Skip to content

Upgrading brakeman 5 to 6

Breaking5.4.1 → 6.2.2Security1Platform1New17Changed8Fixed15Other5

Full comparisonBack to brakeman
BreakingUpgrade verdict

A platform requirement change and a security fix.

In plain terms
  • Drop support for Ruby 1.8/1.9 syntax.
  • Warn about missing CSRF protection when defaults are not loaded (Chris Kruger).
Must act 2 items need code or config changes

Ruby requirement changed in 6.0.0: >= 2.5.0 → >= 3.0.0.

What you must change

Security1
Warn about missing CSRF protection when defaults are not loaded (Chris Kruger).
6.0.0GitHub ReleaseOriginalView source
Platform1
Drop support for Ruby 1.8/1.9 syntax.
6.0.0GitHub ReleaseOriginalView source

API changes

Generated by DepDelta from published Ruby source. Not mixed with prose notes.

  • added: method Sexp.method_missing()
  • added: method hash()
  • changed: constructor FileParser(_, _, _ = …) → constructor FileParser(_, _, _ = …, _ = …)
  • added: class CheckRansack < Brakeman::BaseCheck
  • added: method CheckRansack.check_ransack_calls()
  • added: method CheckRansack.ransackable_allow_list?(_)
  • added: method CheckRansack.run_check()
  • added: method ErubisPatch.convert(_)
  • added: method ModuleHelper.make_defs(_)
  • added: method ModuleHelper.process_sclass(_)
  • added: method Scanner.process_step(_)
  • added: method Scanner.process_step_file(_)
  • added: module ErubisPatch
  • added: method Text.generate_show_ignored_overview()
  • added: method TiltEngine.on_slim_embedded()
  • added: protected method SassEngine.tilt_render()