Skip to content

Commit 7f16162

Browse files
snyk-botsnyk-bot
committed
fix: Gemfile & Gemfile.lock to reduce vulnerabilities
The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-RUBY-ACTIVESTORAGE-11800135 - https://snyk.io/vuln/SNYK-RUBY-NOKOGIRI-10674179 - https://snyk.io/vuln/SNYK-RUBY-NOKOGIRI-10674176 - https://snyk.io/vuln/SNYK-RUBY-NOKOGIRI-10674184 - https://snyk.io/vuln/SNYK-RUBY-NOKOGIRI-10674192 - https://snyk.io/vuln/SNYK-RUBY-RACK-10074187 - https://snyk.io/vuln/SNYK-RUBY-RACK-10303186 - https://snyk.io/vuln/SNYK-RUBY-RACK-9398129 - https://snyk.io/vuln/SNYK-RUBY-ACTIVERECORD-11800112 - https://snyk.io/vuln/SNYK-RUBY-THOR-10843853 - https://snyk.io/vuln/SNYK-RUBY-RACK-9058602 - https://snyk.io/vuln/SNYK-RUBY-RACKSESSION-10074669 - https://snyk.io/vuln/SNYK-RUBY-NOKOGIRI-10674188
1 parent 4b3784f commit 7f16162

2 files changed

Lines changed: 80 additions & 78 deletions

File tree

‎Gemfile‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -4,7 +4,7 @@ git_source(:github) { |repo| "https://github.com/#{repo}.git" }
44
ruby '3.4.2'
55

66
# Bundle edge Rails instead: gem 'rails', github: 'rails/rails'
7-
gem 'rails', '~> 8.0', '>= 8.0.0'
7+
gem 'rails', '~> 8.0', '>= 8.0.2.1'
88

99
# State machine
1010
gem 'aasm'
@@ -77,7 +77,7 @@ gem 'sidekiq-cron', '>= 2.1.0'
7777
# Alpine and Windows do not include zoneinfo files, so bundle the tzinfo-data gem
7878
gem 'tzinfo-data', platforms: %i[mingw mswin x64_mingw jruby ruby]
7979

80-
gem 'activerecord-import', '>= 1.5.0'
80+
gem 'activerecord-import', '>= 1.5.1'
8181

8282
gem 'parslet'
8383

‎Gemfile.lock‎

Lines changed: 78 additions & 76 deletions
Original file line numberDiff line numberDiff line change
@@ -9,67 +9,67 @@ GEM
99
specs:
1010
aasm (4.12.3)
1111
concurrent-ruby (~> 1.0)
12-
actioncable (8.0.2)
13-
actionpack (= 8.0.2)
14-
activesupport (= 8.0.2)
12+
actioncable (8.0.2.1)
13+
actionpack (= 8.0.2.1)
14+
activesupport (= 8.0.2.1)
1515
nio4r (~> 2.0)
1616
websocket-driver (>= 0.6.1)
1717
zeitwerk (~> 2.6)
18-
actionmailbox (8.0.2)
19-
actionpack (= 8.0.2)
20-
activejob (= 8.0.2)
21-
activerecord (= 8.0.2)
22-
activestorage (= 8.0.2)
23-
activesupport (= 8.0.2)
18+
actionmailbox (8.0.2.1)
19+
actionpack (= 8.0.2.1)
20+
activejob (= 8.0.2.1)
21+
activerecord (= 8.0.2.1)
22+
activestorage (= 8.0.2.1)
23+
activesupport (= 8.0.2.1)
2424
mail (>= 2.8.0)
25-
actionmailer (8.0.2)
26-
actionpack (= 8.0.2)
27-
actionview (= 8.0.2)
28-
activejob (= 8.0.2)
29-
activesupport (= 8.0.2)
25+
actionmailer (8.0.2.1)
26+
actionpack (= 8.0.2.1)
27+
actionview (= 8.0.2.1)
28+
activejob (= 8.0.2.1)
29+
activesupport (= 8.0.2.1)
3030
mail (>= 2.8.0)
3131
rails-dom-testing (~> 2.2)
32-
actionpack (8.0.2)
33-
actionview (= 8.0.2)
34-
activesupport (= 8.0.2)
32+
actionpack (8.0.2.1)
33+
actionview (= 8.0.2.1)
34+
activesupport (= 8.0.2.1)
3535
nokogiri (>= 1.8.5)
3636
rack (>= 2.2.4)
3737
rack-session (>= 1.0.1)
3838
rack-test (>= 0.6.3)
3939
rails-dom-testing (~> 2.2)
4040
rails-html-sanitizer (~> 1.6)
4141
useragent (~> 0.16)
42-
actiontext (8.0.2)
43-
actionpack (= 8.0.2)
44-
activerecord (= 8.0.2)
45-
activestorage (= 8.0.2)
46-
activesupport (= 8.0.2)
42+
actiontext (8.0.2.1)
43+
actionpack (= 8.0.2.1)
44+
activerecord (= 8.0.2.1)
45+
activestorage (= 8.0.2.1)
46+
activesupport (= 8.0.2.1)
4747
globalid (>= 0.6.0)
4848
nokogiri (>= 1.8.5)
49-
actionview (8.0.2)
50-
activesupport (= 8.0.2)
49+
actionview (8.0.2.1)
50+
activesupport (= 8.0.2.1)
5151
builder (~> 3.1)
5252
erubi (~> 1.11)
5353
rails-dom-testing (~> 2.2)
5454
rails-html-sanitizer (~> 1.6)
55-
activejob (8.0.2)
56-
activesupport (= 8.0.2)
55+
activejob (8.0.2.1)
56+
activesupport (= 8.0.2.1)
5757
globalid (>= 0.3.6)
58-
activemodel (8.0.2)
59-
activesupport (= 8.0.2)
60-
activerecord (8.0.2)
61-
activemodel (= 8.0.2)
62-
activesupport (= 8.0.2)
58+
activemodel (8.0.2.1)
59+
activesupport (= 8.0.2.1)
60+
activerecord (8.0.2.1)
61+
activemodel (= 8.0.2.1)
62+
activesupport (= 8.0.2.1)
6363
timeout (>= 0.4.0)
64-
activerecord-import (1.5.0)
64+
activerecord-import (2.2.0)
6565
activerecord (>= 4.2)
66-
activestorage (8.0.2)
67-
actionpack (= 8.0.2)
68-
activejob (= 8.0.2)
69-
activerecord (= 8.0.2)
70-
activesupport (= 8.0.2)
66+
activestorage (8.0.2.1)
67+
actionpack (= 8.0.2.1)
68+
activejob (= 8.0.2.1)
69+
activerecord (= 8.0.2.1)
70+
activesupport (= 8.0.2.1)
7171
marcel (~> 1.0)
72-
activesupport (8.0.2)
72+
activesupport (8.0.2.1)
7373
base64
7474
benchmark (>= 0.3)
7575
bigdecimal
@@ -126,9 +126,9 @@ GEM
126126
faraday_middleware (~> 1.0, >= 1.0.0.rc1)
127127
net-http-persistent (~> 4.0)
128128
nokogiri (~> 1, >= 1.10.8)
129-
base64 (0.2.0)
130-
benchmark (0.4.0)
131-
bigdecimal (3.1.9)
129+
base64 (0.3.0)
130+
benchmark (0.4.1)
131+
bigdecimal (3.2.2)
132132
bootsnap (1.11.1)
133133
msgpack (~> 1.2)
134134
brakeman (4.3.1)
@@ -146,7 +146,7 @@ GEM
146146
climate_control (0.2.0)
147147
coderay (1.1.3)
148148
concurrent-ruby (1.3.5)
149-
connection_pool (2.5.1)
149+
connection_pool (2.5.3)
150150
crack (1.0.0)
151151
bigdecimal
152152
rexml
@@ -170,9 +170,10 @@ GEM
170170
dotenv-rails (3.1.8)
171171
dotenv (= 3.1.8)
172172
railties (>= 6.1)
173-
drb (2.2.1)
173+
drb (2.2.3)
174174
email_validator (2.2.4)
175175
activemodel
176+
erb (5.0.2)
176177
erubi (1.13.1)
177178
et-orbi (1.2.11)
178179
tzinfo
@@ -242,8 +243,8 @@ GEM
242243
http-form_data (2.3.0)
243244
i18n (1.14.7)
244245
concurrent-ruby (~> 1.0)
245-
io-console (0.8.0)
246-
irb (1.15.1)
246+
io-console (0.8.1)
247+
irb (1.15.2)
247248
pp (>= 0.6.0)
248249
rdoc (>= 4.0.0)
249250
reline (>= 0.4.2)
@@ -299,7 +300,7 @@ GEM
299300
request_store (~> 1.0)
300301
lolsoap (0.11.0)
301302
nokogiri (~> 1.5)
302-
loofah (2.24.0)
303+
loofah (2.24.1)
303304
crass (~> 1.0.2)
304305
nokogiri (>= 1.12.0)
305306
mail (2.8.1)
@@ -314,7 +315,7 @@ GEM
314315
mime-types-data (~> 3.2015)
315316
mime-types-data (3.2023.0808)
316317
mini_mime (1.1.5)
317-
mini_portile2 (2.8.8)
318+
mini_portile2 (2.8.9)
318319
minitest (5.25.5)
319320
msgpack (1.5.1)
320321
multi_xml (0.7.2)
@@ -336,7 +337,7 @@ GEM
336337
net-protocol
337338
netrc (0.11.0)
338339
nio4r (2.7.4)
339-
nokogiri (1.18.8)
340+
nokogiri (1.18.9)
340341
mini_portile2 (~> 2.8.2)
341342
racc (~> 1.4)
342343
oauth2 (2.0.12)
@@ -380,43 +381,43 @@ GEM
380381
method_source (~> 1.0)
381382
pry-rails (0.3.9)
382383
pry (>= 0.10.4)
383-
psych (5.2.3)
384+
psych (5.2.6)
384385
date
385386
stringio
386387
public_suffix (6.0.0)
387388
puma (6.4.3)
388389
nio4r (~> 2.0)
389390
raabro (1.4.0)
390391
racc (1.8.1)
391-
rack (3.1.10)
392+
rack (3.2.0)
392393
rack-maintenance (3.0.0)
393394
rack (>= 2.1.4)
394395
rake (>= 12.3.3)
395396
rack-protection (4.0.0)
396397
base64 (>= 0.1.0)
397398
rack (>= 3.0.0, < 4)
398-
rack-session (2.1.0)
399+
rack-session (2.1.1)
399400
base64 (>= 0.1.0)
400401
rack (>= 3.0.0)
401402
rack-test (2.2.0)
402403
rack (>= 1.3)
403404
rackup (2.2.1)
404405
rack (>= 3)
405-
rails (8.0.2)
406-
actioncable (= 8.0.2)
407-
actionmailbox (= 8.0.2)
408-
actionmailer (= 8.0.2)
409-
actionpack (= 8.0.2)
410-
actiontext (= 8.0.2)
411-
actionview (= 8.0.2)
412-
activejob (= 8.0.2)
413-
activemodel (= 8.0.2)
414-
activerecord (= 8.0.2)
415-
activestorage (= 8.0.2)
416-
activesupport (= 8.0.2)
406+
rails (8.0.2.1)
407+
actioncable (= 8.0.2.1)
408+
actionmailbox (= 8.0.2.1)
409+
actionmailer (= 8.0.2.1)
410+
actionpack (= 8.0.2.1)
411+
actiontext (= 8.0.2.1)
412+
actionview (= 8.0.2.1)
413+
activejob (= 8.0.2.1)
414+
activemodel (= 8.0.2.1)
415+
activerecord (= 8.0.2.1)
416+
activestorage (= 8.0.2.1)
417+
activesupport (= 8.0.2.1)
417418
bundler (>= 1.15.0)
418-
railties (= 8.0.2)
419-
rails-dom-testing (2.2.0)
419+
railties (= 8.0.2.1)
420+
rails-dom-testing (2.3.0)
420421
activesupport (>= 5.0.0)
421422
minitest
422423
nokogiri (>= 1.6)
@@ -434,26 +435,27 @@ GEM
434435
ruby_event_store-browser (= 2.17.1)
435436
rails_event_store_active_record (2.17.1)
436437
ruby_event_store-active_record (= 2.17.1)
437-
railties (8.0.2)
438-
actionpack (= 8.0.2)
439-
activesupport (= 8.0.2)
438+
railties (8.0.2.1)
439+
actionpack (= 8.0.2.1)
440+
activesupport (= 8.0.2.1)
440441
irb (~> 1.13)
441442
rackup (>= 1.0.0)
442443
rake (>= 12.2)
443444
thor (~> 1.0, >= 1.2.2)
444445
zeitwerk (~> 2.6)
445446
rainbow (3.1.1)
446-
rake (13.2.1)
447+
rake (13.3.0)
447448
rb-fsevent (0.11.2)
448449
rb-inotify (0.10.1)
449450
ffi (~> 1.0)
450-
rdoc (6.12.0)
451+
rdoc (6.14.2)
452+
erb
451453
psych (>= 4.0.0)
452454
redcarpet (3.6.0)
453455
redis-client (0.22.2)
454456
connection_pool
455457
regexp_parser (2.10.0)
456-
reline (0.6.0)
458+
reline (0.6.2)
457459
io-console (~> 0.5)
458460
request_store (1.5.1)
459461
rack (>= 1.4)
@@ -568,9 +570,9 @@ GEM
568570
actionpack (>= 6.1)
569571
activesupport (>= 6.1)
570572
sprockets (>= 3.0.0)
571-
stringio (3.1.3)
573+
stringio (3.1.7)
572574
temple (0.10.2)
573-
thor (1.3.2)
575+
thor (1.4.0)
574576
tilt (2.2.0)
575577
timeout (0.4.3)
576578
tzinfo (2.0.6)
@@ -600,14 +602,14 @@ GEM
600602
xpath (3.2.0)
601603
nokogiri (~> 1.8)
602604
zache (0.13.1)
603-
zeitwerk (2.7.1)
605+
zeitwerk (2.7.3)
604606

605607
PLATFORMS
606608
ruby
607609

608610
DEPENDENCIES
609611
aasm
610-
activerecord-import (>= 1.5.0)
612+
activerecord-import (>= 1.5.1)
611613
akami (>= 1.3.2)
612614
auth0 (~> 5.1, >= 5.1.2)
613615
aws-sdk-cloudwatch
@@ -647,7 +649,7 @@ DEPENDENCIES
647649
pry-rails
648650
puma (~> 6.4, >= 6.4.3)
649651
rack-maintenance (~> 3.0)
650-
rails (~> 8.0, >= 8.0.0)
652+
rails (~> 8.0, >= 8.0.2.1)
651653
rails_event_store (~> 2.15, >= 2.15.0)
652654
redcarpet (~> 3.6)
653655
rollbar

0 commit comments

Comments
 (0)