Oh, you're right. My bad. I misread ~> --- sorry! On Tue, Mar 5, 2013 at 3:01 PM, Justin Collins <jus...@presidentbeef.com> wrote: > On 03/05/2013 02:06 PM, Arachne Jericho wrote: >> Right now you list multi_json dependency for brakeman as " multi_json >> ~> 1.2 ", but multi_json has moved on to version 1.6.x. Is it possible >> to update the dependency? >> >> AJ >> > > > Is there a reason to update? Brakeman should be compatible with any 1.x > release. > > The reason it is set to that version is because some versions of Rails > had a requirement of MultiJson < 1.3 (see > https://github.com/presidentbeef/brakeman/issues/247 and > https://github.com/rails/rails/commit/7b9bab6a96fcfcc85813bc1203f11235f21214fc). > > -Justin
-- http://www.spontaneousderivation.com/