[mostafa]

Bump the workspace and all inter-crate version pins from 0.24.0 to 0.25.0, sync the workspace, fuzz, and wasm-smoke lockfiles, bump OCSF golden metadata.product.version pins and the rstix README install examples, promote all unreleased docs version tags, and finalize the CHANGELOG with the v0.25.0 TL;DR, compare link, and release reference link.

Once merged, publishing the v0.25.0 GitHub Release from the signed tag triggers the crates.io, binary, and Docker workflows.

TL;DR

RSigma v0.25.0 is the "secure defaults and trustworthy results" release: three security advisories are fixed, the daemon and MCP server refuse unsafe exposure unless told otherwise, rules match exactly what they say, and correlation state, alert pipelines, and sinks hold up under reloads, restarts, caps, and delivery failures.

• Security: OTLP/HTTP gzip bodies are capped at 4 MiB after decompression (GHSA-vwg6-4q3h-8pvq, fix(daemon): cap gzip-decoded OTLP/HTTP bodies at 4 MiB #597), the MCP server refuses unconfined writes and unconfined HTTP serving (GHSA-33jj-q567-34gj, fix(mcp): refuse unconfined writes and unconfined HTTP serving #598), and event values are escaped in enricher and webhook templates (GHSA-3fh4-8r8j-8xw3, fix(runtime): escape event values in enricher and webhook URLs and enricher bodies #599). Every build now refuses to serve an unauthenticated daemon API on a non-loopback address (fix: refuse public plaintext and unauthenticated daemon APIs in every build #601), rustls picks up four RUSTSEC fixes (chore(deps): batch dependency updates (mid Oct 2026) #577), and OTLP log decoding is fuzzed (test(fuzz): add an OTLP log decoding fuzz target #617).
• Matching correctness: integer literals above 2^53 match exactly (fix: keep integer literals above 2^53 exact #610), boolean keywords match the word (fix(ir): make boolean keywords search for the word #609), partly case-insensitive regex pairs match the original text again (fix(eval): stop grouping partly case-insensitive regexes as case-insensitive #608), time-part modifiers accept space-separated fractional timestamps (fix(eval): accept space-separated fractional timestamps in time-part modifiers #611), match detail reports only the selections that decide the match (fix(eval): report only the selections that decide a match #612), 0 of selectors are rejected (fix(parser): reject 0 of selectors #562), and value_percentile thresholds apply (fix: apply value_percentile thresholds, stop repeating lines on sink retries, and fix smaller eval and runtime issues #621).
• State and delivery: hot-reload no longer rolls back correlation state (fix(runtime): keep correlation state updates made during a reload #604), state saves are one consistent, atomic cut (fix(daemon): save state as one consistent, atomic cut #606), restore and alert-pipeline reload enforce the dedup and incident caps (fix(alert-pipeline): enforce the dedup and incident caps on restore and reload #605), entity-graph grouping no longer leaks join keys or drops live incidents (fix(grouping): stop entity-graph index leaks and stale-id merges #603), the inhibit store is capped (fix(runtime): cap inhibition sources and warn about unbounded long correlation windows #616), alerts dropped without a DLQ sink are logged (fix(daemon): log delivery failures dropped without a DLQ sink #615), OTLP sink exports time out (fix: bound OTLP sink exports with a timeout #600), and file and Unix socket sink retries no longer repeat lines (fix: apply value_percentile thresholds, stop repeating lines on sink retries, and fix smaller eval and runtime issues #621).
• Diagnostics, API, and performance: parse warnings are reported apart from parse errors (feat: report parse warnings apart from parse errors #566), lint and the parser agree on modifiers and conditions (fix(lint): check modifiers and conditions with the parser's validators #565), pipeline errors get their own variant (fix(eval): report pipeline failures as EvalError::Pipeline #561), embedders can plug in custom logsource extractors (feat(eval): add ExtractLogSource for custom logsource extractors #578, based on work by John Sonnenschein in feat(eval): make LogSourceExtractor a trait #500), engine eval -o writes results to a file (feat(eval): write results to a file with -o, --output #576), match detail costs one evaluation pass (perf(eval): evaluate match detail in one pass #613), percentile and median checks no longer sort the window (perf(eval): select percentile and median ranks instead of sorting the window #619), and engines no longer retain rule HIR by default (refactor(eval): make HIR retention opt-in and share the source-reference grammar #620).
• Breaking: a non-loopback daemon API needs authentication or --allow-unauthenticated; mcp serve --http needs --rules-dir or --allow-unconfined-paths; event values in enricher and webhook URLs are encoded as one component each; HIR_SCHEMA_VERSION is 4 and save_hir requires HIR retention; SigmaCollection::diagnostics replaces errors; EvalError gains Pipeline and is #[non_exhaustive]; EventFilter takes the parsed line by value; numeric matchers and backend methods use NumericLiteral; incompatible_modifiers is a lint error; and cel 0.15 changes how some extract expressions evaluate. See the migration notes in the entries below.
• Platform and docs: --no-default-features builds compile again (fix(cli): restore the --no-default-features build #560), the docs are checked against the code on every pull request (Correct stale docs catalogues and publish the config schema #558, docs: fix drift against the binary and add docs audit checks #559), the PostgreSQL backend's JSONB and correlation code moves into dedicated modules with byte-identical SQL (refactor(convert): move PostgreSQL correlation conversion into its module #567, refactor(convert): move PostgreSQL JSONB paths and array matching into a module #568), the test backend is compared against pySigma 2.0.1 (test(convert): compare the test backend with pySigma 2.0.1 #564), and dependencies are updated, including the docs site's sharp security fix (chore(deps): follow-up Dependabot updates for #550 #556, fix(docs): bump sharp to 0.35.5 for CVE-2026-96889 #563, chore(deps): batch dependency updates (mid Oct 2026) #577).

Test plan

• scripts/check-toolchain-version.sh
• cargo fmt --all -- --check
• cargo clippy --workspace --all-targets --all-features --locked -- -D warnings
• RUSTDOCFLAGS='-D warnings -D rustdoc::broken-intra-doc-links' cargo doc --workspace --all-features --locked --no-deps
• cargo test --workspace --all-features --locked
• cargo audit
• cargo metadata --locked for the workspace, fuzz/, and ci/wasm-smoke/
• cargo test -p rsigma-runtime --test ocsf_golden --locked
• python3 scripts/mcp-smoke.py --bin target/debug/rsigma
• python3 scripts/mcp-smoke.py --http --bin target/debug/rsigma
• python3 scripts/docs-audit/check_sources.py
• npm run docs:build and npm run docs:validate