v1.28.0

Tool Improvements

• chore: bump yara-x to 1.22.0 by @octo-sts-9[bot] in #1771
• fix: stop a stack overflow on absolute zip names and repair CI by @egibs in #1777
• fix: scan deeply nested paths in linear memory and past PATH_MAX by @egibs in #1778
• fix: load YAML reports in diff --report by @RaphaelFakhri in #1769
• fix: harden scanning, extraction, diffing, and rendering by @egibs in #1779 (incl. GHSA-rmx6-g4c2-gfc8 reported by @r0binak)

Rule Improvements

• Update third-party rules as of 2026-10-08 by @octo-sts-9[bot] in #1751
• Update third-party rules as of 2026-10-09 by @octo-sts-2[bot] in #1754
• Update third-party rules as of 2026-10-10 by @octo-sts-2[bot] in #1756
• Update third-party rules as of 2026-10-12 by @octo-sts-2[bot] in #1758
• Update third-party rules as of 2026-10-19 by @octo-sts-8[bot] in #1765
• Update third-party rules as of 2026-10-21 by @octo-sts[bot] in #1770
• Update third-party rules as of 2026-10-23 by @octo-sts-7[bot] in #1775
• Update third-party rules as of 2026-10-27 by @octo-sts-8[bot] in #1781

Developer Improvements

• test: run TestGrowDescriptorTable sequentially to fix a flake by @egibs in #1752

New Contributors

• @RaphaelFakhri made their first contribution in #1769
• @r0binak via GHSA-rmx6-g4c2-gfc8

Full Changelog: v1.27.1...v1.28.0