wiremock

🚀 New features and improvements

• arrayJoin - Handlebar helper (#2725) @dieppa
• Added arrayAdd, arrayRemove and val helpers (#2724) @tomakehurst
• Added an object store to the Stores interface plus a default in-memory implementation (#2723) @tomakehurst
• Move the serve event triggered prior to responding before transformers are applied (#2722) @tomakehurst
• Added an overload of andMatching to stub builders taking a defintion object parameter (#2721) @tomakehurst
• 2711 Add start and stop hooks for extensions (#2726) @leeturner
• Allow subclasses of WireMockExtension to get the ExtensionContext (#1981) @tsmock
• Added supported-proxy-encodings as a CLI parameter (#2694) @tomakehurst

🐞 Bug fixes

• Fixes #2696 - xPath helper returns error when result is primitive value (#2717) @tomakehurst
• Content-Type Header for Multipart-Requests should be checked case-insensitive (#2707) @mufasa1976
• Fix parsing of date/time query parameter values with an offset ahead of UTC (#2703) @papiomytoglou
• fix: handlebars math helper handles large negative integers (#2706) @RafeArnold

📦 Dependency updates

• Bump org.mockito:mockito-junit-jupiter from 5.11.0 to 5.12.0 (#2716) @dependabot
• Bump org.mockito:mockito-core from 5.11.0 to 5.12.0 (#2715) @dependabot
• Bump io.github.gradle-nexus.publish-plugin from 1.3.0 to 2.0.0 (#2687) @dependabot
• Bump com.fasterxml.jackson:jackson-bom from 2.17.0 to 2.17.1 (#2708) @dependabot
• Bump versions.xmlUnit from 2.9.1 to 2.10.0 (#2698) @dependabot
• Bump org.scala-lang:scala-library from 2.13.13 to 2.13.14 (#2700) @dependabot
• Bump com.google.guava:guava from 33.1.0-jre to 33.2.0-jre (#2704) @dependabot

📦 Dependency updates

• Bump versions.jetty from 12.0.7 to 12.0.8 (#2668) @dependabot

✍ Other changes

• Allow commons-fileupload to load commons-io as a transitive dependency (#2691) @leeturner
• Fix some Sonar or/and "IDEA inspect code" issues (partly) (#2686) @pks-1981

A bug fix for an issue with WireMock standalone not finding the commons-io IOUtils class and a dependency update and minor refactors.

📦 Dependency updates

• Bump versions.jetty from 12.0.7 to 12.0.8 (#2668) @dependabot

✍ Other changes

• Allow commons-fileupload to load commons-io as a transitive dependency (#2691) @leeturner
• Fix some Sonar or/and "IDEA inspect code" issues (partly) (#2686) @pks-1981

Some minor improvements, bug fixes and dependency updates.

📦 Dependency updates

• Bump io.github.gradle-nexus.publish-plugin from 1.3.0 to 2.0.0 (#2673) @dependabot
• Bump commons-io:commons-io from 2.16.0 to 2.16.1 (#2676) @dependabot
• Bump org.sonarqube from 4.4.1.3373 to 5.0.0.4638 (#2649) @dependabot

🐛 Bug fixes

• removeEventsMatching supports custom matchers (#2682) @Mahoney
• Near miss takes custom matchers into account (#2683) @Mahoney

✍ Other changes

• Fixes #2665 - WireMock.stubFor throws descriptive exception message on 404 error code from non-WireMock server instead of unclear JsonException (#2666) @vasiliy-sarzhynskyi
• Use modern Gradle GHA setup (#2685) @Mahoney
• Support sub events on partial matchers (#2681) @Mahoney
• Remove deprecated java.security.AccessControl (#2672) @pks-1981
• Fix some Sonar or/and "IDEA inspect code" issues (partly) (#2669) @pks-1981
• Make it easier to fix issue with file's path (#2670) @Mahoney
• Replace commons-io:commons-io (#2632) @pks-1981
• Move template benchmark into benchmarks (#2667) @Mahoney
• Use Temurin JDK (#2663) @sullis

3.5.0 and 3.5.1 have a problem with their POM files, meaning Maven fails to properly load all of the transitive dependencies. This release is primarily to fix this issue.

🐛 Bug fixes

• Fix publications by excluding testFixturesApi components (#2661) @reta

📦 Dependency updates

• Bump commons-io:commons-io from 2.15.1 to 2.16.0 (#2656) @dependabot

✍ Other changes

• Make Jetty11Utils and Jetty12Utils public

🚀 New features and improvements

• Flip HTTP/2 toggles to "disable". Support changing them via the CLI. (#2653) @tomakehurst
• Added toggles for plain text and TLS HTTP/2 (#2652) @tomakehurst
• Add support of Jetty 12 (#2593) @reta
• JSONPath performance tuning (#2629) @tomakehurst
• Allow configuring accept-encoding when proxying (#2646) @Mahoney
• Allow removal of headers from a proxied request. (#2644) @kyle-winkelman
• Optional default for SystemValueHelper. (#2630) @kyle-winkelman
• A Stubmapping can be removed by ID #2393 (#2408) @burcuakkayaa

👻 Maintenance

• Replace net.jockx:littleproxy by JDK (#2624) @pks-1981
• Mini update dependencies (#2620) @pks-1981
• Remove dependencies (#2633) @pks-1981
• Replace org.apache.commons.lang3.StringUtils (#2622) @pks-1981

✍ Other changes

• Add project icon for IntelliJ (#2639) @ghusta
• Replace org.apache.commons.lang3.StringUtils (#2622) @pks-1981
• Remove dependencies (#2633) @pks-1981

📦 Dependency updates

• Bump com.fasterxml.jackson:jackson-bom from 2.16.2 to 2.17.0 (#2636) @dependabot
• Bump net.minidev:json-smart from 2.5.0 to 2.5.1 (#2645) @dependabot
• Bump com.google.guava:guava from 33.0.0-jre to 33.1.0-jre (#2640) @dependabot
• Bump com.networknt:json-schema-validator from 1.3.3 to 1.4.0 (#2642) @dependabot
• Bump org.awaitility:awaitility from 4.2.0 to 4.2.1 (#2643) @dependabot
• Bump com.fasterxml.jackson:jackson-bom from 2.16.1 to 2.16.2 (#2634) @dependabot
• Bump org.mockito:mockito-junit-jupiter from 5.10.0 to 5.11.0 (#2625) @dependabot
• Bump org.mockito:mockito-core from 5.10.0 to 5.11.0 (#2626) @dependabot
• Update org.skyscreamer:jsonassert (#2631) @pks-1981

🐛 Bug fixes

• Fixed xPath concurrency issues (#2618) @BublG
• Request matching performance regression (#2619) @tomakehurst

📦 Dependency updates

• Bump com.networknt:json-schema-validator from 1.3.2 to 1.3.3 (#2615) @dependabot
• Bump org.scala-lang:scala-library from 2.13.12 to 2.13.13 (#2617) @dependabot

🐛 Bug fixes

• Revert "Fix json-body not escaped properly" (#2613) @tomakehurst
• Fixes #2606 - avoid appending identical sub-events repeatedly (#2614) @tomakehurst
• Add a custom number comparator to the Json Diff to trim trailing zeros (#2611) @leeturner
• Refactor JsonNodeFactory(true) in favour of a JsonNodeFeature (#2612) @leeturner

🚀 New features and improvements

• Version number add to the endpoint /health - healthcheck Issue Nro 1339 (#2498) @gorostiaga
• Allow @WireMockTest to be applied on base classes (#2500) @kkocel
• Expose numberOfParameters on PathTemplate (#2509) @Mahoney
• Add the version number to the output when wiremock starts (#2485) @leeturner
• Add ability to return application version from new admin endpoint and wiremock standalone cli (#2453) @leeturner

🐛 Bug fixes

• Do not return null objects in getAll of the InMemoryRequestJournalStore (#2508) @coder-hugo
• Fix NullPointerException in ResponseDefinition.getProxyUrl() (#2490) @mfruizs
• Generalize function calculating normalized distance between date/time values (#2543) @papiomytoglou
• Show correct diff for unescaped ? in regex (#2596) @Mahoney
• Disable XML External Entities (#2603) @Pr0methean
• Disable connection reuse only for proxy clients not for the admin client (#2597) @coder-hugo
• [FIX] Fix the deserialization behavior which change the precision of decimal (#2588) @AlEmerich
• Fix json-body not escaping special characters (#2551) @G-Basak
• Fix sonarqube scanner (#2577) @dieppa
• correct handling of empty request body with Handlebars (#2546) (#2552) @dirkbolte

📦 Dependency updates

• Bump io.netty:netty-all from 4.1.106.Final to 4.1.107.Final (#2608) @dependabot
• Bump com.fasterxml.jackson:jackson-bom from 2.15.3 to 2.16.1 (#2548) @dependabot
• Bump org.eclipse.jetty:jetty-bom from 11.0.19 to 11.0.20 (#2599) @dependabot
• Bump com.networknt:json-schema-validator from 1.3.1 to 1.3.2 (#2605) @dependabot
• Bump versions.junitJupiter from 5.10.1 to 5.10.2 (#2602) @dependabot
• Bump org.slf4j:log4j-over-slf4j from 2.0.11 to 2.0.12 (#2604) @dependabot
• Bump com.networknt:json-schema-validator from 1.3.0 to 1.3.1 (#2598) @dependabot
• Bump com.networknt:json-schema-validator from 1.2.0 to 1.3.0 (#2595) @dependabot
• Bump org.mockito:mockito-core from 5.9.0 to 5.10.0 (#2589) @dependabot
• Bump org.apache.httpcomponents.client5:httpclient5 from 5.3 to 5.3.1 (#2591) @dependabot
• Bump org.mockito:mockito-junit-jupiter from 5.9.0 to 5.10.0 (#2590) @dependabot
• Bump io.netty:netty-all from 4.1.105.Final to 4.1.106.Final (#2581) @dependabot
• Bump com.diffplug.spotless from 6.24.0 to 6.25.0 (#2587) @dependabot
• Bump com.toomuchcoding.jsonassert:jsonassert from 0.7.0 to 0.8.0 (#2586) @dependabot
• Bump com.jayway.jsonpath:json-path from 2.8.0 to 2.9.0 (#2582) @dependabot
• Bump com.networknt:json-schema-validator from 1.1.0 to 1.2.0 (#2583) @dependabot
• Bump io.netty:netty-all from 4.1.104.Final to 4.1.105.Final (#2580) @dependabot
• Bump com.networknt:json-schema-validator from 1.0.88 to 1.1.0 (#2537) @dependabot
• Bump io.netty:netty-all from 4.1.101.Final to 4.1.104.Final (#2538) @dependabot
• Bump com.google.guava:guava from 32.1.3-jre to 33.0.0-jre (#2539) @dependabot
• Bump org.eclipse.jetty:jetty-bom from 11.0.18 to 11.0.19 (#2542) @dependabot
• Bump org.slf4j:log4j-over-slf4j from 2.0.9 to 2.0.11 (#2563) @dependabot
• Bump org.mockito:mockito-core from 5.7.0 to 5.9.0 (#2571) @dependabot
• Bump com.diffplug.spotless from 6.23.3 to 6.24.0 (#2575) @dependabot
• Bump org.mockito:mockito-junit-jupiter from 5.7.0 to 5.9.0 (#2570) @dependabot
• Bump org.apache.httpcomponents.client5:httpclient5 from 5.2.1 to 5.3 (#2524) @dependabot
• Bump com.networknt:json-schema-validator from 1.0.87 to 1.0.88 (#2527) @dependabot
• Bump ch.qos.logback:logback-classic from 1.2.0 to 1.2.13 in /testlogging (#2522) @dependabot
• Bump commons-io:commons-io from 2.15.0 to 2.15.1 (#2512) @dependabot
• Bump com.toomuchcoding.jsonassert:jsonassert from 0.6.2 to 0.7.0 (#2520) @dependabot
• Bump com.diffplug.spotless from 6.23.0 to 6.23.3 (#2521) @dependabot
• Bump com.diffplug.spotless from 6.22.0 to 6.23.0 (#2507) @dependabot
• Bump org.apache.commons:commons-lang3 from 3.13.0 to 3.14.0 (#2496) @dependabot
• Bump org.junit-pioneer:junit-pioneer from 2.1.0 to 2.2.0 (#2493) @dependabot
• Bump io.netty:netty-all from 4.1.99.Final to 4.1.101.Final (#2484) @dependabot
• Bump versions.junitJupiter from 5.10.0 to 5.10.1 (#2483) @dependabot
• Bump org.mockito:mockito-junit-jupiter from 5.6.0 to 5.7.0 (#2477) @dependabot
• Bump org.mockito:mockito-core from 5.6.0 to 5.7.0 (#2476) @dependabot

📝 Documentation updates

• Add operationId to openApi/swagger documents (#2487) @j1mr10rd4n

👻 Maintenance

• chore: minor internal refactors (#2491) @Marvin9
• Proposal for: Flaky port allocation tests #2281 (#2421) @dkhozyainov

✍ Other changes

• Improve Scenario error message for unsupported state (#2594) @nlisgo
• Supply lazy TemplateEngine, HttpClientFactory, and DefaultHttpClient. (#2564) @kyle-winkelman
• Parsing config files with BOM character (#2535) @salehjafarli
• Clean up duplicative isAbsent and unused serializer. (#2567) @kyle-winkelman
• Allow matchesJsonSchema to be supplied as a json object. (#2566) @kyle-winkelman
• Adding a few unit tests for Body (#2559) @G-Basak
• Add gzipDisabled at the ResponseDefinitionBuilder level (#2481) @dkhozyainov
• Update wrapper scripts version to match gradle version. (#2574) @HappyHacker123
• Remove and log warning before loading webhooks (#2568) @prithvitewatia
• Add extensionScanningEnabled option to @WireMockTest. (#2561) @kyle-winkelman
• Adding build function for all kind of UrlPattern in RequestPatternBuilder (#2536) @AlEmerich
• Added GET_OR_HEAD method. (#2555) @prithvitewatia

🚀 New features and improvements

• Allow empty URI path segments after the first (#2404) @Mahoney
• Switch the Webhooks Extension to use the injected template engine so that it respects standard configuration providers, e.g. system properties and environment variables (#2473) @tomakehurst
• Introduce the substitutable HTTP client (#2455) @tomakehurst
• Make NetworkAddressRules into an interface so that it can be implemented in a fully customised way @tomakehurst

🐛 Bug fixes

• Fix network address rules breaking change - regression in WireMock 3.3.0 (#2478) @tomakehurst
• Ignore IPv6 addresses when checking network security rules (#2475) @tomakehurst
• #2415 - Fix warning in the log due to SLF4J-API 1.7.36 to 2.0.7 replacement by Gradle (#2449) @Xabibax
• Fix API contract for FileSourceBlobStore (#2451) @dkhozyainov
• Add null check for actual date/time truncation (#2466) (#2467) @papiomytoglou
• #2422 - URL not matched by path template when query parameter present in request (#2429) @tomakehurst

📝 Documentation updates

• Add BEFORE_RESPONSE_SENT request phase to the stub-mapping schema (#2428) @picimako
• Update the co-maintainer policy beyond WireMock 3 (#2435) @oleg-nenashev
• Turn reference link into actual link (#2443) @SimonVerhoeven

👻 Maintenance

• chore: use List.of where possible if only one argument is passed (#2468) @SimonVerhoeven
• fix: introduce a slight delay given the 2-3 results is slightly flakey (#2463) @SimonVerhoeven
• chore: infer explicit type arguments where possible (#2462) @SimonVerhoeven
• Refactor: split getLines method of Diff class (#2460) @julianahrens1999
• Replace Optional.orElse() calls with Optional.orElseGet() (#2450) @picimako
• Do not use deprecated jackson iso8601 class (#2423) @SimonVerhoeven
• feat: use expression lambdas over statement lambdas (#2444) @SimonVerhoeven
• Replace Guava by JDK (Partly) (#2384) @pks-1981
• Remove unnecessary type unboxing (#2424) @SimonVerhoeven
• Replace Guava by JDK (Partly) (#2409) @pks-1981

📦 Dependency updates

• Bump org.eclipse.jetty:jetty-bom from 11.0.17 to 11.0.18 (#2469) @dependabot
• Bump commons-io:commons-io from 2.14.0 to 2.15.0 (#2464) @dependabot
• Bump com.google.guava:guava from 32.1.2-jre to 32.1.3-jre (#2433) @dependabot
• Bump com.fasterxml.jackson:jackson-bom from 2.15.2 to 2.15.3 (#2441) @dependabot
• Bump org.eclipse.jetty:jetty-bom from 11.0.16 to 11.0.17 (#2430) @dependabot
• Bump org.sonarqube from 4.3.1.3277 to 4.4.1.3373 (#2410) @dependabot
• Bump org.mockito:mockito-junit-jupiter from 5.5.0 to 5.6.0 (#2426) @dependabot
• Bump org.ow2.asm:asm from 9.5 to 9.6 (#2406) @dependabot
• Bump org.mockito:mockito-core from 5.5.0 to 5.6.0 (#2425) @dependabot
• Bump io.netty:netty-all from 4.1.98.Final to 4.1.99.Final (#2403) @dependabot
• Bump com.diffplug.spotless from 6.21.0 to 6.22.0 (#2402) @dependabot
• Bump commons-io:commons-io from 2.13.0 to 2.14.0 (#2407) @dependabot

NOTE: This version is discarded because of the uninteded breaking change in NetworkAddressRules, fixed in 3.3.1 by #2478

🚀 New features and improvements

• Allow empty URI path segments after the first (#2404) @Mahoney
• Switched the webhooks extension to use the injected template engine so that it gets e.g. system/env property configuration (#2473) @tomakehurst
• Substitutable HTTP client (#2455) @tomakehurst
• Make NetworkAddressRules into an interface so that it can be implemented in a fully customised way. note this introduced a breaking change, which is fixed in https://github.com/wiremock/wiremock/releases/tag/3.3.1

🐛 Bug fixes

• Fixed #2415 Gradle replaces SLF4J-API 1.7.36 with 2.0.7, causing warning in the log (#2449) @Xabibax
• Refactor: split getLines method of Diff class (#2460) @julianahrens1999
• Fix contract for FileSourceBlobStore (#2451) @dkhozyainov
• Add null check for actual date/time truncation (#2466) (#2467) @papiomytoglou
• Fixed #2422 - URL not matched by path template when query parameter present in request (#2429) @tomakehurst

📝 Documentation updates

• Update the co-maintainer policy beyond WireMock 3 (#2435) @oleg-nenashev
• Turn reference link into actual link (#2443) @SimonVerhoeven

👻 Maintenance

• chore: use List.of where possible if only one argument is passed (#2468) @SimonVerhoeven
• fix: introduce a slight delay given the 2-3 results is slightly flakey (#2463) @SimonVerhoeven
• chore: infer explicit type arguments where possible (#2462) @SimonVerhoeven
• Replace Optional.orElse() calls with Optional.orElseGet() (#2450) @picimako
• Do not use deprecated jackson iso8601 class (#2423) @SimonVerhoeven
• feat: use expression lambdas over statement lambdas (#2444) @SimonVerhoeven
• Replace Guava by JDK (Partly) (#2384) @pks-1981
• Remove unnecessary type unboxing (#2424) @SimonVerhoeven
• Replace Guava by JDK (Partly) (#2409) @pks-1981

✍ Other changes

• Ignore IPv6 addresses when checking network security rules (#2475) @tomakehurst
• Add BEFORE_RESPONSE_SENT request phase to the stub-mapping schema (#2428) @picimako

📦 Dependency updates

• Bump org.eclipse.jetty:jetty-bom from 11.0.17 to 11.0.18 (#2469) @dependabot
• Bump commons-io:commons-io from 2.14.0 to 2.15.0 (#2464) @dependabot
• Bump com.google.guava:guava from 32.1.2-jre to 32.1.3-jre (#2433) @dependabot
• Bump com.fasterxml.jackson:jackson-bom from 2.15.2 to 2.15.3 (#2441) @dependabot
• Bump org.eclipse.jetty:jetty-bom from 11.0.16 to 11.0.17 (#2430) @dependabot
• Bump org.sonarqube from 4.3.1.3277 to 4.4.1.3373 (#2410) @dependabot
• Bump org.mockito:mockito-junit-jupiter from 5.5.0 to 5.6.0 (#2426) @dependabot
• Bump org.ow2.asm:asm from 9.5 to 9.6 (#2406) @dependabot
• Bump org.mockito:mockito-core from 5.5.0 to 5.6.0 (#2425) @dependabot
• Bump io.netty:netty-all from 4.1.98.Final to 4.1.99.Final (#2403) @dependabot
• Bump com.diffplug.spotless from 6.21.0 to 6.22.0 (#2402) @dependabot
• Bump commons-io:commons-io from 2.13.0 to 2.14.0 (#2407) @dependabot

💥 Breaking changes

• Enable local response templating by default in standalone (#2386) @tomakehurst
• Add startup option to enable/disable extension scanning and set to disabled by default when running from Java (#2385) @tomakehurst

🚀 New features and improvements

• Exposing MappingsLoader as an extension point (#2334) @bharatnpti
• Include more info when webhook refusal logged (#2389) @Mahoney
• HTTP Server Factory as an extension point (#2391) @tomakehurst
• Print loaded extensions at startup (#2381) @tomakehurst

🐛 Bug fixes

• Fix json string schema rejecting numbers (#2390) @Mahoney
• Fix FileSource backed blobstore keys bug (#2392) @tomakehurst
• Fixed #2388 - empty getPath() returned from new FileStore implementation passed to transformers (#2396) @tomakehurst

📦 Dependency updates

• Bump io.netty:netty-all from 4.1.97.Final to 4.1.98.Final (#2394) @dependabot

🚀 New features and improvements

• Move webhooks to the WireMock core (#2376) @tomakehurst
• Added a setter for max template cache entries in WireMockConfiguration (#2365) @tomakehurst
• Add working equals & readable toString to NetworkAddressRange (#2358) @Mahoney

💥 Breaking changes

• Move webhooks to the WireMock core. Users of the extension should remove the dependency when updating to the new version (#2376) @tomakehurst

🐛 Bug fixes

• Fixed #2364 - scenarios produced by recorder play back in reverse order (#2377) @tomakehurst
• Fix admin requests with empty body to avoid response code 411 (#1738) @danielimre
• Fix standalone missing filename extension bug (#2366) @tomakehurst

👻 Maintenance

• Fix markdown links (#2375) @pks-1981
• Add tests proving we match on request bodies (#2367) @Mahoney
• Replace Guava by JDK (Partly) (#2380) @pks-1981

📦 Dependency updates

• Bump org.junit-pioneer:junit-pioneer from 2.0.1 to 2.1.0 (#2370) @dependabot
• Bump com.github.tomakehurst:wiremock-jre8-standalone from 2.33.2 to 2.35.1 in /testlogging (#2368) @dependabot
• Bump com.networknt:json-schema-validator from 1.0.86 to 1.0.87 (#2371) @dependabot

🚀 New features and improvements

• Add working equals & readable toString to NetworkAddressRange (#2358) @Mahoney

🐛 Bug fixes

• Fix standalone missing filename extension bug (#2366) @tomakehurst
• Added a setter for max template cache entries in WireMockConfiguration (#2365) @tomakehurst
• Second attempt at fixing shaded webhooks plugin (#2362) @tomakehurst

👻 Maintenance

• Bump org.scala-lang:scala-library test dependency from 2.13.11 to 2.13.12 (#2360) @dependabot

✍ Other changes

• Add tests proving we match on request bodies (#2367) @Mahoney

🔒 Security

This security release addresses the following issues

• CVE-2023-41327 - Controlled SSRF through URL in the WireMock Webhooks Extension and WireMock Studio
  • Base CVSS Score: 4.6 (AV:A/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L/E:F/RL:O/RC:C)
• CVE-2023-41329 - Domain restrictions bypass via DNS Rebinding in WireMock and WireMock Studio webhooks, proxy and recorder modes
  • Base CVSS Score: 3.9 (AV:A/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:L/E:F/RL:O/RC:C)

NOTE: WireMock Studio, a proprietary distribution discontinued in 2022, is also affected by those issues and also affected by CVE-2023-39967 - Overall CVSS Score 8.6 - “Controlled and full-read SSRF through URL parameter when testing a request, webhooks and proxy mode”. The fixes will not be provided. The vendor recommends migrating to WireMock Cloud which is available as SaaS and private beta for on-premises deployments

🔗 Related releases

• WireMock Docker 3.0.3-1 - Docker Image with the Patch
• WireMock 2.35.1 / WireMock Docker 2.35.1-1 - Backport to WireMock 2.x
• Python WireMock 2.6.1 - Python library that bundles the WireMock JAR file
• NOTE: Other distributions like Testcontainers modules or Helm chart need explicit version declaration, and hence a user action is needed to update the dependencies should they be considered a risk

Credits

@W0rty, @numacanedo, @Mahoney, @tomakehurst, @oleg-nenashev

🔒 This is a security release that addresses the following issues

• CVE-2023-41327 - Controlled SSRF through URL in the WireMock Webhooks Extension and WireMock Studio
  • Overall CVSS Score: 4.6 (AV:A/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L/E:F/RL:O/RC:C)
• CVE-2023-41329 - Domain restrictions bypass via DNS
  Rebinding in WireMock and WireMock Studio webhooks, proxy and recorder modes
  • Overall CVSS Score: 3.9 (AV:A/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:L/E:F/RL:O/RC:C)

NOTE: WireMock Studio, a proprietary distribution discontinued in 2022, is also affected by those issues and also affected by CVE-2023-39967 - Overall CVSS Score 8.6 - “Controlled and full-read SSRF through URL parameter when testing a request, webhooks and proxy mode”. The fixes will not be provided. The vendor recommends migrating to WireMock Cloud which is available as SaaS and private beta for on-premises deployments

Credits: @W0rty, @numacanedo, @Mahoney, @tomakehurst, @oleg-nenashev

🐛 Bug fixes

• fix: avoid crash when printing help in wiremock-standalone (#2351) @tomasbjerre

👻 Maintenance

• Reset system properties at end of test (#2356) @Mahoney

📦 Dependency updates

• Bump org.eclipse.jetty:jetty-bom from 11.0.15 to 11.0.16 (#2346) @dependabot
• Bump org.slf4j:log4j-over-slf4j from 2.0.7 to 2.0.9 (#2353) @dependabot
• Bump org.sonarqube from 4.3.0.3225 to 4.3.1.3277 (#2352) @dependabot

🐛 Bug fixes

• Stop returning 500s for unmatched path patterns (#2339) @Mahoney
• Ensure that the shadow JAR is always built last to ensure webhooks fat JAR wins (#2344) @tomakehurst
• Added validation of UUIDs in path parameters in the admin API so that clearer errors are reported when non UUIDs are provided or item isn't found rather than throwing a 500 error (#2347) @tomakehurst
• Respect StopAction in V1 Filter (#2335) @Mahoney

Thanks to the regression reporters: @defnngj , @oleg-nenashev , @Mahoney

A new major release that introduces a lot of new features, enhancements and also some breaking changes. The key changes include support for Java 17, dropping Java 8 support, new matchers and dynamic response macros, new API endpoints, etc. We’ve made a small number of breaking changes to the Java API plus some behavioural changes, but the JSON (REST and file) API remains fully compatible with 2.x.

NOTE: A blog post with the user-friendly summary and migration guidelines is coming soon!

Thanks to all contributors! The changelog below represents key changes between 2.35.0 and 3.0.0. The full list of changes is available below in the collapsed section.

WARNING: There are known issues in the WireMock 3.0.0 release. Please be careful when updating, and see the Errata below

Upgrade guide

This guide assumes you would be upgrading from WireMock 2.35.0 to 3.1.0

1. If you aren’t using WireMock 2.35.0, upgrade to this version first
2. If you use WireMock Standalone, backup your configurations, logs and other information you might need in the future, just in case the - upgrade goes wrong
3. If you use the WireMock Webhooks Extension, delete the dependency on it and the downloads. Now the extension is a part of the WireMock core
4. If you use any WireMock extensions, private source or open source ones, ensure they are compatible with WireMock 3 by checking this GitHub Issue, documentation and the integration tests. If you discover any incompatible extension, please raise a bug in [wiremock/wiremock/issues (https://github.com/wiremock/wiremock/issues) or comment in wiremock/wiremock #2323, We will triage and route it accordingly
5. If you use Java 8 on the instance, update to Java 11 or Java 17
6. Update WireMock to the most recent release of WireMock 3

🚀 New features and improvements

• Matching and response templating:
• JSON matching via matchesJsonSchema() @kapishmalik
• Form parameter matching support (#2157) @kapishmalik
• not() matcher that inverts other matchers (#2006) @SatyamAK
• Support for multi-stub mapping files to the remote loader function (#2198) @DjerohN
• Support for Java time when serialising to/from JSON (#2130 ) @mark-henry
• Support for matching multi-valued headers and query parameters with includes and hasExactly (#2110) @kapishmalik
• Matching URLs by path template @tomakehurst
• Matching path variables in the same manner as query, headers, etc. @tomakehurst
• Support for addressing path variables by name in response templates @tomakehurst

Proxy mode:

• Add support for recording via an existing proxy configuration and not having to set the target URI (5637a00) @tomakehurst
• Make proxy timeout configurable (#2058) @lpradel
• Add support for disabling proxy pass-through (#2087) @kapishmalik

API and Extensibility:

• #1512 - Extensions API v2 - Documentation (#2238) @tomakehurst
  • New extension points: RequestFilterV2, TemplateHelperProviderExtension, TemplateModelDataProviderExtension, ResponseDefinitionTransformerV2, ResponseTransformerV2, ServeEventListener
• Add Beta API for externalized state storage (#2144) @tomakehurst
• Add patch() Method with URL in WireMock REST API client (#2261) @Joel-Schaltenbrand
• Add convenient method for matching absence of query and form params in a request (#2192, #2193) @G-Basak
• Add a beforeResponseSent() serve event listener hook (#2295) @tomakehurst
• Add a WireMock#requestedFor() method allowing to pass Http method as parameter (#2175) @ytvnr
• Add annotations for Beta and Internal APIs (#2332) @oleg-nenashev
• Allow configuring webhook to forbid target endpoints (#2307) @Mahoney
• Add WiremockNetworkTrafficListeners as unified factory for creating arbitrary notifying traffic listeners.(#2283) @gsmith85
• Add support for customising the filenames produced when stubs are saved or recorded via Handlebars at startup @craftsman228
• Add request IP to template model (#2103) @bmarwell
• Allow fixing class loader in ClasspathFileSource (#2054) @derari

Operations:

• #1913 - Support for sub-events associated with a ServeEvent - Documentation (#2238) @tomakehurst
• Add healthcheck endpoint to WireMock Standalone (#2303) @Purely-Jonas @ikalu
• Add support for custom encoding in ConsoleNotifyingWiremockNetworkTrafficListener (#2139) @gsmith85
• Performance: Change Queue on to Deque in InMemoryRequestJournalStore (#2299) @pks-1981
• Improve rendering performance for large response templates (#2211) @Mahoney
• Improve error message in AbstractFileSource#assertFilePathIsUnderRoot() (#2267) @oleg-nenashev
• New ASCII art on standalone startup (166c3b3) @tomakehurst

💥 Known Issues / Errata

• FIXED in 3.1.0 - WireMock Webhook Extension 3.0.0 JAR is broken #2342. Also, the 2.35.0 build of the extension is not compatible with WireMock 3.0.0 as reported in #2341. This extension cannot be reliably used until a new patch is released
• Some other WireMock 2 exceptions are not compatible with WireMock 3 and need an update. See the WireMock 3 extension compatibility notes in #2323
• FIXED in 3.0.1 - StopAction in the old V1 Filter extension implementation was not working as expected - fixed by @Mahoney in #2335
• FIXED in 3.0.2 - Help printing fails in WireMock standalone - fixed by @tomasbjerre in 3.0.2 #2351

This list will be expanded when we find new issues

💥 Breaking changes

• Java 8 is no longer supported, WireMock will NOT work on this version anymore
• Upgrade from Jetty 9 to Jetty 11 (Changelog) @tomakehurst
• Change the Maven repository groupID to org.wiremock for all artifacts built from this repository: wiremock, wiremock-standalone, wiremock-webhooks-extension @tomakehurst
• Change Artifact IDs of wiremock-jre8 and wiremock-jre8-standalone to wiremock and wiremock-standalone @tomakehurst
• Change the standalone CLI entrypoint from com.github.tomakehurst.wiremock.standalone.WireMockServerRunner to wiremock.Run (166c3b3) @tomakehurst
• Starting from WireMock 3.1.0, the Webhooks extension is included into the main distribution, and hence enabled by default. Users should remove dependency on the extension when upgrading to this version
• Almost all Guava usages in public binary APIs were replaced by Java 11 equivalents. The rest will be removed in the WireMock 4 release in the future. Credits to @timtebeek, @pks-1981, @tomasbjerre
• Remove deprecated API routes (note: we’ve preserved the ones necessary for the 2.x client to continue to work with the 3.x server) (47d420) @tomakehurst
• Change order of handling scenarios with transformed stubs (#2140) @gsmith85
• Switch the com.github.tomakehurst.wiremock.common.Timing return values to Integer and allow null when data isn't ready (#2275) @emilianoalvarez91
• Response templating is enabled in local mode by default when starting programmatically. It is now entirely configured via startup options and customised via the extension interface so ResponseTemplateTransformer should no longer be constructed directly. 2.x code constructing ResponseTemplateTransformer will no longer compile so should be removed or migrated to the 3.x style - See #2349 for detail

Please note the the legacy recorder has now been deprecated (7b8a7d. It will removed in WireMock 4 @tomakehurst

Please also note that some APIs remain in the Beta state, and there might be some breaking changes within major releases. We will be adding more annotations in the next release to make it explicit.

🐛 Bug fixes

• Shadow additional packages in wiremock-standalone (#2327) @jluehe
• Prevent slf4j being shaded into the webhooks JAR @tomakehurst
• Correctly handle scenarios with transformed stubs (#2140) @gsmith85
• Fix flood JSON string can not be null or empty from mapping matcher (#2247) @emilianoalvarez91
• Fix admin request crashing when timing responseSendTime is null (#2275) @emilianoalvarez91
• Fix ParseJsonHelper not storing parsed result in variable (if any) when json is empty (#2277) @G-Basak
• Fix @WireMockTest not working with @DisabledInNativeImage (#2219) @DarkAtra
• Prevent exception being thrown when a stub using matchesJsonSchema is present and the request body is empty (#2223) @Mahoney
• Fix mis-detection of browser proxy requests over HTTPs (e21394e) @tomakehurst
• Fix broken hashCode() in HTTP body (#2116) @ullenius
• Add missing equals() and hashCodeI() methods to matcher classes @jnt0r
• Fix bug when running declarative + programmatic JUnit5 extension (#2123) @parawanderer
• Respect keystore type when loading keystores (#2003) @kaarefc
• Fix NullPointerException thrown when rendering a diff report for a path template matched stub @Mahoney
• Fix a bug where disabling browser proxy pass-through also disabled proxy stubs @Mahoney
• Prevent NullPointerException when a multipart could not be parsed (#2035) @sickmartian
• Fix clock skew problem with certificate generation (#2019) @DrMetallius
• Fix exception thrown when using path template matching when request URL does not match structure
• Fix diff reporting when path templates or variables do not match @tomakehurst
• Fix multipart upload parsing behaviour so that a full buffer doesn't cause the request to hang (#2072) @jwilmoth-nc
• Forcibly close all connections on server shutdown so we don't have to wait for the grace period to expire each time @tomakehurst

👻 Maintenance

• Replace Guava usages by JDK native implementations (#2305, #2297, #2289, #2215, #2225, #2246, #2228, #2214, #2121, #2200, #2120) @pks-1981
• ServerEvent: replace Guava predicate and function with STL (refs #2111) (#2255) @tomasbjerre
• Fix HttpsBrowserProxyAcceptanceTest (#2314) @pks-1981
• Update the release drafter config for beta versioning (#2300) @oleg-nenashev
• Add IntelliJ Run Configurations (#2274) @picimako
• Replace Guava Files management with STL (#2256) @tomasbjerre
• Remove dependencies on new:ing collections with Guava (#2254) @tomasbjerre
• Prove matches json schema works for path params (#2257) @Mahoney
• add-exports in eclipse configuration (#2245) @tomasbjerre
• Add changelog generation with Release Drafter (#2213) @oleg-nenashev
• Refactor/prefer the java standard library instead of guava (#2206) @timtebeek
• Add WireMock Java Co-Maintainers as CODEOWNERS (#2243) @oleg-nenashev
• Refactor to lambdas (#2114) @timtebeek
• Remove duplicate dependencies (#2177) @picimako
• Fix the build output so that that we're not putting a spurious fat JAR with an -all classifier in the thin JAR artifact @tomakehurst

All changes

Add stub import doc by @i-whammy in #1826
Fix NullPointerException by @Mahoney in #2038
Bump mockito-junit-jupiter from 4.8.1 to 4.11.0 by @dependabot in #2052
Bump mockito-core from 4.8.1 to 4.11.0 by @dependabot in #2051
Bump netty-all from 4.1.84.Final to 4.1.86.Final by @dependabot in #2042
Bump com.diffplug.spotless from 6.11.0 to 6.12.0 by @dependabot in #2030
Bump jackson-bom from 2.13.4.20221013 to 2.14.1 by @dependabot in #2026
Bump org.sonarqube from 3.4.0.2513 to 3.5.0.2730 by @dependabot in #2005
Jetty 11 support by @reta in #1942
Bump com.diffplug.spotless from 6.12.0 to 6.15.0 by @dependabot in #2081
Bump io.netty:netty-all from 4.1.86.Final to 4.1.89.Final by @dependabot in #2083
Bump versions.junitJupiter from 5.9.1 to 5.9.2 by @dependabot in #2059
Bump org.mockito:mockito-junit-jupiter from 4.11.0 to 5.1.1 by @dependabot in #2077
Bump org.mockito:mockito-core from 4.11.0 to 5.1.1 by @dependabot in #2078
Bump versions.xmlUnit from 2.9.0 to 2.9.1 by @dependabot in #2060
Bump commons-fileupload:commons-fileupload from 1.4 to 1.5 by @dependabot in #2089
Bump com.diffplug.spotless from 6.15.0 to 6.16.0 by @dependabot in #2095
Bump org.sonarqube from 3.5.0.2730 to 4.0.0.2929 by @dependabot in #2093
Bump versions.jsonUnit from 2.36.0 to 2.36.1 by @dependabot in #2088
Bump log4j-over-slf4j from 2.0.0 to 2.0.6 by @dependabot in #2053
Bump commons-io:commons-io from 2.10.0 to 2.11.0 by @dependabot in #2092
Bump net.minidev:json-smart from 2.4.8 to 2.4.9 by @dependabot in #2099
Bump org.mockito:mockito-core from 5.1.1 to 5.2.0 by @dependabot in #2100
Bump org.mockito:mockito-junit-jupiter from 5.1.1 to 5.2.0 by @dependabot in #2101
Support disabling of browser proxy pass-through by @kapishmalik in #2087
Skips NPE when a multipart could not be parsed by @sickmartian in #2035
New Feature: not() in verify #1892 by @SatyamAK in #2006
[#2102] add requestIp to template model by @bmarwell in #2103
#2004 Make proxy timeout configurable by @lpradel in #2058
Fixed clock skew problems with dynamically created certificates by @DrMetallius in #2019
Bump com.diffplug.spotless from 6.16.0 to 6.17.0 by @dependabot in #2104
Allow fixing class loader in ClasspathFileSource by @derari in #2054
Bump io.netty:netty-all from 4.1.89.Final to 4.1.90.Final by @dependabot in #2105
Bump org.slf4j:log4j-over-slf4j from 2.0.6 to 2.0.7 by @dependabot in #2106
Bump net.minidev:json-smart from 2.4.9 to 2.4.10 by @dependabot in #2107
Feature/multi value matcher for query params and headers by @kapishmalik in #2110
Bump org.ow2.asm:asm from 9.4 to 9.5 by @dependabot in #2117
Bump versions.jsonUnit from 2.36.1 to 2.37.0 by @dependabot in #2112
Bump com.jayway.jsonpath:json-path from 2.7.0 to 2.8.0 by @dependabot in #2118
Refactor/use lambdas by @timtebeek in #2114
Fix of #1679 - Respect keyStoreType when loading keystores. by @kaarefc in #2003
Reference Slack in the issue template by @oleg-nenashev in #2127
Add community badges to the README by @oleg-nenashev in #2124
Fix the Slack link in the contributing guide by @oleg-nenashev in #2129
JSON schema matcher by @tomakehurst in #2134
Add support filename template by @craftsman228 in #2136
Bump com.fasterxml.jackson:jackson-bom from 2.14.2 to 2.15.0 by @dependabot in #2159
Bump com.networknt:json-schema-validator from 1.0.78 to 1.0.80 by @dependabot in #2142
Bump org.mockito:mockito-junit-jupiter from 5.2.0 to 5.3.1 by @dependabot in #2158
Bump org.mockito:mockito-core from 5.2.0 to 5.3.1 by @dependabot in #2160
Adding missing equals Methods and Tests by @jnt0r in #2037
Bump io.netty:netty-all from 4.1.90.Final to 4.1.91.Final by @dependabot in #2125
Bump versions.junitJupiter from 5.9.2 to 5.9.3 by @dependabot in #2163
Bump io.netty:netty-all from 4.1.91.Final to 4.1.92.Final by @dependabot in #2161
code changes for adding support for form parameter matching by @kapishmalik in #2157
Use HTTPs Slack redirect link by @oleg-nenashev in #2169
Delete the issue template which is now a part of .github by @oleg-nenashev in #2168
Update the WireMock Java contributor guide and README by @oleg-nenashev in #2187
Add tests for $ref in json schema matching by @Mahoney in #2162
Replace com.google.common.base.Function (partly) by @pks-1981 in #2121
Bump com.google.guava:guava from 31.1-jre to 32.0.0-jre by @dependabot in #2195
Bump com.fasterxml.jackson:jackson-bom from 2.15.0 to 2.15.2 by @dependabot in #2199
Bump com.networknt:json-schema-validator from 1.0.80 to 1.0.83 by @dependabot in #2196
Bump org.sonarqube from 4.0.0.2929 to 4.1.0.3113 by @dependabot in #2194
Bump io.netty:netty-all from 4.1.92.Final to 4.1.93.Final by @dependabot in #2191
Bump versions.jsonUnit from 2.37.0 to 2.38.0 by @dependabot in #2188
2197 | added field "mappings" to StubMapping and its processing if it exists by @DjerohN in #2198
Bump commons-io:commons-io from 2.11.0 to 2.12.0 by @dependabot in #2180
Replace com.google.common.base.Optional with Java 11 implementation by @pks-1981 in #2120
Bump net.minidev:json-smart from 2.4.10 to 2.4.11 by @dependabot in #2183
Configure default ObjectMapper with JavaTimeModule by @mark-henry in #2130
Fix JUnit5 extension bug when using both declarative + programmatic simultaneously by @parawanderer in #2123
Fix broken hashcode by @ullenius in #2116
Replace com.google.common.base.Function (partly) by @pks-1981 in #2200
Bump org.sonarqube from 4.1.0.3113 to 4.2.0.3129 by @dependabot in #2201
Bump org.scala-lang:scala-library from 2.13.10 to 2.13.11 by @dependabot in #2203
Bump commons-io:commons-io from 2.12.0 to 2.13.0 by @dependabot in #2208
Improve handlebars performance on large templates by @Mahoney in #2211
Add WireMock co-maintainers role and document the merge process by @oleg-nenashev in #2207
Replace Guava classes by @pks-1981 in #2215
Remove Optional from the Jetty settings class by @pks-1981 in #2214
Bump com.google.guava:guava from 32.0.0-jre to 32.0.1-jre by @dependabot in #2212
Bump org.sonarqube from 4.2.0.3129 to 4.2.1.3168 by @dependabot in #2217
MatchesJsonSchemaPattern will return no match for null input by @Mahoney in #2223
Remove duplicate dependencies by @picimako in #2177
Bump io.netty:netty-all from 4.1.93.Final to 4.1.94.Final by @dependabot in #2229
Bump com.networknt:json-schema-validator from 1.0.83 to 1.0.85 by @dependabot in #2233
Bump org.mockito:mockito-core from 5.3.1 to 5.4.0 by @dependabot in #2226
Add WireMock Java Co-Maintainers as codeowners by @oleg-nenashev in #2243
Bump com.google.guava:guava from 32.0.1-jre to 32.1.1-jre by @dependabot in #2242
Replace com.google.common.io.BaseEncoding by java.util.Base64 by @pks-1981 in #2225
Refactor/prefer the java standard library instead of guava by @timtebeek in #2206
Add changelog generation with Release Drafter by @oleg-nenashev in #2213
Replace com.google.common.base.MoreObjects.firstNonNull & com.google.common.base.Preconditions.checkArgument by Java alternatives by @pks-1981 in #2228
Sub-events and V2 extensions by @tomakehurst in #2238
Replace com.google.common.base.Charsets.UTF_8 -> java.nio.charset.StandardCharsets.UTF_8. Tests. by @pks-1981 in #2246
add-exports in eclipse configuration by @tomasbjerre in #2245
Fixed @wiremocktest not working with @DisabledInNativeImage by @DarkAtra in #2219
feat: add a requestedFor method allowing to pass Http method as parameter by @ytvnr in #2175
Bump com.networknt:json-schema-validator from 1.0.85 to 1.0.86 by @dependabot in #2251
Bump net.minidev:json-smart from 2.4.11 to 2.5.0 by @dependabot in #2252
Prove matches json schema works for path params by @Mahoney in #2257
Remove dependencies on new:ing collections with Guava (refs #2111) by @tomasbjerre in #2254
Bump org.mockito:mockito-junit-jupiter from 5.3.1 to 5.4.0 by @dependabot in #2227
Add mising schema properties by @picimako in #2253
Replace Guava Files management with STL (refs #2111) by @tomasbjerre in #2256
Add convenient method for matching absence of query param in a request by @G-Basak in #2192
Add convenient method for matching absence of form param in a request by @G-Basak in #2193
Add patch() Method with URL in WireMock HTTP client by @Joel-Schaltenbrand in #2261
Bump org.sonarqube from 4.2.1.3168 to 4.3.0.3225 by @dependabot in #2279
ServerEvent: replace Guava predicate and function with STL (refs #2111) by @tomasbjerre in #2255
Improve error message in AbstractFileSource#assertFilePathIsUnderRoot() by @oleg-nenashev in #2267
Update Spotless to 6.17.0 and Google Java Format to 1.17.0 by @oleg-nenashev in #2272
Bump com.diffplug.spotless from 6.17.0 to 6.20.0 by @dependabot in #2278
Fix ParseJsonHelper not storing parsed result in variable (if any) when json is empty by @G-Basak in #2277
ConsoleNotifyingWiremockNetworkTrafficListener accepts custom encoding by @gsmith85 in #2139
Fix admin request crashing when timing responseSendTime is null by @emilianoalvarez91 in #2275
Bump io.netty:netty-all from 4.1.94.Final to 4.1.95.Final by @dependabot in #2282
Bump versions.junitJupiter from 5.9.3 to 5.10.0 by @dependabot in #2285
Fix flood json string can not be null or empty from mapping matcher by @emilianoalvarez91 in #2247
Add IntelliJ Run Configurations by @picimako in #2274
Adds WiremockNetworkTrafficListeners by @gsmith85 in #2283
Bump io.netty:netty-all from 4.1.95.Final to 4.1.96.Final by @dependabot in #2286
Include IntelliJ run configurations in CONTRIBUTING.md by @picimako in #2290
Bump org.apache.commons:commons-lang3 from 3.12.0 to 3.13.0 by @dependabot in #2287
Replace Guava by JDK (Partly) by @pks-1981 in #2289
Correctly handle scenarios with transformed stubs by @gsmith85 in #2140
Add a beforeResponseSent serve event listener hook by @tomakehurst in #2295
Bump com.google.guava:guava from 32.1.1-jre to 32.1.2-jre by @dependabot in #2291
Update the release drafter config for beta versioning by @oleg-nenashev in #2300
Replace Guava by JDK (Partly) by @pks-1981 in #2297
Bump jetty-bom from 11.0.12 to 11.0.15 by @Purely-Jonas in #2302
Allow configuring webhook to forbid target endpoints by @Mahoney in #2307
Fix HttpsBrowserProxyAcceptanceTest by @pks-1981 in #2314
Restore old edit task for 2.x backwards compatibility by @tomakehurst in #2315
Bump org.mockito:mockito-core from 5.4.0 to 5.5.0 by @dependabot in #2320
Bump org.mockito:mockito-junit-jupiter from 5.4.0 to 5.5.0 by @dependabot in #2319
Direct pushes
Remove deprecated API routes (47d420) @tomakehurst
Add deprecation warning to the legacy recorder (7b8a7d) @tomakehurst
Fixed JRE11 only test cases with broken Mockito verifications due to HTTP client call signature changing (5ec352e) @tomakehurst
New ASCII art on standalone startup (166c3b3) @tomakehurst
Change the standalone CLI entrypoint from com.github.tomakehurst.wiremock.standalone.WireMockServerRunner to wiremock.Run (166c3b3) @tomakehurst

New Contributors

@i-whammy made their first contribution in #1826
@reta made their first contribution in #1942
@kapishmalik made their first contribution in #2087
@sickmartian made their first contribution in #2035
@SatyamAK made their first contribution in #2006
@bmarwell made their first contribution in #2103
@lpradel made their first contribution in #2058
@DrMetallius made their first contribution in #2019
@derari made their first contribution in #2054
@kaarefc made their first contribution in #2003
@craftsman228 made their first contribution in #2136
@DjerohN made their first contribution in #2198
@mark-henry made their first contribution in #2130
@parawanderer made their first contribution in #2123
@ullenius made their first contribution in #2116
@DarkAtra made their first contribution in #2219
@ytvnr made their first contribution in #2175
@G-Basak made their first contribution in #2192
@Joel-Schaltenbrand made their first contribution in #2261
@gsmith85 made their first contribution in #2139
@emilianoalvarez91 made their first contribution in #2275
@Purely-Jonas made their first contribution in #2302