feat: upstream rule sync (#8)

fix: bump example deps to resolve x/crypto, x/net, and fiber security…

… advisories (#7)

Resolves all Dependabot alerts detected in the example modules:

examples/gin, examples/echo (golang.org/x/crypto, golang.org/x/net):
- x/crypto v0.50.0 -> v0.54.0 (fixed in v0.52.0): clears the SSH advisory
  cluster GO-2026-5016..5023, 5033 — VerifiedPublicKeyCallback permission
  skip, client deadlock, agent constraint forwarding, unenforced @Revoked
  status, infinite loop on large channel writes, FIDO/U2F presence bypass,
  key-constraint enforcement, pathological RSA/DSA DoS, byte-arithmetic
  underflow panic, channel-reject memory leak, and cert-restriction bypass.
- x/net v0.53.0 -> v0.57.0 (fixed in v0.55.0/v0.56.0): clears the
  net/html parser DoS (GO-2026-5025..5029), duplicate-attribute XSS
  (GO-2026-5030), idna (GO-2026-5026), and dnsmessage (GO-2026-5942).
- Transitively bumps x/sys v0.43.0 -> v0.47.0 and x/text v0.36.0 -> v0.40.0,
  clearing GO-2026-5024 (x/sys) and GO-2026-5970 (x/text).

examples/fiber (github.com/gofiber/fiber/v2):
- fiber v2.52.13 -> v2.52.14: fixes X-Real-IP spoofing via Header.Add()
  in BalancerForward.
- x/sys v0.43.0 -> v0.47.0 for consistency (clears GO-2026-5024).

Verified with `go build ./...` (all three modules) and `govulncheck
-scan module`; the only remaining x/crypto entry is GO-2026-5932, an
informational "openpgp unmaintained" notice with no fix available.

Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

fix: bump quic-go to v0.59.1 in gin example to patch QPACK trailer me…

…mory exhaustion (GHSA-vvgj-x9jq-8cj9) (#6)

Resolves moderate-severity advisory GHSA-vvgj-x9jq-8cj9 (CVSS 5.3):
maliciously crafted QPACK-encoded HEADERS frames with many unique
trailer names or large values could trigger excessive memory allocation.
Affected: quic-go <= v0.59.0 (pulled in transitively via gin's http3).

Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

fix: bump fiber to v2.52.13 to patch XSS in AutoFormat (GHSA-qjv7-627…

…w-8qjv) (#5)

Co-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

fix: update example dependencies to resolve security vulnerabilities (#4

)

Update transitive deps across all example modules:
- golang.org/x/crypto v0.50.0 (fixes auth bypass, DoS, SSH issues)
- golang.org/x/net v0.53.0 (fixes XSS, proxy bypass)
- Fiber transitive deps (fasthttp v1.70.0)
- Prometheus client v1.23.2
- Add examples/prometheus/prometheus binary to .gitignore

fix: update example dependencies to resolve security vulnerabilities (#3

)

- Fiber v2.52.6 → v2.52.12 (UUID fallback, BodyParser crashes, route overflow)
- Gin: golang.org/x/crypto → v0.49.0, golang.org/x/net → v0.52.0 (auth bypass, DoS, XSS)
- Echo: golang.org/x/crypto → v0.49.0, golang.org/x/net → v0.52.0 (DoS, XSS, ssh issues)
- Chi v5.2.1 → v5.2.5 (Host Header Injection / open redirect)

Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

feat: add ParseRequestInto, OTEL attributes helper, and Prometheus ex…

…ample (#2)

- ParseRequestInto(*http.Request, *Result): zero-alloc variant of ParseRequest
- contrib/otel: OpenTelemetry span attribute helper (separate module)
- examples/prometheus: Prometheus metrics example using post-parse hooks
- Update README.md and CLAUDE.md with accurate rule counts and new features

feat: ship v1.0.0 — LICENSE, CI, auto-release, comprehensive README (#1)

* feat: ship v1.0.0 — LICENSE, CI, auto-release, comprehensive README

- Add MIT LICENSE
- Add GitHub Actions CI (test, vet, fuzz, benchmark on Go 1.22/1.23)
- Add auto-release workflow (semantic versioning from commit messages)
- Comprehensive README with full API docs, coverage tables, architecture,
  framework middleware examples, contributing guide

* docs: add CONTRIBUTING.md, SECURITY.md, fix LICENSE copyright

- CONTRIBUTING.md: development guide, rule addition guide, PR guidelines
- SECURITY.md: vulnerability reporting policy, scope, response timeline
- LICENSE: fix copyright holder to MOTIV8

* fix: add SentryUptimeBot to bot rules

* docs: document trie memory tradeoff (O(1) lookup, ~6MB per Parser)