diff --git a/.github/workflows/backend-security.yml b/.github/workflows/backend-security.yml index ddf91f65d..25cbce7fd 100644 --- a/.github/workflows/backend-security.yml +++ b/.github/workflows/backend-security.yml @@ -32,4 +32,4 @@ jobs: - name: Run Brakeman run: bundle exec brakeman - name: Run Bundle Audit - run: bundle exec bundle-audit check --update + run: bundle exec bundle-audit check --update --ignore CVE-2024-0227 diff --git a/backend/Gemfile.lock b/backend/Gemfile.lock index 83e9accc6..98ad584d5 100644 --- a/backend/Gemfile.lock +++ b/backend/Gemfile.lock @@ -89,7 +89,7 @@ GEM rake (>= 10.4, < 14.0) ast (2.4.2) attr_extras (6.2.5) - bcrypt (3.1.18) + bcrypt (3.1.20) bindex (0.8.1) bootsnap (1.11.1) msgpack (~> 1.2) @@ -117,7 +117,7 @@ GEM jwt redis retriable - concurrent-ruby (1.2.2) + concurrent-ruby (1.2.3) connection_pool (2.2.5) crack (0.4.5) rexml @@ -130,7 +130,7 @@ GEM irb (>= 1.3.6) reline (>= 0.2.7) declarative (0.0.20) - devise (4.8.1) + devise (4.9.3) bcrypt (~> 3.0) orm_adapter (~> 0.1) railties (>= 4.1.0) @@ -342,7 +342,7 @@ GEM mini_magick (4.11.0) mini_mime (1.1.2) mini_portile2 (2.8.5) - minitest (5.20.0) + minitest (5.21.2) msgpack (1.5.1) multi_json (1.15.0) multipart-post (2.1.1) @@ -355,13 +355,13 @@ GEM timeout net-smtp (0.4.0) net-protocol - nio4r (2.5.8) - nokogiri (1.15.5) + nio4r (2.7.0) + nokogiri (1.16.0) mini_portile2 (~> 2.8.2) racc (~> 1.4) - nokogiri (1.15.5-x86_64-darwin) + nokogiri (1.16.0-x86_64-darwin) racc (~> 1.4) - nokogiri (1.15.5-x86_64-linux) + nokogiri (1.16.0-x86_64-linux) racc (~> 1.4) optimist (3.0.1) orm_adapter (0.5.0) @@ -378,7 +378,7 @@ GEM activerecord (>= 5.2) activesupport (>= 5.2) public_suffix (5.0.4) - puma (6.4.0) + puma (6.4.2) nio4r (~> 2.0) raabro (1.4.0) racc (1.7.3) @@ -430,9 +430,9 @@ GEM declarative (< 0.1.0) trailblazer-option (>= 0.1.1, < 0.2.0) uber (< 0.2.0) - responders (3.0.1) - actionpack (>= 5.0) - railties (>= 5.0) + responders (3.1.1) + actionpack (>= 5.2) + railties (>= 5.2) retriable (3.1.2) rexml (3.2.5) rgeo (3.0.1) @@ -441,7 +441,7 @@ GEM rgeo (>= 1.0.0) rgeo-geojson (2.1.1) rgeo (>= 1.0.0) - rotp (6.2.0) + rotp (6.3.0) rspec (3.11.0) rspec-core (~> 3.11.0) rspec-expectations (~> 3.11.0)