brakeman

• Reline console control should use stderr
• Fix logger cleanup based method (Imran Iqbal)

• Fix for disappearing cursor when no warnings are reported

• Complete revamp of scan progress output and logging
• --skip-libs removed (#1839
• --index-libs removed
• Fix qualified constant lookup to respect module/class context (Mike Dalessio)
• Fix singleton method prefixes (viralpraxis)
• Faster file globbing for templat...

This was released on December 25, 2025

• Update ruby_parser to remove max version restriction (Chedli Bourguiba)
• Increase minimum Ruby version to 3.2.0
• Reduce SQL injection false positives from count (and other) calls (#1936)
• Remove more XSS false positives related to Haml attribute builder -...

• Exclude directories before searching for files (#1925)
• Check for unsafe SQL when two arguments are passed to AR methods (Patrick Brinich-Langlois)
• Fix SQL injection check for calculate method (Rohan Sharma)
• Check each side of or SQL arguments ([#1935](https://gith...