chore(deps): update dependency coreruleset-v4 to v4.30.0 in config/_default/params.yaml

[renovate]

This PR contains the following updates:

Package	Update	Change	OpenSSF
coreruleset-v4	minor	4.29.0 → 4.30.0

---

Release Notes

coreruleset/coreruleset (coreruleset-v4)

v4.30.0

Compare Source

What's Changed

🔒 Security

• fix: inspect REQUEST_FILENAME in RCE (932) rules to close path-based command injection bypass — GHSA-575j-qr6p-9763
• fix: lowercase the charset parameter name so mixed-case CHARSET= cannot skip the allow-list (920480) — GHSA-89h9-2j8h-9gp2
• fix: collect every _charset_ value so a second value cannot shadow a disallowed charset (922100) — GHSA-qmx4-jfcv-fgww

⭐ Important changes

• fix: Skip Checking Responses feature is broken by @​azurit in #​4807

🆕 New features and detections 🎉

• feat(932380): detect Active Directory DS command-line tools by @​fzipi in #​4768
• feat(934200): detect Velocity and FreeMarker directive syntax by @​Yeagerist0 in #​4774
• feat(unix): detect common selinux command usage by @​EsadCetiner in #​4724
• feat: Add Mozilla/6.0 used by scanner tools by @​HackingRepo in #​4784
• feat: Add .claude into restricted files by @​azurit in #​4809
• feat: Expand Restricted Files data (v3) by @​HackingRepo in #​4816

🪦 Rule removals

• feat: refactoring of response rules skipping by @​azurit in #​4806

🧰 Other Changes

• fix(913100): substring false positive with veganism.social user-agent by @​EsadCetiner in #​4777
• fix(932270): require boundary before tilde expansion patterns by @​zoutjebot in #​4596
• fix(956100): FP with keyword 'EOFError' inside RESPONSE_BODY by @​azurit in #​4752
• fix(951230): FP with too broad regex for RESPONSE_BODY by @​azurit in #​4747
• fix: close trailing-slash bypass of upload extension check (V29-260924) by @​fzipi in #​4815
• fix(932180): enforce boundaries for high-risk false positives entries by @​EsadCetiner in #​4632
• feat: allow application/*+json and AWS JSON content types by default by @​fzipi in #​4775
• fix(901370): allow + inside the subtype before the +json suffix by @​fzipi in #​4828
• fix(libmodsecurity3/coraza): substring false positive with json key named profiledata by @​EsadCetiner in #​4812

New Contributors

• @​Yeagerist0 made their first contribution in #​4774

Full Changelog: coreruleset/coreruleset@v4.29.0...v4.30.0

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • Between 12:00 AM and 03:59 AM (* 0-3 * * *)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

• Configuration used: Central YAML (base), Organization UI (inherited)
• Review profile: CHILL
• Plan: Advanced
• Run ID: 793d8542-bc32-45bd-bd5b-dcc9e6091292

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

• Autopilot · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}