Changes since 8.0.5:
- Fix EOL date for Rails 8.0 (yeaseul-kim)
- Fix command injection false positives (Jacob Evelyn)
- Add EOL dates for Rails 8.1 and Ruby 4.0
- Fix unused variable warning (@viralpraxis)
Rails 8.0 EOL Date
Changed from October 7, 2026 to November 7, 2026.
(changes)
Command Injection False Positives
Jacob fixed some false positives when command-excuting methods like spawn, popen2, capture2, etc. are used safely.
(changes)
EOL Dates for Rails 8.1 and Ruby 4.0
They have been added.
(changes)
Checksums
The SHA256 sums for this release are:
759cc69341115e6c2dcd47b6fd8649a0b9bd540e3585ac8a0a94e31c66fee386
brakeman-8.0.6.gem
f56697ed48543f58aa4d3d9d9a7929cab99f8ddb273479ab8f06877de077b240
brakeman-lib-8.0.6.gem
efb425199579777757ed32aade4e7b4663d1475f08c7b6f1f3d0b74ec2ec1205
brakeman-min-8.0.6.gem
Reporting Issues
Thank you to everyone who reported bugs and contributed to this release!
Please report any issues with this release. Take a look at this guide to reporting Brakeman problems.
Hang out on GitHub for questions and discussion.