From 8cfcb08bd1b5cd25822b6e2023f70c746001fd75 Mon Sep 17 00:00:00 2001 From: "dependabot-preview[bot]" <27856297+dependabot-preview[bot]@users.noreply.github.com> Date: Tue, 6 Aug 2019 14:48:28 -0400 Subject: [PATCH] Bump brakeman from 4.5.1 to 4.6.1 (#3626) [ci skip] Bumps [brakeman](https://github.com/presidentbeef/brakeman) from 4.5.1 to 4.6.1. - [Release notes](https://github.com/presidentbeef/brakeman/releases) - [Changelog](https://github.com/presidentbeef/brakeman/blob/master/CHANGES.md) - [Commits](https://github.com/presidentbeef/brakeman/compare/v4.5.1...v4.6.1) Signed-off-by: dependabot-preview[bot] --- Gemfile | 2 +- Gemfile.lock | 4 ++-- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/Gemfile b/Gemfile index dbb029340..5082ec403 100644 --- a/Gemfile +++ b/Gemfile @@ -99,7 +99,7 @@ gem "webpush", "~> 0.3" # Encryption Utilities for Web Push payload group :development do gem "better_errors", "~> 2.5" # Provides a better error page for Rails and other Rack apps gem "binding_of_caller", "~> 0.8" # Retrieve the binding of a method's caller - gem "brakeman", "~> 4.5", require: false # Brakeman detects security vulnerabilities in Ruby on Rails applications via static analysis + gem "brakeman", "~> 4.6", require: false # Brakeman detects security vulnerabilities in Ruby on Rails applications via static analysis gem "bundler-audit", "~> 0.6" # bundler-audit provides patch-level verification for Bundled apps gem "derailed_benchmarks", "~> 1.3", require: false # A series of things you can use to benchmark a Rails or Ruby app gem "erb_lint", "~> 0.0", require: false # ERB Linter tool diff --git a/Gemfile.lock b/Gemfile.lock index ee557a56a..fb8768108 100644 --- a/Gemfile.lock +++ b/Gemfile.lock @@ -151,7 +151,7 @@ GEM debug_inspector (>= 0.0.1) bootsnap (1.4.4) msgpack (~> 1.0) - brakeman (4.5.1) + brakeman (4.6.1) buffer (0.1.3) addressable environs @@ -851,7 +851,7 @@ DEPENDENCIES better_errors (~> 2.5) binding_of_caller (~> 0.8) bootsnap (>= 1.1.0) - brakeman (~> 4.5) + brakeman (~> 4.6) buffer (~> 0.1) bullet (~> 6.0) bundler-audit (~> 0.6)