From 2bc7d09a9b8c47326585199f424547fefc5ec792 Mon Sep 17 00:00:00 2001
From: snyk-bot <snyk-bot@snyk.io>
Date: Thu, 30 May 2024 16:26:50 +0000
Subject: [PATCH] fix: Gemfile to reduce vulnerabilities

The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-RUBY-NOKOGIRI-7164639
---
 Gemfile | 28 ++++++++++++++--------------
 1 file changed, 14 insertions(+), 14 deletions(-)

diff --git a/Gemfile b/Gemfile
index 59fe718cd..72143bc3d 100644
--- a/Gemfile
+++ b/Gemfile
@@ -1,12 +1,12 @@
 source 'https://rubygems.org'
 
-gem 'rails', '5.2.8.1'
+gem 'rails', '6.0.0'
 
 gem 'sprockets'
 
 # Need to require sprockets-rails expicitly to get asset pipeline, at least untill we move to SASS
 # Pinning sprockets-rails to 2.3.3 so that everything doesn't blow up. It might be time to start thinking about webpack.
-gem 'sprockets-rails', '2.3.3'
+gem 'sprockets-rails', '3.0.0'
 # We need less-rails outside of the assets group so that assets will build in production
 gem 'less-rails'
 # We want non-digest versions of our assets for font-awesome
@@ -24,27 +24,27 @@ gem 'zip-zip'
 
 gem 'axlsx', git: 'https://github.com/randym/axlsx', branch: 'master'
 gem 'mongoid', '~> 7.1'
-gem 'devise'
+gem 'devise', '>= 4.8.1'
 gem 'systemu'
 gem 'multi_json'
 gem 'rest-client'
 # needed for parsing value sets (we need to use roo rather than rubyxl because the value sets are in xls rather than xlsx)
-gem 'roo', '~> 2.7'
+gem 'roo', '~> 2.9', '>= 2.9.0'
 
 
 gem 'oj' # Faster JSON
-gem 'apipie-rails'
+gem 'apipie-rails', '>= 0.5.19'
 gem 'maruku' # enable Markup for API documentation
-gem 'doorkeeper', '~> 4.4.0'
-gem "doorkeeper-mongodb", '~> 4.2.0'
+gem 'doorkeeper', '~> 5.0.0'
+gem "doorkeeper-mongodb", "~> 5.0.0"
 
 group :test, :development, :ci do
   gem 'pry'
   # Pinning teaspoon to 1.1.5 because of sprockets-rails 2.3.3
-  gem 'teaspoon', '1.1.5'
+  gem 'teaspoon', '1.2.0'
   gem "overcommit"
   gem 'rubocop'
-  gem 'teaspoon-jasmine'
+  gem 'teaspoon-jasmine', '>= 2.4.1'
   gem 'simplecov', :require => false
   gem 'minitest'
   gem 'rails_best_practices'
@@ -56,7 +56,7 @@ group :test, :development, :ci do
   gem 'selenium-webdriver'
   gem 'codecov', :require => false
   gem 'rails-controller-testing'
-  gem 'rails-html-sanitizer', '>=1.4.3'
+  gem 'rails-html-sanitizer', '>= 1.4.4'
 end
 
 group :test, :development do
@@ -86,12 +86,12 @@ end
 gem 'foreman'
 
 gem 'handlebars_assets', '0.16'
-gem 'jquery-rails'
+gem 'jquery-rails', '>= 4.5.0'
 
 # Browser Detection
 gem 'browser'
 
-gem "reverse_markdown", "~> 2.0"
-gem "tinymce-rails"
+gem "reverse_markdown", "~> 2.1", ">= 2.1.1"
+gem "tinymce-rails", ">= 5.8.2"
 
-gem "devise_saml_authenticatable"
+gem "devise_saml_authenticatable", ">= 1.7.0"