Running nixpkgs-update (https://nix-community.org/update-bot/) with UPDATE_INFO: brakeman 0 -> 1
attrpath: brakeman
Checking auto update branch...
[version] 
[version] skipping because derivation has updateScript
[rustCrateVersion] 
[rustCrateVersion] No cargoHash found
[golangModuleVersion] 
[golangModuleVersion] Not a buildGoModule package with vendorHash
[npmDepsVersion] 
[npmDepsVersion] No npmDepsHash
[updateScript] 
[updateScript] Success
[updateScript] this derivation will be built:
  /nix/store/aan0g5nicdkl6brwvjpwfif8bk8dib71-packages.json.drv
building '/nix/store/aan0g5nicdkl6brwvjpwfif8bk8dib71-packages.json.drv'...

Going to be running update for following packages:
 - brakeman-7.1.0

Press Enter key to continue...
Running update for:
Enqueuing group of 1 packages
 - brakeman-7.1.0: UPDATING ...
 - brakeman-7.1.0: DONE.

Packages updated!

Diff after rewrites:
diff --git a/pkgs/by-name/br/brakeman/Gemfile.lock b/pkgs/by-name/br/brakeman/Gemfile.lock
index a6603a1c1bed..aeaa22d4aa87 100644
--- a/pkgs/by-name/br/brakeman/Gemfile.lock
+++ b/pkgs/by-name/br/brakeman/Gemfile.lock
@@ -1,7 +1,7 @@
 GEM
   remote: https://rubygems.org/
   specs:
-    brakeman (7.1.0)
+    brakeman (7.1.2)
       racc
     racc (1.8.1)
 
@@ -12,4 +12,4 @@ DEPENDENCIES
   brakeman
 
 BUNDLED WITH
-   2.6.9
+   2.7.2
diff --git a/pkgs/by-name/br/brakeman/gemset.nix b/pkgs/by-name/br/brakeman/gemset.nix
index fdb42970c776..58ae297f37ce 100644
--- a/pkgs/by-name/br/brakeman/gemset.nix
+++ b/pkgs/by-name/br/brakeman/gemset.nix
@@ -5,10 +5,10 @@
     platforms = [ ];
     source = {
       remotes = [ "https://rubygems.org" ];
-      sha256 = "1bs8bm3qj2wfy5h1bp8qi1d3vjw5zabhnq5rr288802kbakhiixv";
+      sha256 = "1kkds9q66jryhlyqzwhp4kh8hcb39i05v2r4f8xd3rx221vr413b";
       type = "gem";
     };
-    version = "7.1.0";
+    version = "7.1.2";
   };
   racc = {
     groups = [ "default" ];

No auto update branch exists
Old version 7.1.0" not present in master derivation file with contents: {
  lib,
  ruby,
  bundlerApp,
  bundlerUpdateScript,
}:

let
  gems = import ./gemset.nix;
  version = gems.brakeman.version;
in
bundlerApp {
  pname = "brakeman";
  exes = [ "brakeman" ];
  gemdir = ./.;

  passthru.updateScript = bundlerUpdateScript "brakeman";

  meta = {
    description = "Static analysis security scanner for Ruby on Rails";
    homepage = "https://brakemanscanner.org/";
    changelog = "https://github.com/presidentbeef/brakeman/blob/v${version}/CHANGES.md";
    license = lib.licenses.unfreeRedistributable;
    platforms = ruby.meta.platforms;
    maintainers = [ ];
    mainProgram = "brakeman";
  };
}