Merge pull request #826 from uktrade/chore/security-patches

Patching vulnerabilities: ActionPack + Puma
uktrade · Feb 17, 2022 · 416e38a · 416e38a
2 parents 9c46f5e + 24356af
commit 416e38a
Show file tree

Hide file tree

Showing 34 changed files with 57 additions and 57 deletions.
diff --git a/Gemfile b/Gemfile
@@ -2,9 +2,9 @@ source 'https://rubygems.org'
 
 ruby '2.7.4'
 
-gem 'rails', '6.0.4.2'
+gem 'rails', '6.0.4.6'
 gem 'bundler'
-gem 'puma', '>= 4.3.9'
+gem 'puma', '5.6.2'
 gem 'pg', '1.1.4'
 gem 'sidekiq', '>= 6.4.0'
 gem 'sidekiq-cron', '1.2.0'

diff --git a/Gemfile.lock b/Gemfile.lock
@@ -13,60 +13,60 @@ GIT
 GEM
   remote: https://rubygems.org/
   specs:
-    actioncable (6.0.4.2)
-      actionpack (= 6.0.4.2)
+    actioncable (6.0.4.6)
+      actionpack (= 6.0.4.6)
       nio4r (~> 2.0)
       websocket-driver (>= 0.6.1)
-    actionmailbox (6.0.4.2)
-      actionpack (= 6.0.4.2)
-      activejob (= 6.0.4.2)
-      activerecord (= 6.0.4.2)
-      activestorage (= 6.0.4.2)
-      activesupport (= 6.0.4.2)
+    actionmailbox (6.0.4.6)
+      actionpack (= 6.0.4.6)
+      activejob (= 6.0.4.6)
+      activerecord (= 6.0.4.6)
+      activestorage (= 6.0.4.6)
+      activesupport (= 6.0.4.6)
       mail (>= 2.7.1)
-    actionmailer (6.0.4.2)
-      actionpack (= 6.0.4.2)
-      actionview (= 6.0.4.2)
-      activejob (= 6.0.4.2)
+    actionmailer (6.0.4.6)
+      actionpack (= 6.0.4.6)
+      actionview (= 6.0.4.6)
+      activejob (= 6.0.4.6)
       mail (~> 2.5, >= 2.5.4)
       rails-dom-testing (~> 2.0)
-    actionpack (6.0.4.2)
-      actionview (= 6.0.4.2)
-      activesupport (= 6.0.4.2)
+    actionpack (6.0.4.6)
+      actionview (= 6.0.4.6)
+      activesupport (= 6.0.4.6)
       rack (~> 2.0, >= 2.0.8)
       rack-test (>= 0.6.3)
       rails-dom-testing (~> 2.0)
       rails-html-sanitizer (~> 1.0, >= 1.2.0)
     actionpack-page_caching (1.2.2)
       actionpack (>= 5.0.0)
-    actiontext (6.0.4.2)
-      actionpack (= 6.0.4.2)
-      activerecord (= 6.0.4.2)
-      activestorage (= 6.0.4.2)
-      activesupport (= 6.0.4.2)
+    actiontext (6.0.4.6)
+      actionpack (= 6.0.4.6)
+      activerecord (= 6.0.4.6)
+      activestorage (= 6.0.4.6)
+      activesupport (= 6.0.4.6)
       nokogiri (>= 1.8.5)
-    actionview (6.0.4.2)
-      activesupport (= 6.0.4.2)
+    actionview (6.0.4.6)
+      activesupport (= 6.0.4.6)
       builder (~> 3.1)
       erubi (~> 1.4)
       rails-dom-testing (~> 2.0)
       rails-html-sanitizer (~> 1.1, >= 1.2.0)
     active_record_union (1.3.0)
       activerecord (>= 4.0)
-    activejob (6.0.4.2)
-      activesupport (= 6.0.4.2)
+    activejob (6.0.4.6)
+      activesupport (= 6.0.4.6)
       globalid (>= 0.3.6)
-    activemodel (6.0.4.2)
-      activesupport (= 6.0.4.2)
-    activerecord (6.0.4.2)
-      activemodel (= 6.0.4.2)
-      activesupport (= 6.0.4.2)
-    activestorage (6.0.4.2)
-      actionpack (= 6.0.4.2)
-      activejob (= 6.0.4.2)
-      activerecord (= 6.0.4.2)
+    activemodel (6.0.4.6)
+      activesupport (= 6.0.4.6)
+    activerecord (6.0.4.6)
+      activemodel (= 6.0.4.6)
+      activesupport (= 6.0.4.6)
+    activestorage (6.0.4.6)
+      actionpack (= 6.0.4.6)
+      activejob (= 6.0.4.6)
+      activerecord (= 6.0.4.6)
       marcel (~> 1.0.0)
-    activesupport (6.0.4.2)
+    activesupport (6.0.4.6)
       concurrent-ruby (~> 1.0, >= 1.0.2)
       i18n (>= 0.7, < 2)
       minitest (~> 5.1)
@@ -1091,7 +1091,7 @@ GEM
     http-accept (1.7.0)
     http-cookie (1.0.3)
       domain_name (~> 0.5)
-    i18n (1.9.1)
+    i18n (1.10.0)
       concurrent-ruby (~> 1.0)
     immutable-struct (2.4.1)
     interception (0.5)
@@ -1121,7 +1121,7 @@ GEM
     listen (3.2.1)
       rb-fsevent (~> 0.10, >= 0.10.3)
       rb-inotify (~> 0.9, >= 0.9.10)
-    loofah (2.13.0)
+    loofah (2.14.0)
       crass (~> 1.0.2)
       nokogiri (>= 1.5.9)
     mail (2.7.1)
@@ -1200,7 +1200,7 @@ GEM
       binding_of_caller (>= 0.7)
       pry (>= 0.9.11)
     public_suffix (4.0.6)
-    puma (5.5.2)
+    puma (5.6.2)
       nio4r (~> 2.0)
     pundit (2.1.0)
       activesupport (>= 3.0.0)
@@ -1213,20 +1213,20 @@ GEM
       rack
     rack-test (1.1.0)
       rack (>= 1.0, < 3)
-    rails (6.0.4.2)
-      actioncable (= 6.0.4.2)
-      actionmailbox (= 6.0.4.2)
-      actionmailer (= 6.0.4.2)
-      actionpack (= 6.0.4.2)
-      actiontext (= 6.0.4.2)
-      actionview (= 6.0.4.2)
-      activejob (= 6.0.4.2)
-      activemodel (= 6.0.4.2)
-      activerecord (= 6.0.4.2)
-      activestorage (= 6.0.4.2)
-      activesupport (= 6.0.4.2)
+    rails (6.0.4.6)
+      actioncable (= 6.0.4.6)
+      actionmailbox (= 6.0.4.6)
+      actionmailer (= 6.0.4.6)
+      actionpack (= 6.0.4.6)
+      actiontext (= 6.0.4.6)
+      actionview (= 6.0.4.6)
+      activejob (= 6.0.4.6)
+      activemodel (= 6.0.4.6)
+      activerecord (= 6.0.4.6)
+      activestorage (= 6.0.4.6)
+      activesupport (= 6.0.4.6)
       bundler (>= 1.3.0)
-      railties (= 6.0.4.2)
+      railties (= 6.0.4.6)
       sprockets-rails (>= 2.0.0)
     rails-controller-testing (1.0.4)
       actionpack (>= 5.0.1.x)
@@ -1237,9 +1237,9 @@ GEM
       nokogiri (>= 1.6)
     rails-html-sanitizer (1.4.2)
       loofah (~> 2.3)
-    railties (6.0.4.2)
-      actionpack (= 6.0.4.2)
-      activesupport (= 6.0.4.2)
+    railties (6.0.4.6)
+      actionpack (= 6.0.4.6)
+      activesupport (= 6.0.4.6)
       method_source
       rake (>= 0.8.7)
       thor (>= 0.20.3, < 2.0)
@@ -1447,10 +1447,10 @@ DEPENDENCIES
   pry-rails
   pry-rescue
   pry-stack_explorer
-  puma (>= 4.3.9)
+  puma (= 5.6.2)
   pundit
   pundit-matchers
-  rails (= 6.0.4.2)
+  rails (= 6.0.4.6)
   rails-controller-testing
   redis (>= 4.2.0)
   redis-namespace

diff --git a/vendor/cache/actioncable-6.0.4.2.gem b/vendor/cache/actioncable-6.0.4.2.gem
diff --git a/vendor/cache/actioncable-6.0.4.6.gem b/vendor/cache/actioncable-6.0.4.6.gem
diff --git a/vendor/cache/actionmailbox-6.0.4.2.gem b/vendor/cache/actionmailbox-6.0.4.2.gem
diff --git a/vendor/cache/actionmailbox-6.0.4.6.gem b/vendor/cache/actionmailbox-6.0.4.6.gem
diff --git a/vendor/cache/actionmailer-6.0.4.2.gem b/vendor/cache/actionmailer-6.0.4.2.gem
diff --git a/vendor/cache/actionmailer-6.0.4.6.gem b/vendor/cache/actionmailer-6.0.4.6.gem
diff --git a/vendor/cache/actionpack-6.0.4.2.gem b/vendor/cache/actionpack-6.0.4.2.gem
diff --git a/vendor/cache/actionpack-6.0.4.6.gem b/vendor/cache/actionpack-6.0.4.6.gem
diff --git a/vendor/cache/actiontext-6.0.4.2.gem b/vendor/cache/actiontext-6.0.4.2.gem
diff --git a/vendor/cache/actiontext-6.0.4.6.gem b/vendor/cache/actiontext-6.0.4.6.gem
diff --git a/vendor/cache/actionview-6.0.4.2.gem b/vendor/cache/actionview-6.0.4.2.gem
diff --git a/vendor/cache/actionview-6.0.4.6.gem b/vendor/cache/actionview-6.0.4.6.gem
diff --git a/vendor/cache/activejob-6.0.4.2.gem b/vendor/cache/activejob-6.0.4.2.gem
diff --git a/vendor/cache/activejob-6.0.4.6.gem b/vendor/cache/activejob-6.0.4.6.gem
diff --git a/vendor/cache/activemodel-6.0.4.2.gem b/vendor/cache/activemodel-6.0.4.2.gem
diff --git a/vendor/cache/activemodel-6.0.4.6.gem b/vendor/cache/activemodel-6.0.4.6.gem
diff --git a/vendor/cache/activerecord-6.0.4.2.gem b/vendor/cache/activerecord-6.0.4.2.gem
diff --git a/vendor/cache/activerecord-6.0.4.6.gem b/vendor/cache/activerecord-6.0.4.6.gem
diff --git a/vendor/cache/activestorage-6.0.4.2.gem b/vendor/cache/activestorage-6.0.4.2.gem
diff --git a/vendor/cache/activestorage-6.0.4.6.gem b/vendor/cache/activestorage-6.0.4.6.gem
diff --git a/vendor/cache/activesupport-6.0.4.2.gem b/vendor/cache/activesupport-6.0.4.2.gem
diff --git a/vendor/cache/activesupport-6.0.4.6.gem b/vendor/cache/activesupport-6.0.4.6.gem
diff --git a/vendor/cache/i18n-1.10.0.gem b/vendor/cache/i18n-1.10.0.gem
diff --git a/vendor/cache/i18n-1.9.1.gem b/vendor/cache/i18n-1.9.1.gem
diff --git a/vendor/cache/loofah-2.13.0.gem b/vendor/cache/loofah-2.13.0.gem
diff --git a/vendor/cache/loofah-2.14.0.gem b/vendor/cache/loofah-2.14.0.gem
diff --git a/vendor/cache/puma-5.5.2.gem b/vendor/cache/puma-5.5.2.gem
diff --git a/vendor/cache/puma-5.6.2.gem b/vendor/cache/puma-5.6.2.gem
diff --git a/vendor/cache/rails-6.0.4.2.gem b/vendor/cache/rails-6.0.4.2.gem
diff --git a/vendor/cache/rails-6.0.4.6.gem b/vendor/cache/rails-6.0.4.6.gem
diff --git a/vendor/cache/railties-6.0.4.2.gem b/vendor/cache/railties-6.0.4.2.gem
diff --git a/vendor/cache/railties-6.0.4.6.gem b/vendor/cache/railties-6.0.4.6.gem