Bump brakeman from 4.3.1 to 4.4.0

[dependabot-preview]

Bumps brakeman from 4.3.1 to 4.4.0.

Release notes

Sourced from brakeman's releases.

4.4.0

• Add check for CVE-2018-3760
• Add --enable option to enable optional checks
• Add Dockerfile to run Brakeman inside Docker (Ryan Kemper)
• Handle empty secrets.yml files (Naoki Kimura)
• Ignore Tempfiles in FileAccess warnings (Christina Koller)
• Avoid warning about command injection when String#shellescape and Shellwords.shelljoin are used (George Ogata)
• Treat if not like unless (#1225)
• Fix Rails 4 configuration handling
• Set default encoding to UTF-8
• Support reading gem versions from gemspecs
• Support gem versions which are just major.minor (e.g. 3.0)
• Correctly set rel="noreferrer" in HTML reports
• Fix thread-safety issue in CallIndex
• Fix trim mode for ERb templates in old Rails versions
• Avoid nil errors when concatenating arrays
• Add rendered template information to render paths
• Trim some unnecessary files from bundled gems
• Deadcode and typo fixes found via Coverity
• Complete overhaul of warning message construction
• Update to Slim 4.0.1 (Jake Peterson)
• Update to RubyParser 3.12.0
• Updated license

Changelog

Sourced from brakeman's changelog.

4.4.0

• Set default encoding to UTF-8
• Update to Slim 4.0.1 (Jake Peterson)
• Update to RubyParser 3.12.0
• Add rendered template information to render paths
• Fix trim mode for ERb templates in old Rails versions
• Fix thread-safety issue in CallIndex
• Add --enable option to enable optional checks
• Support reading gem versions from gemspecs
• Support gem versions which are just major.minor (e.g. 3.0)
• Treat if not like unless
• Handle empty secrets.yml files (Naoki Kimura)
• Correctly set rel="noreferrer" in HTML reports
• Avoid warning about command injection when String#shellescape and Shellwords.shelljoin are used (George Ogata)
• Add Dockerfile to run Brakeman inside Docker (Ryan Kemper)
• Trim some unnecessary files from bundled gems
• Add check for CVE-2018-3760
• Avoid nils when concatenating arrays
• Ignore Tempfiles in FileAccess warnings (Christina Koller)
• Complete overhaul of warning message construction
• Deadcode and typo fixes found via Coverity

Commits

• ef2302f Merge pull request #1301 from presidentbeef/update_license_to_bpul
• f30ac40 Update license to Brakeman Public Use License
• e91b901 Bump to 4.4.0
• 6115e3a Merge pull request #1288 from presidentbeef/set_default_encoding_to_utf8
• e9de794 Set default external encoding to UTF-8
• f5fa669 Merge pull request #1285 from Jakenberg/master
• 0a3483c upgrade version upper boundary of slim to v4.0.1
• 1bff87f Merge pull request #1286 from presidentbeef/upgrade_to_ruby_parser_3_12_0
• f95df05 Upgrade RubyParser to 3.12
• f41a770 Update CHANGES
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Note: This repo was added to Dependabot recently, so you'll receive a maximum of 5 PRs for your first few update runs. Once an update run creates fewer than 5 PRs we'll remove that limit.

You can always request more updates by clicking Bump now in your Dependabot dashboard.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge
• @dependabot reopen will reopen this PR if it is closed
• @dependabot ignore this [patch|minor|major] version will close this PR and stop Dependabot creating any more for this minor/major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
• @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
• @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
• @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
• @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language
• @dependabot badge me will comment on this PR with code to add a "Dependabot enabled" badge to your readme

Additionally, you can set the following in your Dependabot dashboard:

• Update frequency (including time of day and day of week)
• Automerge options (never/patch/minor, and dev/runtime dependencies)
• Pull request limits (per update run and/or open at any time)
• Out-of-range updates (receive only lockfile updates, if desired)
• Security updates (receive only security updates, if desired)

Finally, you can contact us by mentioning @dependabot.