From efdd5a06f6be2562d73aa80c23b2760652908542 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Thu, 28 Apr 2022 03:55:54 +0000 Subject: [PATCH] fix: Gemfile to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-RUBY-ACTIONVIEW-2803851 --- Gemfile | 10 +++++----- 1 file changed, 5 insertions(+), 5 deletions(-) diff --git a/Gemfile b/Gemfile index 2f54b1b..fd44ab2 100644 --- a/Gemfile +++ b/Gemfile @@ -2,7 +2,7 @@ source 'https://rubygems.org' # Bundle edge Rails instead: gem 'rails', github: 'rails/rails' -gem 'rails', '4.2.4' +gem 'rails', '5.2.7.1' # Use sqlite3 as the database for Active Record gem 'sqlite3' @@ -12,16 +12,16 @@ gem 'bootstrap-sass-extras' gem 'autoprefixer-rails' gem 'aptly' gem 'select2-rails' -gem 'devise' +gem 'devise', '>= 4.4.2' gem 'settingslogic' # gem "jquery-fileupload-rails" # Use SCSS for stylesheets -gem 'sass-rails', '~> 5.0' +gem 'sass-rails', '~> 5.0', '>= 5.0.5' # Use Uglifier as compressor for JavaScript assets gem 'uglifier', '>= 1.3.0' # Use CoffeeScript for .coffee assets and views -gem 'coffee-rails', '~> 4.1.0' +gem 'coffee-rails', '~> 4.2.2' # See https://github.com/rails/execjs#readme for more supported runtimes gem 'therubyracer', platforms: :ruby @@ -53,7 +53,7 @@ end group :development do # Access an IRB console on exception pages or by using <%= console %> in views - gem 'web-console', '~> 2.0' + gem 'web-console', '~> 2.2', '>= 2.2.1' # Spring speeds up development by keeping your application running in the background. Read more: https://github.com/rails/spring gem 'spring'