Update nuclei to 3.11.0

[blsaccess]

This PR uses https://api.github.com/repos/projectdiscovery/nuclei/releases/latest to obtain the latest version of nuclei and update the version in bbot/modules/nuclei.py."

Release notes:

What's Changed

⚠️ Breaking Change: Signed templates required for JavaScript protocol

Starting with v3.11.0, custom templates that use the javascript: protocol must be digitally signed before Nuclei will load or execute them. Unsigned JavaScript templates are now skipped during template loading and when referenced from workflows.

Why this change

This release continues the security hardening started in v3.10.0 (sandbox enforcement, network policy checks, stricter code-template handling, YAML include protections, and related fixes in #7469). The JavaScript protocol exposes Go-backed modules through Nuclei's JS runtime, which significantly increases attack surface compared with request-only templates. Requiring signatures brings JavaScript templates in line with the existing protections for code-protocol templates.

Who is affected

Scenario	Impact
Default scans using nuclei-templates	No action needed - official templates are pre-signed and verified with ProjectDiscovery's public key
Custom/private templates using javascript:	Action required - sign templates before use
Templates using only flow: (e.g. flow: http(1)) without javascript:	No change
Workflows referencing unsigned JavaScript sub-templates	Those sub-templates are skipped

What to do

Sign your custom templates with:

nuclei -sign -t /path/to/your-template.yaml

See the Template Signing documentation for key generation, verification, and signing templates that reference external JavaScript or code files.

---

🔒 Security

• feat(templates): require signatures for javascript templates by @dwisiswant0 in feat(templates): require signatures for javascript templates projectdiscovery/nuclei#7514

Other Changes

• bump x/crypto and go-pkcs12 by @dogancanbakir in Bump x/crypto and go-pkcs12 projectdiscovery/nuclei#7516
• general maintenance and cleanup by @Mzack9999 in General maintenance and cleanup projectdiscovery/nuclei#7469

Full Changelog: projectdiscovery/nuclei@v3.10.0...v3.11.0

[github-actions]

📊 Performance Benchmark Report

Comparing dev (baseline) vs update-nuclei (current)

📈 Detailed Results (All Benchmarks)

📋 Complete results for all benchmarks - includes both significant and insignificant changes

🧪 Test Name	📏 Base	📏 Current	📈 Change	🎯 Status
Bloom Filter Dns Mutation Tracking Performance	4.25ms	4.28ms	+0.8% ⚪	✅
Bloom Filter Large Scale Dns Brute Force	18.01ms	17.50ms	-2.8% ⚪	✅
Large Closest Match Lookup	353.61ms	342.94ms	-3.0% ⚪	✅
Realistic Closest Match Workload	189.66ms	191.56ms	+1.0% ⚪	✅
Event Memory Medium Scan	1402 B/event	1402 B/event	+0.0% ⚪	✅
Event Memory Large Scan	1527 B/event	1527 B/event	+0.0% ⚪	✅
Event Validation Full Scan Startup Small Batch	404.56ms	410.07ms	+1.4% ⚪	✅
Event Validation Full Scan Startup Large Batch	537.79ms	548.97ms	+2.1% ⚪	✅
Make Event Autodetection Small	25.75ms	25.84ms	+0.3% ⚪	✅
Make Event Autodetection Large	262.82ms	263.93ms	+0.4% ⚪	✅
Make Event Explicit Types	11.48ms	11.51ms	+0.3% ⚪	✅
Excavate Single Thread Small	4.329s	4.514s	+4.3% ⚪	✅
Excavate Single Thread Large	10.084s	10.100s	+0.2% ⚪	✅
Excavate Parallel Tasks Small	4.404s	4.344s	-1.4% ⚪	✅
Excavate Parallel Tasks Large	6.532s	6.542s	+0.2% ⚪	✅
Intercept Throughput Small	877.32ms	875.47ms	-0.2% ⚪	✅
Intercept Throughput Medium	865.52ms	887.29ms	+2.5% ⚪	✅
Dns Throughput Quiet	2.759s	3.848s	+39.4% 🔴🔴🔴	⚠️
Dns Throughput Loaded	1.804s	2.426s	+34.5% 🔴🔴🔴	⚠️
Dns Throughput Inherited	2.464s	3.310s	+34.3% 🔴🔴🔴	⚠️
Is Ip Performance	2.27ms	2.23ms	-1.7% ⚪	✅
Make Ip Type Performance	230.88µs	226.53µs	-1.9% ⚪	✅
Mixed Ip Operations	2.37ms	2.31ms	-2.2% ⚪	✅
Memory Use Web Crawl	1.0 MB	1.0 MB	+1.0% ⚪	✅
Memory Use Subdomain Enum	28.3 MB	28.3 MB	+0.0% ⚪	✅
Memory Use Deep Chain	5.0 MB	5.0 MB	+0.0% ⚪	✅
Memory Use Parallel Chains	13.7 MB	14.4 MB	+5.7% ⚪	✅
Scan Throughput 100	2.859s	3.393s	+18.7% 🟡🟡	⚠️
Scan Throughput 1000	20.411s	25.742s	+26.1% 🔴🔴🔴	⚠️
Typical Queue Shuffle	5.26µs	5.33µs	+1.4% ⚪	✅
Priority Queue Shuffle	25.56µs	25.99µs	+1.7% ⚪	✅

🎯 Performance Summary

! 5 regressions ⚠️
  26 unchanged ✅

🔍 Significant Changes (>10%)

• Dns Throughput Quiet: 39.4% 🐌 slower
• Dns Throughput Loaded: 34.5% 🐌 slower
• Dns Throughput Inherited: 34.3% 🐌 slower
• Scan Throughput 100: 18.7% 🐌 slower
• Scan Throughput 1000: 26.1% 🐌 slower

---

🐍 Python Version 3.11.15

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 90%. Comparing base (86d38ae) to head (9e0b534).
⚠️ Report is 4 commits behind head on dev.

Additional details and impacted files

@@          Coverage Diff          @@
##             dev   #3275   +/-   ##
=====================================
- Coverage     90%     90%   -0%     
=====================================
  Files        450     450           
  Lines      46100   46100           
=====================================
- Hits       41357   41349    -8     
- Misses      4743    4751    +8     

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.