chore(deps): update all non-major dependencies in readme.md

[renovate]

This PR contains the following updates:

Package	Update	Change
coreruleset/coreruleset	minor	4.25.0 → 4.26.0
httpd	patch	2.4.66 → 2.4.67

---

Release Notes

coreruleset/coreruleset (coreruleset/coreruleset)

v4.26.0

Compare Source

What's Changed

🆕 New features and detections 🎉

• feat: Add WhatWAF to the scanner list by @​HackingRepo in #​4566
• feat: Add ghauri to scanner list by @​HackingRepo in #​4570
• feat: Expand Scanner User Agents List (v2) by @​HackingRepo in #​4572
• feat: Expanded os files list by @​HackingRepo in #​4536
• feat(933100): all HTTP headers should be checked by @​touchweb-vincent in #​4603
• fix(lfi-os-files): add .dockerenv, .DS_Store, META-INF/, WEB-INF/ by @​zoutjebot in #​4601
• feat(934200): detect Server-Side Template Injection (SSTI) attacks by @​zoutjebot in #​4600

🧰 Other Changes

• fix(lfi-os-files): require path prefix for .profile by @​zoutjebot in #​4586
• fix(933150): remove is_int from PHP function names list by @​zoutjebot in #​4585
• fix(932370): remove url from Windows LOLBIN command list by @​zoutjebot in #​4587
• fix(920539): prefer a bypass on a named rule rather than n+1 bypass by @​touchweb-vincent in #​4610
• fix(942290): add word boundary to MongoDB operator detection by @​zoutjebot in #​4588
• fix: false positive with parameter name .history by @​EsadCetiner in #​4614
• fix(942410): use common exceptions instead of rule by @​fzipi in #​4617
• fix(942200): reduce false positives on payloads with comments by @​EsadCetiner in #​4608
• fix(unix): exclude pg command from pl-1 by @​EsadCetiner in #​4613
• fix(930130): comment out false positive prone entries by @​EsadCetiner in #​4607
• fix(920100): drop HTTP/0.9 GET support from request line validation by @​fzipi in #​4621
• fix: Update restricted files to include Perl subdirectories by @​HackingRepo in #​4620

New Contributors

• @​zoutjebot made their first contribution in #​4586

Full Changelog: coreruleset/coreruleset@v4.25.0...v4.26.0

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • Between 12:00 AM and 03:59 AM (* 0-3 * * *)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

Summary by CodeRabbit

• Chores
  • Updated Core Rule Set to version 4.26.0
  • Updated Apache HTTPD to version 2.4.67
  • Refreshed documentation with latest component versions

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro Plus

Run ID: 85cdfa6d-0731-420b-8141-eb018110d89a

📥 Commits

Reviewing files that changed from the base of the PR and between e4b22c2 and 25af5ca.

📒 Files selected for processing (2)

• README.md
• docker-bake.hcl

---

📝 Walkthrough

Walkthrough

This PR updates upstream dependency versions in the Docker build configuration and synchronizes the documentation. Core Rule Set is bumped from 4.25.0 to 4.26.0 and Apache HTTPD from 2.4.66 to 2.4.67 across docker-bake.hcl and README.md.

Changes

Version Updates for OWASP CRS and Apache HTTPD

Layer / File(s)	Summary
Build Configuration docker-bake.hcl	major-crs-version updated from 4.25.0 to 4.26.0 and httpd-version updated from 2.4.66 to 2.4.67.
Documentation README.md	OS Variants section updated to reflect OWASP CRS 4.26.0 and Apache 2.4.67 versions.

Estimated code review effort

🎯 1 (Trivial) | ⏱️ ~3 minutes

Possibly related issues

• Dependency Dashboard #240: Both PRs address the same upstream version bumps for OWASP CRS 4.25.0→4.26.0 and Apache HTTPD 2.4.66→2.4.67 across docker-bake.hcl and README.

Suggested labels

patch

Suggested reviewers

• fzipi

Poem

🐰 A bunny hops through versions with glee,
CRS and HTTPD updated, perfectly!
Four-twenty-six and two-four-six-seven,
Documentation aligned, a security heaven! 🔒

🚥 Pre-merge checks | ✅ 4 | ❌ 1

❌ Failed checks (1 warning)

Check name	Status	Explanation	Resolution
Title check	⚠️ Warning	The title mentions 'readme.md' but also affects docker-bake.hcl file with backend version updates. The title is partially related to the changeset since it refers to a real part of the change (README updates) but misses the docker-bake.hcl modifications.	Update the title to reflect all affected files and changes, e.g., 'chore(deps): update CRS to 4.26.0 and Apache httpd to 2.4.67' or similar, to accurately represent the complete scope of the PR.

✅ Passed checks (4 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

_{✏️ Tip: You can configure your own custom pre-merge checks in the settings.}

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch renovate/all-minor-patch

---

_{Comment @coderabbitai help to get the list of available commands and usage tips.}