Skip to content
Snippets Groups Projects
Unverified Commit 1a93303a authored by Anton Georgiev's avatar Anton Georgiev Committed by GitHub
Browse files

fix: Gemfile & Gemfile.lock to reduce vulnerabilities (#5455)

The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-RUBY-RACK-1061917



Co-authored-by: default avatarsnyk-bot <snyk-bot@snyk.io>
Co-authored-by: default avatarAhmad Farhat <ahmad.af.farhat@gmail.com>
parent adf1a333
Branches
Tags
No related merge requests found
...@@ -29,7 +29,7 @@ gem 'omniauth-rails_csrf_protection', '~> 1.0.1' ...@@ -29,7 +29,7 @@ gem 'omniauth-rails_csrf_protection', '~> 1.0.1'
gem 'pagy', '~> 6.0', '>= 6.0.0' gem 'pagy', '~> 6.0', '>= 6.0.0'
gem 'pg' gem 'pg'
gem 'puma', '~> 5.6' gem 'puma', '~> 5.6'
gem 'rails', '~> 7.1.0' gem 'rails', '~> 7.1.1'
gem 'redis', '~> 4.0' gem 'redis', '~> 4.0'
gem 'sprockets-rails' gem 'sprockets-rails'
gem 'tzinfo-data', platforms: %i[mingw mswin x64_mingw jruby] gem 'tzinfo-data', platforms: %i[mingw mswin x64_mingw jruby]
......
GEM GEM
remote: https://rubygems.org/ remote: https://rubygems.org/
specs: specs:
actioncable (7.1.0) actioncable (7.1.1)
actionpack (= 7.1.0) actionpack (= 7.1.1)
activesupport (= 7.1.0) activesupport (= 7.1.1)
nio4r (~> 2.0) nio4r (~> 2.0)
websocket-driver (>= 0.6.1) websocket-driver (>= 0.6.1)
zeitwerk (~> 2.6) zeitwerk (~> 2.6)
actionmailbox (7.1.0) actionmailbox (7.1.1)
actionpack (= 7.1.0) actionpack (= 7.1.1)
activejob (= 7.1.0) activejob (= 7.1.1)
activerecord (= 7.1.0) activerecord (= 7.1.1)
activestorage (= 7.1.0) activestorage (= 7.1.1)
activesupport (= 7.1.0) activesupport (= 7.1.1)
mail (>= 2.7.1) mail (>= 2.7.1)
net-imap net-imap
net-pop net-pop
net-smtp net-smtp
actionmailer (7.1.0) actionmailer (7.1.1)
actionpack (= 7.1.0) actionpack (= 7.1.1)
actionview (= 7.1.0) actionview (= 7.1.1)
activejob (= 7.1.0) activejob (= 7.1.1)
activesupport (= 7.1.0) activesupport (= 7.1.1)
mail (~> 2.5, >= 2.5.4) mail (~> 2.5, >= 2.5.4)
net-imap net-imap
net-pop net-pop
net-smtp net-smtp
rails-dom-testing (~> 2.2) rails-dom-testing (~> 2.2)
actionpack (7.1.0) actionpack (7.1.1)
actionview (= 7.1.0) actionview (= 7.1.1)
activesupport (= 7.1.0) activesupport (= 7.1.1)
nokogiri (>= 1.8.5) nokogiri (>= 1.8.5)
rack (>= 2.2.4) rack (>= 2.2.4)
rack-session (>= 1.0.1) rack-session (>= 1.0.1)
rack-test (>= 0.6.3) rack-test (>= 0.6.3)
rails-dom-testing (~> 2.2) rails-dom-testing (~> 2.2)
rails-html-sanitizer (~> 1.6) rails-html-sanitizer (~> 1.6)
actiontext (7.1.0) actiontext (7.1.1)
actionpack (= 7.1.0) actionpack (= 7.1.1)
activerecord (= 7.1.0) activerecord (= 7.1.1)
activestorage (= 7.1.0) activestorage (= 7.1.1)
activesupport (= 7.1.0) activesupport (= 7.1.1)
globalid (>= 0.6.0) globalid (>= 0.6.0)
nokogiri (>= 1.8.5) nokogiri (>= 1.8.5)
actionview (7.1.0) actionview (7.1.1)
activesupport (= 7.1.0) activesupport (= 7.1.1)
builder (~> 3.1) builder (~> 3.1)
erubi (~> 1.11) erubi (~> 1.11)
rails-dom-testing (~> 2.2) rails-dom-testing (~> 2.2)
...@@ -59,22 +59,22 @@ GEM ...@@ -59,22 +59,22 @@ GEM
activemodel (>= 5.2.0) activemodel (>= 5.2.0)
activestorage (>= 5.2.0) activestorage (>= 5.2.0)
activesupport (>= 5.2.0) activesupport (>= 5.2.0)
activejob (7.1.0) activejob (7.1.1)
activesupport (= 7.1.0) activesupport (= 7.1.1)
globalid (>= 0.3.6) globalid (>= 0.3.6)
activemodel (7.1.0) activemodel (7.1.1)
activesupport (= 7.1.0) activesupport (= 7.1.1)
activerecord (7.1.0) activerecord (7.1.1)
activemodel (= 7.1.0) activemodel (= 7.1.1)
activesupport (= 7.1.0) activesupport (= 7.1.1)
timeout (>= 0.4.0) timeout (>= 0.4.0)
activestorage (7.1.0) activestorage (7.1.1)
actionpack (= 7.1.0) actionpack (= 7.1.1)
activejob (= 7.1.0) activejob (= 7.1.1)
activerecord (= 7.1.0) activerecord (= 7.1.1)
activesupport (= 7.1.0) activesupport (= 7.1.1)
marcel (~> 1.0) marcel (~> 1.0)
activesupport (7.1.0) activesupport (7.1.1)
base64 base64
bigdecimal bigdecimal
concurrent-ruby (~> 1.0, >= 1.0.2) concurrent-ruby (~> 1.0, >= 1.0.2)
...@@ -221,8 +221,9 @@ GEM ...@@ -221,8 +221,9 @@ GEM
mini_magick (>= 4.9.5, < 5) mini_magick (>= 4.9.5, < 5)
ruby-vips (>= 2.0.17, < 3) ruby-vips (>= 2.0.17, < 3)
io-console (0.6.0) io-console (0.6.0)
irb (1.6.2) irb (1.8.1)
reline (>= 0.3.0) rdoc
reline (>= 0.3.8)
jbuilder (2.11.5) jbuilder (2.11.5)
actionview (>= 5.0.0) actionview (>= 5.0.0)
activesupport (>= 5.0.0) activesupport (>= 5.0.0)
...@@ -307,6 +308,8 @@ GEM ...@@ -307,6 +308,8 @@ GEM
ast (~> 2.4.1) ast (~> 2.4.1)
racc racc
pg (1.4.5) pg (1.4.5)
psych (5.1.1)
stringio
public_suffix (5.0.3) public_suffix (5.0.3)
puma (5.6.7) puma (5.6.7)
nio4r (~> 2.0) nio4r (~> 2.0)
...@@ -328,20 +331,20 @@ GEM ...@@ -328,20 +331,20 @@ GEM
rackup (1.0.0) rackup (1.0.0)
rack (< 3) rack (< 3)
webrick webrick
rails (7.1.0) rails (7.1.1)
actioncable (= 7.1.0) actioncable (= 7.1.1)
actionmailbox (= 7.1.0) actionmailbox (= 7.1.1)
actionmailer (= 7.1.0) actionmailer (= 7.1.1)
actionpack (= 7.1.0) actionpack (= 7.1.1)
actiontext (= 7.1.0) actiontext (= 7.1.1)
actionview (= 7.1.0) actionview (= 7.1.1)
activejob (= 7.1.0) activejob (= 7.1.1)
activemodel (= 7.1.0) activemodel (= 7.1.1)
activerecord (= 7.1.0) activerecord (= 7.1.1)
activestorage (= 7.1.0) activestorage (= 7.1.1)
activesupport (= 7.1.0) activesupport (= 7.1.1)
bundler (>= 1.15.0) bundler (>= 1.15.0)
railties (= 7.1.0) railties (= 7.1.1)
rails-dom-testing (2.2.0) rails-dom-testing (2.2.0)
activesupport (>= 5.0.0) activesupport (>= 5.0.0)
minitest minitest
...@@ -349,9 +352,9 @@ GEM ...@@ -349,9 +352,9 @@ GEM
rails-html-sanitizer (1.6.0) rails-html-sanitizer (1.6.0)
loofah (~> 2.21) loofah (~> 2.21)
nokogiri (~> 1.14) nokogiri (~> 1.14)
railties (7.1.0) railties (7.1.1)
actionpack (= 7.1.0) actionpack (= 7.1.1)
activesupport (= 7.1.0) activesupport (= 7.1.1)
irb irb
rackup (>= 1.0.0) rackup (>= 1.0.0)
rake (>= 12.2) rake (>= 12.2)
...@@ -359,9 +362,11 @@ GEM ...@@ -359,9 +362,11 @@ GEM
zeitwerk (~> 2.6) zeitwerk (~> 2.6)
rainbow (3.1.1) rainbow (3.1.1)
rake (13.0.6) rake (13.0.6)
rdoc (6.5.0)
psych (>= 4.0.0)
redis (4.8.0) redis (4.8.0)
regexp_parser (2.8.1) regexp_parser (2.8.1)
reline (0.3.2) reline (0.3.9)
io-console (~> 0.5) io-console (~> 0.5)
remote_syslog_logger (1.0.4) remote_syslog_logger (1.0.4)
syslog_protocol syslog_protocol
...@@ -436,6 +441,7 @@ GEM ...@@ -436,6 +441,7 @@ GEM
actionpack (>= 5.2) actionpack (>= 5.2)
activesupport (>= 5.2) activesupport (>= 5.2)
sprockets (>= 3.0.0) sprockets (>= 3.0.0)
stringio (3.0.8)
swd (2.0.2) swd (2.0.2)
activesupport (>= 3) activesupport (>= 3)
attr_required (>= 0.0.5) attr_required (>= 0.0.5)
...@@ -517,7 +523,7 @@ DEPENDENCIES ...@@ -517,7 +523,7 @@ DEPENDENCIES
pagy (~> 6.0, >= 6.0.0) pagy (~> 6.0, >= 6.0.0)
pg pg
puma (~> 5.6) puma (~> 5.6)
rails (~> 7.1.0) rails (~> 7.1.1)
redis (~> 4.0) redis (~> 4.0)
remote_syslog_logger remote_syslog_logger
rspec-rails (>= 6.0.2) rspec-rails (>= 6.0.2)
...@@ -532,3 +538,9 @@ DEPENDENCIES ...@@ -532,3 +538,9 @@ DEPENDENCIES
web-console (>= 4.2.1) web-console (>= 4.2.1)
webdrivers webdrivers
webmock webmock
RUBY VERSION
ruby 3.0.0p0
BUNDLED WITH
2.2.3
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Please register or to comment