

@​W0rty, @​numacanedo, @​Mahoney, @​tomakehurst, @​oleg-nenashev

v3.0.2

Compare Source

🐛 Bug fixes

• fix: avoid crash when printing help in wiremock-standalone (#​2351) @​tomasbjerre

👻 Maintenance

• Reset system properties at end of test (#​2356) @​Mahoney

📦 Dependency updates

• Bump org.eclipse.jetty:jetty-bom from 11.0.15 to 11.0.16 (#​2346) @​dependabot
• Bump org.slf4j:log4j-over-slf4j from 2.0.7 to 2.0.9 (#​2353) @​dependabot
• Bump org.sonarqube from 4.3.0.3225 to 4.3.1.3277 (#​2352) @​dependabot

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate. View repository job log here.