bundle update and brakeman comment