chore(deps): update dependency coreruleset-v4 to v4.28.0 in config/_default/params.yaml

[renovate]

This PR contains the following updates:

Package	Update	Change	OpenSSF
coreruleset-v4	minor	4.27.0 → 4.28.0

---

Release Notes

coreruleset/coreruleset (coreruleset-v4)

v4.28.0

Compare Source

What's Changed

🔒 Security

• fix: inspect XML attribute values across attack-detection rules — GHSA-6jp8-c2w2-x7wr
• fix: remove catastrophic backtracking in unix-shell-evasion prefix — GHSA-f5qm-3h4p-8qhg

🆕 New features and detections 🎉

• feat: enable crs_validate_utf8_encoding by default by @​fzipi in #​4647
• feat: added detection for quote evasion by @​Xhoenix in #​3813
• feat(934): detect ORM lookup operator injection by @​fzipi in #​4659
• fix(932): detect uninitialized variable spacer in RCE evasion prefix by @​fzipi in #​4652

🧰 Other Changes

• refactor: create 941170 .ra file by @​fzipi in #​4493
• fix: Update restricted-files.data to include NPM subdirectories without causing FPs by @​HackingRepo in #​4653
• fix: remove exponential backtracking in 933160/933161 comment suffix by @​fzipi in #​4666
• fix(941140): remove exponential backtracking in CSS url(javascript) detection by @​fzipi in #​4670
• fix(933180): remove exponential backtracking in variable-function noise suffix by @​fzipi in #​4669
• fix(942390): move to regex-assembly by @​fzipi in #​4011
• feat(crs-setup): add default actions for phases 3-5 by @​Prateeksaini12 in #​4675
• fix(942522): avoid excessive backtracking by @​EsadCetiner in #​4676
• fix: 4RI-250413 by @​EsadCetiner in #​4672
• fix: FPs related to RESPONSE_BODY by @​azurit in #​4684

New Contributors

• @​Prateeksaini12 made their first contribution in #​4661

Full Changelog: coreruleset/coreruleset@v4.27.0...v4.28.0

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • Between 12:00 AM and 03:59 AM (* 0-3 * * *)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.