Update CHANGES
Update CHANGES

* Add support for RailsLTS 2.3.18.7 and 2.3.18.8
* Add support for Rails 4 `before_actions` and friends
* Move SQLi CVE checks to `CheckSQLCVEs`
* Check for protected_attributes gem
* Fix SQLi detection in chain calls in scopes
* Add GitHub-flavored Markdown output format (Greg Ose)

masarakki/brakeman,jlecour/brakeman,htdc/brakeman,jlecour/brakeman,liqites/brakeman,dfens/brakeman,jakeatwork/brakeman,jeffyip/brakeman,spcoder/brakeman,codeclimate/brakeman-deprecated,jlecour/brakeman,spcoder/brakeman,lee-leon/brakeman,lee-leon/brakeman,cheerfulstoic/brakeman,dfens/brakeman,htdc/brakeman,bf4/brakeman,htdc/brakeman,github/brakeman,kbrock/brakeman,kbrock/brakeman,spcoder/brakeman,liqites/brakeman,liqites/brakeman,cheerfulstoic/brakeman,jakeatwork/brakeman,jeffyip/brakeman,github/brakeman,dfens/brakeman,lee-leon/brakeman,codeclimate/brakeman-deprecated,masarakki/brakeman,bf4/brakeman,bf4/brakeman,kbrock/brakeman,cheerfulstoic/brakeman,masarakki/brakeman,jakeatwork/brakeman