Update CHANGES

* Add check for regex denial of service (Ben Toews)
Handle more cases of non-literals in routes

Fixes #461
Merge pull request #462 from presidentbeef/fix_more_routes_without_literals

Handle more cases of non-literals in routes
GFM report format
markdown formatting tweaks, github file links, and test
support subpath in repo
github url support in HTML output
use to_markdown in format call
update non ruby1.9 line count
Merge remote-tracking branch 'upstream/master' into gfm-output-upstream
add markdown to valid format list
escape file names
scan the libs dir
move repo validation and parsing to Brakeman#set_options
Merge pull request #5 from github/scan_libs

Scan the libs dir
bump version
scan other dirs as libs
Merge pull request #6 from github/scan_helpers

Scan other dirs as libs
add --additional-libs option
Merge pull request #7 from github/lib-dir-option

Add --additional-libs option