fix: Gemfile & Gemfile.lock to reduce vulnerabilities

The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-RUBY-RACK-1061917
bigbluebutton · Dec 20, 2023 · 4d50b31 · 4d50b31
1 parent ae58273
commit 4d50b31
Show file tree

Hide file tree

Showing 2 changed files with 6 additions and 3 deletions.
diff --git a/Gemfile b/Gemfile
@@ -90,7 +90,7 @@ gem 'bigbluebutton-api-ruby', '~> 1.9.0'
 
 gem 'rest-client'
 
-gem 'omniauth', '>= 2.1.1'
+gem 'omniauth', '>= 2.1.2'
 gem 'omniauth-oauth2', '>= 1.8.0'
 gem 'omniauth-rails_csrf_protection', '~> 1.0.1'
 gem 'repost', '~> 0.4.1'

diff --git a/Gemfile.lock b/Gemfile.lock
@@ -204,7 +204,7 @@ GEM
       rack (>= 1.2, < 4)
       snaky_hash (~> 2.0)
       version_gem (~> 1.1)
-    omniauth (2.1.1)
+    omniauth (2.1.2)
       hashie (>= 3.4.6)
       rack (>= 2.2.3)
       rack-protection
@@ -433,7 +433,7 @@ DEPENDENCIES
   lograge (~> 0.14.0)
   minitest
   net-smtp
-  omniauth (>= 2.1.1)
+  omniauth (>= 2.1.2)
   omniauth-bbbltibroker!
   omniauth-oauth2 (>= 1.8.0)
   omniauth-rails_csrf_protection (~> 1.0.1)
@@ -463,3 +463,6 @@ DEPENDENCIES
   webdrivers
   webmock
   webpacker (~> 6.0.0.rc.5)
+
+BUNDLED WITH
+   2.1.4