From 864d74b1cf6e17b8124c7c9a64bf290259e4c654 Mon Sep 17 00:00:00 2001
From: Anton Georgiev <antobinary@users.noreply.github.com>
Date: Wed, 11 Oct 2023 14:17:33 -0400
Subject: [PATCH] [Snyk] Security upgrade lograge from 0.13.0 to 0.14.0 (#5447)
* fix: Gemfile & Gemfile.lock to reduce vulnerabilities
The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-RUBY-RACK-1061917
* Update Gemfile.lock
---------
Co-authored-by: snyk-bot <snyk-bot@snyk.io>
Co-authored-by: Ahmad Farhat <ahmad.af.farhat@gmail.com>
---
Gemfile | 2 +-
Gemfile.lock | 8 ++++----
2 files changed, 5 insertions(+), 5 deletions(-)
diff --git a/Gemfile b/Gemfile
index 8d1de345..bf896fac 100644
--- a/Gemfile
+++ b/Gemfile
@@ -58,6 +58,6 @@ group :test do
end
group :production do
- gem 'lograge', '~> 0.13.0'
+ gem 'lograge', '~> 0.14.0'
gem 'remote_syslog_logger'
end
diff --git a/Gemfile.lock b/Gemfile.lock
index 1142531a..ac27fb6f 100644
--- a/Gemfile.lock
+++ b/Gemfile.lock
@@ -227,12 +227,12 @@ GEM
jsonapi-renderer (0.2.2)
jwt (2.7.0)
language_server-protocol (3.17.0.3)
- lograge (0.13.0)
+ lograge (0.14.0)
actionpack (>= 4)
activesupport (>= 4)
railties (>= 4)
request_store (~> 1.0)
- loofah (2.21.3)
+ loofah (2.21.4)
crass (~> 1.0.2)
nokogiri (>= 1.12.0)
mail (2.8.1)
@@ -463,7 +463,7 @@ GEM
rexml
xpath (3.2.0)
nokogiri (~> 1.8)
- zeitwerk (2.6.11)
+ zeitwerk (2.6.12)
PLATFORMS
ruby
@@ -491,7 +491,7 @@ DEPENDENCIES
jbuilder
jsbundling-rails (>= 1.2.0)
jwt
- lograge (~> 0.13.0)
+ lograge (~> 0.14.0)
mini_magick (>= 4.9.5)
omniauth (~> 2.1.0)
omniauth-rails_csrf_protection (~> 1.0.1)
--
GitLab