ci: use explicit and per job permissions (#3002)

ci: fix web rules failure (#3003)

lint: replace black/isort/flake8 with ruff (#2992)

feat: update vivisect to 1.3.2 (#3001)

Merge pull request #3000 from mandiant/dependabot/npm_and_yarn/web/explorer/vite-6.4.2

build(deps-dev): bump vite from 6.4.1 to 6.4.2 in /web/explorer

build(deps-dev): bump types-protobuf (#2994)

build(deps-dev): bump mypy from 1.19.1 to 1.20.0 (#2993)

build(deps-dev): bump lodash from 4.17.23 to 4.18.1 in /web/explorer (#2991)

build: bump linux standalone build to Python 3.13 (#2941)

Sync capa-testfiles submodule

Change capa-rules version in installation guide (#2965)

Merge pull request #2982 from mandiant/fix/workflow-zip-env

ci: fix ZIP_NAME environment variable in build workflow

Prepare release v9.4.0 (#2981)