brakeman 7.0.0 → 7.0.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 0ed78bfa3355b4eb1c645ca0a97f71062335cc685a7372bd0b9d443862cfcc9a
-  data.tar.gz: d7fc4e62c433b96f78bb85cae1f1beab0fd7a9f18d6c4876bcb089bb5361eb1e
+  metadata.gz: 59a4a6bc4c67064c25aefe01a509ebcc75cb1c57cf90e6cf038694aae4a7a675
+  data.tar.gz: 4c2577f63bec4b0ac4d1be8bc37f95b9ab05a8d01323e154c2a41699daf7155a
 SHA512:
-  metadata.gz: 83ef69806ae9b921367cf2cd94b91ea361049ad08daed08c99e44debd6e331c2084fe51bd75573074e5677ce7227b0e59a5cb750d0692358df584be12a9ab3d8
-  data.tar.gz: d57d3ade3e1f10fb0a1a0cc23fb2ed68001cbd0e05d3e5035b3ef854d63825ecae66d030201600abfc02ecfe5051859374720a67949e642ba97c127880d8f93b
+  metadata.gz: 7c5426b6f3bb93bf6fbb3997fc9f7bb1687544f518d8b89fa20d1c80d6a85145c415dcd8bb8576abacc49a9e3544c28c00cdf8ab0765bb6f9b22eaf8dd2b27b7
+  data.tar.gz: 2e8a4985d5bae9fcf606a77ea189001f29212095b08f7037cec875148984a5b0cb864530d4417847479a804ebbd2ec15f56bcd364aae3f82a0c5c027367691dd

data/CHANGES.md

@@ -1,3 +1,12 @@
+# 7.0.1 - 2025-04-03
+
+* Avoid warning on evaluation of plain strings
+* Enable use of custom/alternative Gemfiles
+* Fix error on directory with `rb` extension (viralpraxis)
+* Support `terminal-table` 4.0 (Chedli Bourguiba)
+* Better support Prism 1.4.0
+* Only output timing for each file when using `--debug`
+
 # 7.0.0 - 2024-12-30
 
 * Always warn about deserializing from Marshal

data/README.md

@@ -63,7 +63,7 @@ Outside of Rails root (note that the output file is relative to path/to/rails/ap
 
 # Compatibility
 
-Brakeman should work with any version of Rails from 2.3.x to 7.x.
+Brakeman should work with any version of Rails from 2.3.x to 8.x.
 
 Brakeman can analyze code written with Ruby 2.0 syntax and newer, but requires at least Ruby 3.0.0 to run.
 

data/bundle/load.rb

@@ -1,16 +1,17 @@
 path = File.expand_path('../..', __FILE__)
-$:.unshift "#{path}/bundle/ruby/3.1.0/gems/csv-3.3.2/lib"
+$:.unshift "#{path}/bundle/ruby/3.1.0/gems/csv-3.3.3/lib"
 $:.unshift "#{path}/bundle/ruby/3.1.0/gems/erubis-2.7.0/lib"
 $:.unshift "#{path}/bundle/ruby/3.1.0/gems/haml-5.2.2/lib"
-$:.unshift "#{path}/bundle/ruby/3.1.0/gems/highline-3.1.1/lib"
+$:.unshift "#{path}/bundle/ruby/3.1.0/gems/highline-3.1.2/lib"
 $:.unshift "#{path}/bundle/ruby/3.1.0/gems/parallel-1.26.3/lib"
 $:.unshift "#{path}/bundle/ruby/3.1.0/gems/reline-0.6.0/lib"
-$:.unshift "#{path}/bundle/ruby/3.1.0/gems/rexml-3.4.0/lib"
-$:.unshift "#{path}/bundle/ruby/3.1.0/gems/ruby2ruby-2.5.1/lib"
+$:.unshift "#{path}/bundle/ruby/3.1.0/gems/rexml-3.4.1/lib"
+$:.unshift "#{path}/bundle/ruby/3.1.0/gems/ruby2ruby-2.5.2/lib"
 $:.unshift "#{path}/bundle/ruby/3.1.0/gems/ruby_parser-3.20.3/lib"
 $:.unshift "#{path}/bundle/ruby/3.1.0/gems/sexp_processor-4.17.3/lib"
 $:.unshift "#{path}/bundle/ruby/3.1.0/gems/slim-5.2.1/lib"
 $:.unshift "#{path}/bundle/ruby/3.1.0/gems/temple-0.10.3/lib"
-$:.unshift "#{path}/bundle/ruby/3.1.0/gems/terminal-table-3.0.2/lib"
-$:.unshift "#{path}/bundle/ruby/3.1.0/gems/tilt-2.5.0/lib"
-$:.unshift "#{path}/bundle/ruby/3.1.0/gems/unicode-display_width-2.6.0/lib"
+$:.unshift "#{path}/bundle/ruby/3.1.0/gems/terminal-table-4.0.0/lib"
+$:.unshift "#{path}/bundle/ruby/3.1.0/gems/tilt-2.6.0/lib"
+$:.unshift "#{path}/bundle/ruby/3.1.0/gems/unicode-display_width-3.1.4/lib"
+$:.unshift "#{path}/bundle/ruby/3.1.0/gems/unicode-emoji-4.0.4/lib"

data/bundle/ruby/3.1.0/gems/{csv-3.3.2 → csv-3.3.3}/NEWS.md

@@ -1,5 +1,30 @@
 # News
 
+## 3.3.3 - 2025-03-20
+
+### Improvements
+
+  * `csv-filter`: Add an experimental command line tool to filter a CSV.
+    * Patch by Burdette Lamar
+
+### Fixes
+
+  * Fixed wrong EOF detection for `ARGF`
+    * GH-328
+    * Reported by Takeshi Nishimatsu
+
+  * Fixed a regression bug that `CSV.open` rejects integer mode.
+    * GH-336
+    * Reported by Dave Burgess
+
+### Thanks
+
+  * Takeshi Nishimatsu
+
+  * Burdette Lamar
+
+  * Dave Burgess
+
 ## 3.3.2 - 2024-12-21
 
 ### Fixes

data/bundle/ruby/3.1.0/gems/{csv-3.3.2 → csv-3.3.3}/lib/csv/parser.rb

@@ -18,6 +18,19 @@ class CSV
     # into your Encoding.
     #
 
+    class << self
+      ARGF_OBJECT_ID = ARGF.object_id
+      # Convenient method to check whether the give input reached EOF
+      # or not.
+      def eof?(input)
+        # We can't use input != ARGF in Ractor. Because ARGF isn't a
+        # shareable object.
+        input.object_id != ARGF_OBJECT_ID and
+          input.respond_to?(:eof) and
+          input.eof?
+      end
+    end
+
     # Raised when encoding is invalid.
     class InvalidEncoding < StandardError
     end
@@ -312,7 +325,7 @@ class CSV
             raise InvalidEncoding unless chunk.valid_encoding?
             # trace(__method__, :chunk, chunk)
             @scanner = StringScanner.new(chunk)
-            if input.respond_to?(:eof?) and input.eof?
+            if Parser.eof?(input)
               @inputs.shift
               @last_scanner = @inputs.empty?
             end
@@ -869,10 +882,7 @@ class CSV
         string = nil
         if @samples.empty? and @input.is_a?(StringIO)
           string = @input.read
-        elsif @samples.size == 1 and
-              @input != ARGF and
-              @input.respond_to?(:eof?) and
-              @input.eof?
+        elsif @samples.size == 1 and Parser.eof?(@input)
           string = @samples[0]
         end
         if string

data/bundle/ruby/3.1.0/gems/{csv-3.3.2 → csv-3.3.3}/lib/csv/version.rb

@@ -2,5 +2,5 @@
 
 class CSV
   # The version of the installed library.
-  VERSION = "3.3.2"
+  VERSION = "3.3.3"
 end

data/bundle/ruby/3.1.0/gems/{csv-3.3.2 → csv-3.3.3}/lib/csv.rb

@@ -1976,7 +1976,7 @@ class CSV
       return unless Encoding.default_external == Encoding::UTF_8
       return if options.key?(:encoding)
       return if options.key?(:external_encoding)
-      return if mode.include?(":")
+      return if mode.is_a?(String) and mode.include?(":")
       file_opts[:encoding] = "bom|utf-8"
     end
 

data/bundle/ruby/3.1.0/gems/{highline-3.1.1 → highline-3.1.2}/Changelog.md

@@ -2,6 +2,10 @@
 
 Below is a complete listing of changes for each revision of HighLine.
 
+### 3.1.2 / 2025-01-05
+* PR #279 - Upgrades and adjustments for Ruby 3.4 release (@abinoam)
+* PR #278 - Prevent ArgumentError for #col_count_calculate when items exceed 80 chars (@davidjkling, @justintsteele)
+
 ### 3.1.1 / 2024-08-18
 * PR #276 - Update #say to always flush the output after a #puts (@blipper)
 * PR #274 / I #273 (@costa)

data/bundle/ruby/3.1.0/gems/{highline-3.1.1 → highline-3.1.2}/Gemfile

@@ -17,4 +17,5 @@ group :code_quality do
   # gem "pronto-poper", require: false, platform: :ruby
   gem "pronto-reek", require: false, platform: :ruby
   gem "pronto-rubocop", require: false, platform: :ruby
+  gem "base64", require: false
 end

data/bundle/ruby/3.1.0/gems/{highline-3.1.1 → highline-3.1.2}/lib/highline/list_renderer.rb

@@ -236,8 +236,8 @@ class HighLine
     end
 
     def col_count_calculate
-      (line_size_limit + row_join_str_size) /
-        (items_max_length + row_join_str_size)
+      result = (line_size_limit + row_join_str_size) / (items_max_length + row_join_str_size)
+      result == 0 ? 1 : result
     end
 
     def col_count

data/bundle/ruby/3.1.0/gems/{highline-3.1.1 → highline-3.1.2}/lib/highline/menu.rb

@@ -374,12 +374,14 @@ class HighLine
     end
 
     def map_items_by_index
-      if [:letter, :capital_letter].include?(@index)
-        # @ and ` are the previous ASCII characters to A and a respectively
-        prev_char = (@index == :capital_letter ? '@' : '`')
-        all_items.map { prev_char.succ!.dup }
+      size = all_items.size
+      case @index
+      when :letter
+        ("a".."z").first(size)
+      when :capital_letter
+        ("A".."Z").first(size)
       else
-        (1..all_items.size).map(&:to_s)
+        (1..size).map(&:to_s)
       end
     end
 

data/bundle/ruby/3.1.0/gems/{highline-3.1.1 → highline-3.1.2}/lib/highline/version.rb

@@ -2,5 +2,5 @@
 
 class HighLine
   # The version of the installed library.
-  VERSION = "3.1.1".freeze
+  VERSION = "3.1.2".freeze
 end

data/bundle/ruby/3.1.0/gems/{highline-3.1.1 → highline-3.1.2}/lib/highline.rb

@@ -555,21 +555,26 @@ class HighLine
     terminal.raw_no_echo_mode_exec do
       loop do
         character = terminal.get_character
-        raise Interrupt if character == "\u0003"
-        break unless character
-        break if ["\n", "\r"].include? character
-
-        # honor backspace and delete
-        if character == "\b" || character == "\u007F"
-          chopped = line.chop!
-          output_erase_char if chopped && question.echo
-        elsif character == "\cU"
+
+        case character
+        when "\u0003" # Ctrl+C (Interrupt)
+          raise Interrupt
+        when nil # No character received
+          break
+        when "\n", "\r" # Newline or carriage return
+          break
+        when "\b", "\u007F" # Backspace and delete
+          unless line.empty?
+            line = line.chop
+            output_erase_char if question.echo
+          end
+        when "\cU" # Clear line
           line.size.times { output_erase_char } if question.echo
           line = ""
-        elsif character == "\e"
+        when "\e" # Escape key
           ignore_arrow_key
-        else
-          line << character
+        else # Any other character
+          line += character
           say_last_char_or_echo_char(line, question)
         end
 

data/bundle/ruby/3.1.0/gems/{rexml-3.4.0 → rexml-3.4.1}/NEWS.md

@@ -1,5 +1,29 @@
 # News
 
+## 3.4.1 - 2025-02-16 {#version-3-4-1}
+
+### Improvement
+
+  * Improved performance.
+    * GH-226
+    * GH-227
+    * GH-237
+    * Patch by NAITOH Jun
+
+### Fixes
+
+  * Fix serialization of ATTLIST is incorrect
+    * GH-233
+    * GH-234
+    * Patch by OlofKalufs
+    * Reported by OlofKalufs
+
+### Thanks
+
+  * NAITOH Jun
+
+  * OlofKalufs
+
 ## 3.4.0 - 2024-12-15 {#version-3-4-0}
 
 ### Improvement

data/bundle/ruby/3.1.0/gems/{rexml-3.4.0 → rexml-3.4.1}/lib/rexml/parsers/baseparser.rb

@@ -297,10 +297,11 @@ module REXML
                 raise REXML::ParseException.new(message, @source)
               end
               name = parse_name(base_error_message)
-              if @source.match?(/\s*\[/um, true)
+              @source.match?(/\s*/um, true) # skip spaces
+              if @source.match?("[", true)
                 id = [nil, nil, nil]
                 @document_status = :in_doctype
-              elsif @source.match?(/\s*>/um, true)
+              elsif @source.match?(">", true)
                 id = [nil, nil, nil]
                 @document_status = :after_doctype
                 @source.ensure_buffer
@@ -312,9 +313,10 @@ module REXML
                   # For backward compatibility
                   id[1], id[2] = id[2], nil
                 end
-                if @source.match?(/\s*\[/um, true)
+                @source.match?(/\s*/um, true) # skip spaces
+                if @source.match?("[", true)
                   @document_status = :in_doctype
-                elsif @source.match?(/\s*>/um, true)
+                elsif @source.match?(">", true)
                   @document_status = :after_doctype
                   @source.ensure_buffer
                 else
@@ -378,7 +380,7 @@ module REXML
               md = @source.match(Private::ATTLISTDECL_END, true)
               raise REXML::ParseException.new( "Bad ATTLIST declaration!", @source ) if md.nil?
               element = md[1]
-              contents = md[0]
+              contents = "<!ATTLIST" + md[0]
 
               pairs = {}
               values = md[0].strip.scan( ATTDEF_RE )
@@ -409,7 +411,8 @@ module REXML
               id = parse_id(base_error_message,
                             accept_external_id: true,
                             accept_public_id: true)
-              unless @source.match?(/\s*>/um, true)
+              @source.match?(/\s*/um, true) # skip spaces
+              unless @source.match?(">", true)
                 message = "#{base_error_message}: garbage before end >"
                 raise REXML::ParseException.new(message, @source)
               end
@@ -766,6 +769,25 @@ module REXML
         [:processing_instruction, name, content]
       end
 
+      if StringScanner::Version < "3.1.1"
+        def scan_quote
+          @source.match(/(['"])/, true)&.[](1)
+        end
+      else
+        def scan_quote
+          case @source.peek_byte
+          when 34 # '"'.ord
+            @source.scan_byte
+            '"'
+          when 39 # "'".ord
+            @source.scan_byte
+            "'"
+          else
+            nil
+          end
+        end
+      end
+
       def parse_attributes(prefixes)
         attributes = {}
         expanded_names = {}
@@ -785,11 +807,10 @@ module REXML
               message = "Missing attribute equal: <#{name}>"
               raise REXML::ParseException.new(message, @source)
             end
-            unless match = @source.match(/(['"])/, true)
+            unless quote = scan_quote
               message = "Missing attribute value start quote: <#{name}>"
               raise REXML::ParseException.new(message, @source)
             end
-            quote = match[1]
             start_position = @source.position
             value = @source.read_until(quote)
             unless value.chomp!(quote)

data/bundle/ruby/3.1.0/gems/{rexml-3.4.0 → rexml-3.4.1}/lib/rexml/rexml.rb

@@ -31,7 +31,7 @@
 module REXML
   COPYRIGHT = "Copyright © 2001-2008 Sean Russell <ser@germane-software.com>"
   DATE = "2008/019"
-  VERSION = "3.4.0"
+  VERSION = "3.4.1"
   REVISION = ""
 
   Copyright = COPYRIGHT

data/bundle/ruby/3.1.0/gems/{rexml-3.4.0 → rexml-3.4.1}/lib/rexml/source.rb

@@ -68,8 +68,14 @@ module REXML
       SCANNER_RESET_SIZE = 100000
       PRE_DEFINED_TERM_PATTERNS = {}
       pre_defined_terms = ["'", '"', "<"]
-      pre_defined_terms.each do |term|
-        PRE_DEFINED_TERM_PATTERNS[term] = /#{Regexp.escape(term)}/
+      if StringScanner::Version < "3.1.1"
+        pre_defined_terms.each do |term|
+          PRE_DEFINED_TERM_PATTERNS[term] = /#{Regexp.escape(term)}/
+        end
+      else
+        pre_defined_terms.each do |term|
+          PRE_DEFINED_TERM_PATTERNS[term] = term
+        end
       end
     end
     private_constant :Private
@@ -152,6 +158,14 @@ module REXML
       @scanner.pos = pos
     end
 
+    def peek_byte
+      @scanner.peek_byte
+    end
+
+    def scan_byte
+      @scanner.scan_byte
+    end
+
     # @return true if the Source is exhausted
     def empty?
       @scanner.eos?

data/bundle/ruby/3.1.0/gems/{ruby2ruby-2.5.1 → ruby2ruby-2.5.2}/History.rdoc

@@ -1,3 +1,9 @@
+=== 2.5.2 / 2025-03-25
+
+* 1 bug fix:
+
+  * Added support for 3 slot op_asgn (eg `a &= 1`)
+
 === 2.5.1 / 2024-07-08
 
 * 1 bug fix:

data/bundle/ruby/3.1.0/gems/{ruby2ruby-2.5.1 → ruby2ruby-2.5.2}/lib/ruby2ruby.rb

@@ -31,7 +31,7 @@ end
 # Generate ruby code from a sexp.
 
 class Ruby2Ruby < SexpProcessor
-  VERSION = "2.5.1" # :nodoc:
+  VERSION = "2.5.2" # :nodoc:
 
   # cutoff for one-liners
   LINE_LENGTH = 78
@@ -916,11 +916,14 @@ class Ruby2Ruby < SexpProcessor
   end
 
   def process_op_asgn exp # :nodoc:
-    # [[:lvar, :x], [:call, nil, :z, [:lit, 1]], :y, :"||"]
-
     case exp.length
     when 4
-      raise "NOT YET: op_asgn 4"
+      _, lhs, op, rhs = exp
+
+      lhs = process lhs
+      rhs = process rhs
+
+      "#{lhs} #{op}= #{rhs}"
     when 5
       _, lhs, rhs, index, op = exp
 

data/bundle/ruby/3.1.0/gems/{terminal-table-3.0.2 → terminal-table-4.0.0}/History.rdoc

@@ -1,3 +1,10 @@
+4.0.0 / 2025-01-28
+==================
+
+- Non-unicode characters are no longer supported. They will be replaced.
+- Headings may be set to nil.
+- unicode-display-width version 3 supported.
+
 3.0.2 / 2021-09-19
 ==================
 

data/bundle/ruby/3.1.0/gems/{terminal-table-3.0.2 → terminal-table-4.0.0}/lib/terminal-table/cell.rb

@@ -48,7 +48,7 @@ module Terminal
         val.public_send(positions[position], length)
       end
       def lines
-        @value.to_s.split(/\n/)
+        @value.to_s.encode("utf-8", invalid: :replace).split(/\n/)
       end
 
       ##

data/bundle/ruby/3.1.0/gems/{terminal-table-3.0.2 → terminal-table-4.0.0}/lib/terminal-table/table.rb

@@ -109,6 +109,8 @@ module Terminal
     # Set the headings
 
     def headings= arrays
+      return if arrays.nil?
+  
       arrays = [arrays] unless arrays.first.is_a?(Array)
       @headings = arrays.map do |array|
         row = Row.new(self, array)

data/bundle/ruby/3.1.0/gems/{terminal-table-3.0.2 → terminal-table-4.0.0}/lib/terminal-table/version.rb

@@ -1,5 +1,5 @@
 module Terminal
   class Table
-    VERSION = '3.0.2'
+    VERSION = '4.0.0'
   end
 end

data/bundle/ruby/3.1.0/gems/{terminal-table-3.0.2 → terminal-table-4.0.0}/terminal-table.gemspec

@@ -19,8 +19,7 @@ Gem::Specification.new do |spec|
   spec.add_development_dependency "bundler", "~> 2"
   spec.add_development_dependency "rake", "~> 13.0"
   spec.add_development_dependency "rspec", ">= 3.0"
-  spec.add_development_dependency "term-ansicolor"
   spec.add_development_dependency "pry"
 
-  spec.add_runtime_dependency "unicode-display_width", [">= 1.1.1", "< 3"]
+  spec.add_runtime_dependency "unicode-display_width", [">= 1.1.1", "< 4"]
 end