diff --git a/config/brakeman.ignore b/config/brakeman.ignore index 2b1a16be72a..d19234b5a0f 100644 --- a/config/brakeman.ignore +++ b/config/brakeman.ignore @@ -23,25 +23,6 @@ ], "note": "The usage of Marshal.load in MiqCompare code is safe because the compare object is safely designed to be Marshal loaded. Only the helper methods are used to add/remove sections and ids." }, - { - "warning_type": "Unmaintained Dependency", - "warning_code": 122, - "fingerprint": "21ab0fe00fdd5899ffc405cff75aadb91b805ee996a614f7e27b08a287e9062d", - "check_name": "EOLRails", - "message": "Support for Rails 8.0.5.1 ends on 2026-11-07", - "file": "Gemfile.lock", - "line": 1167, - "link": "https://brakemanscanner.org/docs/warning_types/unmaintained_dependency/", - "code": null, - "render_path": null, - "location": null, - "user_input": null, - "confidence": "Weak", - "cwe_id": [ - 1104 - ], - "note": "This is still a supported version for now. We are working on Rails 8.1 for the next release." - }, { "warning_type": "Dangerous Eval", "warning_code": 13, @@ -89,6 +70,25 @@ ], "note": "This usage of Marshal.load is safe because the incoming data_array is only ever called with XML payloads built by the internal scanning tools and not user input." }, + { + "warning_type": "Unmaintained Dependency", + "warning_code": 122, + "fingerprint": "98b26f60d776fd41ee6f088c833725145be9aac2d7c5b33780241c273622db42", + "check_name": "EOLRails", + "message": "Support for Rails 8.0.5.1 ends on 2026-11-07", + "file": "Gemfile.lock", + "line": 1969, + "link": "https://brakemanscanner.org/docs/warning_types/unmaintained_dependency/", + "code": null, + "render_path": null, + "location": null, + "user_input": null, + "confidence": "Medium", + "cwe_id": [ + 1104 + ], + "note": "This is still a supported version for now. We are working on Rails 8.1 for the next release." + }, { "warning_type": "Command Injection", "warning_code": 14, @@ -182,5 +182,5 @@ "note": "This method is safe because it verifies that the version is in the form #.#." } ], - "brakeman_version": "8.0.6" + "brakeman_version": "8.1.0" }