Skip to content

Commit bf9f7ec

Browse files
rohit-joyAriel Rolfo
authored andcommitted
Adding grape-middleware-logger gem, and version updates for fixing security vulnerabilities. (CredentialEngine#925)
* Adding grape-middleware-logger gem, and version updates for fixing security vulnerabilities. * Update gemfile.lock * Update dockerfile. * Update bundler version.
1 parent 9c17fdc commit bf9f7ec

4 files changed

Lines changed: 71 additions & 74 deletions

File tree

.ruby-version

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1 +1 @@
1-
3.4.3
1+
3.4.6

Gemfile

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -4,12 +4,12 @@ source 'https://rubygems.org'
44
gem 'api-pagination', '~> 6.0'
55
gem 'aws-sdk-s3', '~> 1.184'
66
gem 'base64', '~> 0.3'
7-
gem 'bundler', '= 2.6.7'
7+
gem 'bundler', '= 2.7.2'
88
gem 'fiddle', '~> 1.1'
99
gem 'grape', '= 2.2.0'
1010
gem 'grape-entity', '~> 1.0'
1111
gem 'grape-kaminari', '~> 0.4'
12-
gem 'grape-middleware-logger', github: 'soverin/grape-middleware-logger'
12+
gem 'grape-middleware-logger', '~> 2.4.0'
1313
gem 'hashie', '~> 5.0'
1414
gem 'hashie-forbidden_attributes', '~> 0.1'
1515
gem 'jsonpath', '~> 1.1'

Gemfile.lock

Lines changed: 66 additions & 69 deletions
Original file line numberDiff line numberDiff line change
@@ -1,10 +1,3 @@
1-
GIT
2-
remote: https://github.com/soverin/grape-middleware-logger.git
3-
revision: 646dbfec4abbfa8605efa932195f3473f2f412ea
4-
specs:
5-
grape-middleware-logger (1.12.0)
6-
grape (>= 0.17)
7-
81
GEM
92
remote: https://rubygems.org/
103
specs:
@@ -54,20 +47,20 @@ GEM
5447
ast (2.4.3)
5548
attribute_normalizer (1.2.0)
5649
aws-eventstream (1.4.0)
57-
aws-partitions (1.1140.0)
58-
aws-sdk-core (3.228.0)
50+
aws-partitions (1.1168.0)
51+
aws-sdk-core (3.233.0)
5952
aws-eventstream (~> 1, >= 1.3.0)
6053
aws-partitions (~> 1, >= 1.992.0)
6154
aws-sigv4 (~> 1.9)
6255
base64
6356
bigdecimal
6457
jmespath (~> 1, >= 1.6.1)
6558
logger
66-
aws-sdk-kms (1.109.0)
67-
aws-sdk-core (~> 3, >= 3.228.0)
59+
aws-sdk-kms (1.113.0)
60+
aws-sdk-core (~> 3, >= 3.231.0)
6861
aws-sigv4 (~> 1.5)
69-
aws-sdk-s3 (1.195.0)
70-
aws-sdk-core (~> 3, >= 3.228.0)
62+
aws-sdk-s3 (1.199.1)
63+
aws-sdk-core (~> 3, >= 3.231.0)
7164
aws-sdk-kms (~> 1)
7265
aws-sigv4 (~> 1.5)
7366
aws-sigv4 (1.12.1)
@@ -78,7 +71,7 @@ GEM
7871
thread_safe (~> 0.3, >= 0.3.1)
7972
base64 (0.3.0)
8073
benchmark (0.4.1)
81-
bigdecimal (3.2.2)
74+
bigdecimal (3.2.3)
8275
builder (3.3.0)
8376
byebug (12.0.0)
8477
childprocess (5.1.0)
@@ -88,7 +81,7 @@ GEM
8881
coercible (1.0.0)
8982
descendants_tracker (~> 0.0.1)
9083
concurrent-ruby (1.3.5)
91-
connection_pool (2.5.3)
84+
connection_pool (2.5.4)
9285
coveralls (0.7.1)
9386
multi_json (~> 1.3)
9487
rest-client
@@ -103,10 +96,10 @@ GEM
10396
date (3.4.1)
10497
descendants_tracker (0.0.4)
10598
thread_safe (~> 0.3, >= 0.3.1)
106-
diff-lcs (1.5.1)
99+
diff-lcs (1.6.2)
107100
docile (1.4.1)
108101
domain_name (0.6.20240107)
109-
dotenv (3.1.7)
102+
dotenv (3.1.8)
110103
drb (2.2.3)
111104
dry-core (1.1.0)
112105
concurrent-ruby (~> 1.0)
@@ -137,16 +130,16 @@ GEM
137130
encryptor (3.0.0)
138131
erb (5.0.2)
139132
erubi (1.13.1)
140-
factory_bot (6.5.0)
141-
activesupport (>= 5.0.0)
142-
faker (3.5.1)
133+
factory_bot (6.5.5)
134+
activesupport (>= 6.1.0)
135+
faker (3.5.2)
143136
i18n (>= 1.8.11, < 2)
144137
ffi (1.17.2)
145138
ffi-compiler (1.3.2)
146139
ffi (>= 1.15.5)
147140
rake
148-
fiddle (1.1.6)
149-
globalid (1.2.1)
141+
fiddle (1.1.8)
142+
globalid (1.3.0)
150143
activesupport (>= 6.1)
151144
grape (2.2.0)
152145
activesupport (>= 6)
@@ -160,11 +153,13 @@ GEM
160153
grape-kaminari (0.4.5)
161154
grape (>= 1.6.1)
162155
kaminari-grape
156+
grape-middleware-logger (2.4.0)
157+
grape (>= 0.17)
163158
grape-raketasks (0.0.3)
164159
activesupport
165160
grape
166161
rake
167-
hashdiff (1.2.0)
162+
hashdiff (1.2.1)
168163
hashie (5.0.0)
169164
hashie-forbidden_attributes (0.1.1)
170165
hashie (>= 3.0)
@@ -174,7 +169,7 @@ GEM
174169
http-form_data (~> 2.2)
175170
llhttp-ffi (~> 0.5.0)
176171
http-accept (1.7.0)
177-
http-cookie (1.0.8)
172+
http-cookie (1.1.0)
178173
domain_name (~> 0.5)
179174
http-form_data (2.3.0)
180175
i18n (1.14.7)
@@ -187,13 +182,13 @@ GEM
187182
rdoc (>= 4.0.0)
188183
reline (>= 0.4.2)
189184
jmespath (1.6.2)
190-
json (2.13.2)
191-
json-schema (5.1.1)
185+
json (2.15.0)
186+
json-schema (5.2.2)
192187
addressable (~> 2.8)
193188
bigdecimal (~> 3.1)
194189
jsonpath (1.1.5)
195190
multi_json
196-
jwt (2.10.1)
191+
jwt (2.10.2)
197192
base64
198193
kaminari (1.2.2)
199194
activesupport (>= 4.1.0)
@@ -220,30 +215,31 @@ GEM
220215
ffi-compiler (~> 1.0)
221216
rake (~> 13.0)
222217
logger (1.7.0)
223-
loofah (2.24.0)
218+
loofah (2.24.1)
224219
crass (~> 1.0.2)
225220
nokogiri (>= 1.12.0)
226221
macaddr (1.7.2)
227222
systemu (~> 2.6.5)
228223
method_source (1.1.0)
229-
mime-types (3.6.0)
224+
mime-types (3.7.0)
230225
logger
231-
mime-types-data (~> 3.2015)
232-
mime-types-data (3.2025.0107)
233-
mini_portile2 (2.8.8)
226+
mime-types-data (~> 3.2025, >= 3.2025.0507)
227+
mime-types-data (3.2025.0924)
228+
mini_portile2 (2.8.9)
234229
minitest (5.25.5)
235-
multi_json (1.15.0)
230+
mize (0.6.1)
231+
multi_json (1.17.0)
236232
mustermann (3.0.4)
237233
ruby2_keywords (~> 0.0.1)
238234
mustermann-grape (1.1.0)
239235
mustermann (>= 1.0.0)
240236
netrc (0.11.0)
241-
newrelic_rpm (9.20.0)
237+
newrelic_rpm (9.21.0)
242238
nio4r (2.7.4)
243-
nokogiri (1.18.8)
239+
nokogiri (1.18.10)
244240
mini_portile2 (~> 2.8.2)
245241
racc (~> 1.4)
246-
ostruct (0.6.1)
242+
ostruct (0.6.3)
247243
overcommit (0.68.0)
248244
childprocess (>= 0.6.3, < 6)
249245
iniparse (~> 1.4)
@@ -255,51 +251,51 @@ GEM
255251
parser (3.3.9.0)
256252
ast (~> 2.4.1)
257253
racc
258-
pg (1.5.9)
254+
pg (1.6.2)
259255
pg_search (2.3.7)
260256
activerecord (>= 6.1)
261257
activesupport (>= 6.1)
262258
pp (0.6.2)
263259
prettyprint
264260
prettyprint (0.2.0)
265-
prism (1.4.0)
261+
prism (1.5.1)
266262
pry (0.15.2)
267263
coderay (~> 1.1)
268264
method_source (~> 1.0)
269265
psych (5.2.6)
270266
date
271267
stringio
272-
public_suffix (6.0.1)
268+
public_suffix (6.0.2)
273269
puma (6.6.1)
274270
nio4r (~> 2.0)
275-
pundit (2.5.0)
271+
pundit (2.5.2)
276272
activesupport (>= 3.0.0)
277273
racc (1.8.1)
278-
rack (2.2.17)
274+
rack (2.2.18)
279275
rack-contrib (2.5.0)
280276
rack (< 4)
281277
rack-cors (2.0.2)
282278
rack (>= 2.0.0)
283279
rack-test (1.1.0)
284280
rack (>= 1.0, < 3)
285-
rails-dom-testing (2.2.0)
281+
rails-dom-testing (2.3.0)
286282
activesupport (>= 5.0.0)
287283
minitest
288284
nokogiri (>= 1.6)
289285
rails-html-sanitizer (1.6.2)
290286
loofah (~> 2.21)
291287
nokogiri (>= 1.15.7, != 1.16.7, != 1.16.6, != 1.16.5, != 1.16.4, != 1.16.3, != 1.16.2, != 1.16.1, != 1.16.0.rc1, != 1.16.0)
292288
rainbow (3.1.1)
293-
rake (13.2.1)
289+
rake (13.3.0)
294290
rb-readline (0.5.5)
295291
rbtree3 (0.7.1)
296292
rdoc (6.14.2)
297293
erb
298294
psych (>= 4.0.0)
299295
redis (4.8.1)
300-
redis-client (0.25.1)
296+
redis-client (0.26.1)
301297
connection_pool
302-
regexp_parser (2.11.0)
298+
regexp_parser (2.11.3)
303299
reline (0.6.2)
304300
io-console (~> 0.5)
305301
request_store (1.7.0)
@@ -309,32 +305,32 @@ GEM
309305
http-cookie (>= 1.0.2, < 2.0)
310306
mime-types (>= 1.16, < 4.0)
311307
netrc (~> 0.8)
312-
rexml (3.4.0)
313-
rspec (3.13.0)
308+
rexml (3.4.4)
309+
rspec (3.13.1)
314310
rspec-core (~> 3.13.0)
315311
rspec-expectations (~> 3.13.0)
316312
rspec-mocks (~> 3.13.0)
317-
rspec-core (3.13.2)
313+
rspec-core (3.13.5)
318314
rspec-support (~> 3.13.0)
319-
rspec-expectations (3.13.3)
315+
rspec-expectations (3.13.5)
320316
diff-lcs (>= 1.2.0, < 2.0)
321317
rspec-support (~> 3.13.0)
322-
rspec-mocks (3.13.2)
318+
rspec-mocks (3.13.5)
323319
diff-lcs (>= 1.2.0, < 2.0)
324320
rspec-support (~> 3.13.0)
325-
rspec-support (3.13.2)
326-
rubocop (1.79.1)
321+
rspec-support (3.13.6)
322+
rubocop (1.81.1)
327323
json (~> 2.3)
328324
language_server-protocol (~> 3.17.0.2)
329325
lint_roller (~> 1.1.0)
330326
parallel (~> 1.10)
331327
parser (>= 3.3.0.2)
332328
rainbow (>= 2.2.2, < 4.0)
333329
regexp_parser (>= 2.9.3, < 3.0)
334-
rubocop-ast (>= 1.46.0, < 2.0)
330+
rubocop-ast (>= 1.47.1, < 2.0)
335331
ruby-progressbar (~> 1.7)
336332
unicode-display_width (>= 2.4.0, < 4.0)
337-
rubocop-ast (1.46.0)
333+
rubocop-ast (1.47.1)
338334
parser (>= 3.3.7.2)
339335
prism (~> 1.4)
340336
rubocop-factory_bot (2.27.1)
@@ -344,14 +340,14 @@ GEM
344340
faker (>= 2.12.0)
345341
lint_roller (~> 1.1)
346342
rubocop (>= 1.72.1)
347-
rubocop-performance (1.25.0)
343+
rubocop-performance (1.26.0)
348344
lint_roller (~> 1.1)
349345
rubocop (>= 1.75.0, < 2.0)
350-
rubocop-ast (>= 1.38.0, < 2.0)
346+
rubocop-ast (>= 1.44.0, < 2.0)
351347
rubocop-rake (0.7.1)
352348
lint_roller (~> 1.1)
353349
rubocop (>= 1.72.1)
354-
rubocop-rspec (3.6.0)
350+
rubocop-rspec (3.7.0)
355351
lint_roller (~> 1.1)
356352
rubocop (~> 1.72, >= 1.72.1)
357353
ruby-progressbar (1.13.0)
@@ -364,31 +360,32 @@ GEM
364360
logger
365361
rack (>= 2.2.4)
366362
redis-client (>= 0.22.2)
367-
sidekiq-failures (1.0.4)
363+
sidekiq-failures (1.1.0)
368364
sidekiq (>= 4.0.0)
369365
simplecov (0.22.0)
370366
docile (~> 1.1)
371367
simplecov-html (~> 0.11)
372368
simplecov_json_formatter (~> 0.1)
373-
simplecov-html (0.13.1)
369+
simplecov-html (0.13.2)
374370
simplecov_json_formatter (0.1.4)
375371
stringio (3.1.7)
376372
swagger-blocks (3.0.0)
377373
sync (0.5.0)
378374
systemu (2.6.5)
379-
term-ansicolor (1.11.2)
380-
tins (~> 1.0)
375+
term-ansicolor (1.11.3)
376+
tins (~> 1)
381377
thor (1.4.0)
382378
thread_safe (0.3.6)
383379
timeout (0.4.3)
384-
tins (1.38.0)
380+
tins (1.44.1)
385381
bigdecimal
382+
mize (~> 0.6)
386383
sync
387384
tzinfo (2.0.6)
388385
concurrent-ruby (~> 1.0)
389-
unicode-display_width (3.1.4)
390-
unicode-emoji (~> 4.0, >= 4.0.4)
391-
unicode-emoji (4.0.4)
386+
unicode-display_width (3.2.0)
387+
unicode-emoji (~> 4.1)
388+
unicode-emoji (4.1.0)
392389
uri (1.0.3)
393390
uuid (2.3.9)
394391
macaddr (~> 1.0)
@@ -402,7 +399,7 @@ GEM
402399
addressable (>= 2.8.0)
403400
crack (>= 0.3.2)
404401
hashdiff (>= 0.4.0, < 2.0.0)
405-
with_advisory_lock (5.1.0)
402+
with_advisory_lock (5.3.0)
406403
activerecord (>= 6.1)
407404
zeitwerk (>= 2.6)
408405
zeitwerk (2.7.3)
@@ -420,7 +417,7 @@ DEPENDENCIES
420417
attribute_normalizer (~> 1.2)
421418
aws-sdk-s3 (~> 1.184)
422419
base64 (~> 0.3)
423-
bundler (= 2.6.7)
420+
bundler (= 2.7.2)
424421
byebug (~> 12.0)
425422
chronic (~> 0.10.2)
426423
connection_pool (~> 2.5)
@@ -437,7 +434,7 @@ DEPENDENCIES
437434
grape (= 2.2.0)
438435
grape-entity (~> 1.0)
439436
grape-kaminari (~> 0.4)
440-
grape-middleware-logger!
437+
grape-middleware-logger (~> 2.4.0)
441438
grape-raketasks
442439
hashie (~> 5.0)
443440
hashie-forbidden_attributes (~> 0.1)
@@ -488,4 +485,4 @@ DEPENDENCIES
488485
with_advisory_lock (~> 5.1)
489486

490487
BUNDLED WITH
491-
2.6.7
488+
2.7.2

0 commit comments

Comments
 (0)