Jeremy Daer
487125dc4c
* Bump brakeman to 8.0.6 Brakeman 8.0.6 shipped 2026-08-12: corrected Rails 8.0 EOL date, added Rails 8.1 and Ruby 4.0 EOL dates, and fixed command-injection false positives. brakeman's only runtime dependency is racc and its required ruby is >= 3.2.0, both unchanged since 7.1.2, so this is a version bump with no other movement in the graph. * Give brakeman's --ensure-latest a 15-day grace period Bare --ensure-latest exits 5 the moment a newer brakeman exists, so a release turns this build red before anyone has a chance to react. That is what happened on 2026-08-12 when 8.0.6 shipped. The flag takes an optional minimum age in days and only complains once the latest release is at least that old. 15 is the maximum it accepts; brakeman rejects anything outside 1-15. * Exempt brakeman from the dependabot cooldown The grace period on --ensure-latest is only headroom if the bump lands inside it. A weekly schedule plus a 7-day cooldown can take 14 days to so much as open the PR, leaving a single day to merge it. Excluding brakeman from the cooldown caps the delay at the weekly schedule, comfortably inside the 15 days.
Campfire
Campfire is a web-based chat application. It supports many of the features you'd expect, including:
- Multiple rooms, with access controls
- Direct messages
- File attachments with previews
- Search
- Notifications (via Web Push)
- @mentions
- API, with support for bot integrations
Running your own Campfire instance
Campfire's Docker image contains everything needed for a fully-functional,
single-machine deployment. This includes the web app, background jobs, caching,
file serving, and SSL. You can use our pre-built image at
ghcr.io/basecamp/once-campfire:latest, or build your own from this repo.
Deploying with ONCE
The easiest way to self-host Campfire is with ONCE. It will guide you through the initial set up and then keep your instance up to date automatically.
If you don't already have once installed, run this on the machine you want to run Campfire on:
curl https://get.once.com | sh
once will launch as soon as the install is finished.
Choose Campfire from the list of applications, follow the instructions, and ONCE will take care of the rest.
If you prefer the command line to the dashboard, you can deploy directly:
once deploy ghcr.io/basecamp/once-campfire --host chat.example.com
Deploying with Docker
If you'd rather run the Docker image yourself, you can read more about that in the self-hosting guide.
Tip
When you start Campfire for the first time, you'll be guided through a wizard to create an admin account. The email address that you enter for the admin account will be visible on the sign-in page, it's there so that people have someone to contact if they need help with their account. If that bothers you, put in any email address you want and create yourself a new admin account.
Development
You are welcome - and encouraged - to modify Campfire to your liking. Please see our development guide for how to get Campfire set up for local development.
Security
See SECURITY.md for how to report a vulnerability and a description of our trust model.