Coraza v3.2.1

Coraza v3.2.0

chore: upgrades go-ftw to 0.6.4. (#998)

* chore: upgrades go-ftw to 0.6.4.

* chore: removes toolchain directive.

* fix: fixes test type.

* go1.20 mage format

---------

Co-authored-by: Matteo Pace <pace.matteo96@gmail.com>

chore(deps): bump github.com/tidwall/gjson from 1.14.4 to 1.17.0 (#878)

* chore(deps): bump github.com/tidwall/gjson from 1.14.4 to 1.17.0

Bumps [github.com/tidwall/gjson](https://github.com/tidwall/gjson) from 1.14.4 to 1.17.0.
- [Commits](tidwall/gjson@v1.14.4...v1.17.0)

---
updated-dependencies:
- dependency-name: github.com/tidwall/gjson
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

* chore: manual mod tidy

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Matteo Pace <pace.matteo96@gmail.com>

chore: adds memoize implementation for regexes and ahocorasick (#836)

* chore: adds memoize implementation for regexes.

Currently we create and allocate memory for every regex we compile, however there are cases where you compile the same regex over and over e.g. corazawaf/coraza-caddy#76. Here we implement the memoize pattern to be able to reuse the regex and reduce the memory consumption.

* docs: adds comments to code.

* chore: simplify the memoize package by using sync.Map.

* feat: extends memoize to ahocorasick and allow impl for tinygo but not synced as no concurrency.

* tests: covers memoize_builders in tinygo.

* chore: fixes nosync for tinygo.

* docs: updates docs.

---------

Co-authored-by: Juan Pablo Tosso <jptosso@gmail.com>

fix: benchmark and propagate the status to not to swallow the failure (…

…#808)

* chore: propagates the pipe status after tee.

* Refactor escape_seq_decode

* docs: adds more comments.

* tests: tweaks the code.

* tests: adds test for TestEscapeSeqDecode

* chore: simplify the doEscapeSeqDecode function.

* chore: aligns go version of benchmarks with tests

---------

Co-authored-by: Anuraag Agrawal <anuraaga@gmail.com>
Co-authored-by: Felipe Zipitría <3012076+fzipi@users.noreply.github.com>

Merge pull request from GHSA-c2pj-v37r-2p6h

fix:force require 'A' in Auditlogparts (#801)

* fix:require 'A' in Auditlogparts,force to break AuditLog when reached 'Z'

* feat: drops the A case in Transation.AuditLog as it implies A and Z will be present and in the right position due to the types parsing.

* breaking: drops A and Z types for auditlog parts as per @anuraaga suggestion.

Currently they don't need a type as parser can enforce their presence and they are always expected to be present in the same position.

---------

Co-authored-by: José Carlos Chávez <jcchavezs@gmail.com>

v3.0.0 RC3

Include key size in ARGS_COMBINED_SIZE (#756)

Co-authored-by: José Carlos Chávez <jcchavezs@gmail.com>