0ead67f85b
Bump the development-dependencies group across 1 directory with 3 updates ( #2546 )
...
* Bump the development-dependencies group across 1 directory with 3 updates
Bumps the development-dependencies group with 3 updates in the / directory: [brakeman](https://github.com/presidentbeef/brakeman ), [faker](https://github.com/faker-ruby/faker ) and [selenium-webdriver](https://github.com/SeleniumHQ/selenium ).
Updates `brakeman` from 7.1.2 to 8.0.1
- [Release notes](https://github.com/presidentbeef/brakeman/releases )
- [Changelog](https://github.com/presidentbeef/brakeman/blob/main/CHANGES.md )
- [Commits](https://github.com/presidentbeef/brakeman/compare/v7.1.2...v8.0.1 )
Updates `faker` from 3.5.3 to 3.6.0
- [Release notes](https://github.com/faker-ruby/faker/releases )
- [Changelog](https://github.com/faker-ruby/faker/blob/main/CHANGELOG.md )
- [Commits](https://github.com/faker-ruby/faker/compare/v3.5.3...v3.6.0 )
Updates `selenium-webdriver` from 4.39.0 to 4.40.0
- [Release notes](https://github.com/SeleniumHQ/selenium/releases )
- [Changelog](https://github.com/SeleniumHQ/selenium/blob/trunk/rb/CHANGES )
- [Commits](https://github.com/SeleniumHQ/selenium/compare/selenium-4.39.0...selenium-4.40.0 )
---
updated-dependencies:
- dependency-name: brakeman
dependency-version: 8.0.1
dependency-type: direct:development
update-type: version-update:semver-major
dependency-group: development-dependencies
- dependency-name: faker
dependency-version: 3.6.0
dependency-type: direct:development
update-type: version-update:semver-minor
dependency-group: development-dependencies
- dependency-name: selenium-webdriver
dependency-version: 4.40.0
dependency-type: direct:development
update-type: version-update:semver-minor
dependency-group: development-dependencies
...
Signed-off-by: dependabot[bot] <support@github.com >
* Auto-sync Gemfile.saas.lock on Dependabot PRs
Dependabot can't update custom-named Gemfiles, so Gemfile.saas.lock
drifts whenever it bumps shared gems in Gemfile.lock.
Add `bin/bundle-drift forward` to push oss lockfile changes into the
saas lockfile (the reverse of `correct`), and a GitHub Actions workflow
that runs it automatically on Dependabot bundler branches.
* Update brakeman ignore fingerprint for 8.0.1
Brakeman 8.0.1 changed how it computes warning fingerprints, so the
existing ignore entry for the safe_constantize warning in Notifier
became obsolete. Update to the new fingerprint.
---------
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Jeremy Daer <jeremy@37signals.com >
2026-02-16 15:29:51 -08:00
5dac2fa678
Finishing touches
2026-02-02 18:06:19 +01:00
8be26a283e
Tell brakeman that everything is OK
2026-02-02 13:39:54 +01:00
b1862733dd
Merge branch 'main' into sqlite
2025-11-21 15:23:34 +00:00
6e20c8c68f
Add brakeman rule
2025-11-21 10:42:08 +01:00
f24f959d19
Add brakeman ignores
2025-11-21 09:15:19 +00:00
62f469f609
brakeman: remove two obsolete ignore entries
2025-11-17 09:12:41 -05:00
adaf6966c6
brakeman: drop two obsolete warnings, ignore new searchable sql
2025-11-17 09:12:36 -05:00
3aa4a1a562
Shard the search index into 16 tables
...
Create search_index_0 to search_index_15 tables and shard each index by
account id. MySQL has no ability to pre-filter fulltext indexes by
another field so this is the best bet for improving performance.
Each fulltest index internally creates 11 sub tables (see
https://dev.mysql.com/doc/refman/8.4/en/innodb-fulltext-index.html ) so
actually we have 192 tables in total here.
The search_index table name is generated dynamically based on the
account_id.
2025-11-17 09:12:17 -05:00
fe559cbca0
Brakeman ignore
2025-10-07 09:00:07 +02:00
9bfd21c096
ci: remove outdated ignores from brakeman config
2025-10-07 00:16:47 -04:00
30b6adcd1c
Update brakeman
2025-07-18 10:57:13 +02:00
4acfe3ba9f
update brakeman
2025-06-24 13:33:48 +02:00
e8322afb59
Update brakeman
2025-06-05 09:13:19 +02:00
88fceb3123
Add brakeman rule
2025-04-25 10:40:26 +02:00
232e5e4ed2
lint: tell brakeman 7 to ignore the class eval in has_markdown
2025-03-10 12:56:36 -04:00
c220a305e7
Ignore left_joins_messageable interpolation for Brakeman
2024-10-27 20:19:03 -06:00
8cbd9d0316
Prune stale brakeman ignore re: threads
2024-10-25 16:10:00 -06:00
9d87d66be6
Ignore brakeman false positive
2024-10-11 20:28:50 -05:00
8682bc6a83
Wire up filters for tags and assignees
2024-10-03 15:40:51 -04:00
f305776fe4
Update brakeman warnings due to moved code
2024-10-03 16:25:59 +01:00
63c4493f7e
Update Brakeman ignore for changed dynamic render path warning
2024-10-02 16:07:23 -04:00
d3748bd495
Ignore false-positive Brakeman dynamic render path warning
2024-10-02 13:03:25 -04:00
15fa3b7582
Ignore a brakeman warning
2024-10-02 13:57:05 +01:00
dependabot[bot]