Merge pull request #4911 from CitizenLabDotCo/CL-3535/remove-sinatra-…

…direct-dep
CitizenLabDotCo · May 17, 2023 · a378735 · a378735
2 parents ab43fd9 + 12bbeee
commit a378735
Show file tree

Hide file tree

Showing 2 changed files with 0 additions and 2 deletions.
diff --git a/back/Gemfile b/back/Gemfile
@@ -87,7 +87,6 @@ gem 'active_model_serializers', '~> 0.10.12'
 
 gem 'jwt', '~> 2.7.0'
 gem 'que', git: 'https://github.com/que-rb/que', branch: 'master', ref: '77c6b92952b821898c393239ce0e4047b17d7dae'
-gem 'sinatra', '~> 3.0.6' # Fixes CVE-2022-45442. Sinatra is a dependency of que-web, but que-web depends on sinatra >= 0.
 gem 'que-web'
 
 gem 'activerecord-import', '~> 1.4'

diff --git a/back/Gemfile.lock b/back/Gemfile.lock
@@ -1226,7 +1226,6 @@ DEPENDENCIES
   simple_segment (~> 1.5)
   simplecov
   simplecov-rcov
-  sinatra (~> 3.0.6)
   smart_groups!
   spring
   spring-commands-rspec