Update nuclei to 3.8.0

[blsaccess]

This PR uses https://api.github.com/repos/projectdiscovery/nuclei/releases/latest to obtain the latest version of nuclei and update the version in bbot/modules/nuclei.py."

Release notes:

What's Changed

Security Fixes

• JS: Respect allow-local-file-access in require by @dwisiswant0 (#7332)
  • GHSA-29rg-wmcw-hpf4
• Expressions: Only evaluate template-authored expressions by @dwisiswant0 (#7221)(#7321)
  • GHSA-jm34-66cf-qpvr

Bug Fixes

• HTTP: Respect annotations in unsafe mode by @dwisiswant0 (#7044)
• HTTP: Isolate project cache keys by scheme & host by @dwisiswant0 (#7043)
• Expressions: Propagate unresolved variable markers through encoding functions by @dogancanbakir (#7033)
• SDK: Respect WithOptions rate limit by @dwisiswant0 (#7342)
• Fuzz: Prevent path mutation across sequential Rebuild calls by @promisingcoder (#7253)
• Fuzz: Use actual parameter for frequency deduplication by @Godzilla675 (#7037)
• Fuzz: Fix concurrent map writes in multipart form parsing by @Mzack9999 (#7291)
• Fuzz: Propagate custom headers to time_delay analyzer follow-up requests by @usernametooshort (#7125)
• JS: Fix watchdog and propagate context to all JS library network calls by @Mzack9999 (#7299)
• JS: Interrupt goja runtime on context cancel by @mikhail5555 (#7343)
• WebSocket: Fix path handling when merging template & target URLs by @Mzack9999 (#7290)
• Runner: Stop spawning template goroutines in host-spray when host is unresponsive by @usernametooshort (#7129)
• Input: Optimize removeTargets to prevent hang on large exclusions by @JawsKim (#6760)
• Installer: Prevent unnecessary update checks by @dahezhiquan (#7337)
• Utils: Normalize unbracketed IPv6 literals for probing by @dwisiswant0 (#7045)
• Client pool: Replace global variable with local scoping by @mikhail5555 (#7294)
• Fix InFlight map race condition via Snapshot method by @n3integration (#7026)
• Fix race condition in Dynamic.Fetch and always prefetch secrets by @hussain-alsaibai (#6976)
• Fix nil interface set in createEphemeralObjects to prevent panic by @maxwolf8852 (#6944)
• Fix DAST skipping URLs with part: request and mode: multiple by @dogancanbakir (#7326)
• Fix headless JS loading with -tlsi and addheader/setheader by @dogancanbakir (#7325)
• Fix flow execution with auth by @Mzack9999 (#7298)
• Fix redirect handling by @Mzack9999 (#7286)
• Fix Elastic export by @Mzack9999 (#7287)
• Use crypto/rand instead of math/rand in JS global functions by @sandiyochristan (#7215)

New Features

• Fuzz: Add XSS reflection context analyzer by @ZachL111 (#7164)
• Reporting: Add PDF export option for scan results by @Gengyscan (#7254)
• Network templates: Support service names in port field by @dogancanbakir (#7303)
• Add honeypot detection to reduce scan noise by @HarshadaGawas05 (#7277)
• Add inline targets and secrets to template profiles by @SaurabhCodesAI (#6858)

Performance & Improvements

• Runner: Fast path for tag listing by @dwisiswant0 (#7143)
• Runner: Use Print instead for listAvailableStoreTags by @dwisiswant0 (#7145)
• Resume state: Refactored as cache data by @dwisiswant0 (#7042)
• Capture stderr output by @Mzack9999 (#7292)

Tests & CI

• Add fuzz tests by @dwisiswant0 (#7311)
• Add request condition tests for multi-raw-request flow templates by @Mzack9999 (#7300)
• Refactor native tests by @dwisiswant0 (#7307)
• Add GITHUB_TOKEN to workflows for authenticated template updates by @dwisiswant0 (#7119)
• Integrate typos spell checker into CI by @telewin95 (#7158)

Documentation

• Update outdated documentation links across all translations by @Pitrat-wav (#7020)

New Contributors

• @usernametooshort made their first contribution in fix(core): stop spawning template goroutines in host-spray once host is unresponsive projectdiscovery/nuclei#7129
• @Pitrat-wav made their first contribution in docs: update outdated documentation links in all translations projectdiscovery/nuclei#7020
• @n3integration made their first contribution in fix: add Snapshot method to prevent InFlight map race condition projectdiscovery/nuclei#7026
• @JawsKim made their first contribution in fix(input): optimize removeTargets to prevent hang on large exclusions projectdiscovery/nuclei#6760
• @sandiyochristan made their first contribution in fix: use crypto/rand instead of math/rand in JS global functions projectdiscovery/nuclei#7215
• @telewin95 made their first contribution in ci: integrate typos spell checker into CI workflow projectdiscovery/nuclei#7158
• @Gengyscan made their first contribution in feat(reporting): add PDF export option for scan results projectdiscovery/nuclei#7254
• @hussain-alsaibai made their first contribution in fix: always prefetch secrets and fix race condition in Dynamic.Fetch projectdiscovery/nuclei#6976
• @promisingcoder made their first contribution in fix(fuzz): prevent path mutation across sequential Rebuild calls (#6398) projectdiscovery/nuclei#7253
• @Godzilla675 made their first contribution in fix(fuzz): use actual parameter for frequency dedupe projectdiscovery/nuclei#7037
• @SaurabhCodesAI made their first contribution in add inline targets and secrets to template profiless (#5567) projectdiscovery/nuclei#6858
• @ZachL111 made their first contribution in feat(fuzz): add XSS reflection context analyzer projectdiscovery/nuclei#7164
• @HarshadaGawas05 made their first contribution in feat: add honeypot detection to reduce scan noise (#6403) projectdiscovery/nuclei#7277
• @mikelolasagasti made their first contribution in chore: remove executable bit projectdiscovery/nuclei#7282
• @maxwolf8852 made their first contribution in fix: remove nil interface set in createEphemeralObjects to avoid panic projectdiscovery/nuclei#6944
• @mikhail5555 made their first contribution in Fix(clientpool): remove global variable from clientpool in favour for local variable projectdiscovery/nuclei#7294
• @dahezhiquan made their first contribution in fix(installer): prevent unnecessary update checks projectdiscovery/nuclei#7337

Full Changelog: projectdiscovery/nuclei@v3.7.1...v3.8.0

[github-actions]

📊 Performance Benchmark Report

Comparing dev (baseline) vs update-nuclei (current)

📈 Detailed Results (All Benchmarks)

📋 Complete results for all benchmarks - includes both significant and insignificant changes

🧪 Test Name	📏 Base	📏 Current	📈 Change	🎯 Status
Bloom Filter Dns Mutation Tracking Performance	3.95ms	3.95ms	-0.0% ⚪	✅
Bloom Filter Large Scale Dns Brute Force	17.52ms	17.99ms	+2.7% ⚪	✅
Large Closest Match Lookup	326.97ms	319.94ms	-2.1% ⚪	✅
Realistic Closest Match Workload	175.37ms	173.03ms	-1.3% ⚪	✅
Event Memory Medium Scan	1782 B/event	1781 B/event	-0.0% ⚪	✅
Event Memory Large Scan	1768 B/event	1768 B/event	+0.0% ⚪	✅
Event Validation Full Scan Startup Small Batch	384.71ms	361.06ms	-6.1% ⚪	✅
Event Validation Full Scan Startup Large Batch	527.57ms	511.25ms	-3.1% ⚪	✅
Make Event Autodetection Small	26.12ms	25.92ms	-0.8% ⚪	✅
Make Event Autodetection Large	266.23ms	265.16ms	-0.4% ⚪	✅
Make Event Explicit Types	11.53ms	11.48ms	-0.4% ⚪	✅
Excavate Single Thread Small	3.585s	3.646s	+1.7% ⚪	✅
Excavate Single Thread Large	9.395s	9.558s	+1.7% ⚪	✅
Excavate Parallel Tasks Small	3.864s	3.788s	-2.0% ⚪	✅
Excavate Parallel Tasks Large	7.281s	7.149s	-1.8% ⚪	✅
Is Ip Performance	2.89ms	2.94ms	+1.7% ⚪	✅
Make Ip Type Performance	10.64ms	10.76ms	+1.1% ⚪	✅
Mixed Ip Operations	4.14ms	4.19ms	+1.3% ⚪	✅
Memory Use Web Crawl	40.4 MB	71.2 MB	+76.2% 🔴🔴🔴	⚠️
Memory Use Subdomain Enum	19.4 MB	19.4 MB	+0.1% ⚪	✅
Scan Throughput 100	8.110s	7.685s	-5.2% ⚪	✅
Scan Throughput 1000	38.262s	35.573s	-7.0% ⚪	✅
Typical Queue Shuffle	54.97µs	56.06µs	+2.0% ⚪	✅
Priority Queue Shuffle	597.88µs	620.36µs	+3.8% ⚪	✅

🎯 Performance Summary

! 1 regression ⚠️
  23 unchanged ✅

🔍 Significant Changes (>10%)

• Memory Use Web Crawl: 76.2% 🐌 more memory

---

🐍 Python Version 3.11.15

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 91%. Comparing base (c381d99) to head (2b69e37).
⚠️ Report is 6 commits behind head on dev.

Additional details and impacted files

@@          Coverage Diff          @@
##             dev   #3044   +/-   ##
=====================================
- Coverage     91%     91%   -0%     
=====================================
  Files        440     440           
  Lines      37685   37685           
=====================================
- Hits       34106   34100    -6     
- Misses      3579    3585    +6     

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.