docs(blog): replace "dunder" in the 4.30.0 release post

[fzipi]

Replaces the Python slang "dunder access" in the 934200 entry of the CRS 4.30.0 / 4.25.2 LTS release post with a description that matches what the rule checks.

Per coreruleset/coreruleset#4774, the new Velocity and FreeMarker alternatives reuse the exec-indicators define (?:[\(\*]|__). A directive matches only when it contains an opening parenthesis (a function or method call), a *, or a double underscore. The sentence now reads:

…directive syntax when it contains a function or method call, a multiplication, or a double underscore (as in __class__).

🤖 Generated with Claude Code

Summary by CodeRabbit

• Documentation
  • Clarified that rule 934200 detects Velocity and FreeMarker when a function or method call, multiplication, or double underscore is present.

[coderabbitai]

Navigate logical layers of code changes, visualize relationships, and explore their blast radius.

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

• Configuration used: Central YAML (base), Organization UI (inherited)
• Review profile: CHILL
• Plan: Advanced
• Run ID: 223f836d-081d-46e9-b5fb-ad64580a08c5

📥 Commits

Reviewing files that changed from the base of the PR and between bcb340c and 6a1625e.

📒 Files selected for processing (1)

• content/blog/2026-10-02-crs-versions-4-30-0-4-25-2-lts-released.md

🔗 Linked repositories identified

CodeRabbit considers these linked repositories for cross-repo context during reviews:

• coreruleset/coreruleset (manual)
• coreruleset/go-ftw (manual)
• coreruleset/crs-toolchain (manual)
• coreruleset/crs-linter (manual)
• coreruleset/documentation (manual)

Included review availability: This review used your included allowance. Your plan provides up to 1 included review per hour; 0 remain after this review.

---

📝 Walkthrough

Walkthrough

The release announcement now specifies function or method calls, multiplication, or double underscores as detection conditions for rule 934200.

Changes

Release Note Update

Layer / File(s)	Summary
Clarify detection conditions content/blog/2026-10-02-crs-versions-4-30-0-4-25-2-lts-released.md	The rule 934200 description now names function or method calls, multiplication, and double underscores.

Priority: ⬇️ Low

Estimated code review effort: 1 (Trivial) | ~3 minutes

Change: Other

Suggested labels: release:ignore, :book: documentation

Merge Risk: ⚪ Minimal · up to 6a162

This documentation-only change has no established wording defect. The available rule source aligns with the revised description, though it could not be confirmed as the exact 4.30.0 release source.

Architecture Summary

Architecture risk: 🔵 Low · up to 6a162

The change affects 1 system.

Changed systems: content

Architecture concerns
No architecture-level concerns identified.

Review details

Systems and components

• observed — content (service) was modified; 1 changed file maps to changed impact.

Before / after behavior

• observed — Modified behavior in content/blog/2026-10-02-crs-versions-4-30-0-4-25-2-lts-released.md: The rule 934200 description now specifies function or method calls, multiplication, or double underscores as detection conditions, replacing the less specific “a call, arithmetic or dunder access.”

🚥 Pre-merge checks | ✅ 17 | ❌ 1

❌ Failed checks (1 warning)

Check name	Status	Explanation	Resolution
Ai Contribution Disclosure	⚠️ Warning	⚠️ WARNING: The PR body omits the required lowercase ## what, ## why, and ## refs sections, and both the body and commit contain AI-tool attribution (Generated with Claude Code and `Co-Authore…	Add the required ## what, ## why, and ## refs sections. Remove the AI-tool signature from the PR body and the Co-Authored-By trailer from the commit message. Because the PR indicates AI assistance, add a concrete ## ai disclosure …

✅ Passed checks (17 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title accurately describes the release-post wording change, which replaces the term “dunder” with explicit wording about double underscores.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0…
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Regex Assembly Is The Source Of Truth	✅ Passed	Not applicable. The diff changes only a blog post; it does not modify an @rx pattern in rules/*.conf or any file under regex-assembly/. The documentation patch is the only changed file.
Rule Change Requires Go-Ftw Test Coverage	✅ Passed	Not applicable. The PR changes only a release-post Markdown file. It does not add or modify a SecRule in rules/.conf or plugins/.conf, and it does not change a pattern under regex-assembly/.
Redos Risk & Re2 Compatibility	✅ Passed	Not applicable. The PR changes only the release-post Markdown file. It does not add or modify a regex in rules/*.conf, regex-assembly/*.ra, or the specified tooling code.
False Positive Risk & Existing Coverage	✅ Passed	Not applicable. The diff changes only a blog post and adds or widens no detection pattern or rule in rules/*.conf, plugins/*.conf, or regex-assembly/.
Crs Rule Metadata & Id Conventions	✅ Passed	Not applicable. The PR changes only the release-post Markdown file. The diff does not add or modify a SecRule in rules/*.conf, plugins/*.conf, or crs-setup.conf.example.
Rule & Config Breaking Changes	✅ Passed	The PR changes only one sentence in the release post. It does not change a rule ID, configuration default, tag, message, paranoia level, data file, or tooling API. The change clarifies the existing de…
Owasp Security (Web, Api & Llm)	✅ Passed	PASS — The pull request changes one sentence in a release-post Markdown file. It clarifies the documented triggers for rule 934200 and does not change application code, configuration, dependencies, or…
Unpinned Dependencies & Actions	✅ Passed	Passed. Reason: not applicable. The diff changes only a Markdown blog post, not a dependency manifest, lockfile, Dockerfile, workflow, or pipeline file.
Secrets, Payloads & Pii In Logs	✅ Passed	The PR changes one release-post sentence about rule 934200. The sentence contains only descriptive detection wording and the example __class__; it does not emit a log, error, stack trace, or telemet…
New Dependency Scrutiny	✅ Passed	PASS: The review-scoped diff changes only one sentence in a blog post. It adds no dependency entry, GitHub Action step, or Buildkite plugin reference, so the check's trigger condition is not met.
Install & Build-Time Code Execution	✅ Passed	The PR changes only one sentence in a Markdown release post. The diff adds no installer, build hook, CI command, Docker fetch, Go checksum setting, package lifecycle script, Python install command, or…
Renovate: Config Present And Valid	✅ Passed	The pull request changes only the release-post Markdown file. It does not touch any of the four Renovate config paths, and renovate.json exists at the reviewed PR head. The custom check is not trigg…

Full details: Ai Contribution Disclosure

Explanation

⚠️ WARNING: The PR body omits the required lowercase ## what, ## why, and ## refs sections, and both the body and commit contain AI-tool attribution (Generated with Claude Code and Co-Authored-By: Claude Opus 5.5). The diff changes one release-post sentence. The trivial-PR exception may cover a missing disclosure alone, but it does not exempt the missing required sections or attribution lines.

Resolution

Add the required ## what, ## why, and ## refs sections. Remove the AI-tool signature from the PR body and the Co-Authored-By trailer from the commit message. Because the PR indicates AI assistance, add a concrete ## ai disclosure section with the tool and model/version, the specific work assisted, and the verification performed.

• Fix all pre-merge checks with AI

• Autopilot · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[cloudflare-workers-and-pages]

Deploying website with    Cloudflare Pages

Latest commit:	6a1625e
Status:	✅  Deploy successful!
Preview URL:	https://826efbfe.website-1u6.pages.dev
Branch Preview URL:	https://blog-clarify-934200-wording.website-1u6.pages.dev

View logs