From 83520766df10bef48752698e37756d1b9ab45e96 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Fri, 18 Jul 2025 10:10:27 +0000 Subject: [PATCH] fix: Gemfile to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-RUBY-ACTIVERECORD-2960802 - https://snyk.io/vuln/SNYK-RUBY-RACK-2848599 - https://snyk.io/vuln/SNYK-RUBY-NOKOGIRI-7164639 - https://snyk.io/vuln/SNYK-RUBY-NOKOGIRI-8732769 - https://snyk.io/vuln/SNYK-RUBY-NOKOGIRI-8732779 - https://snyk.io/vuln/SNYK-RUBY-RACK-10074187 - https://snyk.io/vuln/SNYK-RUBY-RACK-9398129 - https://snyk.io/vuln/SNYK-RUBY-RAILSHTMLSANITIZER-3168647 - https://snyk.io/vuln/SNYK-RUBY-NOKOGIRI-2840634 - https://snyk.io/vuln/SNYK-RUBY-NOKOGIRI-2413994 - https://snyk.io/vuln/SNYK-RUBY-RACK-1061917 - https://snyk.io/vuln/SNYK-RUBY-ACTIONVIEW-2803851 - https://snyk.io/vuln/SNYK-RUBY-ACTIVERECORD-3237239 - https://snyk.io/vuln/SNYK-RUBY-LOOFAH-3168317 - https://snyk.io/vuln/SNYK-RUBY-LOOFAH-3168649 - https://snyk.io/vuln/SNYK-RUBY-NOKOGIRI-2620374 - https://snyk.io/vuln/SNYK-RUBY-NOKOGIRI-2630623 - https://snyk.io/vuln/SNYK-RUBY-NOKOGIRI-2630898 - https://snyk.io/vuln/SNYK-RUBY-NOKOGIRI-3052880 - https://snyk.io/vuln/SNYK-RUBY-RACK-2848600 - https://snyk.io/vuln/SNYK-RUBY-RACK-3356639 - https://snyk.io/vuln/SNYK-RUBY-RACK-6274385 - https://snyk.io/vuln/SNYK-RUBY-RAILSHTMLSANITIZER-3168646 - https://snyk.io/vuln/SNYK-RUBY-TZINFO-2958048 - https://snyk.io/vuln/SNYK-RUBY-NOKOGIRI-9510795 - https://snyk.io/vuln/SNYK-RUBY-RACK-8720151 - https://snyk.io/vuln/SNYK-RUBY-ACTIONPACK-8220162 - https://snyk.io/vuln/SNYK-RUBY-ACTIONPACK-8220268 - https://snyk.io/vuln/SNYK-RUBY-RACK-9058602 - https://snyk.io/vuln/SNYK-RUBY-RAILSHTMLSANITIZER-2935879 - https://snyk.io/vuln/SNYK-RUBY-NOKOGIRI-6228056 - https://snyk.io/vuln/SNYK-RUBY-ACTIVESUPPORT-3360028 - https://snyk.io/vuln/SNYK-RUBY-LOOFAH-3168318 - https://snyk.io/vuln/SNYK-RUBY-ACTIONPACK-2803847 - https://snyk.io/vuln/SNYK-RUBY-RAILSHTMLSANITIZER-3168316 - https://snyk.io/vuln/SNYK-RUBY-ACTIONPACK-3237231 - https://snyk.io/vuln/SNYK-RUBY-ACTIONPACK-3237232 - https://snyk.io/vuln/SNYK-RUBY-ACTIONPACK-6274388 - https://snyk.io/vuln/SNYK-RUBY-ACTIVESUPPORT-3237242 - https://snyk.io/vuln/SNYK-RUBY-GLOBALID-3237234 - https://snyk.io/vuln/SNYK-RUBY-RACK-3237233 - https://snyk.io/vuln/SNYK-RUBY-RACK-3237237 - https://snyk.io/vuln/SNYK-RUBY-RACK-3237240 - https://snyk.io/vuln/SNYK-RUBY-RACK-3360233 - https://snyk.io/vuln/SNYK-RUBY-RACK-6274383 - https://snyk.io/vuln/SNYK-RUBY-RACK-6274384 - https://snyk.io/vuln/SNYK-RUBY-NOKOGIRI-9510789 - https://snyk.io/vuln/SNYK-RUBY-ACTIONPACK-5741907 - https://snyk.io/vuln/SNYK-RUBY-ACTIVESUPPORT-5851458 - https://snyk.io/vuln/SNYK-RUBY-RAILTIES-5851410 - https://snyk.io/vuln/SNYK-RUBY-NOKOGIRI-9789079 - https://snyk.io/vuln/SNYK-RUBY-RAILSHTMLSANITIZER-3168648 - https://snyk.io/vuln/SNYK-RUBY-RACK-10074188 - https://snyk.io/vuln/SNYK-RUBY-ACTIONPACK-8496389 - https://snyk.io/vuln/SNYK-RUBY-NOKOGIRI-8453714 --- Gemfile | 22 +++++++++++----------- 1 file changed, 11 insertions(+), 11 deletions(-) diff --git a/Gemfile b/Gemfile index 624f97cdb..7e4a111d6 100644 --- a/Gemfile +++ b/Gemfile @@ -1,25 +1,25 @@ source 'https://rubygems.org' -gem 'rails', '= 5.2.6.2' +gem 'rails', '= 7.1.0' gem 'mysql2' gem 'puma' gem 'turbolinks', '~> 5' gem 'haml' gem 'nifty-utils' -gem 'nilify_blanks' -gem 'kaminari' +gem 'nilify_blanks', '>= 1.4.0' +gem 'kaminari', '>= 1.2.2' gem 'bcrypt' gem 'foreman' gem 'hashie' gem 'authie', '~> 3.0' gem 'dynamic_form' -gem 'changey' +gem 'changey', '>= 1.1.0' gem 'mail', :git => 'https://github.com/mikel/mail.git', :branch => '2-7-stable' gem 'autoprefixer-rails' gem 'bunny' gem 'secure_headers' gem 'chronic' gem 'basic_ssl' -gem 'clockwork' +gem 'clockwork', '>= 2.0.4' gem 'encrypto_signo' gem 'nio4r' gem 'sentry-raven' @@ -28,13 +28,13 @@ gem 'moonrope' gem 'jwt' gem 'highline', :require => false gem 'resolv', '~> 0.2.1' -gem 'dotenv-rails' +gem 'dotenv-rails', '>= 2.8.0' group :development, :assets do gem 'sass-rails', '~> 5.0' gem 'uglifier', '>= 1.3.0' - gem 'coffee-rails', '~> 4.2' - gem 'jquery-rails' + gem 'coffee-rails', '~> 5.0', '>= 5.0.0' + gem 'jquery-rails', '>= 4.3.4' end group :development, :test do @@ -42,9 +42,9 @@ group :development, :test do end group :development do - gem 'annotate' + gem 'annotate', '>= 2.7.5' gem 'rspec' - gem 'rspec-rails' - gem "factory_bot_rails", "~> 4.0" + gem 'rspec-rails', '>= 3.8.1' + gem "factory_bot_rails", "~> 5.0", ">= 5.0.0" gem "database_cleaner" end