chore(deps): update dependency coreruleset/coreruleset to v4.25.0 in config/_default/config.toml

[renovate]

This PR contains the following updates:

Package	Update	Change	OpenSSF
coreruleset/coreruleset	minor	4.24.1 → 4.25.0

---

Release Notes

coreruleset/coreruleset (coreruleset/coreruleset)

v4.25.0: (LTS)

Compare Source

What's Changed

Important ⭐

These below fix CVE-2026-33691:

• fix(933111): prevent whitespace padding bypass in PHP double-extension upload by @​fzipi in #​4547
• fix(933110): prevent whitespace padding bypass in PHP upload detection by @​fzipi in #​4546
• fix(944140): prevent whitespace padding bypass in JSP file upload detection by @​fzipi in #​4548

🆕 New features and detections 🎉

• feat(930130,930140): expand AI-based paths by @​Elnadrion in #​4540
• feat: add aws security agent in scanners-user-agents.data by @​S0obi in #​4562
• feat(932390): add shell fork bomb detection rule at PL2 by @​fzipi in #​4563

🧰 Other Changes

• refactor: create 941250 .ra file by @​fzipi in #​4520
• refactor: create 942220 .ra file by @​fzipi in #​4511
• refactor: create rule 931100 and 931110 .ra files by @​Xhoenix in #​4489
• feat: Adding critical ai dirs that previously not exist by @​HackingRepo in #​4535
• refactor: create 933140 and 933180 .ra files by @​Xhoenix in #​4488
• fix(944110,944120,944130,944150,944151,944200,944210,..): don't inspect cookies twice by @​touchweb-vincent in #​4526
• refactor: create 943120 .ra file by @​fzipi in #​4506
• fix: false negative 932236 by @​franbuehler in #​4544
• feat: update list of unix commands by @​EsadCetiner in #​4446
• fix(932180): prevent whitespace padding bypass in restricted file upload detection by @​fzipi in #​4549
• fix: harden GitHub Actions workflows by @​fzipi in #​4553
• refactor: create 941310 .ra files by @​fzipi in #​4522
• docs: update README by @​fzipi in #​4556
• refactor: create 941120 .ra file by @​fzipi in #​4498
• fix(920540): allow rule exclusions for specific targets by @​EsadCetiner in #​4405
• fix(931130): ensure correct target is logged by @​EsadCetiner in #​4577

Full Changelog: coreruleset/coreruleset@v4.24.1...v4.25.0

---

Configuration

📅 Schedule: Branch creation - Between 12:00 AM and 03:59 AM ( * 0-3 * * * ) (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[cloudflare-workers-and-pages]

Deploying crs-documentation with    Cloudflare Pages

Latest commit:	ad768c8
Status:	✅  Deploy successful!
Preview URL:	https://315a9dcb.documentation-km5.pages.dev
Branch Preview URL:	https://renovate-all-minor-patch.documentation-km5.pages.dev

View logs