From df3dafe3f98120c38201ef08c039ff3e814615b3 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Tue, 30 Apr 2024 03:41:23 +0000 Subject: [PATCH] fix: Gemfile & Gemfile.lock to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-RUBY-NOKOGIRI-6228056 --- Gemfile | 2 +- Gemfile.lock | 20 +++++++++----------- 2 files changed, 10 insertions(+), 12 deletions(-) diff --git a/Gemfile b/Gemfile index 0a0af812..e717fa8b 100644 --- a/Gemfile +++ b/Gemfile @@ -16,7 +16,7 @@ gem 'webpacker', '~> 5.4', '>= 5.4.4' # Turbolinks makes navigating your web application faster. Read more: https://github.com/turbolinks/turbolinks # gem 'turbolinks', '~> 5' # Build JSON APIs with ease. Read more: https://github.com/rails/jbuilder -gem 'jbuilder', '~> 2.11', '>= 2.11.5' +gem 'jbuilder', '~> 2.12', '>= 2.12.0' # Use Active Model has_secure_password # gem 'bcrypt', '~> 3.1.7' # for cognito diff --git a/Gemfile.lock b/Gemfile.lock index d4f9b00e..cda1d6c7 100644 --- a/Gemfile.lock +++ b/Gemfile.lock @@ -119,7 +119,7 @@ GEM erubi (~> 1.4) parser (>= 2.4) smart_properties - bigdecimal (3.1.4) + bigdecimal (3.1.7) bindex (0.8.1) bootsnap (1.17.0) msgpack (~> 1.2) @@ -128,7 +128,7 @@ GEM byebug (11.1.3) ccs-frontend_helpers (0.1.2) rails (>= 6.0) - concurrent-ruby (1.2.2) + concurrent-ruby (1.2.3) connection_pool (2.4.1) crass (1.0.6) date (3.3.4) @@ -140,8 +140,7 @@ GEM dotenv-rails (2.8.1) dotenv (= 2.8.1) railties (>= 3.2) - drb (2.2.0) - ruby2_keywords + drb (2.2.1) erubi (1.12.0) et-orbi (1.2.7) tzinfo @@ -155,7 +154,7 @@ GEM http-accept (1.7.0) http-cookie (1.0.3) domain_name (~> 0.5) - i18n (1.14.1) + i18n (1.14.4) concurrent-ruby (~> 1.0) i18n-tasks (1.0.13) activesupport (>= 4.0.2) @@ -172,7 +171,7 @@ GEM irb (1.9.1) rdoc reline (>= 0.3.8) - jbuilder (2.11.5) + jbuilder (2.12.0) actionview (>= 5.0.0) activesupport (>= 5.0.0) jmespath (1.6.2) @@ -195,8 +194,8 @@ GEM mime-types-data (~> 3.2015) mime-types-data (3.2020.0512) mini_mime (1.1.5) - mini_portile2 (2.8.5) - minitest (5.20.0) + mini_portile2 (2.8.6) + minitest (5.22.3) msgpack (1.7.2) mutex_m (0.2.0) net-imap (0.4.5) @@ -210,7 +209,7 @@ GEM net-protocol netrc (0.11.0) nio4r (2.6.0) - nokogiri (1.15.5) + nokogiri (1.16.4) mini_portile2 (~> 2.8.2) racc (~> 1.4) parallel (1.23.0) @@ -343,7 +342,6 @@ GEM rubocop-capybara (~> 2.17) rubocop-factory_bot (~> 2.22) ruby-progressbar (1.13.0) - ruby2_keywords (0.0.5) rubyzip (2.3.2) semantic_range (3.0.0) simplecov (0.22.0) @@ -402,7 +400,7 @@ DEPENDENCIES ccs-frontend_helpers (~> 0.1.2) dotenv-rails (~> 2.8.1, >= 2.8.1) i18n-tasks (~> 1.0.13) - jbuilder (~> 2.11, >= 2.11.5) + jbuilder (~> 2.12, >= 2.12.0) jwt (~> 2.7.1) listen (~> 3.8) pg (~> 1.5.4)