From 534fa4c5ccc92565b61204cbaf69a90c51c627dd Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Thu, 24 Aug 2023 05:21:51 +0000 Subject: [PATCH] fix: Gemfile & Gemfile.lock to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-RUBY-ACTIVESUPPORT-5851458 --- Gemfile | 4 ++-- Gemfile.lock | 28 ++++++++++++++-------------- 2 files changed, 16 insertions(+), 16 deletions(-) diff --git a/Gemfile b/Gemfile index 7ee649f..dd94667 100644 --- a/Gemfile +++ b/Gemfile @@ -8,9 +8,9 @@ gem 'git' gem 'nokogiri' gem 'rake' gem 'rake_circle_ci' -gem 'rake_github' +gem 'rake_github', '>= 0.11.0' gem 'rake_gpg' -gem 'rake_ssh' +gem 'rake_ssh', '>= 0.10.0' gem 'rake_terraform' gem 'rspec' gem 'rspec-terraform' diff --git a/Gemfile.lock b/Gemfile.lock index d341cea..24e55d4 100644 --- a/Gemfile.lock +++ b/Gemfile.lock @@ -1,12 +1,12 @@ GEM remote: https://rubygems.org/ specs: - activesupport (7.0.4) + activesupport (7.0.7.2) concurrent-ruby (~> 1.0, >= 1.0.2) i18n (>= 1.6, < 2) minitest (>= 5.1) tzinfo (~> 2.0) - addressable (2.8.1) + addressable (2.8.5) public_suffix (>= 2.0.2, < 6.0) ast (2.4.2) aws-eventstream (1.2.0) @@ -1365,7 +1365,7 @@ GEM term-ansicolor thor colored2 (3.1.2) - concurrent-ruby (1.1.10) + concurrent-ruby (1.2.2) confidante (0.28.0) activesupport (>= 4) hiera (~> 3.3) @@ -1377,7 +1377,7 @@ GEM partialruby (~> 0.3) sexp_processor (~> 4.0) excon (0.95.0) - faraday (2.7.1) + faraday (2.7.10) faraday-net_http (>= 2.0, < 3.1) ruby2_keywords (>= 0.0.4) faraday-net_http (3.0.2) @@ -1388,7 +1388,7 @@ GEM hamster (3.0.0) concurrent-ruby (~> 1.0) hiera (3.11.0) - i18n (1.12.0) + i18n (1.14.1) concurrent-ruby (~> 1.0) immutable-struct (2.4.1) ipaddress (0.8.3) @@ -1399,11 +1399,11 @@ GEM open4 (~> 1.3) mini_portile2 (2.8.0) minitar (0.9) - minitest (5.16.3) + minitest (5.19.0) nokogiri (1.13.10) mini_portile2 (~> 2.8.0) racc (~> 1.4) - octokit (4.25.1) + octokit (6.1.1) faraday (>= 1, < 3) sawyer (~> 0.9) open4 (1.3.4) @@ -1413,7 +1413,7 @@ GEM partialruby (0.3.0) ruby2ruby (~> 2) ruby_parser (~> 3) - public_suffix (5.0.1) + public_suffix (5.0.3) racc (1.6.1) rainbow (3.1.1) rake (13.0.6) @@ -1430,15 +1430,15 @@ GEM rake_factory (0.31.0) activesupport (>= 4) rake (~> 13.0) - rake_github (0.9.0) + rake_github (0.11.0) colored2 (~> 3.1) - octokit (~> 4.16) + octokit (>= 4.16, < 7.0) rake_factory (~> 0.23) sshkey (~> 2.0) rake_gpg (0.18.0) rake_factory (~> 0.23) ruby_gpg2 (~> 0.6) - rake_ssh (0.8.0) + rake_ssh (0.10.0) colored2 (~> 3.1) rake_factory (~> 0.23) sshkey (~> 2.0) @@ -1514,7 +1514,7 @@ GEM thor (1.2.1) tins (1.32.1) sync - tzinfo (2.0.5) + tzinfo (2.0.6) concurrent-ruby (~> 1.0) unicode-display_width (2.3.0) vault (0.17.0) @@ -1530,9 +1530,9 @@ DEPENDENCIES nokogiri rake rake_circle_ci - rake_github + rake_github (>= 0.11.0) rake_gpg - rake_ssh + rake_ssh (>= 0.10.0) rake_terraform rspec rspec-terraform