v1.11.0 (unstable)

API & Breaking Changes

• Full ruleset parsing diagnostics (#161)
• Event result as ddwaf_object (#162)
• Replace ddwaf_result.actions with a ddwaf_object array (#165)

Changes

• Add logging and remove dead code (#169)
• Support for per-input transformers (#170)

Miscellaneous

• Multithreaded fuzzer (#166)
• Fix benchmark, test output and update ruleset to 1.7.0 (#171)
• Validator: add support for per-directory tests and ruleset (#172)
• Rename examples directory to tools (#173)
• Update ruleset to 1.7.1 (#173)
• Refactor and simplify tools to reduce code duplication (#173)

v1.10.0 (unstable)

Changes

• Add all rule tags to event (#160)

v1.9.0 (unstable)

Changes

• Remove a libinjection signature (#145)
• Priority collection, rule and filter simplification (#150)
• Improve allocation / deallocation performance within the context using a context_allocator (#151)
• Longest rule data expiration takes precedence for ip_match and exact_match operators (#152)
• Custom rules support (#154)
• Add vdso support for aarch64 (#157)

Miscellaneous

• Upgrade CodeQL Github Action to v2 (#144)
• Fix broken builds (#147)
• Benchmark: context destroy fixture (#148)
• Remove unused json rule files and vendorise aho-corasick submodule (#153)
• Cancel jobs in progress (#158)

v1.8.2 (unstable)

Changes

• Use raw pointers instead of shared pointers for rule targets (#141)

Fixes

• Relax rule override restrictions (#140)
• Initialise ruleset_info on invalid input (#142)

v1.8.1 (unstable)

Fixes

• Return NULL handle when incorrect version or empty rules provided to ddwaf_init (#139)

v1.8.0 (unstable)

API & Breaking Changes

• Add ddwaf_update for all-in-one ruleset updates (#138)
• Remove ddwaf_required_rule_data_ids (#138)
• Remove ddwaf_update_rule_data (#138)
• Remove ddwaf_toggle_rules (#138)

Changes

• Add WAF Builder (#138)

v1.7.0 (unstable)

Changes

• Handle lifetime extension (#135)
• Create macos universal binary (#136)

v1.6.2 (unstable)

Changes

• Add boolean getter (#132)
• Add support for converting string to bool in parameter bool cast operator (#133)
• Add parameter int64_t cast operator (#133)
• Add support for enabled flag on ruleset parser (#133)

Fixes

• Replace isdigit with custom version due to windows locale-dependence (#133)
• Minor fixes and parsing improvements (#133)

v1.6.1 (unstable)

Miscellaneous

• Add SHA256 to packages (#128)
• Automatic draft release on tag (#129)

v1.6.0 (unstable)

Changes

• Exclusion filters: targets and conditions (#110)
• Exclusion filters: inputs (#117)
• Add ID to exclusion filters (#120)
• Rework path trie for exclusion (#122)
• Priority collections (#123)
• Support for glob component and arrays on object filter (#124)

Miscellaneous

• Strip libddwaf.a for darwin/linux release (#107)
• linux/aarch64: add missing libunwind.a artefact (#109)
• Add option to prevent loading test targets (#108)
• Experiment building libddwaf on the oldest available macos target (#111)
• Upgrade deprecated actions (#114)
• Include mac arm binaries in nuget (#115)
• Run clang tidy / format on CI (#116)
• Exclusion filters on fuzzer (#118)