V3 feature/webkit2 40 41

[tmclane]

V3 update to support webkit2 4.0 and 4.1. The default in this case is 4.1.

Tags to build are identical to the ones used in v2 AFAIK.

webkit2_40 == 4.0 and soup2 webkit2_41 == 4.1 and soup3

[semgrep-app[bot]]

Semgrep found 2 ssc-46663897-ab0c-04dc-126b-07fe2ce42fb2 findings:

• v3/internal/assetserver/webview/webkit2.go
  • L42
  • L56

Risk: Affected versions of golang.org/x/net, golang.org/x/net/http2, and net/http are vulnerable to Uncontrolled Resource Consumption. An attacker may cause an HTTP/2 endpoint to read arbitrary amounts of header data by sending an excessive number of CONTINUATION frames.

Fix: Upgrade this library to at least version 0.23.0 at wails/v3/go.mod:87.

Reference(s): https://github.com/advisories/GHSA-4v7x-pqxf-cx7m, CVE-2023-45288

_{Ignore this finding from ssc-46663897-ab0c-04dc-126b-07fe2ce42fb2.}

[cloudflare-workers-and-pages[bot]]

Deploying wails with    Cloudflare Pages

Latest commit:	0b4c98b
Status:	✅  Deploy successful!
Preview URL:	https://8be34cfb.wails.pages.dev
Branch Preview URL:	https://v3-feature-webkit2-40-41.wails.pages.dev

View logs

[leaanthony]

@tmclane - closing this as we'll exclusively be targeting 4.1 in v3 👍