Skip to content

Commit

Permalink
fix: Gemfile & Gemfile.lock to reduce vulnerabilities
Browse files Browse the repository at this point in the history
The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-RUBY-RACK-1061917
  • Loading branch information
snyk-bot committed Jan 8, 2024
1 parent 3302345 commit 5388812
Show file tree
Hide file tree
Showing 2 changed files with 19 additions and 13 deletions.
2 changes: 1 addition & 1 deletion Gemfile
Original file line number Diff line number Diff line change
Expand Up @@ -21,7 +21,7 @@ gem 'hiredis', '~> 0.6.0'
gem 'i18n-language-mapping'
gem 'image_processing', '~> 1.2'
gem 'jbuilder'
gem 'jsbundling-rails', '>= 1.2.1'
gem 'jsbundling-rails', '>= 1.2.2'
gem 'jwt'
gem 'mini_magick', '>= 4.9.5'
gem 'omniauth', '~> 2.1.0'
Expand Down
30 changes: 18 additions & 12 deletions Gemfile.lock
Original file line number Diff line number Diff line change
Expand Up @@ -115,7 +115,7 @@ GEM
rack (>= 1.6.11)
rubyzip (>= 1.3.0)
xml-simple (~> 1.1)
bigdecimal (3.1.4)
bigdecimal (3.1.5)
bindata (2.4.15)
bindex (0.8.1)
bootsnap (1.16.0)
Expand Down Expand Up @@ -221,15 +221,15 @@ GEM
image_processing (1.12.2)
mini_magick (>= 4.9.5, < 5)
ruby-vips (>= 2.0.17, < 3)
io-console (0.6.0)
irb (1.9.1)
io-console (0.7.1)
irb (1.11.0)
rdoc
reline (>= 0.3.8)
jbuilder (2.11.5)
actionview (>= 5.0.0)
activesupport (>= 5.0.0)
jmespath (1.6.2)
jsbundling-rails (1.2.1)
jsbundling-rails (1.2.2)
railties (>= 6.0.0)
json (2.6.3)
json-jwt (1.16.3)
Expand Down Expand Up @@ -274,10 +274,10 @@ GEM
net-smtp (0.4.0)
net-protocol
nio4r (2.5.9)
nokogiri (1.15.5)
nokogiri (1.16.0)
mini_portile2 (~> 2.8.2)
racc (~> 1.4)
nokogiri (1.15.5-x86_64-linux)
nokogiri (1.16.0-x86_64-linux)
racc (~> 1.4)
omniauth (2.1.1)
hashie (>= 3.4.6)
Expand Down Expand Up @@ -309,7 +309,7 @@ GEM
ast (~> 2.4.1)
racc
pg (1.4.5)
psych (5.1.1.1)
psych (5.1.2)
stringio
public_suffix (5.0.3)
puma (5.6.7)
Expand All @@ -325,7 +325,7 @@ GEM
rack (>= 2.1.0)
rack-protection (3.1.0)
rack (~> 2.2, >= 2.2.4)
rack-session (1.0.1)
rack-session (1.0.2)
rack (< 3)
rack-test (2.1.0)
rack (>= 1.3)
Expand Down Expand Up @@ -363,11 +363,11 @@ GEM
zeitwerk (~> 2.6)
rainbow (3.1.1)
rake (13.1.0)
rdoc (6.6.0)
rdoc (6.6.2)
psych (>= 4.0.0)
redis (4.8.0)
regexp_parser (2.8.1)
reline (0.4.0)
reline (0.4.2)
io-console (~> 0.5)
remote_syslog_logger (1.0.4)
syslog_protocol
Expand Down Expand Up @@ -446,7 +446,7 @@ GEM
actionpack (>= 5.2)
activesupport (>= 5.2)
sprockets (>= 3.0.0)
stringio (3.0.9)
stringio (3.1.0)
swd (2.0.2)
activesupport (>= 3)
attr_required (>= 0.0.5)
Expand Down Expand Up @@ -520,7 +520,7 @@ DEPENDENCIES
i18n-language-mapping
image_processing (~> 1.2)
jbuilder
jsbundling-rails (>= 1.2.1)
jsbundling-rails (>= 1.2.2)
jwt
lograge (~> 0.14.0)
mini_magick (>= 4.9.5)
Expand All @@ -547,3 +547,9 @@ DEPENDENCIES
web-console (>= 4.2.1)
webdrivers
webmock

RUBY VERSION
ruby 3.0.0p0

BUNDLED WITH
2.2.3

0 comments on commit 5388812

Please sign in to comment.