ARTEMIS-X Bump mockserver.version from 7.2.0 to 7.4.0

[dependabot]

Bumps mockserver.version from 7.2.0 to 7.4.0.
Updates org.mock-server:mockserver-netty from 7.2.0 to 7.4.0

Updates org.mock-server:mockserver-core from 7.2.0 to 7.4.0

Release notes

Sourced from org.mock-server:mockserver-core's releases.

MockServer 7.4.0

[7.4.0] - 2026-07-04

Added

• Dashboard: every language tab now generates typed client code. The composer's Java, Node.js, Python, Go, C#, Ruby, and Rust tabs construct each client's typed model — fluent builders and typed constructors matching the website examples — instead of embedding raw JSON, including full LLM response actions in Java. Every language's generated output is proven equivalent by executing or compiling it against the real client and comparing the serialized expectation with the registered JSON, and a CI gate compiles the generated Java against the built client on every build.

• Every client library now round-trips the full expectation model, proven by a shared fidelity harness. The Go, Rust, C#, Python, Ruby, and Node clients gained typed support for every expectation feature they previously dropped silently — chaos profiles, rate limits, forward-with-fallback and forward-validate actions, gRPC bidi responses, before/after actions, steps, capture rules, namespaces, LLM response payloads including moderation, rerank, and content filters, WebSocket frame matchers, response trailers, DNS matchers, and all body matcher variants. Forty-four server-validated kitchen-sink fixtures now run as round-trip tests inside each client's own test suite, with a ratcheting known-gaps ledger that fails CI if a documented gap silently regresses or a fixed gap is still excused.

• Dashboard: JWT and all-of body matchers are now authorable in the composer. The Advanced request form gains a JWT section (claims, issuer, audience, algorithm) and an all-of body matcher composing multiple sub-matchers, emitted in the exact server wire format and round-tripping on edit.

• Dashboard: the Java code tab is now complete and type-safe. Generated Java uses the real client API for priority, times, and time-to-live, scenario bindings, namespaces, and capture rules — proven by compiling a kitchen-sink snippet against the built client — and the Java client gains matching withNamespace and withCapture fluent methods. Actions the Java builder preview cannot represent show an honest notice instead of fabricated code.

• Dashboard: every captured flow is now a launchpad. A "Create From This" menu on traffic detail panes and log rows fans out into every subsystem pre-filled from that flow — create a mock in the composer, set a breakpoint, prefill a verification, or add chaos for the host. The traffic inspector also gains structured Request/Response tabs (headers tables and pretty-printed bodies, with the raw JSON tree kept as a tab), "Copy as curl" with shell-safe quoting and masked credentials, a Charles-style "Repeat" action (iterations, bounded concurrency, delay, live progress and cancel), a Proxyman-style diff pool with an editable ignored-headers list, an unmatched-count chip with why-didn't-this-match and generate-stub actions, and bulk "Promote to Mocks" over recorded traffic (PUT /mockserver/recordings/promote).

• Dashboard: previously server-only capabilities are now reachable from the UI. Validate recorded traffic against an OpenAPI spec (/trafficValidate), import GraphQL SDL schemas and mock SCIM providers, import Pact contracts, generate HTTP expectations from AsyncAPI specs, dry-run WASM modules against a sample request, reload persisted recording archives (NDJSON or from server disk), a preemption-simulation card and experiment history in Service Chaos, a control-plane Audit view, a standalone Scenarios view in the navigation, and a read-only Server Info tab (effective configuration with source tiers, bound ports plus bind-additional-port, proxy setup with CA download) alongside a server-side decoded-prompt LLM run diff.

• Dashboard: quick chaos and honest latency attribution. A one-toggle Quick Chaos strip (percentage slider over real per-request fault probabilities, per upstream host) makes fault injection approachable, and the traffic timing waterfall now distinguishes latency MockServer injected (chaos latency, configured response delays including the global delay, breakpoint holds) from real upstream/processing time — mock-served responses carry a timing block for the first time when they inject latency (a plain mock's recorded output is unchanged).

... (truncated)

Changelog

Sourced from org.mock-server:mockserver-core's changelog.

[7.4.0] - 2026-07-04

Added

• Dashboard: every language tab now generates typed client code. The composer's Java, Node.js, Python, Go, C#, Ruby, and Rust tabs construct each client's typed model — fluent builders and typed constructors matching the website examples — instead of embedding raw JSON, including full LLM response actions in Java. Every language's generated output is proven equivalent by executing or compiling it against the real client and comparing the serialized expectation with the registered JSON, and a CI gate compiles the generated Java against the built client on every build.

• Every client library now round-trips the full expectation model, proven by a shared fidelity harness. The Go, Rust, C#, Python, Ruby, and Node clients gained typed support for every expectation feature they previously dropped silently — chaos profiles, rate limits, forward-with-fallback and forward-validate actions, gRPC bidi responses, before/after actions, steps, capture rules, namespaces, LLM response payloads including moderation, rerank, and content filters, WebSocket frame matchers, response trailers, DNS matchers, and all body matcher variants. Forty-four server-validated kitchen-sink fixtures now run as round-trip tests inside each client's own test suite, with a ratcheting known-gaps ledger that fails CI if a documented gap silently regresses or a fixed gap is still excused.

• Dashboard: JWT and all-of body matchers are now authorable in the composer. The Advanced request form gains a JWT section (claims, issuer, audience, algorithm) and an all-of body matcher composing multiple sub-matchers, emitted in the exact server wire format and round-tripping on edit.

• Dashboard: the Java code tab is now complete and type-safe. Generated Java uses the real client API for priority, times, and time-to-live, scenario bindings, namespaces, and capture rules — proven by compiling a kitchen-sink snippet against the built client — and the Java client gains matching withNamespace and withCapture fluent methods. Actions the Java builder preview cannot represent show an honest notice instead of fabricated code.

• Dashboard: every captured flow is now a launchpad. A "Create From This" menu on traffic detail panes and log rows fans out into every subsystem pre-filled from that flow — create a mock in the composer, set a breakpoint, prefill a verification, or add chaos for the host. The traffic inspector also gains structured Request/Response tabs (headers tables and pretty-printed bodies, with the raw JSON tree kept as a tab), "Copy as curl" with shell-safe quoting and masked credentials, a Charles-style "Repeat" action (iterations, bounded concurrency, delay, live progress and cancel), a Proxyman-style diff pool with an editable ignored-headers list, an unmatched-count chip with why-didn't-this-match and generate-stub actions, and bulk "Promote to Mocks" over recorded traffic (PUT /mockserver/recordings/promote).

• Dashboard: previously server-only capabilities are now reachable from the UI. Validate recorded traffic against an OpenAPI spec (/trafficValidate), import GraphQL SDL schemas and mock SCIM providers, import Pact contracts, generate HTTP expectations from AsyncAPI specs, dry-run WASM modules against a sample request, reload persisted recording archives (NDJSON or from server disk), a preemption-simulation card and experiment history in Service Chaos, a control-plane Audit view, a standalone Scenarios view in the navigation, and a read-only Server Info tab (effective configuration with source tiers, bound ports plus bind-additional-port, proxy setup with CA download) alongside a server-side decoded-prompt LLM run diff.

• Dashboard: quick chaos and honest latency attribution. A one-toggle Quick Chaos strip (percentage slider over real per-request fault probabilities, per upstream host) makes fault injection approachable, and the traffic timing waterfall now distinguishes latency MockServer injected (chaos latency, configured response delays including the global delay, breakpoint holds) from real upstream/processing time — mock-served responses carry a timing block for the first time when they inject latency (a plain mock's recorded output is unchanged).

• Force a response-sequence variant per request. A request matching an expectation with multiple responses

... (truncated)

Commits

• 6fb02a5 release: set version 7.4.0
• e7989c3 fix(ci): make the Java compile gate encoding-safe and the Python client impor...
• bd72ddb docs(changelog): record typed preserved-action codegen and the action metrics...
• e66a692 fix(metrics): registering validate, fallback, and gRPC bidi actions no longer...
• ded88b5 fix(ui): emit every edit-preserved expectation field as typed client code
• af8168f build(deps): bump the npm-minor-and-patch group across 1 directory with 3 upd...
• da5feb6 fix(client-python): restore Python 3.9 compatibility in async scenario URLs
• db3b7d3 build(deps): bump the maven-minor-and-patch group across 1 directory with 2 u...
• 886bda8 fix(ui): build the negative-control literal by concatenation, not replace
• b715c44 fix(ui): add .ts extensions to codegen module imports for Node-native gate
• Additional commits viewable in compare view

Updates org.mock-server:mockserver-client-java from 7.2.0 to 7.4.0

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)