From 09cedbc0bec8a09b47492ab525e7040a46ed94c5 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Fri, 1 Nov 2024 05:29:34 +0000 Subject: [PATCH] fix: Gemfile & Gemfile.lock to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-RUBY-REXML-8309365 --- Gemfile | 2 +- Gemfile.lock | 35 ++++++++++++++++++++--------------- 2 files changed, 21 insertions(+), 16 deletions(-) diff --git a/Gemfile b/Gemfile index ae5b641..e25971f 100644 --- a/Gemfile +++ b/Gemfile @@ -25,7 +25,7 @@ group :development, :test do gem 'byebug', platform: :mri # Call 'byebug' anywhere in the code to stop execution and get a debugger console gem 'rb-readline' gem 'rspec-rails', '~> 3.5' - gem 'rubocop', '~> 1.19.0' # Enforce ruby code style + gem 'rubocop', '~> 1.66.0' # Enforce ruby code style gem 'rubocop-rails', '~> 2.12' gem 'rubocop-rspec', '~> 2.5' gem 'simplecov', require: false # determine code coverage of tests diff --git a/Gemfile.lock b/Gemfile.lock index 3ed28a1..fe47369 100644 --- a/Gemfile.lock +++ b/Gemfile.lock @@ -77,6 +77,8 @@ GEM jbuilder (2.11.5) actionview (>= 5.0.0) activesupport (>= 5.0.0) + json (2.7.5) + language_server-protocol (3.17.0.3) listen (3.0.8) rb-fsevent (~> 0.9, >= 0.9.4) rb-inotify (~> 0.9, >= 0.9.7) @@ -112,15 +114,15 @@ GEM nokogiri (1.12.5) mini_portile2 (~> 2.6.1) racc (~> 1.4) - parallel (1.23.0) - parser (3.2.2.3) + parallel (1.26.3) + parser (3.3.5.1) ast (~> 2.4.1) racc pg (0.21.0) public_suffix (4.0.7) puma (4.3.12) nio4r (~> 2.0) - racc (1.7.1) + racc (1.8.1) rack (2.2.7) rack-test (2.1.0) rack (>= 1.3) @@ -154,10 +156,10 @@ GEM rb-inotify (0.10.1) ffi (~> 1.0) rb-readline (0.5.5) - regexp_parser (2.8.1) + regexp_parser (2.9.2) request_store (1.5.1) rack (>= 1.4) - rexml (3.2.5) + rexml (3.3.9) rspec-core (3.9.3) rspec-support (~> 3.9.3) rspec-expectations (3.9.4) @@ -175,17 +177,18 @@ GEM rspec-mocks (~> 3.9.0) rspec-support (~> 3.9.0) rspec-support (3.9.4) - rubocop (1.19.1) + rubocop (1.66.1) + json (~> 2.3) + language_server-protocol (>= 3.17.0) parallel (~> 1.10) - parser (>= 3.0.0.0) + parser (>= 3.3.0.2) rainbow (>= 2.2.2, < 4.0) - regexp_parser (>= 1.8, < 3.0) - rexml - rubocop-ast (>= 1.9.1, < 2.0) + regexp_parser (>= 2.4, < 3.0) + rubocop-ast (>= 1.32.2, < 2.0) ruby-progressbar (~> 1.7) - unicode-display_width (>= 1.4.0, < 3.0) - rubocop-ast (1.17.0) - parser (>= 3.1.1.0) + unicode-display_width (>= 2.4.0, < 3.0) + rubocop-ast (1.33.0) + parser (>= 3.3.1.0) rubocop-rails (2.14.2) activesupport (>= 4.2.0) rack (>= 1.1) @@ -222,7 +225,7 @@ GEM timeout (0.3.2) tzinfo (1.2.11) thread_safe (~> 0.1) - unicode-display_width (2.4.2) + unicode-display_width (2.6.0) webmock (3.18.1) addressable (>= 2.8.0) crack (>= 0.3.2) @@ -248,7 +251,7 @@ DEPENDENCIES rails (~> 5.2) rb-readline rspec-rails (~> 3.5) - rubocop (~> 1.19.0) + rubocop (~> 1.66.0) rubocop-rails (~> 2.12) rubocop-rspec (~> 2.5) simplecov @@ -257,3 +260,5 @@ DEPENDENCIES strong_migrations (~> 0.3) webmock +BUNDLED WITH + 2.1.4