Running nixpkgs-update (https://nix-community.org/update-bot/) with UPDATE_INFO: brakeman 0 -> 1
attrpath: brakeman
Checking auto update branch...
[version] 
[version] skipping because derivation has updateScript
[rustCrateVersion] 
[rustCrateVersion] No cargoHash found
[golangModuleVersion] 
[golangModuleVersion] Not a buildGoModule package with vendorHash
[npmDepsVersion] 
[npmDepsVersion] No npmDepsHash
[updateScript] 
[updateScript] Success
[updateScript] these 2 derivations will be built:
  /nix/store/hwh87c0icphkqsw210vd64mirnh87vv9-bundler-update-script.drv
  /nix/store/b43s0c00385vr4jinxvbvf4pcbjh6ydv-packages.json.drv
these 3 paths will be fetched (12.7 MiB download, 40.5 MiB unpacked):
  /nix/store/zlpfj1xly5zd1z7smm75jm001q0fdnj2-bundix-2.5.2
  /nix/store/cbn7qrrblx5mln8mr7k62ygyb4kwl74z-bundler-2.7.2
  /nix/store/ia49hz4981a7czzasrg2kdpim1wq22pb-ruby-3.4.9
copying path '/nix/store/ia49hz4981a7czzasrg2kdpim1wq22pb-ruby-3.4.9' from 'https://cache.nixos.org'...
copying path '/nix/store/cbn7qrrblx5mln8mr7k62ygyb4kwl74z-bundler-2.7.2' from 'https://cache.nixos.org'...
copying path '/nix/store/zlpfj1xly5zd1z7smm75jm001q0fdnj2-bundix-2.5.2' from 'https://cache.nixos.org'...
building '/nix/store/hwh87c0icphkqsw210vd64mirnh87vv9-bundler-update-script.drv'...
structuredAttrs is enabled
building '/nix/store/b43s0c00385vr4jinxvbvf4pcbjh6ydv-packages.json.drv'...
structuredAttrs is enabled

Going to be running update for following packages:
 - brakeman-7.1.0

Press Enter key to continue...
Running update for:
Enqueuing group of 1 packages
 - brakeman-7.1.0: UPDATING ...
 - brakeman-7.1.0: DONE.

Packages updated!

Diff after rewrites:
diff --git a/pkgs/by-name/br/brakeman/Gemfile.lock b/pkgs/by-name/br/brakeman/Gemfile.lock
index a6603a1c1bed..04ae781b8ab7 100644
--- a/pkgs/by-name/br/brakeman/Gemfile.lock
+++ b/pkgs/by-name/br/brakeman/Gemfile.lock
@@ -1,7 +1,7 @@
 GEM
   remote: https://rubygems.org/
   specs:
-    brakeman (7.1.0)
+    brakeman (8.0.6)
       racc
     racc (1.8.1)
 
@@ -12,4 +12,4 @@ DEPENDENCIES
   brakeman
 
 BUNDLED WITH
-   2.6.9
+   2.7.2
diff --git a/pkgs/by-name/br/brakeman/gemset.nix b/pkgs/by-name/br/brakeman/gemset.nix
index fdb42970c776..202781d23b77 100644
--- a/pkgs/by-name/br/brakeman/gemset.nix
+++ b/pkgs/by-name/br/brakeman/gemset.nix
@@ -5,10 +5,10 @@
     platforms = [ ];
     source = {
       remotes = [ "https://rubygems.org" ];
-      sha256 = "1bs8bm3qj2wfy5h1bp8qi1d3vjw5zabhnq5rr288802kbakhiixv";
+      sha256 = "11p3zrk1rqwl1a5ar19m1rabvfd0963gvdj7rlnnqphi869wd73m";
       type = "gem";
     };
-    version = "7.1.0";
+    version = "8.0.6";
   };
   racc = {
     groups = [ "default" ];

No auto update branch exists
Old version 7.1.0" not present in master derivation file with contents: {
  lib,
  ruby,
  bundlerApp,
  bundlerUpdateScript,
}:

let
  gems = import ./gemset.nix;
  version = gems.brakeman.version;
in
bundlerApp {
  pname = "brakeman";
  exes = [ "brakeman" ];
  gemdir = ./.;

  passthru.updateScript = bundlerUpdateScript "brakeman";

  meta = {
    description = "Static analysis security scanner for Ruby on Rails";
    homepage = "https://brakemanscanner.org/";
    changelog = "https://github.com/presidentbeef/brakeman/blob/v${version}/CHANGES.md";
    license = lib.licenses.unfreeRedistributable;
    platforms = ruby.meta.platforms;
    maintainers = [ ];
    mainProgram = "brakeman";
  };
}