fix(deps): update all non-major dependencies in .github/workflows/regression.yml

[renovate]

This PR contains the following updates:

Package	Type	Update	Change	OpenSSF
codecov/codecov-action	action	digest	0565863 -> ad3126e
github.com/corazawaf/coraza-coreruleset/v4	require	minor	v4.10.0 -> v4.13.0
github.com/mccutchen/go-httpbin/v2	require	patch	v2.18.0 -> v2.18.1
github/codeql-action	action	digest	1b549b9 -> 45775bd

---

Release Notes

corazawaf/coraza-coreruleset (github.com/corazawaf/coraza-coreruleset/v4)

v4.13.0

Compare Source

v4.13.0 ships:

• CRS v4.13.0 (See CRS changelog: https://github.com/coreruleset/coreruleset/releases/tag/v4.13.0).
• Coraza v3.3.3 config file.

Note that to run the CRS regression tests against this version:

• An updated version (>=v1.0.0) of go-ftw is needed. See go-ftw releases.
• Albedo is expected to be the backend server.

Full Changelog: corazawaf/coraza-coreruleset@v4.12.0...v4.13.0

v4.12.0

Compare Source

v4.12.0 ships:

• CRS v4.12.0 (See CRS changelog: https://github.com/coreruleset/coreruleset/releases/tag/v4.12.0).
• Coraza v3.3.3 config file.

Note that to run the CRS regression tests against this version:

• An updated version (>=v1.0.0) of go-ftw is needed. See go-ftw releases.
• Albedo is expected to be the backend server.

Full Changelog: corazawaf/coraza-coreruleset@v4.11.0...v4.12.0

v4.11.0

Compare Source

v4.11.0 ships:

• CRS v4.11.0 (See CRS changelog: https://github.com/coreruleset/coreruleset/releases/tag/v4.11.0).
• Coraza v3.3.3 config file.

Note that to run the CRS regression tests against this version:

• An updated version (>=v1.0.0) of go-ftw is needed. See go-ftw releases.
• Albedo is expected to be the backend server.

Full Changelog: corazawaf/coraza-coreruleset@v4.10.0...v4.11.0

mccutchen/go-httpbin (github.com/mccutchen/go-httpbin/v2)

v2.18.1

Compare Source

What's Changed

• fix: /response-headers does not need escaping by default by @​mccutchen in https://github.com/mccutchen/go-httpbin/pull/208

Full Changelog: mccutchen/go-httpbin@v2.18.0...v2.18.1

---

Configuration

📅 Schedule: Branch creation - "* 0-3 * * *" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[codecov]

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 16.50%. Comparing base (ad40dcb) to head (048cc3f).

❗ There is a different number of reports uploaded between BASE (ad40dcb) and HEAD (048cc3f). Click for more details.

HEAD has 349 uploads less than BASE

Flag	BASE (ad40dcb)	HEAD (048cc3f)
default	32	1
ftw	32	1
tinygo	16	1
memoize_builders	44	0
no_fs_access	55	0
coraza.rule.multiphase_evaluation	54	0
coraza.rule.case_sensitive_args_keys	40	0
coraza.rule.no_regex_multiline	48	0
examples+memoize_builders	4	0
examples+coraza.rule.case_sensitive_args_keys	16	0
examples+coraza.rule.no_regex_multiline	8	0
examples+no_fs_access	1	0
examples+coraza.rule.multiphase_evaluation	2	0

Additional details and impacted files

@@             Coverage Diff             @@
##             main    #1342       +/-   ##
===========================================
- Coverage   84.01%   16.50%   -67.52%     
===========================================
  Files         170      150       -20     
  Lines        9803     9000      -803     
===========================================
- Hits         8236     1485     -6751     
- Misses       1323     7332     +6009     
+ Partials      244      183       -61     

Flag	Coverage Δ
coraza.rule.case_sensitive_args_keys	?
coraza.rule.multiphase_evaluation	?
coraza.rule.no_regex_multiline	?
default	16.50% <ø> (-67.52%)	⬇️
examples+	16.50% <ø> (ø)
examples+coraza.rule.case_sensitive_args_keys	?
examples+coraza.rule.multiphase_evaluation	?
examples+coraza.rule.no_regex_multiline	?
examples+memoize_builders	?
examples+no_fs_access	?
ftw	16.50% <ø> (-67.52%)	⬇️
memoize_builders	?
no_fs_access	?
tinygo	16.50% <ø> (-67.49%)	⬇️

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

[renovate]

ℹ Artifact update notice

File name: testing/coreruleset/go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• 4 additional dependencies were updated

Details:

Package	Change
golang.org/x/crypto	v0.36.0 -> v0.37.0
golang.org/x/net	v0.38.0 -> v0.39.0
golang.org/x/sync	v0.12.0 -> v0.13.0
golang.org/x/sys	v0.31.0 -> v0.32.0