Skip to content

Bump brakeman from 8.0.4 to 8.0.5 - #4

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/bundler/brakeman-8.0.5
Closed

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/bundler/brakeman-8.0.5

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 1, 2026

Copy link
Copy Markdown

Bumps brakeman from 8.0.4 to 8.0.5.

Release notes

Sourced from brakeman's releases.

8.0.5

Changelog

Sourced from brakeman's changelog.

8.0.5 - 2026-06-12

  • Add quote_schema_name to safe quote method list (Zsolt Kozaroczy)
  • Fix SQL injection false positive for compact_blank/compact on permitted params (Arpit Jain)
  • Fix inline render false positive for local named text (Arpit Jain)
  • Fix HAML crash on .raw calls (Federico Franco)
  • Fix Ruby version parsing - especially for non-CRuby versions (Chris Southerland Jr)
  • Fix TemplateAliasProcessor#template_name arity (viralpraxis)
  • Reduce false positives when using shell escaping
Commits
  • 104443e Bump to 8.0.5
  • 8e61e2a Update CHANGES
  • f014c15 Merge pull request #2028 from kiskoza/fix/quote_schema_name
  • 9227822 Merge pull request #2027 from arpitjain099/fix/brakeman-1915-render-partial-t...
  • 6788d28 Merge pull request #2025 from arpitjain099/fix/sql-fp-compact-blank
  • b7c3906 Add quote_schema_name to safe quote method list
  • f95c500 test: update line number for still-warns SQL injection case after fixture shift
  • 4fba779 base_processor: skip hash render-type extraction when type set positionally
  • 1e63a41 Fix SQL injection false positive for compact_blank/compact on permitted params
  • 7ff9e49 Merge pull request #2023 from FFederi/fix-haml-chained-raw-crash
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [brakeman](https://github.com/presidentbeef/brakeman) from 8.0.4 to 8.0.5.
- [Release notes](https://github.com/presidentbeef/brakeman/releases)
- [Changelog](https://github.com/presidentbeef/brakeman/blob/main/CHANGES.md)
- [Commits](presidentbeef/brakeman@v8.0.4...v8.0.5)

---
updated-dependencies:
- dependency-name: brakeman
  dependency-version: 8.0.5
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file ruby Pull requests that update ruby code labels Jul 1, 2026
@wagurano

Copy link
Copy Markdown
Contributor

#15에서 main 기준으로 함께 업데이트하므로 닫습니다.

@wagurano wagurano closed this Oct 10, 2026
@dependabot @github

dependabot Bot commented on behalf of github Oct 10, 2026

Copy link
Copy Markdown
Author

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

@dependabot
dependabot Bot deleted the dependabot/bundler/brakeman-8.0.5 branch October 10, 2026 15:00
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file ruby Pull requests that update ruby code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant