From f5caf45cd6a9fbdb4b19cf14f7d509652a73a2ab Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Thu, 16 Jul 2026 00:27:05 +0000 Subject: [PATCH] Bump the bundler group across 1 directory with 14 updates Bumps the bundler group with 9 updates in the /backend directory: | Package | From | To | | --- | --- | --- | | [puma](https://github.com/puma/puma) | `5.6.8` | `7.2.1` | | [devise](https://github.com/heartcombo/devise) | `4.9.4` | `5.0.4` | | [rack-cors](https://github.com/cyu/rack-cors) | `2.0.1` | `2.0.2` | | [addressable](https://github.com/sporkmonger/addressable) | `2.8.7` | `2.9.0` | | [faraday](https://github.com/lostisland/faraday) | `1.8.0` | `1.10.6` | | [jwt](https://github.com/jwt/ruby-jwt) | `2.3.0` | `2.10.3` | | [net-imap](https://github.com/ruby/net-imap) | `0.5.12` | `0.5.15` | | [websocket-driver](https://github.com/faye/websocket-driver-ruby) | `0.7.6` | `0.8.1` | | [yard](https://github.com/lsegal/yard) | `0.9.36` | `0.9.44` | Updates `puma` from 5.6.8 to 7.2.1 - [Release notes](https://github.com/puma/puma/releases) - [Changelog](https://github.com/puma/puma/blob/main/History.md) - [Commits](https://github.com/puma/puma/compare/v5.6.8...v7.2.1) Updates `devise` from 4.9.4 to 5.0.4 - [Release notes](https://github.com/heartcombo/devise/releases) - [Changelog](https://github.com/heartcombo/devise/blob/main/CHANGELOG.md) - [Commits](https://github.com/heartcombo/devise/compare/v4.9.4...v5.0.4) Updates `rack-cors` from 2.0.1 to 2.0.2 - [Changelog](https://github.com/cyu/rack-cors/blob/master/CHANGELOG.md) - [Commits](https://github.com/cyu/rack-cors/compare/v2.0.1...v2.0.2) Updates `addressable` from 2.8.7 to 2.9.0 - [Changelog](https://github.com/sporkmonger/addressable/blob/main/CHANGELOG.md) - [Commits](https://github.com/sporkmonger/addressable/compare/addressable-2.8.7...addressable-2.9.0) Updates `bcrypt` from 3.1.20 to 3.1.22 - [Release notes](https://github.com/bcrypt-ruby/bcrypt-ruby/releases) - [Changelog](https://github.com/bcrypt-ruby/bcrypt-ruby/blob/master/CHANGELOG) - [Commits](https://github.com/bcrypt-ruby/bcrypt-ruby/compare/v3.1.20...v3.1.22) Updates `concurrent-ruby` from 1.3.5 to 1.3.7 - [Release notes](https://github.com/ruby-concurrency/concurrent-ruby/releases) - [Changelog](https://github.com/ruby-concurrency/concurrent-ruby/blob/master/CHANGELOG.md) - [Commits](https://github.com/ruby-concurrency/concurrent-ruby/compare/v1.3.5...v1.3.7) Updates `erb` from 6.0.0 to 6.0.4 - [Release notes](https://github.com/ruby/erb/releases) - [Changelog](https://github.com/ruby/erb/blob/master/NEWS.md) - [Commits](https://github.com/ruby/erb/compare/v6.0.0...v6.0.4) Updates `faraday` from 1.8.0 to 1.10.6 - [Release notes](https://github.com/lostisland/faraday/releases) - [Changelog](https://github.com/lostisland/faraday/blob/main/CHANGELOG.md) - [Commits](https://github.com/lostisland/faraday/compare/v1.8.0...v1.10.6) Updates `jwt` from 2.3.0 to 2.10.3 - [Release notes](https://github.com/jwt/ruby-jwt/releases) - [Changelog](https://github.com/jwt/ruby-jwt/blob/main/CHANGELOG.md) - [Commits](https://github.com/jwt/ruby-jwt/compare/v2.3.0...v2.10.3) Updates `net-imap` from 0.5.12 to 0.5.15 - [Release notes](https://github.com/ruby/net-imap/releases) - [Commits](https://github.com/ruby/net-imap/compare/v0.5.12...v0.5.15) Updates `nokogiri` from 1.18.10 to 1.19.4 - [Release notes](https://github.com/sparklemotion/nokogiri/releases) - [Changelog](https://github.com/sparklemotion/nokogiri/blob/main/CHANGELOG.md) - [Commits](https://github.com/sparklemotion/nokogiri/compare/v1.18.10...v1.19.4) Updates `rack` from 2.2.21 to 3.2.6 - [Release notes](https://github.com/rack/rack/releases) - [Changelog](https://github.com/rack/rack/blob/main/CHANGELOG.md) - [Commits](https://github.com/rack/rack/compare/v2.2.21...v3.2.6) Updates `websocket-driver` from 0.7.6 to 0.8.1 - [Changelog](https://github.com/faye/websocket-driver-ruby/blob/main/CHANGELOG.md) - [Commits](https://github.com/faye/websocket-driver-ruby/compare/0.7.6...0.8.1) Updates `yard` from 0.9.36 to 0.9.44 - [Release notes](https://github.com/lsegal/yard/releases) - [Changelog](https://github.com/lsegal/yard/blob/main/CHANGELOG.md) - [Commits](https://github.com/lsegal/yard/compare/v0.9.36...v0.9.44) --- updated-dependencies: - dependency-name: puma dependency-version: 7.2.1 dependency-type: direct:production dependency-group: bundler - dependency-name: devise dependency-version: 5.0.4 dependency-type: direct:production dependency-group: bundler - dependency-name: rack-cors dependency-version: 2.0.2 dependency-type: direct:production dependency-group: bundler - dependency-name: addressable dependency-version: 2.9.0 dependency-type: indirect dependency-group: bundler - dependency-name: bcrypt dependency-version: 3.1.22 dependency-type: indirect dependency-group: bundler - dependency-name: concurrent-ruby dependency-version: 1.3.7 dependency-type: indirect dependency-group: bundler - dependency-name: erb dependency-version: 6.0.4 dependency-type: indirect dependency-group: bundler - dependency-name: faraday dependency-version: 1.10.6 dependency-type: indirect dependency-group: bundler - dependency-name: jwt dependency-version: 2.10.3 dependency-type: indirect dependency-group: bundler - dependency-name: net-imap dependency-version: 0.5.15 dependency-type: indirect dependency-group: bundler - dependency-name: nokogiri dependency-version: 1.19.4 dependency-type: indirect dependency-group: bundler - dependency-name: rack dependency-version: 3.2.6 dependency-type: indirect dependency-group: bundler - dependency-name: websocket-driver dependency-version: 0.8.1 dependency-type: indirect dependency-group: bundler - dependency-name: yard dependency-version: 0.9.44 dependency-type: indirect dependency-group: bundler ... Signed-off-by: dependabot[bot] --- backend/Gemfile | 8 +- backend/Gemfile.lock | 171 +++++++++++++++++++++++++------------------ 2 files changed, 105 insertions(+), 74 deletions(-) diff --git a/backend/Gemfile b/backend/Gemfile index 7d2a28f7..410c9399 100644 --- a/backend/Gemfile +++ b/backend/Gemfile @@ -18,14 +18,14 @@ gem "mongoid", "8.1.3" # https://www.mongodb.com/docs/mongoid/current/reference/ gem "pg" # Use Puma as the app server -gem "puma", "5.6.8" +gem "puma", "7.2.1" # Authentication libraries gem "cancancan", "~> 3.6.1" gem "cancancan-mongoid", "~> 2.0" -gem "devise", "~> 4.8" +gem "devise", "~> 5.0" gem "devise_invitable", "~> 2.0" -gem "omniauth", "~> 1.8" +gem "omniauth", "~> 2.1" gem "omniauth-facebook", "~> 3.0" # Colored output to console @@ -61,7 +61,7 @@ gem "ruby-progressbar", require: false gem "kaminari-actionview" gem "kaminari-mongoid" -gem "rack-cors", "2.0.1", require: "rack/cors" # freezing to gemfile.lock version because heroku is not respecting lockfile +gem "rack-cors", "2.0.2", require: "rack/cors" # freezing to gemfile.lock version because heroku is not respecting lockfile gem "simplecov", require: false, group: :test group :development, :test do diff --git a/backend/Gemfile.lock b/backend/Gemfile.lock index 3ffebe8a..8db8ee28 100644 --- a/backend/Gemfile.lock +++ b/backend/Gemfile.lock @@ -81,16 +81,20 @@ GEM mutex_m securerandom (>= 0.3) tzinfo (~> 2.0) - addressable (2.8.7) - public_suffix (>= 2.0.2, < 7.0) + addressable (2.9.0) + public_suffix (>= 2.0.2, < 8.0) andand (1.3.3) annotate (3.2.0) activerecord (>= 3.2, < 8.0) rake (>= 10.4, < 14.0) + anonymous_loader (0.1.3) + version_gem (~> 1.1, >= 1.1.14) ast (2.4.2) + auth-sanitizer (0.2.3) + version_gem (~> 1.1, >= 1.1.14) awesome_print (1.9.2) base64 (0.3.0) - bcrypt (3.1.20) + bcrypt (3.1.22) benchmark (0.5.0) better_errors (2.10.1) erubi (>= 1.0.0) @@ -103,7 +107,7 @@ GEM erubi (~> 1.4) parser (>= 2.4) smart_properties - bigdecimal (3.3.1) + bigdecimal (4.1.2) brakeman (6.1.2) racc bson (4.15.0) @@ -130,19 +134,19 @@ GEM coercible (1.0.0) descendants_tracker (~> 0.0.1) colored (1.2) - concurrent-ruby (1.3.5) - connection_pool (2.5.5) + concurrent-ruby (1.3.7) + connection_pool (3.0.2) countries (4.0.1) i18n_data (~> 0.13.0) sixarm_ruby_unaccent (~> 1.1) crack (1.0.1) bigdecimal rexml - crass (1.0.6) + crass (1.0.7) csv (3.3.0) - cuprite (0.15) + cuprite (0.17) capybara (~> 3.0) - ferrum (~> 0.14.0) + ferrum (~> 0.17.0) database_cleaner (2.1.0) database_cleaner-active_record (>= 2, < 3) database_cleaner-active_record (2.2.2) @@ -152,13 +156,13 @@ GEM database_cleaner-mongoid (2.0.1) database_cleaner-core (~> 2.0.0) mongoid - date (3.5.0) + date (3.5.1) descendants_tracker (0.0.4) thread_safe (~> 0.3, >= 0.3.1) - devise (4.9.4) + devise (5.0.4) bcrypt (~> 3.0) orm_adapter (~> 0.1) - railties (>= 4.1.0) + railties (>= 7.0) responders warden (~> 1.2.3) devise_invitable (2.0.11) @@ -171,7 +175,7 @@ GEM dotenv (= 3.1.0) railties (>= 6.1) drb (2.2.3) - erb (6.0.0) + erb (6.0.4) erb_lint (0.5.0) activesupport better_html (>= 2.0.1) @@ -185,30 +189,35 @@ GEM factory_bot_rails (6.4.3) factory_bot (~> 6.4) railties (>= 5.0.0) - faraday (1.8.0) + faraday (1.10.6) faraday-em_http (~> 1.0) faraday-em_synchrony (~> 1.0) faraday-excon (~> 1.1) - faraday-httpclient (~> 1.0.1) + faraday-httpclient (~> 1.0) + faraday-multipart (~> 1.0) faraday-net_http (~> 1.0) - faraday-net_http_persistent (~> 1.1) + faraday-net_http_persistent (~> 1.0) faraday-patron (~> 1.0) faraday-rack (~> 1.0) - multipart-post (>= 1.2, < 3) + faraday-retry (~> 1.0) ruby2_keywords (>= 0.0.4) faraday-em_http (1.0.0) - faraday-em_synchrony (1.0.0) + faraday-em_synchrony (1.0.1) faraday-excon (1.1.0) faraday-httpclient (1.0.1) - faraday-net_http (1.0.1) + faraday-multipart (1.2.0) + multipart-post (~> 2.0) + faraday-net_http (1.0.2) faraday-net_http_persistent (1.2.0) faraday-patron (1.0.0) faraday-rack (1.0.0) - ferrum (0.14) + faraday-retry (1.0.4) + ferrum (0.17.2) addressable (~> 2.5) + base64 (~> 0.2) concurrent-ruby (~> 1.1) webrick (~> 1.7) - websocket-driver (>= 0.6, < 0.8) + websocket-driver (~> 0.7) ffaker (2.23.0) foreman (0.88.1) geocoder (1.8.3) @@ -221,18 +230,21 @@ GEM activerecord (>= 4.2, < 7.2) request_store (~> 1.0) hashdiff (1.2.1) - hashie (3.5.7) + hashie (5.1.0) + logger httpclient (2.8.3) - i18n (1.14.7) + i18n (1.15.2) concurrent-ruby (~> 1.0) i18n_data (0.13.0) - io-console (0.8.1) - irb (1.15.3) + io-console (0.8.2) + irb (1.18.0) pp (>= 0.6.0) + prism (>= 1.3.0) rdoc (>= 4.0.0) reline (>= 0.4.2) json (2.7.1) - jwt (2.3.0) + jwt (2.10.3) + base64 kaminari-actionview (1.2.1) actionview kaminari-core (= 1.2.1) @@ -248,7 +260,7 @@ GEM launchy (>= 2.2, < 4) lint_roller (1.1.0) logger (1.7.0) - loofah (2.24.1) + loofah (2.25.2) crass (~> 1.0.2) nokogiri (>= 1.12.0) mail (2.9.0) @@ -262,7 +274,9 @@ GEM method_source (1.1.0) mini_mime (1.1.5) mini_portile2 (2.8.9) - minitest (5.26.2) + minitest (6.0.6) + drb (~> 2.0) + prism (~> 1.5) mongo (2.20.1) bson (>= 4.14.1, < 6.0.0) mongoid (8.1.3) @@ -278,13 +292,13 @@ GEM mongoid-compatibility (>= 0.5.1) multi_json (1.15.0) multi_xml (0.6.0) - multipart-post (2.1.1) + multipart-post (2.4.1) mutex_m (0.3.0) nearest_time_zone (0.0.4) andand kdtree require_all - net-imap (0.5.12) + net-imap (0.5.15) date net-protocol net-pop (0.1.2) @@ -293,33 +307,40 @@ GEM timeout net-smtp (0.5.1) net-protocol - nio4r (2.7.3) - nokogiri (1.18.10) + nio4r (2.7.5) + nokogiri (1.19.4) mini_portile2 (~> 2.8.2) racc (~> 1.4) - oauth2 (1.4.7) - faraday (>= 0.8, < 2.0) - jwt (>= 1.0, < 3.0) - multi_json (~> 1.3) + oauth2 (2.0.25) + anonymous_loader (~> 0.1, >= 0.1.3) + auth-sanitizer (~> 0.2, >= 0.2.3) + faraday (>= 0.17.3, < 4.0) + jwt (>= 1.0, < 4.0) + logger (~> 1.2) multi_xml (~> 0.5) - rack (>= 1.2, < 3) - omniauth (1.8.1) - hashie (>= 3.4.6, < 3.6.0) - rack (>= 1.6.2, < 3) + rack (>= 1.2, < 4) + snaky_hash (~> 2.0, >= 2.0.7) + version_gem (~> 1.1, >= 1.1.14) + omniauth (2.1.4) + hashie (>= 3.4.6) + logger + rack (>= 2.2.3) + rack-protection omniauth-facebook (3.0.0) omniauth-oauth2 (~> 1.2) - omniauth-oauth2 (1.5.0) - oauth2 (~> 1.1) - omniauth (~> 1.2) + omniauth-oauth2 (1.9.0) + oauth2 (>= 2.0.2, < 3) + omniauth (~> 2.0) orm_adapter (0.5.0) parallel (1.24.0) parser (3.3.0.5) ast (~> 2.4.1) racc pg (1.5.6) - pp (0.6.3) + pp (0.6.4) prettyprint prettyprint (0.2.0) + prism (1.9.0) pry (0.14.2) coderay (~> 1.1) method_source (~> 1.0) @@ -331,11 +352,8 @@ GEM yard (~> 0.9.11) pry-rails (0.3.11) pry (>= 0.13.0) - psych (5.2.6) - date - stringio - public_suffix (6.0.2) - puma (5.6.8) + public_suffix (7.0.5) + puma (7.2.1) nio4r (~> 2.0) pusher (2.0.3) httpclient (~> 2.8) @@ -343,17 +361,21 @@ GEM pusher-signature (~> 0.1.8) pusher-signature (0.1.8) racc (1.8.1) - rack (2.2.21) - rack-cors (2.0.1) + rack (3.2.6) + rack-cors (2.0.2) rack (>= 2.0.0) - rack-session (1.0.2) - rack (< 3) + rack-protection (4.2.1) + base64 (>= 0.1.0) + logger (>= 1.6.0) + rack (>= 3.0.0, < 4) + rack-session (2.1.2) + base64 (>= 0.1.0) + rack (>= 3.0.0) rack-test (2.2.0) rack (>= 1.3) rack-timeout (0.7.0) - rackup (1.0.1) - rack (< 3) - webrick + rackup (2.3.1) + rack (>= 3) rails (7.1.5.2) actioncable (= 7.1.5.2) actionmailbox (= 7.1.5.2) @@ -372,8 +394,8 @@ GEM activesupport (>= 5.0.0) minitest nokogiri (>= 1.6) - rails-html-sanitizer (1.6.2) - loofah (~> 2.21) + rails-html-sanitizer (1.7.0) + loofah (~> 2.25) nokogiri (>= 1.15.7, != 1.16.7, != 1.16.6, != 1.16.5, != 1.16.4, != 1.16.3, != 1.16.2, != 1.16.1, != 1.16.0.rc1, != 1.16.0) rails_12factor (0.0.3) rails_serve_static_assets @@ -390,9 +412,14 @@ GEM zeitwerk (~> 2.6) rainbow (3.1.1) rake (13.2.1) - rdoc (6.16.0) + rbs (4.0.3) + logger + prism (>= 1.6.0) + tsort + rdoc (8.0.0) erb - psych (>= 4.0.0) + prism (>= 1.6.0) + rbs (>= 4.0.0) tsort redis-client (0.26.1) connection_pool @@ -461,6 +488,9 @@ GEM simplecov_json_formatter (0.1.4) sixarm_ruby_unaccent (1.2.0) smart_properties (1.17.0) + snaky_hash (2.0.7) + hashie (>= 0.1.0, < 6) + version_gem (~> 1.1, >= 1.1.14) sprockets (4.2.2) concurrent-ruby (~> 1.0) logger @@ -483,12 +513,11 @@ GEM rubocop-performance (~> 1.20.2) standardrb (1.0.1) standard - stringio (3.1.8) symmetric-encryption (4.6.0) coercible (~> 1.0) - thor (1.4.0) + thor (1.5.0) thread_safe (0.3.6) - timeout (0.4.4) + timeout (0.6.1) tomorrowio_rb (0.0.3) tsort (0.2.0) tzinfo (2.0.6) @@ -497,6 +526,7 @@ GEM uniform_notifier (1.16.0) vcr (6.3.1) base64 + version_gem (1.1.14) warden (1.2.9) rack (>= 2.0.9) webmock (3.26.1) @@ -504,13 +534,14 @@ GEM crack (>= 0.3.2) hashdiff (>= 0.4.0, < 2.0.0) webrick (1.9.2) - websocket-driver (0.7.6) + websocket-driver (0.8.1) + base64 websocket-extensions (>= 0.1.0) websocket-extensions (0.1.5) xpath (3.2.0) nokogiri (~> 1.8) - yard (0.9.36) - zeitwerk (2.7.3) + yard (0.9.44) + zeitwerk (2.8.2) PLATFORMS ruby @@ -532,7 +563,7 @@ DEPENDENCIES cuprite database_cleaner database_cleaner-mongoid - devise (~> 4.8) + devise (~> 5.0) devise_invitable (~> 2.0) dotenv-rails erb_lint @@ -547,15 +578,15 @@ DEPENDENCIES mongoid (= 8.1.3) mongoid-rspec nearest_time_zone - omniauth (~> 1.8) + omniauth (~> 2.1) omniauth-facebook (~> 3.0) pg pry-byebug pry-doc pry-rails - puma (= 5.6.8) + puma (= 7.2.1) pusher - rack-cors (= 2.0.1) + rack-cors (= 2.0.2) rack-timeout rails (~> 7.1.0) rails_12factor