• Configurable engines path (Jason Yeo)
• Check CSRF setting in direct subclasses of ActionController::Base (Jason Yeo)
• Pull Ruby version from .ruby-version or Gemfile
• Use Ruby version to turn off SymbolDoS check (#928)
• Fix ignoring link interpolation not at beginning of string (#939)
• Show action help at start of interactive ignore (#949)
• Avoid warning about where_values_hash in SQLi (#942)