[Snyk] Fix for 4 vulnerabilities

Gemfile

@@ -1,12 +1,12 @@
 source 'https://rubygems.org'
 
-gem "sinatra"
+gem "sinatra", ">= 2.0.0"
 gem "erubis", "~> 2.7.0"
 gem "ridley"
 gem "tinyconfig", "~> 0.1"
 gem "oj", platforms: :ruby         # to be used by multijson
 gem "jrjackson", platforms: :jruby # to be used by multijson
-gem "puma"
+gem "puma", ">= 2.12.0"
 gem "rubysl", "~> 2.0", platforms: :rbx
 gem "racc", platforms: :rbx
 gem "deep_merge"
@@ -17,10 +17,10 @@ gem "pygments.rb"
 gem "github-linguist"
 
 group :development do
-  gem "capybara"
-  gem "chef-zero"
+  gem "capybara", ">= 2.4.2"
+  gem "chef-zero", ">= 4.0"
   gem "cucumber"
-  gem "rack-test"
+  gem "rack-test", ">= 0.6.3"
   gem "wrong", "= 0.7.1"
   gem "pry"
   gem "rubysl-test-unit", "~> 2.0", platforms: :rbx

Gemfile.lock

@@ -2,6 +2,7 @@ GEM
   remote: https://rubygems.org/
   specs:
     addressable (2.3.6)
+    base64 (0.2.0)
     buff-config (1.0.1)
       buff-extensions (~> 1.0)
       varia_model (~> 0.4)
@@ -11,21 +12,24 @@ GEM
     buff-shell_out (0.2.0)
       buff-ruby_engine (~> 0.1.0)
     builder (3.2.2)
-    capybara (2.4.1)
-      mime-types (>= 1.16)
-      nokogiri (>= 1.3.3)
-      rack (>= 1.0.0)
-      rack-test (>= 0.5.4)
-      xpath (~> 2.0)
+    capybara (3.39.2)
+      addressable
+      matrix
+      mini_mime (>= 0.1.3)
+      nokogiri (~> 1.8)
+      rack (>= 1.6.0)
+      rack-test (>= 0.6.3)
+      regexp_parser (>= 1.5, < 3.0)
+      xpath (~> 3.2)
     celluloid (0.16.0)
       timers (~> 4.0.0)
     celluloid-io (0.16.1)
       celluloid (>= 0.16.0)
       nio4r (>= 1.0.0)
     charlock_holmes (0.7.3)
-    chef-zero (3.2.1)
-      ffi-yajl (~> 1.1)
-      hashie (~> 2.0)
+    chef-zero (4.6.2)
+      ffi-yajl (~> 2.2)
+      hashie (>= 2.0, < 4.0)
       mixlib-log (~> 1.3)
       rack
       uuidtools (~> 2.1)
@@ -42,10 +46,8 @@ GEM
     escape_utils (1.0.1)
     faraday (0.9.1)
       multipart-post (>= 1.2, < 3)
-    ffi (1.9.6)
-    ffi-yajl (1.3.1)
-      ffi (~> 1.5)
-      libyajl2 (~> 1.2)
+    ffi-yajl (2.6.0)
+      libyajl2 (>= 1.2)
     ffi2-generators (0.1.1)
     gherkin (2.12.2)
       multi_json (~> 1.3)
@@ -61,39 +63,47 @@ GEM
     hitimes (1.2.2)
     json (1.8.2)
     kramdown (1.4.0)
-    libyajl2 (1.2.0)
+    libyajl2 (2.1.0)
+    matrix (0.4.2)
     method_source (0.8.2)
     mime-types (1.25.1)
-    mini_portile (0.6.0)
+    mini_mime (1.1.5)
+    mini_portile2 (2.8.5)
     minitest (5.4.0)
     mixlib-authentication (1.3.0)
       mixlib-log
-    mixlib-log (1.6.0)
+    mixlib-log (1.7.1)
     multi_json (1.10.1)
     multi_test (0.1.1)
     multipart-post (2.0.0)
+    mustermann (3.0.0)
+      ruby2_keywords (~> 0.0.1)
     net-http-persistent (2.9.4)
     nio4r (1.1.0)
-    nokogiri (1.6.2.1)
-      mini_portile (= 0.6.0)
+    nokogiri (1.15.6)
+      mini_portile2 (~> 2.8.2)
+      racc (~> 1.4)
     oj (2.9.9)
     posix-spawn (0.3.8)
     predicated (0.2.6)
     pry (0.10.0)
       coderay (~> 1.1.0)
       method_source (~> 0.8.1)
       slop (~> 3.4)
-    puma (2.8.2)
-      rack (>= 1.1, < 2.0)
+    puma (3.12.6)
     pygments.rb (0.6.0)
       posix-spawn (~> 0.3.6)
       yajl-ruby (= 1.2.1)
     racc (1.4.11)
-    rack (1.6.0)
-    rack-protection (1.5.3)
-      rack
-    rack-test (0.6.2)
-      rack (>= 1.0)
+    rack (3.0.10)
+    rack-protection (4.0.0)
+      base64 (>= 0.1.0)
+      rack (>= 3.0.0, < 4)
+    rack-session (2.0.0)
+      rack (>= 3.0.0)
+    rack-test (2.1.0)
+      rack (>= 1.3)
+    regexp_parser (2.9.0)
     retryable (2.0.0)
     ridley (4.1.2)
       addressable
@@ -112,6 +122,7 @@ GEM
       retryable (>= 2.0.0)
       semverse (~> 1.1)
       varia_model (~> 0.4)
+    ruby2_keywords (0.0.5)
     ruby2ruby (2.1.1)
       ruby_parser (~> 3.1)
       sexp_processor (~> 4.0)
@@ -324,16 +335,18 @@ GEM
     rugged (0.21.0)
     semverse (1.2.1)
     sexp_processor (4.4.3)
-    sinatra (1.4.5)
-      rack (~> 1.4)
-      rack-protection (~> 1.4)
-      tilt (~> 1.3, >= 1.3.4)
+    sinatra (4.0.0)
+      mustermann (~> 3.0)
+      rack (>= 3.0.0, < 4)
+      rack-protection (= 4.0.0)
+      rack-session (>= 2.0.0, < 3)
+      tilt (~> 2.0)
     slop (3.5.0)
-    tilt (1.4.1)
+    tilt (2.3.0)
     timers (4.0.1)
       hitimes
     tinyconfig (0.1.1)
-    uuidtools (2.1.5)
+    uuidtools (2.2.0)
     varia_model (0.4.0)
       buff-extensions (~> 1.0)
       hashie (>= 2.0.2, < 3.0.0)
@@ -343,16 +356,16 @@ GEM
       ruby2ruby (>= 2.0.1)
       ruby_parser (>= 3.0.1)
       sexp_processor (>= 4.0)
-    xpath (2.0.0)
-      nokogiri (~> 1.3)
+    xpath (3.2.0)
+      nokogiri (~> 1.8)
     yajl-ruby (1.2.1)
 
 PLATFORMS
   ruby
 
 DEPENDENCIES
-  capybara
-  chef-zero
+  capybara (>= 2.4.2)
+  chef-zero (>= 4.0)
   coderay
   cucumber
   deep_merge
@@ -363,13 +376,16 @@ DEPENDENCIES
   kramdown
   oj
   pry
-  puma
+  puma (>= 2.12.0)
   pygments.rb
   racc
-  rack-test
+  rack-test (>= 0.6.3)
   ridley
   rubysl (~> 2.0)
   rubysl-test-unit (~> 2.0)
-  sinatra
+  sinatra (>= 2.0.0)
   tinyconfig (~> 0.1)
   wrong (= 0.7.1)
+
+BUNDLED WITH
+   2.1.4