Merge pull request #1184 from Crown-Commercial-Service/snyk-fix-f61c1a8261cb6a82fbc89e4aec4d2214

[Snyk] Fix for 5 vulnerabilities

Author: reemi1510

Gemfile

@@ -86,7 +86,7 @@ gem 'parslet'
 gem 'rack-maintenance', '~> 3.0'
 
 # For parsing and manipulating excel docs
-gem 'rubyXL', '~> 3.4', '>= 3.4.26'
+gem 'rubyXL', '~> 3.4', '>= 3.4.28'
 
 # SOAP-related libraries for Workday integration
 gem 'lolsoap', '>= 0.11.0', require: false
@@ -97,7 +97,7 @@ gem 'http', '>= 4.0.0'
 gem 'hashdiff', require: false
 
 # Manually set Nokgiri version, to update version.
-gem 'nokogiri', '>= 1.18.8'
+gem 'nokogiri', '>= 1.18.9'
 
 # Fix for already initialized constant warning, see: https://stackoverflow.com/questions/67773514/getting-warning-already-initialized-constant-on-assets-precompile-at-the-time
 gem 'net-http', '>= 0.4.0'

Gemfile.lock

@@ -521,9 +521,9 @@ GEM
       rubocop-ast (>= 1.44.0, < 2.0)
     ruby-progressbar (1.13.0)
     ruby2_keywords (0.0.5)
-    rubyXL (3.4.27)
+    rubyXL (3.4.34)
       nokogiri (>= 1.10.8)
-      rubyzip (>= 1.3.0)
+      rubyzip (~> 2.4)
     ruby_event_store (2.17.1)
       concurrent-ruby (~> 1.0, >= 1.1.6)
     ruby_event_store-active_record (2.17.1)
@@ -534,7 +534,7 @@ GEM
       ruby_event_store (= 2.17.1)
     ruby_event_store-rspec (2.14.0)
       rspec (~> 3.0)
-    rubyzip (2.3.2)
+    rubyzip (2.4.1)
     sass-rails (6.0.0)
       sassc-rails (~> 2.1, >= 2.1.1)
     sassc (2.4.0)
@@ -654,7 +654,7 @@ DEPENDENCIES
   lolsoap (>= 0.11.0)
   mutex_m (~> 0.3.0)
   net-http (>= 0.4.0)
-  nokogiri (>= 1.18.8)
+  nokogiri (>= 1.18.9)
   omniauth-google-oauth2 (>= 1.2.0)
   omniauth-rails_csrf_protection (~> 1.0, >= 1.0.2)
   parslet
@@ -671,7 +671,7 @@ DEPENDENCIES
   rspec-rails (~> 7.0, >= 7.0.0)
   rubocop (>= 1.66.0)
   rubocop-rails (~> 2.31, >= 2.31.0)
-  rubyXL (~> 3.4, >= 3.4.26)
+  rubyXL (~> 3.4, >= 3.4.28)
   ruby_event_store-rspec
   sass-rails (~> 6.0, >= 6.0.0)
   shoulda-matchers (~> 6.0, >= 6.0.0)