From 681246f46c57a5e4a1966555df3275b6bcc875ad Mon Sep 17 00:00:00 2001 From: Jason Frey Date: Thu, 8 Oct 2026 10:25:00 -0400 Subject: [PATCH] Update brakeman ignore warning for Rails 8.0.5.1 --- config/brakeman.ignore | 40 ++++++++++++++++++++-------------------- 1 file changed, 20 insertions(+), 20 deletions(-) diff --git a/config/brakeman.ignore b/config/brakeman.ignore index 2b1a16be72a..d19234b5a0f 100644 --- a/config/brakeman.ignore +++ b/config/brakeman.ignore @@ -23,25 +23,6 @@ ], "note": "The usage of Marshal.load in MiqCompare code is safe because the compare object is safely designed to be Marshal loaded. Only the helper methods are used to add/remove sections and ids." }, - { - "warning_type": "Unmaintained Dependency", - "warning_code": 122, - "fingerprint": "21ab0fe00fdd5899ffc405cff75aadb91b805ee996a614f7e27b08a287e9062d", - "check_name": "EOLRails", - "message": "Support for Rails 8.0.5.1 ends on 2026-11-07", - "file": "Gemfile.lock", - "line": 1167, - "link": "https://brakemanscanner.org/docs/warning_types/unmaintained_dependency/", - "code": null, - "render_path": null, - "location": null, - "user_input": null, - "confidence": "Weak", - "cwe_id": [ - 1104 - ], - "note": "This is still a supported version for now. We are working on Rails 8.1 for the next release." - }, { "warning_type": "Dangerous Eval", "warning_code": 13, @@ -89,6 +70,25 @@ ], "note": "This usage of Marshal.load is safe because the incoming data_array is only ever called with XML payloads built by the internal scanning tools and not user input." }, + { + "warning_type": "Unmaintained Dependency", + "warning_code": 122, + "fingerprint": "98b26f60d776fd41ee6f088c833725145be9aac2d7c5b33780241c273622db42", + "check_name": "EOLRails", + "message": "Support for Rails 8.0.5.1 ends on 2026-11-07", + "file": "Gemfile.lock", + "line": 1969, + "link": "https://brakemanscanner.org/docs/warning_types/unmaintained_dependency/", + "code": null, + "render_path": null, + "location": null, + "user_input": null, + "confidence": "Medium", + "cwe_id": [ + 1104 + ], + "note": "This is still a supported version for now. We are working on Rails 8.1 for the next release." + }, { "warning_type": "Command Injection", "warning_code": 14, @@ -182,5 +182,5 @@ "note": "This method is safe because it verifies that the version is in the form #.#." } ], - "brakeman_version": "8.0.6" + "brakeman_version": "8.1.0" }