brakeman 8.0.6 → 8.1.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: e45a11303dbd8c6902dba215a487cdca4252af7a9f7c02a7d31e9ca571809747
-  data.tar.gz: 6fc0d4a0ab89636e77bcee75e90d8de1ed473b231f0d9a6e7a7bf37cb988c905
+  metadata.gz: 15d841de15b6a648bd7a4f08b60230bf4e98cc2f77a61e3cca4d58c7d69275b9
+  data.tar.gz: cbab6e67070a71581763c70a451604b7824c1b948b093469d3f3575a27912491
 SHA512:
-  metadata.gz: a7c2b6622fccee070a679d47918f3a907b7b4fed0937b74bcb4276bd5bf2abe87e47934e16b10e9c0c8e847c558c7ec924871b867655b3aac58d6c793bc0d2fe
-  data.tar.gz: 03c2dc430960aa0dc0c5958acd7fefe0732596b86f5133ac21e509399f2ba3e370a2a3f5b407a3d69caac7ac7875298029e6831ee0ef4ce51d22fc95ea5f26ec
+  metadata.gz: 47772fa402aba70bc0834dba22f4e0106c287ea7c8d1955a09755dd0cbad19666831d67ee37dc6f7e2d9ba2dc02ba4e9d2df414f582ad99cf035042a72a271c9
+  data.tar.gz: 6686d39f9447296accc062be96f5886314c2e969972c0f2872af3e30b3843855fcd85c1882a0cbbda8bbc0179dbe601164ec652f66f88c7b1bf7e832de01dbb9

data/CHANGES.md

@@ -1,3 +1,15 @@
+# 8.1.0 - 2026-09-30
+
+* Better help and error message for `--ensure-latest`
+* Fix frozen string error (Shai Coleman)
+* Update Sonar report format (fangxing)
+* Fix frozen `src` string error
+* Recognize `Haml::AttributeBuilder.build_class` as an escaped output (Yuriy Tumanov)
+* Include regex code in validation warnings (Eliot Sykes)
+* Check validation regexes in non-activerecord models (Eliot Sykes)
+* Skip top-level vendor directory before recursive globbing (Conor O'Donnell)
+* Support Rails 7.1+ positional enum syntax in SQL injection check (Michael Vogl/Yuriy Tumanov)
+
 # 8.0.6 - 2026-08-13
 
 * Fix EOL date for Rails 8.0 (yeaseul-kim)

data/bundle/load.rb

@@ -1,17 +1,17 @@
 path = File.expand_path('../..', __FILE__)
-$:.unshift "#{path}/bundle/ruby/3.2.0/gems/csv-3.3.6/lib"
-$:.unshift "#{path}/bundle/ruby/3.2.0/gems/erubi-1.13.1/lib"
-$:.unshift "#{path}/bundle/ruby/3.2.0/gems/haml-6.4.0/lib"
-$:.unshift "#{path}/bundle/ruby/3.2.0/gems/highline-3.1.2/lib"
-$:.unshift "#{path}/bundle/ruby/3.2.0/gems/parallel-1.28.0/lib"
-$:.unshift "#{path}/bundle/ruby/3.2.0/gems/reline-0.7.0/lib"
-$:.unshift "#{path}/bundle/ruby/3.2.0/gems/rexml-3.4.4/lib"
-$:.unshift "#{path}/bundle/ruby/3.2.0/gems/ruby2ruby-2.5.2/lib"
-$:.unshift "#{path}/bundle/ruby/3.2.0/gems/ruby_parser-3.22.0/lib"
-$:.unshift "#{path}/bundle/ruby/3.2.0/gems/sexp_processor-4.17.5/lib"
-$:.unshift "#{path}/bundle/ruby/3.2.0/gems/slim-5.2.2/lib"
-$:.unshift "#{path}/bundle/ruby/3.2.0/gems/temple-0.10.6/lib"
-$:.unshift "#{path}/bundle/ruby/3.2.0/gems/terminal-table-4.0.0/lib"
-$:.unshift "#{path}/bundle/ruby/3.2.0/gems/tilt-2.8.0/lib"
-$:.unshift "#{path}/bundle/ruby/3.2.0/gems/unicode-display_width-3.2.0/lib"
-$:.unshift "#{path}/bundle/ruby/3.2.0/gems/unicode-emoji-4.2.0/lib"
+$:.unshift "#{path}/bundle/ruby/3.3.0/gems/csv-3.3.6/lib"
+$:.unshift "#{path}/bundle/ruby/3.3.0/gems/erubi-1.13.1/lib"
+$:.unshift "#{path}/bundle/ruby/3.3.0/gems/haml-6.4.0/lib"
+$:.unshift "#{path}/bundle/ruby/3.3.0/gems/highline-3.1.2/lib"
+$:.unshift "#{path}/bundle/ruby/3.3.0/gems/parallel-1.28.0/lib"
+$:.unshift "#{path}/bundle/ruby/3.3.0/gems/reline-0.7.0/lib"
+$:.unshift "#{path}/bundle/ruby/3.3.0/gems/rexml-3.4.4/lib"
+$:.unshift "#{path}/bundle/ruby/3.3.0/gems/ruby2ruby-2.5.2/lib"
+$:.unshift "#{path}/bundle/ruby/3.3.0/gems/ruby_parser-3.22.0/lib"
+$:.unshift "#{path}/bundle/ruby/3.3.0/gems/sexp_processor-4.17.6/lib"
+$:.unshift "#{path}/bundle/ruby/3.3.0/gems/slim-5.2.2/lib"
+$:.unshift "#{path}/bundle/ruby/3.3.0/gems/temple-0.10.7/lib"
+$:.unshift "#{path}/bundle/ruby/3.3.0/gems/terminal-table-4.0.0/lib"
+$:.unshift "#{path}/bundle/ruby/3.3.0/gems/tilt-2.9.0/lib"
+$:.unshift "#{path}/bundle/ruby/3.3.0/gems/unicode-display_width-3.3.0/lib"
+$:.unshift "#{path}/bundle/ruby/3.3.0/gems/unicode-emoji-4.3.0/lib"

data/bundle/ruby/{3.2.0/gems/sexp_processor-4.17.5 → 3.3.0/gems/sexp_processor-4.17.6}/History.rdoc

@@ -1,3 +1,10 @@
+=== 4.17.6 / 2026-09-20
+
+* 2 bug fixes:
+
+  * Improved coverage to 100% for some modules. More to go. Fixed some minor problems.
+  * Minor cleanup in SexpProcessor.
+
 === 4.17.5 / 2025-12-24
 
 * 1 minor enhancement:

data/bundle/ruby/{3.2.0/gems/sexp_processor-4.17.5 → 3.3.0/gems/sexp_processor-4.17.6}/lib/sexp_processor.rb

@@ -34,7 +34,7 @@ require "sexp"
 class SexpProcessor
 
   # duh
-  VERSION = "4.17.5"
+  VERSION = "4.17.6"
 
   ##
   # Automatically shifts off the Sexp type before handing the
@@ -218,7 +218,7 @@ class SexpProcessor
     return nil if exp.nil?
 
     unless Sexp === exp then
-      raise SexpTypeError, "exp must be a Sexp, was #{exp.class}:#{exp.inspect}"
+      raise SexpTypeError, "exp must be a Sexp, was %s:%p" % [exp.class, exp]
     end
 
     if self.context.empty? then
@@ -296,7 +296,7 @@ class SexpProcessor
             end
             # result << sub_result
             result = result.class.new(*result, sub_result) # HACK
-          end
+          end # until empty
 
           # NOTE: this is costly, but we are in the generic processor
           # so we shouldn't hit it too much with RubyToC stuff at least.
@@ -325,8 +325,8 @@ class SexpProcessor
   rescue StandardError => err
     return @exceptions[type].call self, exp, err if @exceptions.key? type
 
-    warn "#{err.class} Exception thrown while processing #{type} for sexp #{exp.inspect} #{caller.inspect}" if
-      $DEBUG
+    warn "%s Exception thrown while processing %s for sexp %p %p" % \
+      [err.class, type, exp, caller] if $DEBUG
 
     raise
   end

data/bundle/ruby/{3.2.0/gems/temple-0.10.6 → 3.3.0/gems/temple-0.10.7}/CHANGES

@@ -1,3 +1,7 @@
+0.10.7
+
+  * Replace `=~` with `.match?` where possible (#160)
+
 0.10.6
 
   * Make StaticAnalyzer recognize shorthand syntax as dynamic (#149)

data/bundle/ruby/{3.2.0/gems/temple-0.10.6 → 3.3.0/gems/temple-0.10.7}/lib/temple/filters/code_merger.rb

@@ -10,7 +10,7 @@ module Temple
         exps.each do |exp|
           if exp.first == :code
             if code
-              code << '; ' unless code =~ /\n\Z/
+              code << '; ' unless /\n\Z/.match?(code)
               code << exp.last
             else
               code = exp.last.dup

data/bundle/ruby/{3.2.0/gems/temple-0.10.6 → 3.3.0/gems/temple-0.10.7}/lib/temple/filters/remove_bom.rb

@@ -6,7 +6,7 @@ module Temple
     # @api public
     class RemoveBOM < Parser
       def call(s)
-        return s if s.encoding.name !~ /^UTF-(8|16|32)(BE|LE)?/
+        return s unless /^UTF-(8|16|32)(BE|LE)?/.match?(s.encoding.name)
         s.gsub(Regexp.new("\\A\uFEFF".encode(s.encoding.name)), ''.freeze)
       end
     end

data/bundle/ruby/{3.2.0/gems/temple-0.10.6 → 3.3.0/gems/temple-0.10.7}/lib/temple/html/pretty.rb

@@ -26,7 +26,7 @@ module Temple
 
       def on_static(content)
         return [:static, content] unless @pretty
-        unless @pre_tags && @pre_tags =~ content
+        unless @pre_tags && @pre_tags.match?(content)
           content = content.sub(/\A\s*\n?/, "\n".freeze) if @indent_next
           content = content.gsub("\n".freeze, indent)
         end

data/bundle/ruby/{3.2.0/gems/temple-0.10.6 → 3.3.0/gems/temple-0.10.7}/lib/temple/utils.rb

@@ -77,7 +77,7 @@ module Temple
     def indent_dynamic(text, indent_next, indent, pre_tags = nil)
       text = text.to_s
       safe = text.respond_to?(:html_safe?) && text.html_safe?
-      return text if pre_tags && text =~ pre_tags
+      return text if pre_tags && pre_tags.match?(text)
 
       level = text.scan(/^\s*/).map(&:size).min
       text = text.gsub(/(?!\A)^\s{#{level}}/, '') if level > 0

data/bundle/ruby/{3.2.0/gems/temple-0.10.6 → 3.3.0/gems/temple-0.10.7}/lib/temple/version.rb

@@ -1,4 +1,4 @@
 # frozen_string_literal: true
 module Temple
-  VERSION = '0.10.6'
+  VERSION = '0.10.7'
 end

data/bundle/ruby/3.3.0/gems/tilt-2.9.0/lib/tilt/herb.rb

@@ -0,0 +1,110 @@
+# frozen_string_literal: true
+
+# = Herb (<tt>herb</tt>, <tt>html.erb</tt>)
+#
+# {Herb}[https://herb-tools.dev] is an HTML-aware ERB implementation, which parses the
+# HTML in the template in addition to the embedded Ruby.
+#
+# Herb's engine is API compatible with the Erubi engine, so all the documentation of
+# {Erubi}[rdoc-ref:lib/tilt/erubi.rb] applies in addition to the following:
+#
+# === Differences from Erubi
+#
+# Herb parses the HTML in the template, and raises <tt>Herb::Engine::CompilationError</tt>
+# when creating the template if the HTML is invalid (such as unclosed or mismatched tags),
+# or if the embedded Ruby has invalid syntax. Erubi inspects neither the HTML nor the Ruby;
+# with Erubi, invalid Ruby syntax instead raises a SyntaxError when Tilt compiles the
+# template, which by default does not happen until the template is first rendered.
+#
+# Herb escapes interpolated values based on where they appear in the document, using a
+# separate escape function for attribute values, <tt><script></tt> content, and
+# <tt><style></tt> content. Erubi uses a single escape function everywhere.
+#
+# Herb accepts additional engine options. As with the Erubi engine options, these are
+# passed through to the engine class. See
+# {Herb::Engine}[https://herb-tools.dev/projects/engine] for the full list.
+#
+# === Usage
+#
+# The <tt>Tilt::HerbTemplate</tt> class is registered for all files ending in <tt>.herb</tt> or
+# <tt>.html.erb</tt> by default. Unlike {Erubi}[rdoc-ref:lib/tilt/erubi.rb], it is not
+# registered for <tt>.erb</tt> or <tt>.rhtml</tt>, since that would change which engine is
+# used for existing templates. To use Herb for those as well, use:
+#
+#     Tilt.register Tilt::HerbTemplate, 'erb', 'rhtml'
+#
+# __NOTE:__ It's suggested that your program <tt>require 'herb'</tt> at load time when
+# using this template engine within a threaded environment.
+#
+# === Options
+#
+# ==== <tt>:engine_class => Herb::Engine</tt>
+#
+# Allows you to specify a custom engine class to use instead of the
+# default which is <tt>Herb::Engine</tt>.
+#
+# ==== Other
+#
+# Other options are passed to the constructor of the engine class.
+#
+# === See also
+#
+# * {Herb Home}[https://herb-tools.dev]
+# * {Herb::Engine}[https://herb-tools.dev/projects/engine]
+# * {Herb Source}[https://github.com/marcoroth/herb]
+#
+# === Related module
+#
+# * Tilt::HerbTemplate
+
+require_relative 'template'
+require 'herb'
+require 'herb/engine'
+
+module Tilt
+  class HerbTemplate < Template
+    def prepare
+      @options[:preamble] = false
+      @options[:postamble] = false
+      @options[:ensure] = true
+
+      # Unlike Erubi, Herb uses the filename when reporting errors, so pass
+      # the file Tilt loaded the template from if the caller did not set one.
+      @options[:filename] ||= file
+
+      engine_class = @options[:engine_class] || Herb::Engine
+
+      # If :freeze option is given, the intent is to setup frozen string
+      # literals in the template.  So enable frozen string literals in the
+      # code Tilt generates if the :freeze option is given.
+      if @freeze_string_literals = !!@options[:freeze]
+        # Passing the :freeze option to Herb sets the
+        # frozen-string-literal magic comment, which doesn't have an effect
+        # with Tilt as Tilt wraps the resulting code.  Worse, the magic
+        # comment appearing not at the top of the file can cause a warning.
+        # So remove the :freeze option before passing to Herb.
+        @options.delete(:freeze)
+
+        # Herb by default appends .freeze to template literals, but that is
+        # not necessary and slows down code when Tilt is using frozen string
+        # literals, so pass the :freeze_template_literals option to not
+        # append .freeze.
+        @options[:freeze_template_literals] = false
+      end
+
+      @engine = engine_class.new(@data, @options)
+      @outvar = @engine.bufvar
+      @src = @engine.src
+
+      @engine
+    end
+
+    def precompiled_template(locals)
+      @src
+    end
+
+    def freeze_string_literals?
+      @freeze_string_literals
+    end
+  end
+end

data/bundle/ruby/{3.2.0/gems/tilt-2.8.0 → 3.3.0/gems/tilt-2.9.0}/lib/tilt.rb

@@ -5,7 +5,7 @@ require_relative 'tilt/template'
 # Namespace for Tilt. This module is not intended to be included anywhere.
 module Tilt
   # Current version.
-  VERSION = '2.8.0'
+  VERSION = '2.9.0'
 
   EMPTY_ARRAY = [].freeze
   private_constant :EMPTY_ARRAY
@@ -146,8 +146,9 @@ module Tilt
   # Template Implementations ================================================
 
   # ERB
-  register_lazy :ERBTemplate,    'tilt/erb',    'erb', 'rhtml'
-  register_lazy :ErubiTemplate,  'tilt/erubi',  'erb', 'rhtml', 'erubi'
+  register_lazy :ERBTemplate,    'tilt/erb',    'erb', 'rhtml', 'html.erb'
+  register_lazy :ErubiTemplate,  'tilt/erubi',  'erb', 'rhtml', 'erubi', 'html.erb'
+  register_lazy :HerbTemplate,   'tilt/herb',   'herb', 'html.erb'
 
   # Markdown
   register_lazy :KramdownTemplate,     'tilt/kramdown',     'markdown', 'mkd', 'md'

data/bundle/ruby/{3.2.0/gems/unicode-display_width-3.2.0 → 3.3.0/gems/unicode-display_width-3.3.0}/CHANGELOG.md

@@ -1,5 +1,11 @@
 # CHANGELOG
 
+## 3.3.0
+
+- Unicode 18.0
+- Fix bug that emoji handling could not be deactivated when using config object
+- Fix edge case to not modify string when failing parsing binary input as UTF-8
+
 ## 3.2.0
 
 - Unicode 17.0

data/bundle/ruby/{3.2.0/gems/unicode-display_width-3.2.0 → 3.3.0/gems/unicode-display_width-3.3.0}/MIT-LICENSE.txt

@@ -1,6 +1,6 @@
 The MIT LICENSE
 
-Copyright (c) 2011, 2015-2024 Jan Lelis
+Copyright (c) 2011, 2015-2026 Jan Lelis
 
 Permission is hereby granted, free of charge, to any person obtaining
 a copy of this software and associated documentation files (the

data/bundle/ruby/{3.2.0/gems/unicode-display_width-3.2.0 → 3.3.0/gems/unicode-display_width-3.3.0}/README.md

@@ -2,7 +2,7 @@
 
 Determines the monospace display width of a string in Ruby, which is useful for all kinds of terminal-based applications. The implementation is based on [EastAsianWidth.txt](https://www.unicode.org/Public/UNIDATA/EastAsianWidth.txt), the [Emoji specfication](https://www.unicode.org/reports/tr51/) and other data, 100% in Ruby. It does not rely on the OS vendor ([wcwidth](https://github.com/janlelis/wcswidth-ruby)) to provide an up-to-date method for measuring string width in terminals.
 
-Unicode version: **17.0.0** (September 2025)
+Unicode version: **18.0.0** (September 2026)
 
 ## Gem Version 3 — Improved Emoji Support
 
@@ -188,7 +188,7 @@ See [unicode-x](https://github.com/janlelis/unicode-x) for more Unicode related
 
 ## Copyright & Info
 
-- Copyright (c) 2011, 2015-2025 Jan Lelis, https://janlelis.com, released under the MIT
+- Copyright (c) 2011, 2015-2026 Jan Lelis, https://janlelis.com, released under the MIT
 license
 - Early versions based on runpaint's unicode-data interface: Copyright (c) 2009 Run Paint Run Run
 - Unicode data: https://www.unicode.org/copyright.html#Exhibit1

data/bundle/ruby/{3.2.0/gems/unicode-display_width-3.2.0 → 3.3.0/gems/unicode-display_width-3.3.0}/lib/unicode/display_width/constants.rb

@@ -2,8 +2,8 @@
 
 module Unicode
   class DisplayWidth
-    VERSION = "3.2.0"
-    UNICODE_VERSION = "17.0.0"
+    VERSION = "3.3.0"
+    UNICODE_VERSION = "18.0.0"
     DATA_DIRECTORY = File.expand_path(File.dirname(__FILE__) + "/../../../data/")
     INDEX_FILENAME = DATA_DIRECTORY + "/display_width.marshal.gz"
   end

data/bundle/ruby/{3.2.0/gems/unicode-display_width-3.2.0 → 3.3.0/gems/unicode-display_width-3.3.0}/lib/unicode/display_width/emoji_support.rb

@@ -17,7 +17,7 @@ module Unicode
 
       def self._recommended
         if ENV["CI"]
-          return :rqi
+          return :rgi
         end
 
         case ENV["TERM_PROGRAM"]

data/bundle/ruby/{3.2.0/gems/unicode-display_width-3.2.0 → 3.3.0/gems/unicode-display_width-3.3.0}/lib/unicode/display_width.rb

@@ -51,9 +51,9 @@ module Unicode
     def self.of(string, ambiguous = nil, overwrite = nil, old_options = {}, **options)
       # Binary strings don't make much sense when calculating display width.
       # Assume it's valid UTF-8
-      if string.encoding == Encoding::BINARY && !string.force_encoding(Encoding::UTF_8).valid_encoding?
-        # Didn't work out, go back to binary
-        string.force_encoding(Encoding::BINARY)
+      if string.encoding == Encoding::BINARY
+        utf8_string = string.dup.force_encoding(Encoding::UTF_8)
+        string = utf8_string if utf8_string.valid_encoding?
       end
 
       string = string.encode(Encoding::UTF_8, invalid: :replace, undef: :replace) unless string.encoding == Encoding::UTF_8
@@ -236,7 +236,7 @@ module Unicode
       {
         ambiguous: kwargs[:ambiguous] || @ambiguous,
         overwrite: kwargs[:overwrite] || @overwrite,
-        emoji:     kwargs[:emoji]     || @emoji,
+        emoji:     kwargs.fetch(:emoji, @emoji),
       }
     end
 

data/bundle/ruby/{3.2.0/gems/unicode-emoji-4.2.0 → 3.3.0/gems/unicode-emoji-4.3.0}/CHANGELOG.md

@@ -1,5 +1,9 @@
 # CHANGELOG
 
+## 4.3.0
+
+- Unicode / Emoji 18.0
+
 ## 4.2.0
 
 - Allow Ruby 4.0

data/bundle/ruby/{3.2.0/gems/unicode-emoji-4.2.0 → 3.3.0/gems/unicode-emoji-4.3.0}/Gemfile.lock

@@ -1,18 +1,22 @@
 PATH
   remote: .
   specs:
-    unicode-emoji (4.2.0)
+    unicode-emoji (4.3.0)
 
 GEM
   remote: https://rubygems.org/
   specs:
+    drb (2.2.3)
     io-console (0.6.0)
     irb (1.8.1)
       rdoc
       reline (>= 0.3.8)
-    minitest (5.20.0)
+    minitest (6.0.6)
+      drb (~> 2.0)
+      prism (~> 1.5)
     mutex_m (0.3.0)
     ostruct (0.6.3)
+    prism (1.9.0)
     psych (5.1.0)
       stringio
     rake (13.0.6)
@@ -34,4 +38,4 @@ DEPENDENCIES
   unicode-emoji!
 
 BUNDLED WITH
-   2.5.21
+  4.1.0.beta1

data/bundle/ruby/{3.2.0/gems/unicode-emoji-4.2.0 → 3.3.0/gems/unicode-emoji-4.3.0}/MIT-LICENSE.txt

@@ -1,4 +1,4 @@
-Copyright (c) 2017-2024 Jan Lelis, https://janlelis.com
+Copyright (c) 2017-2026 Jan Lelis, https://janlelis.com
 
 Permission is hereby granted, free of charge, to any person obtaining
 a copy of this software and associated documentation files (the

data/bundle/ruby/{3.2.0/gems/unicode-emoji-4.2.0 → 3.3.0/gems/unicode-emoji-4.3.0}/README.md

@@ -8,9 +8,9 @@ Additional features:
 - A categorized list of Emoji (RGI: Recommended for General Interchange)
 - Retrieve Emoji properties info about specific codepoints (Emoji_Modifier, Emoji_Presentation, etc.)
 
-Emoji version: **17.0** (September 2025)
+Emoji version: **18.0** (September 2026)
 
-CLDR version (used for sub-region flags): **47** (March 2025)
+CLDR version (used for sub-region flags): **48** (October 2025)
 
 ## Gemfile
 
@@ -184,7 +184,7 @@ A list of all Emoji (generated from this gem) can be found at [character.constru
 
 ## Usage – Properties Data
 
-Allows you to access the codepoint data for a single character form Unicode's [emoji-data.txt](https://www.unicode.org/Public/16.0.0/ucd/emoji/emoji-data.txt) file:
+Allows you to access the codepoint data for a single character form Unicode's [emoji-data.txt](https://www.unicode.org/Public/18.0.0/ucd/emoji/emoji-data.txt) file:
 
 ```ruby
 require "unicode/emoji"
@@ -201,5 +201,5 @@ Unicode::Emoji.properties "☝" # => ["Emoji", "Emoji_Modifier_Base"]
 
 ## MIT
 
-- Copyright (C) 2017-2025 Jan Lelis <https://janlelis.com>. Released under the MIT license.
+- Copyright (C) 2017-2026 Jan Lelis <https://janlelis.com>. Released under the MIT license.
 - Unicode data: https://www.unicode.org/copyright.html#Exhibit1

data/bundle/ruby/{3.2.0/gems/unicode-emoji-4.2.0 → 3.3.0/gems/unicode-emoji-4.3.0}/lib/unicode/emoji/constants.rb

@@ -2,14 +2,14 @@
 
 module Unicode
   module Emoji
-    VERSION = "4.2.0"
-    EMOJI_VERSION = "17.0"
-    UNICODE_VERSION = "17.0.0"
+    VERSION = "4.3.0"
+    EMOJI_VERSION = "18.0"
+    UNICODE_VERSION = "18.0.0"
     CLDR_VERSION = "48"
     DATA_DIRECTORY = File.expand_path('../../../data', __dir__).freeze
     INDEX_FILENAME = (DATA_DIRECTORY + "/emoji.marshal.gz").freeze
 
-    # Unicode properties, see https://www.unicode.org/Public/16.0.0/ucd/emoji/emoji-data.txt
+    # Unicode properties, see https://www.unicode.org/Public/18.0.0/ucd/emoji/emoji-data.txt
     PROPERTY_NAMES = {
       E: "Emoji",
       B: "Emoji_Modifier_Base",