[mostafa]

Bump the workspace and all inter-crate version pins from 0.22.0 to 0.23.0, sync the workspace, fuzz, and wasm-smoke lockfiles, bump OCSF golden metadata.product.version pins and the rstix README install examples, and finalize the CHANGELOG by promoting the [Unreleased] section to [0.23.0] with a TL;DR summary, a compare link, and a release reference link.

Once merged, publishing the v0.23.0 GitHub Release triggers the crates.io, binary, and Docker workflows. This release ships the fixes for GHSA-8x2w-m5v2-phxr and GHSA-4q23-jm32-fhr9, which are already public on main.

TL;DR

RSigma v0.23.0 is the "threat intel in the loop" release: rsigma can now pull STIX 2.1 threat intel from TAXII servers or bundle files into a local store and enrich live detections from it, fieldref gains string comparisons with pySigma-compatible |neq, and two MCP server vulnerabilities are fixed.

• Security: the MCP server now confines every path argument to --rules-dir (GHSA-8x2w-m5v2-phxr) and evaluate_events refuses command and http enrichers (GHSA-4q23-jm32-fhr9). Upgrade if you run rsigma mcp serve.
• Threat intel: taxii sync (feat(rsigma): add taxii sync CLI for local FsStore ingest #508) and taxii store (feat(rsigma): STIX store enrichment and taxii store import #509) import into a local store with validate-on-ingest (feat(rstix): validate-on-ingest for TAXII pages #499), the stix enricher and engine daemon --stix-store enrich detections from it (feat(rsigma): STIX store enrichment and taxii store import #509), and paginated ingest is tested at ATT&CK scale (feat(rstix): ATT&CK-scale paginated TAXII ingest proof #507) (thanks to @SecurityEnthusiast).
• Detection correctness: fieldref with contains, startswith, and endswith, and |neq now negates the whole detection item as pySigma does (Support fieldref combined with contains, startswith, and endswith #506, thanks to @Karib0u).
• Agents: an installable agent skill for the CLI and MCP loop (Add an rsigma agent skill #501).
• Breaking: build_enrichers_full takes EnricherResources (feat(rsigma): STIX store enrichment and taxii store import #509), rstix ingest_collection returns IngestReport (feat(rstix): validate-on-ingest for TAXII pages #499), the HIR cache schema is 2 (Support fieldref combined with contains, startswith, and endswith #506), and MCP evaluate_events only accepts template enrichers.
• Dependencies: rustls 0.23.45 for RUSTSEC-2026-0285 (fix(deps): rustls 0.23.45 and cargo-deny ignore cleanup #498, thanks to @SecurityEnthusiast) and Dependabot batches across Rust, CI, the VS Code extension, and docs (chore(deps): batch dependency updates (mid Sep 2026) #491, chore(deps): batch dependency updates (late Sep 2026) #512).

Test plan

• cargo fmt --all -- --check
• cargo clippy --workspace --all-targets --all-features -- -D warnings
• RUSTDOCFLAGS='-D warnings' cargo doc --workspace --all-features --locked --no-deps
• cargo metadata --locked for the workspace, fuzz/, and ci/wasm-smoke/
• cargo test -p rsigma-runtime --test ocsf_golden --locked
• npm run docs:build and npm run docs:validate