Bump to 2.6.0

CHANGES

-# Unreleased
+# 2.6.0
 
+* Fix detection of `:host` setting in redirects with chained calls
+* Add check for CVE-2014-0130
+* Add `find_by`/`find_by!` to SQLi check for Rails 4
+* Parse most files upfront instead of on demand
+* Do not branch values for `+=`
 * Update to use RubyParser 3.5.0 (Patrick Toomey)
 * Improve default route detection in Rails 3/4 (Jeff Jarmoc)
 * Handle controllers and models split across files (Patrick Toomey)

lib/brakeman/version.rb

 module Brakeman
-  Version = "2.5.0"
+  Version = "2.6.0"
 end