fix: Gemfile & Gemfile.lock to reduce vulnerabilities

The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-RUBY-REXML-7814166
bigbluebutton · Aug 24, 2024 · 3f207fc · 3f207fc
1 parent c71c1ed
commit 3f207fc
Show file tree

Hide file tree

Showing 2 changed files with 21 additions and 18 deletions.
diff --git a/Gemfile b/Gemfile
@@ -72,8 +72,8 @@ group :development, :test do
 end
 
 group :development do
-  gem 'rubocop', '~> 1.63', '>= 1.63.0', require: false
-  gem 'rubocop-rails', '~> 2.25', '>= 2.25.0', require: false
+  gem 'rubocop', '~> 1.65', '>= 1.65.0', require: false
+  gem 'rubocop-rails', '~> 2.25', '>= 2.25.1', require: false
   # Access an IRB console on exception pages or by using <%= console %> anywhere in the code.
   gem 'listen', '~> 3.5'
   gem 'web-console', '>= 4.2.1'

diff --git a/Gemfile.lock b/Gemfile.lock
@@ -124,7 +124,7 @@ GEM
       coffee-script-source
       execjs
     coffee-script-source (1.12.2)
-    concurrent-ruby (1.3.3)
+    concurrent-ruby (1.3.4)
     connection_pool (2.4.1)
     coveralls_reborn (0.28.0)
       simplecov (~> 0.22.0)
@@ -165,15 +165,15 @@ GEM
     faraday-httpclient (1.0.1)
     faraday-multipart (1.0.4)
       multipart-post (~> 2)
-    faraday-net_http (1.0.1)
+    faraday-net_http (1.0.2)
     faraday-net_http_persistent (1.2.0)
     faraday-patron (1.0.0)
     faraday-rack (1.0.0)
     faraday-retry (1.0.3)
     faraday_middleware (1.2.0)
       faraday (~> 1.0)
     ffi (1.17.0)
-    ffi (1.17.0-x86_64-linux-gnu)
+    ffi (1.17.0-x86_64-linux)
     ffi-compiler (1.3.2)
       ffi (>= 1.15.5)
       rake
@@ -234,7 +234,7 @@ GEM
     method_source (1.1.0)
     mini_mime (1.1.5)
     mini_portile2 (2.8.7)
-    minitest (5.24.0)
+    minitest (5.25.1)
     minitest-stub_any_instance (1.0.3)
     mize (0.4.1)
       protocol (~> 2.0)
@@ -262,8 +262,8 @@ GEM
       faraday (>= 0.9, < 3.0)
       json
       rack (>= 1.4, < 4.0)
-    parallel (1.25.1)
-    parser (3.3.3.0)
+    parallel (1.26.3)
+    parser (3.3.4.2)
       ast (~> 2.4.1)
       racc
     pg (1.5.6)
@@ -272,10 +272,10 @@ GEM
       ruby_parser (~> 3.0)
     psych (5.1.2)
       stringio
-    public_suffix (6.0.0)
+    public_suffix (5.1.1)
     puma (6.4.2)
       nio4r (~> 2.0)
-    racc (1.8.0)
+    racc (1.8.1)
     rack (2.2.9)
     rack-test (2.1.0)
       rack (>= 1.3)
@@ -327,7 +327,7 @@ GEM
     repost (0.3.8)
     request_store (1.7.0)
       rack (>= 1.4)
-    rexml (3.3.1)
+    rexml (3.3.6)
       strscan
     rspec (3.13.0)
       rspec-core (~> 3.13.0)
@@ -350,20 +350,20 @@ GEM
       rspec-mocks (~> 3.13)
       rspec-support (~> 3.13)
     rspec-support (3.13.1)
-    rubocop (1.64.1)
+    rubocop (1.65.1)
       json (~> 2.3)
       language_server-protocol (>= 3.17.0)
       parallel (~> 1.10)
       parser (>= 3.3.0.2)
       rainbow (>= 2.2.2, < 4.0)
-      regexp_parser (>= 1.8, < 3.0)
+      regexp_parser (>= 2.4, < 3.0)
       rexml (>= 3.2.5, < 4.0)
       rubocop-ast (>= 1.31.1, < 2.0)
       ruby-progressbar (~> 1.7)
       unicode-display_width (>= 2.4.0, < 3.0)
-    rubocop-ast (1.31.3)
+    rubocop-ast (1.32.1)
       parser (>= 3.3.1.0)
-    rubocop-rails (2.25.0)
+    rubocop-rails (2.25.1)
       activesupport (>= 4.2.0)
       rack (>= 1.1)
       rubocop (>= 1.33.0, < 2.0)
@@ -436,7 +436,7 @@ GEM
     websocket-driver (0.7.6)
       websocket-extensions (>= 0.1.0)
     websocket-extensions (0.1.5)
-    zeitwerk (2.6.16)
+    zeitwerk (2.6.17)
 
 PLATFORMS
   ruby
@@ -479,8 +479,8 @@ DEPENDENCIES
   repost (~> 0.3.8)
   rspec
   rspec-rails (>= 6.1.3)
-  rubocop (~> 1.63, >= 1.63.0)
-  rubocop-rails (~> 2.25, >= 2.25.0)
+  rubocop (~> 1.65, >= 1.65.0)
+  rubocop-rails (~> 2.25, >= 2.25.1)
   sass-rails (>= 6.0.0)
   simple_oauth!
   spring
@@ -490,3 +490,6 @@ DEPENDENCIES
   tzinfo-data
   web-console (>= 4.2.1)
   webmock (>= 3.23.1)
+
+BUNDLED WITH
+   2.1.4