From 9c56b94671921ba2e878e43186b33c944fb37050 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Tue, 31 May 2022 16:45:28 +0000 Subject: [PATCH] fix: Gemfile.lock to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-RUBY-RACK-2848599 - https://snyk.io/vuln/SNYK-RUBY-RACK-2848600 --- Gemfile.lock | 110 ++++++++++++++++++++++++++------------------------- 1 file changed, 57 insertions(+), 53 deletions(-) diff --git a/Gemfile.lock b/Gemfile.lock index 4e535d1..7075832 100644 --- a/Gemfile.lock +++ b/Gemfile.lock @@ -1,20 +1,18 @@ GEM remote: https://rubygems.org/ specs: - activemodel (5.1.4) - activesupport (= 5.1.4) - activerecord (5.1.4) - activemodel (= 5.1.4) - activesupport (= 5.1.4) - arel (~> 8.0) - activesupport (5.1.4) + activemodel (7.0.3) + activesupport (= 7.0.3) + activerecord (7.0.3) + activemodel (= 7.0.3) + activesupport (= 7.0.3) + activesupport (7.0.3) concurrent-ruby (~> 1.0, >= 1.0.2) - i18n (~> 0.7) - minitest (~> 5.1) - tzinfo (~> 1.1) - addressable (2.5.2) - public_suffix (>= 2.0.2, < 4.0) - arel (8.0.0) + i18n (>= 1.6, < 2) + minitest (>= 5.1) + tzinfo (~> 2.0) + addressable (2.8.0) + public_suffix (>= 2.0.2, < 5.0) aws-sdk (2.10.53) aws-sdk-resources (= 2.10.53) aws-sdk-core (2.10.53) @@ -23,25 +21,27 @@ GEM aws-sdk-resources (2.10.53) aws-sdk-core (= 2.10.53) aws-sigv4 (1.0.2) - backports (3.8.0) bigdecimal (1.3.2) - capybara (2.15.1) + capybara (3.37.1) addressable + matrix mini_mime (>= 0.1.3) - nokogiri (>= 1.3.3) - rack (>= 1.0.0) - rack-test (>= 0.5.4) - xpath (~> 2.0) + nokogiri (~> 1.8) + rack (>= 1.6.0) + rack-test (>= 0.6.3) + regexp_parser (>= 1.5, < 3.0) + xpath (~> 3.2) cliver (0.3.2) coderay (1.1.2) - concurrent-ruby (1.0.5) + concurrent-ruby (1.1.10) database_cleaner (1.6.1) diff-lcs (1.3) dotenv (2.2.1) factory_girl (4.8.0) activesupport (>= 3.0.0) ffi (1.9.18) - i18n (0.8.6) + i18n (1.10.0) + concurrent-ruby (~> 1.0) jmespath (1.3.1) launchy (2.4.3) addressable (~> 2.3) @@ -49,31 +49,36 @@ GEM rb-fsevent (~> 0.9, >= 0.9.4) rb-inotify (~> 0.9, >= 0.9.7) ruby_dep (~> 1.2) + matrix (0.4.2) method_source (0.9.0) - mini_mime (0.1.4) - mini_portile2 (2.3.0) - minitest (5.10.3) - multi_json (1.12.2) - mustermann (1.0.1) - nokogiri (1.8.1) - mini_portile2 (~> 2.3.0) - poltergeist (1.16.0) - capybara (~> 2.1) + mini_mime (1.1.2) + mini_portile2 (2.8.0) + minitest (5.15.0) + multi_json (1.15.0) + mustermann (1.1.1) + ruby2_keywords (~> 0.0.1) + nokogiri (1.13.6) + mini_portile2 (~> 2.8.0) + racc (~> 1.4) + poltergeist (1.18.1) + capybara (>= 2.1, < 4) cliver (~> 0.3.1) websocket-driver (>= 0.2.0) pry (0.11.1) coderay (~> 1.1.0) method_source (~> 0.9.0) - public_suffix (3.0.0) - rack (2.0.3) - rack-protection (2.0.0) + public_suffix (4.0.7) + racc (1.6.0) + rack (2.2.3.1) + rack-protection (2.2.0) rack - rack-test (0.7.0) + rack-test (1.1.0) rack (>= 1.0, < 3) rake (12.1.0) rb-fsevent (0.10.2) rb-inotify (0.9.10) ffi (>= 0.5.0, < 2) + regexp_parser (2.5.0) rerun (0.11.0) listen (~> 3.0) rspec (3.6.0) @@ -89,22 +94,22 @@ GEM diff-lcs (>= 1.2.0, < 2.0) rspec-support (~> 3.6.0) rspec-support (3.6.0) + ruby2_keywords (0.0.5) ruby_dep (1.5.0) - sinatra (2.0.0) + sinatra (2.2.0) mustermann (~> 1.0) - rack (~> 2.0) - rack-protection (= 2.0.0) + rack (~> 2.2) + rack-protection (= 2.2.0) tilt (~> 2.0) - sinatra-activerecord (2.0.13) - activerecord (>= 3.2) + sinatra-activerecord (2.0.25) + activerecord (>= 4.1) sinatra (>= 1.0) - sinatra-contrib (2.0.0) - backports (>= 2.0) + sinatra-contrib (2.2.0) multi_json mustermann (~> 1.0) - rack-protection (= 2.0.0) - sinatra (= 2.0.0) - tilt (>= 1.3, < 3) + rack-protection (= 2.2.0) + sinatra (= 2.2.0) + tilt (~> 2.0) sinatra-flash (0.3.0) sinatra (>= 1.0.0) slim (3.0.8) @@ -112,20 +117,19 @@ GEM tilt (>= 1.3.3, < 2.1) sqlite3 (1.3.13) temple (0.8.0) - thread_safe (0.3.6) - tilt (2.0.8) - tzinfo (1.2.3) - thread_safe (~> 0.1) + tilt (2.0.10) + tzinfo (2.0.4) + concurrent-ruby (~> 1.0) tzinfo-data (1.2017.2) tzinfo (>= 1.0.0) validate_url (1.0.2) activemodel (>= 3.0.0) addressable - websocket-driver (0.7.0) + websocket-driver (0.7.5) websocket-extensions (>= 0.1.0) - websocket-extensions (0.1.2) - xpath (2.1.0) - nokogiri (~> 1.3) + websocket-extensions (0.1.5) + xpath (3.2.0) + nokogiri (~> 1.8) PLATFORMS ruby @@ -153,4 +157,4 @@ DEPENDENCIES validate_url BUNDLED WITH - 1.15.3 + 1.17.3