* Detect Rails LTS versions
 * Reduce false positives for SQL injection in string building
 * More accurate user input marking for SQL injection warnings
 * Detect SQL injection in `delete_all`/`destroy_all`
 * Detect SQL injection raw SQL queries using `connection`
 * Update to RubyParser 3.4.0

Better handling of SQL strings and fewer false positives

Add support for RailsLTS versions

Conflicts:
	lib/brakeman/checks/check_sql.rb

in SQL queries

Also catch #connection calls on ActiveRecord::Base

Expand methods checked for SQLi significantly

include methods on #connection and delete_all/destroy_all
Fixes #434

fixes #422

* Parse exact versions from Gemfile.lock for all gems

Get all gem versions from Gemfile.lock

instead of just a few. Should fix #431

Ignore non-string gem names in Gemfile

 * Ignore generators
 * Update to RubyParser 3.3.0

Ignore generators

especially since they are often ERB, not Ruby files even though they have
an .rb extension.

 * Fix false positives when SQL methods are not called on AR models (Aaron Bedra)
 * Add check for uses of OpenSSL::SSL::VERIFY_NONE (Aaron Bedra)
 * No longer raise exceptions if a class name cannot be determined

Don't warn on #from when not in an AR object. Fixes #423

Use an older version of RubyGems on Travis to fix 1.8.x issue

Adds a check for OpenSSL::SSL::VERIFY_NONE.

This commit introduces a new check that creates a warning when it
detects a call to verify_mode= when the right hand of the assignment is
OpenSSL::SSL::VERIFY_NONE.

Stop raising exception in ProcessorHelper#class_name

add .bundle to .gitignore

Make the attr_accessible check warning fingerprint include the method name