Bump brakeman from 7.1.0 to 7.1.2

[dependabot]

Bumps brakeman from 7.1.0 to 7.1.2.

Release notes

Sourced from brakeman's releases.

7.1.1

• Exclude directories before searching for files (#1925)
• Check for unsafe SQL when two arguments are passed to AR methods (Patrick Brinich-Langlois)
• Fix SQL injection check for calculate method (Rohan Sharma)
• Check each side of or SQL arguments (#1935)
• Consider Tempfile.create.path as safe input (Ali Ismayilov)
• Fix false positive when calling with_content on ViewComponents (Peer Allan)
• Add FilePath#to_path for Ruby 3.5 compatibility (S.H.)
• Ignore attribute builder in Haml 6 (#1952)
• Word wrap text report output in pager

Changelog

Sourced from brakeman's changelog.

7.1.2 - 2025-12-25

• Update ruby_parser to remove version restriction (Chedli Bourguiba)
• Raise minimum required Ruby to 3.2.0
• Use Minitest 6.0
• Reduce SQL injection false positives from count calls
• Ignore more Haml attribute builder methods

7.1.1 - 2025-11-03

• Fix false positive when calling with_content on ViewComponents (Peer Allan)
• Word wrap text output in pager
• Consider Tempfile.create.path as safe input (Ali Ismayilov)
• Exclude directories before searching for files
• Check each side of or SQL arguments
• Ignore attribute builder in Haml 6
• Add FilePath#to_path for Ruby 3.5 compatibility (S-H-GAMELINKS)
• Fix SQL injection check for calculate method (Rohan Sharma)
• Fix missing td in HTML report (John Hawthorn)
• Check for unsafe SQL when two arguments are passed to AR methods (Patrick Brinich-Langlois)

Commits

• f7cd522 Bump to 7.1.2
• aea2ec0 Update CHANGES
• 2aaa6e6 Merge pull request #1988 from presidentbeef/ignore_more_haml_builders
• 0924f7b Ignore more Haml builders
• 4411a1a Merge pull request #1987 from chaadow/patch-3
• 0271586 Merge pull request #1986 from willnet/use-3-2-in-readme
• 7065ebe Update ruby_parser to handle ruby 4.0.0+
• b3f67a4 Update required Ruby version in README
• 901a45d Merge pull request #1984 from sampart/patch-1
• 6ad33c4 Merge pull request #1985 from presidentbeef/upgrade_minitest_6_0
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)