chore(deps): update all non-major dependencies in .github/workflows/test.yml

[renovate]

This PR contains the following updates:

Package	Type	Update	Change	OpenSSF
actions/checkout (changelog)	action	digest	8e8c483 → de0fac2
coreruleset-v4		minor	4.22.0 → 4.23.0

---

Release Notes

coreruleset/coreruleset (coreruleset-v4)

v4.23.0

Compare Source

What's Changed

⭐ Important changes

• feat(920640): add rule to enforce content-type if there is body by @​fzipi in #​4406

🆕 New features and detections 🎉

• feat(lfi): Add detection for Vite.js path traversal (CVE-2025-30208) by @​disisto in #​4407
• feat: block fake mozilla/5.g user-agent by @​EsadCetiner in #​4383
• feat: resolve common false positives with ad and tracker cookies by @​EsadCetiner in #​4378
• fix(ssrf): catch malformed urls by @​fzipi in #​4410
• feat: block 'trap' command by @​azurit in #​4422
• feat: prevent php session files to be uploaded by @​fzipi in #​4412
• feat(930130): improvement of the detection of common debug or error files across CMS platforms by @​touchweb-vincent in #​4426
• feat(942450): add another hex + binary declaration pattern by @​touchweb-vincent in #​4374
• feat: update restricted files and file extensions by @​EsadCetiner in #​4299
• feat(920650): add detection for framework method overrides by @​fzipi in #​4416
• fix: remove Request-Range Header from rules by @​Xhoenix in #​4435
• feat: block when Request-Range header is used by @​fzipi in #​4436

🧰 Other Changes

• fix: remove bypass-vulnerable content types from default allow lists by @​RedXanadu in #​4365
• feat(931131): removing off domain check by @​touchweb-vincent in #​4379
• chore(933120): cleaning obsolete variable by @​touchweb-vincent in #​4417
• chore(941360,941370,941380): cleaning useless capture keyword by @​touchweb-vincent in #​4419
• chore(933151,933152,933153): cleaning useless variables by @​touchweb-vincent in #​4420
• feat(942350): added replace keyword + c-type comment evasion by @​touchweb-vincent in #​4373
• fix(933111): regex should be the same as 933110 by @​touchweb-vincent in #​4395
• fix: FPs related to maxDB information leakage by @​azurit in #​4382
• fix: remove non-unix commands from unix rce rules (932230 PL-1, 932235 PL-1, 932250 PL-1, 932260 PL-1, 932220 PL-2, 932236 PL-2, 932239 PL-2, 932237 PL-3) by @​EsadCetiner in #​4247
• fix(941120): new regex is eligible for Paranoia Level 1 by @​touchweb-vincent in #​4291
• fix(933150): reduce substring false positive matches by @​EsadCetiner in #​4340
• fix(942410): cleaning of duplicates with 942151 by @​touchweb-vincent in #​4336
• fix: add separate rule to match unix commands with no arguments by @​EsadCetiner in #​4273
• fix(934140): update perl interpolation regex by @​fzipi in #​4250
• feat(921200): move regexp to regex-assembly by @​fzipi in #​4409
• fix(934190): add new rule to check localhost variants without scheme by @​fzipi in #​4429
• feat(941110): all HTTP headers should be checked by @​touchweb-vincent in #​4326
• feat(941120): all HTTP headers should be checked by @​touchweb-vincent in #​4327

New Contributors

• @​disisto made their first contribution in #​4407

Full Changelog: coreruleset/coreruleset@v4.22.0...v4.23.0

---

Configuration

📅 Schedule: Branch creation - Between 12:00 AM and 03:59 AM ( * 0-3 * * * ) (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[cloudflare-workers-and-pages]

Deploying website with    Cloudflare Pages

Latest commit:	9450312
Status:	⚡️  Build in progress...

View logs