chore(roles/apache_httpd): bump crs to 4.26.0

Author: danyalberchtoldlf

CHANGELOG.md

@@ -24,6 +24,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ### Changed
 
+* **role:apache_httpd**: bump Core Rule Set to 4.26.0
 * **role:apache_httpd**: Update the two reverse-proxy snippets in `EXAMPLES.md` to use `ProxyPass` instead of `RewriteRule ^/(.*) ... [proxy,last]`. The RewriteRule variant `%`-decodes the URI pattern and forwards characters such as `?` unencoded to the backend, which breaks WebDAV apps (file-not-found on rename in Nextcloud). The examples now also carry a comment explaining the choice and link to the corresponding [blog post](https://www.linuxfabrik.ch/blog/nextcloud-rewriterules-vs-proxypass).
 
 ### Added

roles/apache_httpd/README.md

@@ -774,7 +774,7 @@ apache_httpd__mod_log_config_custom_log: 'logs/access.log combined'
 
 * The OWASP ModSecurity Core Rule Set (CRS) version number without "v".
 * Type: String.
-* Default: `'4.24.1'`
+* Default: `'4.26.0'`
 
 `apache_httpd__skip_mod_security_coreruleset`
 

roles/apache_httpd/defaults/main.yml

@@ -231,7 +231,7 @@ apache_httpd__mpm_worker_threads_per_child: 25
 # get details from https://coreruleset.org/installation/
 # origin: https://github.com/coreruleset/coreruleset/releases
 apache_httpd__mod_security_coreruleset_url: 'https://github.com/coreruleset/coreruleset/archive'
-apache_httpd__mod_security_coreruleset_version: '4.24.1'
+apache_httpd__mod_security_coreruleset_version: '4.26.0'
 
 # mod_ssl
 apache_httpd__mod_ssl_ssl_use_stapling: 'on'