Skip to content

Commit 79f5e7c

Browse files
snyk-botsnyk-bot
committed
fix: Gemfile & Gemfile.lock to reduce vulnerabilities
The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-RUBY-NOKOGIRI-10674179 - https://snyk.io/vuln/SNYK-RUBY-NOKOGIRI-10674176 - https://snyk.io/vuln/SNYK-RUBY-NOKOGIRI-10674184 - https://snyk.io/vuln/SNYK-RUBY-NOKOGIRI-10674192 - https://snyk.io/vuln/SNYK-RUBY-THOR-10843853 - https://snyk.io/vuln/SNYK-RUBY-NOKOGIRI-10674188
1 parent db5dbea commit 79f5e7c

File tree

2 files changed

+109
-103
lines changed

2 files changed

+109
-103
lines changed

‎Gemfile

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -6,7 +6,7 @@ ruby '3.1.2'
66
gem 'net-smtp', '~> 0.3.1', require: false
77

88
# Bundle edge Rails instead: gem 'rails', github: 'rails/rails', branch: 'main'
9-
gem 'rails', '~> 7.0.5', '>= 7.0.5.1'
9+
gem 'rails', '~> 7.0.6'
1010
# Use postgresql as the database for Active Record
1111
gem 'pg', '~> 1.1'
1212
# Use Puma as the app server
@@ -28,7 +28,7 @@ gem 'bootsnap', '>= 1.4.4', require: false
2828
# gem 'rack-cors'
2929

3030
# Allows the use of assets and stuff
31-
gem 'sprockets-rails', '~> 3.4.2', :require => 'sprockets/railtie'
31+
gem 'sprockets-rails', '~> 3.5.0', :require => 'sprockets/railtie'
3232

3333
group :development, :test do
3434
# gem 'rswag', '~> 2.5'
@@ -59,6 +59,6 @@ gem 'rmagick', '~> 4.2.4'
5959
gem 'cloudinary', '~> 1.22'
6060
gem 'httparty', '~> 0.21', '>= 0.21.0'
6161

62-
gem 'active_storage_validations', '~> 1.0', '>= 1.0.0'
62+
gem 'active_storage_validations', '~> 1.1', '>= 1.1.0'
6363

64-
gem 'dotenv-rails', '~> 2.8.1'
64+
gem 'dotenv-rails', '~> 3.0.0'

‎Gemfile.lock

Lines changed: 105 additions & 99 deletions
Original file line numberDiff line numberDiff line change
@@ -1,184 +1,188 @@
11
GEM
22
remote: https://rubygems.org/
33
specs:
4-
actioncable (7.0.5.1)
5-
actionpack (= 7.0.5.1)
6-
activesupport (= 7.0.5.1)
4+
actioncable (7.0.8.7)
5+
actionpack (= 7.0.8.7)
6+
activesupport (= 7.0.8.7)
77
nio4r (~> 2.0)
88
websocket-driver (>= 0.6.1)
9-
actionmailbox (7.0.5.1)
10-
actionpack (= 7.0.5.1)
11-
activejob (= 7.0.5.1)
12-
activerecord (= 7.0.5.1)
13-
activestorage (= 7.0.5.1)
14-
activesupport (= 7.0.5.1)
9+
actionmailbox (7.0.8.7)
10+
actionpack (= 7.0.8.7)
11+
activejob (= 7.0.8.7)
12+
activerecord (= 7.0.8.7)
13+
activestorage (= 7.0.8.7)
14+
activesupport (= 7.0.8.7)
1515
mail (>= 2.7.1)
1616
net-imap
1717
net-pop
1818
net-smtp
19-
actionmailer (7.0.5.1)
20-
actionpack (= 7.0.5.1)
21-
actionview (= 7.0.5.1)
22-
activejob (= 7.0.5.1)
23-
activesupport (= 7.0.5.1)
19+
actionmailer (7.0.8.7)
20+
actionpack (= 7.0.8.7)
21+
actionview (= 7.0.8.7)
22+
activejob (= 7.0.8.7)
23+
activesupport (= 7.0.8.7)
2424
mail (~> 2.5, >= 2.5.4)
2525
net-imap
2626
net-pop
2727
net-smtp
2828
rails-dom-testing (~> 2.0)
29-
actionpack (7.0.5.1)
30-
actionview (= 7.0.5.1)
31-
activesupport (= 7.0.5.1)
29+
actionpack (7.0.8.7)
30+
actionview (= 7.0.8.7)
31+
activesupport (= 7.0.8.7)
3232
rack (~> 2.0, >= 2.2.4)
3333
rack-test (>= 0.6.3)
3434
rails-dom-testing (~> 2.0)
3535
rails-html-sanitizer (~> 1.0, >= 1.2.0)
36-
actiontext (7.0.5.1)
37-
actionpack (= 7.0.5.1)
38-
activerecord (= 7.0.5.1)
39-
activestorage (= 7.0.5.1)
40-
activesupport (= 7.0.5.1)
36+
actiontext (7.0.8.7)
37+
actionpack (= 7.0.8.7)
38+
activerecord (= 7.0.8.7)
39+
activestorage (= 7.0.8.7)
40+
activesupport (= 7.0.8.7)
4141
globalid (>= 0.6.0)
4242
nokogiri (>= 1.8.5)
43-
actionview (7.0.5.1)
44-
activesupport (= 7.0.5.1)
43+
actionview (7.0.8.7)
44+
activesupport (= 7.0.8.7)
4545
builder (~> 3.1)
4646
erubi (~> 1.4)
4747
rails-dom-testing (~> 2.0)
4848
rails-html-sanitizer (~> 1.1, >= 1.2.0)
49-
active_storage_validations (1.0.4)
50-
activejob (>= 5.2.0)
51-
activemodel (>= 5.2.0)
52-
activestorage (>= 5.2.0)
53-
activesupport (>= 5.2.0)
54-
activejob (7.0.5.1)
55-
activesupport (= 7.0.5.1)
49+
active_storage_validations (1.4.0)
50+
activejob (>= 6.1.4)
51+
activemodel (>= 6.1.4)
52+
activestorage (>= 6.1.4)
53+
activesupport (>= 6.1.4)
54+
marcel (>= 1.0.3)
55+
activejob (7.0.8.7)
56+
activesupport (= 7.0.8.7)
5657
globalid (>= 0.3.6)
57-
activemodel (7.0.5.1)
58-
activesupport (= 7.0.5.1)
59-
activerecord (7.0.5.1)
60-
activemodel (= 7.0.5.1)
61-
activesupport (= 7.0.5.1)
62-
activestorage (7.0.5.1)
63-
actionpack (= 7.0.5.1)
64-
activejob (= 7.0.5.1)
65-
activerecord (= 7.0.5.1)
66-
activesupport (= 7.0.5.1)
58+
activemodel (7.0.8.7)
59+
activesupport (= 7.0.8.7)
60+
activerecord (7.0.8.7)
61+
activemodel (= 7.0.8.7)
62+
activesupport (= 7.0.8.7)
63+
activestorage (7.0.8.7)
64+
actionpack (= 7.0.8.7)
65+
activejob (= 7.0.8.7)
66+
activerecord (= 7.0.8.7)
67+
activesupport (= 7.0.8.7)
6768
marcel (~> 1.0)
6869
mini_mime (>= 1.1.0)
69-
activesupport (7.0.5.1)
70+
activesupport (7.0.8.7)
7071
concurrent-ruby (~> 1.0, >= 1.0.2)
7172
i18n (>= 1.6, < 2)
7273
minitest (>= 5.1)
7374
tzinfo (~> 2.0)
7475
aws_cf_signer (0.1.3)
76+
base64 (0.3.0)
7577
bcrypt (3.1.18)
7678
bootsnap (1.15.0)
7779
msgpack (~> 1.2)
78-
builder (3.2.4)
80+
builder (3.3.0)
7981
byebug (11.1.3)
8082
choice (0.2.0)
8183
cloudinary (1.25.0)
8284
aws_cf_signer
8385
rest-client (>= 2.0.0)
84-
concurrent-ruby (1.2.2)
86+
concurrent-ruby (1.3.5)
8587
crass (1.0.6)
86-
date (3.3.3)
88+
date (3.4.1)
8789
docile (1.4.0)
8890
domain_name (0.5.20190701)
8991
unf (>= 0.0.5, < 1.0.0)
90-
dotenv (2.8.1)
91-
dotenv-rails (2.8.1)
92-
dotenv (= 2.8.1)
93-
railties (>= 3.2)
94-
erubi (1.12.0)
92+
dotenv (3.0.3)
93+
dotenv-rails (3.0.3)
94+
dotenv (= 3.0.3)
95+
railties (>= 6.1)
96+
erubi (1.13.1)
9597
ffi (1.15.5)
96-
globalid (1.1.0)
97-
activesupport (>= 5.0)
98+
globalid (1.2.1)
99+
activesupport (>= 6.1)
98100
http-accept (1.7.0)
99101
http-cookie (1.0.5)
100102
domain_name (~> 0.5)
101103
httparty (0.21.0)
102104
mini_mime (>= 1.0.0)
103105
multi_xml (>= 0.5.2)
104-
i18n (1.14.1)
106+
i18n (1.14.7)
105107
concurrent-ruby (~> 1.0)
106108
jwt (2.6.0)
107109
listen (3.8.0)
108110
rb-fsevent (~> 0.10, >= 0.10.3)
109111
rb-inotify (~> 0.9, >= 0.9.10)
110-
loofah (2.21.3)
112+
logger (1.7.0)
113+
loofah (2.24.1)
111114
crass (~> 1.0.2)
112115
nokogiri (>= 1.12.0)
113116
mail (2.8.1)
114117
mini_mime (>= 0.1.1)
115118
net-imap
116119
net-pop
117120
net-smtp
118-
marcel (1.0.2)
119-
method_source (1.0.0)
121+
marcel (1.0.4)
122+
method_source (1.1.0)
120123
mime-types (3.4.1)
121124
mime-types-data (~> 3.2015)
122125
mime-types-data (3.2022.0105)
123-
mini_mime (1.1.2)
124-
minitest (5.18.1)
126+
mini_mime (1.1.5)
127+
minitest (5.25.5)
125128
msgpack (1.6.0)
126129
multi_xml (0.6.0)
127-
net-imap (0.3.6)
130+
net-imap (0.5.9)
128131
date
129132
net-protocol
130133
net-pop (0.1.2)
131134
net-protocol
132-
net-protocol (0.2.1)
135+
net-protocol (0.2.2)
133136
timeout
134-
net-smtp (0.3.3)
137+
net-smtp (0.3.4)
135138
net-protocol
136139
netrc (0.11.0)
137-
nio4r (2.5.9)
138-
nokogiri (1.15.2-x86_64-linux)
140+
nio4r (2.7.4)
141+
nokogiri (1.18.9-x86_64-linux-gnu)
139142
racc (~> 1.4)
140143
pg (1.4.5)
141144
puma (5.6.5)
142145
nio4r (~> 2.0)
143-
racc (1.7.1)
144-
rack (2.2.7)
146+
racc (1.8.1)
147+
rack (2.2.17)
145148
rack-cors (1.1.1)
146149
rack (>= 2.0.0)
147-
rack-test (2.1.0)
150+
rack-test (2.2.0)
148151
rack (>= 1.3)
149-
rails (7.0.5.1)
150-
actioncable (= 7.0.5.1)
151-
actionmailbox (= 7.0.5.1)
152-
actionmailer (= 7.0.5.1)
153-
actionpack (= 7.0.5.1)
154-
actiontext (= 7.0.5.1)
155-
actionview (= 7.0.5.1)
156-
activejob (= 7.0.5.1)
157-
activemodel (= 7.0.5.1)
158-
activerecord (= 7.0.5.1)
159-
activestorage (= 7.0.5.1)
160-
activesupport (= 7.0.5.1)
152+
rails (7.0.8.7)
153+
actioncable (= 7.0.8.7)
154+
actionmailbox (= 7.0.8.7)
155+
actionmailer (= 7.0.8.7)
156+
actionpack (= 7.0.8.7)
157+
actiontext (= 7.0.8.7)
158+
actionview (= 7.0.8.7)
159+
activejob (= 7.0.8.7)
160+
activemodel (= 7.0.8.7)
161+
activerecord (= 7.0.8.7)
162+
activestorage (= 7.0.8.7)
163+
activesupport (= 7.0.8.7)
161164
bundler (>= 1.15.0)
162-
railties (= 7.0.5.1)
163-
rails-dom-testing (2.0.3)
164-
activesupport (>= 4.2.0)
165+
railties (= 7.0.8.7)
166+
rails-dom-testing (2.3.0)
167+
activesupport (>= 5.0.0)
168+
minitest
165169
nokogiri (>= 1.6)
166170
rails-erd (1.6.1)
167171
activerecord (>= 4.2)
168172
activesupport (>= 4.2)
169173
choice (~> 0.2.0)
170174
ruby-graphviz (~> 1.2)
171-
rails-html-sanitizer (1.6.0)
175+
rails-html-sanitizer (1.6.2)
172176
loofah (~> 2.21)
173-
nokogiri (~> 1.14)
174-
railties (7.0.5.1)
175-
actionpack (= 7.0.5.1)
176-
activesupport (= 7.0.5.1)
177+
nokogiri (>= 1.15.7, != 1.16.7, != 1.16.6, != 1.16.5, != 1.16.4, != 1.16.3, != 1.16.2, != 1.16.1, != 1.16.0.rc1, != 1.16.0)
178+
railties (7.0.8.7)
179+
actionpack (= 7.0.8.7)
180+
activesupport (= 7.0.8.7)
177181
method_source
178182
rake (>= 12.2)
179183
thor (~> 1.0)
180184
zeitwerk (~> 2.5)
181-
rake (13.0.6)
185+
rake (13.3.0)
182186
rb-fsevent (0.11.2)
183187
rb-inotify (0.10.1)
184188
ffi (~> 1.0)
@@ -198,49 +202,51 @@ GEM
198202
simplecov-html (0.12.3)
199203
simplecov_json_formatter (0.1.4)
200204
spring (4.0.0)
201-
sprockets (4.2.0)
205+
sprockets (4.2.2)
202206
concurrent-ruby (~> 1.0)
207+
logger
203208
rack (>= 2.2.4, < 4)
204-
sprockets-rails (3.4.2)
205-
actionpack (>= 5.2)
206-
activesupport (>= 5.2)
209+
sprockets-rails (3.5.2)
210+
actionpack (>= 6.1)
211+
activesupport (>= 6.1)
207212
sprockets (>= 3.0.0)
208-
thor (1.2.2)
209-
timeout (0.4.0)
213+
thor (1.4.0)
214+
timeout (0.4.3)
210215
tzinfo (2.0.6)
211216
concurrent-ruby (~> 1.0)
212217
unf (0.1.4)
213218
unf_ext
214219
unf_ext (0.0.8.2)
215-
websocket-driver (0.7.5)
220+
websocket-driver (0.8.0)
221+
base64
216222
websocket-extensions (>= 0.1.0)
217223
websocket-extensions (0.1.5)
218-
zeitwerk (2.6.8)
224+
zeitwerk (2.6.18)
219225

220226
PLATFORMS
221227
x86_64-linux
222228

223229
DEPENDENCIES
224-
active_storage_validations (~> 1.0, >= 1.0.0)
230+
active_storage_validations (~> 1.1, >= 1.1.0)
225231
bcrypt (~> 3.1.7)
226232
bootsnap (>= 1.4.4)
227233
byebug (~> 11.1.3)
228234
cloudinary (~> 1.22)
229-
dotenv-rails (~> 2.8.1)
235+
dotenv-rails (~> 3.0.0)
230236
httparty (~> 0.21, >= 0.21.0)
231237
jwt (~> 2.3)
232238
listen (~> 3.3)
233239
net-smtp (~> 0.3.1)
234240
pg (~> 1.1)
235241
puma (~> 5.6, >= 5.6.4)
236242
rack-cors (~> 1.1.1)
237-
rails (~> 7.0.5, >= 7.0.5.1)
243+
rails (~> 7.0.6)
238244
rails-erd (~> 1.6.1)
239245
rmagick (~> 4.2.4)
240246
simplecov (~> 0.21.2)
241247
simplecov_json_formatter (~> 0.1.2)
242248
spring (~> 4.0.0)
243-
sprockets-rails (~> 3.4.2)
249+
sprockets-rails (~> 3.5.0)
244250
tzinfo-data (~> 1.2021.5)
245251

246252
RUBY VERSION

0 commit comments

Comments
 (0)