From cfb71e68dc0440acc7b41921c1b57d7dbccde839 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Mon, 8 Jul 2024 16:20:38 +0000 Subject: [PATCH] fix: Gemfile & Gemfile.lock to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-RUBY-REXML-6861566 --- Gemfile | 4 ++-- Gemfile.lock | 41 ++++++++++++++++++++++------------------- 2 files changed, 24 insertions(+), 21 deletions(-) diff --git a/Gemfile b/Gemfile index 03e3539..a10e844 100644 --- a/Gemfile +++ b/Gemfile @@ -17,8 +17,8 @@ gem 'rake_ssh' gem 'rake_terraform' gem 'rspec' gem 'rspec-terraform' -gem 'rubocop' +gem 'rubocop', '>= 1.46.0' gem 'rubocop-rake' -gem 'rubocop-rspec' +gem 'rubocop-rspec', '>= 2.19.0' gem 'rubyzip' gem 'semantic' diff --git a/Gemfile.lock b/Gemfile.lock index eff8389..052adc5 100644 --- a/Gemfile.lock +++ b/Gemfile.lock @@ -1419,7 +1419,8 @@ GEM immutable-struct (2.4.1) ipaddress (0.8.3) jmespath (1.6.2) - json (2.6.3) + json (2.7.2) + language_server-protocol (3.17.0.3) lino (3.1.0) hamster (~> 3.0) open4 (~> 1.3) @@ -1431,13 +1432,15 @@ GEM faraday (>= 1, < 3) sawyer (~> 0.9) open4 (1.3.4) - parallel (1.22.1) - parser (3.2.1.0) + parallel (1.25.1) + parser (3.3.3.0) ast (~> 2.4.1) + racc partialruby (0.3.0) ruby2ruby (~> 2) ruby_parser (~> 3) public_suffix (5.0.1) + racc (1.8.0) rainbow (3.1.1) rake (13.0.6) rake_circle_ci (0.11.0) @@ -1481,8 +1484,9 @@ GEM rake_factory (~> 0.23) ruby-terraform (~> 1.4) rchardet (1.8.0) - regexp_parser (2.7.0) - rexml (3.2.5) + regexp_parser (2.9.2) + rexml (3.3.1) + strscan rspec (3.12.0) rspec-core (~> 3.12.0) rspec-expectations (~> 3.12.0) @@ -1503,26 +1507,24 @@ GEM confidante (>= 0.27) rspec (>= 3.0) ruby-terraform (= 1.7.0.pre.18) - rubocop (1.45.1) + rubocop (1.64.1) json (~> 2.3) + language_server-protocol (>= 3.17.0) parallel (~> 1.10) - parser (>= 3.2.0.0) + parser (>= 3.3.0.2) rainbow (>= 2.2.2, < 4.0) regexp_parser (>= 1.8, < 3.0) rexml (>= 3.2.5, < 4.0) - rubocop-ast (>= 1.24.1, < 2.0) + rubocop-ast (>= 1.31.1, < 2.0) ruby-progressbar (~> 1.7) unicode-display_width (>= 2.4.0, < 3.0) - rubocop-ast (1.26.0) - parser (>= 3.2.1.0) - rubocop-capybara (2.17.0) - rubocop (~> 1.41) + rubocop-ast (1.31.3) + parser (>= 3.3.1.0) rubocop-rake (0.6.0) rubocop (~> 1.0) - rubocop-rspec (2.18.1) - rubocop (~> 1.33) - rubocop-capybara (~> 2.17) - ruby-progressbar (1.11.0) + rubocop-rspec (3.0.2) + rubocop (~> 1.61) + ruby-progressbar (1.13.0) ruby-terraform (1.7.0.pre.18) immutable-struct (~> 2.4) lino (~> 3.0) @@ -1547,6 +1549,7 @@ GEM evalhook (>= 0.6.0) getsource (>= 0.1.0) sshkey (2.0.0) + strscan (3.1.0) sync (0.5.0) term-ansicolor (1.7.1) tins (~> 1.0) @@ -1555,7 +1558,7 @@ GEM sync tzinfo (2.0.6) concurrent-ruby (~> 1.0) - unicode-display_width (2.4.2) + unicode-display_width (2.5.0) vault (0.17.0) aws-sigv4 @@ -1579,9 +1582,9 @@ DEPENDENCIES rake_terraform rspec rspec-terraform - rubocop + rubocop (>= 1.46.0) rubocop-rake - rubocop-rspec + rubocop-rspec (>= 2.19.0) rubyzip semantic