From 1d2d16c995e0634c2962f4535539a88989680e34 Mon Sep 17 00:00:00 2001
From: Anton Georgiev <antobinary@users.noreply.github.com>
Date: Tue, 1 Aug 2023 16:30:33 -0400
Subject: [PATCH] [Snyk] Security upgrade lograge from 0.12.0 to 0.13.0 (#5350)
* fix: Gemfile & Gemfile.lock to reduce vulnerabilities
The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-RUBY-RACK-1061917
* Update Gemfile.lock
---------
Co-authored-by: snyk-bot <snyk-bot@snyk.io>
Co-authored-by: Ahmad Farhat <ahmad.af.farhat@gmail.com>
---
Gemfile | 2 +-
Gemfile.lock | 19 ++++++++++---------
2 files changed, 11 insertions(+), 10 deletions(-)
diff --git a/Gemfile b/Gemfile
index 810f8db0..f65bef91 100644
--- a/Gemfile
+++ b/Gemfile
@@ -58,6 +58,6 @@ group :test do
end
group :production do
- gem 'lograge', '~> 0.12.0'
+ gem 'lograge', '~> 0.13.0'
gem 'remote_syslog_logger'
end
diff --git a/Gemfile.lock b/Gemfile.lock
index 483bafdd..d55bb44d 100644
--- a/Gemfile.lock
+++ b/Gemfile.lock
@@ -225,7 +225,7 @@ GEM
faraday-follow_redirects
jsonapi-renderer (0.2.2)
jwt (2.7.0)
- lograge (0.12.0)
+ lograge (0.13.0)
actionpack (>= 4)
activesupport (>= 4)
railties (>= 4)
@@ -244,8 +244,8 @@ GEM
method_source (1.0.0)
mini_magick (4.12.0)
mini_mime (1.1.2)
- mini_portile2 (2.8.2)
- minitest (5.18.1)
+ mini_portile2 (2.8.4)
+ minitest (5.19.0)
msgpack (1.6.0)
multi_json (1.15.0)
net-imap (0.3.6)
@@ -258,10 +258,10 @@ GEM
net-smtp (0.3.3)
net-protocol
nio4r (2.5.9)
- nokogiri (1.15.2)
+ nokogiri (1.15.3)
mini_portile2 (~> 2.8.2)
racc (~> 1.4)
- nokogiri (1.15.2-x86_64-linux)
+ nokogiri (1.15.3-x86_64-linux)
racc (~> 1.4)
omniauth (2.1.1)
hashie (>= 3.4.6)
@@ -320,8 +320,9 @@ GEM
activesupport (= 7.0.5.1)
bundler (>= 1.15.0)
railties (= 7.0.5.1)
- rails-dom-testing (2.0.3)
- activesupport (>= 4.2.0)
+ rails-dom-testing (2.1.1)
+ activesupport (>= 5.0.0)
+ minitest
nokogiri (>= 1.6)
rails-html-sanitizer (1.6.0)
loofah (~> 2.21)
@@ -453,7 +454,7 @@ GEM
rexml
xpath (3.2.0)
nokogiri (~> 1.8)
- zeitwerk (2.6.8)
+ zeitwerk (2.6.9)
PLATFORMS
ruby
@@ -481,7 +482,7 @@ DEPENDENCIES
jbuilder
jsbundling-rails (>= 1.1.2)
jwt
- lograge (~> 0.12.0)
+ lograge (~> 0.13.0)
mini_magick (>= 4.9.5)
omniauth (~> 2.1.0)
omniauth-rails_csrf_protection (~> 1.0.1)
--
GitLab