brakeman 6.2.2 → 7.0.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: cf4fe6bd864ca4c38eeafab29e0e92c025dca7054dbe9caf887029fad46b8a37
-  data.tar.gz: ef08764d443287b902752facc0658f79c6d977cd2351820f5ef1953e578992ff
+  metadata.gz: 0ed78bfa3355b4eb1c645ca0a97f71062335cc685a7372bd0b9d443862cfcc9a
+  data.tar.gz: d7fc4e62c433b96f78bb85cae1f1beab0fd7a9f18d6c4876bcb089bb5361eb1e
 SHA512:
-  metadata.gz: 3dfce43134e8995513b9e5bc97459d8a2cc26ee50ceddcb500fbdffb9597eedbed6fd2e01bccbdeb14df81f6973604d01ef84e3ab02e556394498e01a09e0b8e
-  data.tar.gz: 4cccdf4a2d959dfefb7bfb7bf39a53599fb3cc425672e52a83417170cb618dbfae17c89e09676680c907cc8e1fd912cafa82025184af506a1c51fe183c3c9f72
+  metadata.gz: 83ef69806ae9b921367cf2cd94b91ea361049ad08daed08c99e44debd6e331c2084fe51bd75573074e5677ce7227b0e59a5cb750d0692358df584be12a9ab3d8
+  data.tar.gz: d57d3ade3e1f10fb0a1a0cc23fb2ed68001cbd0e05d3e5035b3ef854d63825ecae66d030201600abfc02ecfe5051859374720a67949e642ba97c127880d8f93b

data/CHANGES.md

@@ -1,3 +1,20 @@
+# 7.0.0 - 2024-12-30
+
+* Always warn about deserializing from Marshal
+* Output `originalBaseUriIds` for SARIF format report
+* Default to using Prism parser if available (disable with `--no-prism`)
+* Update `terminal-table` version to use latest
+* Update `eval` check to be a little noisier
+* Fix array/hash unknown index handling
+* Disable following symbolic links by default, re-enable with --follow-symlinks
+* Add step (and timing) for finding files
+* Add CSV library as explicit dependency for Ruby 3.4 support
+* Major changes to how rescanning works
+* Raise minimum Ruby version to 3.1
+* Fix hardcoded globally excluded paths
+* Remove updated entry in Brakeman ignore files (Toby Hsieh)
+* Fix recursion when handling multiple assignment expressions
+
 # 6.2.2 - 2024-10-15
 
 * Ignore more native gems when building gem

data/bundle/load.rb

@@ -1,15 +1,16 @@
 path = File.expand_path('../..', __FILE__)
+$:.unshift "#{path}/bundle/ruby/3.1.0/gems/csv-3.3.2/lib"
 $:.unshift "#{path}/bundle/ruby/3.1.0/gems/erubis-2.7.0/lib"
 $:.unshift "#{path}/bundle/ruby/3.1.0/gems/haml-5.2.2/lib"
 $:.unshift "#{path}/bundle/ruby/3.1.0/gems/highline-3.1.1/lib"
 $:.unshift "#{path}/bundle/ruby/3.1.0/gems/parallel-1.26.3/lib"
-$:.unshift "#{path}/bundle/ruby/3.1.0/gems/reline-0.5.10/lib"
-$:.unshift "#{path}/bundle/ruby/3.1.0/gems/rexml-3.3.8/lib"
+$:.unshift "#{path}/bundle/ruby/3.1.0/gems/reline-0.6.0/lib"
+$:.unshift "#{path}/bundle/ruby/3.1.0/gems/rexml-3.4.0/lib"
 $:.unshift "#{path}/bundle/ruby/3.1.0/gems/ruby2ruby-2.5.1/lib"
 $:.unshift "#{path}/bundle/ruby/3.1.0/gems/ruby_parser-3.20.3/lib"
-$:.unshift "#{path}/bundle/ruby/3.1.0/gems/sexp_processor-4.17.2/lib"
+$:.unshift "#{path}/bundle/ruby/3.1.0/gems/sexp_processor-4.17.3/lib"
 $:.unshift "#{path}/bundle/ruby/3.1.0/gems/slim-5.2.1/lib"
 $:.unshift "#{path}/bundle/ruby/3.1.0/gems/temple-0.10.3/lib"
-$:.unshift "#{path}/bundle/ruby/3.1.0/gems/terminal-table-1.8.0/lib"
-$:.unshift "#{path}/bundle/ruby/3.1.0/gems/tilt-2.4.0/lib"
-$:.unshift "#{path}/bundle/ruby/3.1.0/gems/unicode-display_width-1.8.0/lib"
+$:.unshift "#{path}/bundle/ruby/3.1.0/gems/terminal-table-3.0.2/lib"
+$:.unshift "#{path}/bundle/ruby/3.1.0/gems/tilt-2.5.0/lib"
+$:.unshift "#{path}/bundle/ruby/3.1.0/gems/unicode-display_width-2.6.0/lib"

data/bundle/ruby/3.1.0/gems/csv-3.3.2/LICENSE.txt

@@ -0,0 +1,33 @@
+Copyright (C) 2005-2016 James Edward Gray II. All rights reserved.
+Copyright (C) 2007-2017 Yukihiro Matsumoto. All rights reserved.
+Copyright (C) 2017 SHIBATA Hiroshi. All rights reserved.
+Copyright (C) 2017 Olivier Lacan. All rights reserved.
+Copyright (C) 2017 Espartaco Palma. All rights reserved.
+Copyright (C) 2017 Marcus Stollsteimer. All rights reserved.
+Copyright (C) 2017 pavel. All rights reserved.
+Copyright (C) 2017-2018 Steven Daniels. All rights reserved.
+Copyright (C) 2018 Tomohiro Ogoke. All rights reserved.
+Copyright (C) 2018 Kouhei Sutou. All rights reserved.
+Copyright (C) 2018 Mitsutaka Mimura. All rights reserved.
+Copyright (C) 2018 Vladislav. All rights reserved.
+
+Redistribution and use in source and binary forms, with or without
+modification, are permitted provided that the following conditions
+are met:
+1. Redistributions of source code must retain the above copyright
+notice, this list of conditions and the following disclaimer.
+2. Redistributions in binary form must reproduce the above copyright
+notice, this list of conditions and the following disclaimer in the
+documentation and/or other materials provided with the distribution.
+
+THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND
+ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
+IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
+ARE DISCLAIMED.  IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
+FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
+DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
+OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
+HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
+LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
+OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
+SUCH DAMAGE.