From 0d3e06bacfcbbfe09f6d5de653e8697b7d3ebbe2 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Thu, 4 Apr 2024 22:40:44 +0000 Subject: [PATCH] fix: Gemfile to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-RUBY-ACTIONPACK-6274386 - https://snyk.io/vuln/SNYK-RUBY-NOKOGIRI-6228056 - https://snyk.io/vuln/SNYK-RUBY-RACK-6274383 - https://snyk.io/vuln/SNYK-RUBY-RACK-6274384 - https://snyk.io/vuln/SNYK-RUBY-RACK-6274385 - https://snyk.io/vuln/SNYK-RUBY-RDOC-6476871 - https://snyk.io/vuln/SNYK-RUBY-YARD-6305193 --- Gemfile | 32 ++++++++++++++++---------------- 1 file changed, 16 insertions(+), 16 deletions(-) diff --git a/Gemfile b/Gemfile index 8a6a9d8e..63757a13 100644 --- a/Gemfile +++ b/Gemfile @@ -2,7 +2,7 @@ source "https://rubygems.org" ruby "2.3.1" # -# Bundle edge Rails instead: gem "rails", github: "rails/rails" +# Bundle edge Rails instead: gem "rails", ">= 7.0.8.1", github: "rails/rails" gem "rails" gem "listen" @@ -14,11 +14,11 @@ gem "pg" gem "puma" # Use SCSS for stylesheets -gem "sass-rails" +gem "sass-rails", ">= 5.0.8" # Use Uglifier as compressor for JavaScript assets gem "uglifier" # Use CoffeeScript for .js.coffee assets and views -gem "coffee-rails" +gem "coffee-rails", ">= 4.2.2" # Turbolinks makes following links in your web application faster. # Read more: https://github.com/turbolinks/turbolinks @@ -30,15 +30,15 @@ gem "jbuilder" gem 'redis' # bundle exec rake doc:rails generates the API under doc/api. -gem "sdoc", group: :doc +gem "sdoc", ">= 1.0.0", group: :doc # Use ActiveModel has_secure_password # gem "bcrypt", "~> 3.1.7" # Use Rails Html Sanitizer for HTML sanitization -gem "rails-html-sanitizer" +gem "rails-html-sanitizer", ">= 1.0.4" -gem "react_on_rails", "~> 6.7.1" +gem "react_on_rails", "~> 6.7.2" # See https://github.com/sstephenson/execjs#readme for more supported runtimes # mini_racer is probably faster than therubyracer @@ -54,7 +54,7 @@ gem "awesome_print" group :development do # Access an IRB console on exceptions page and /console in development - gem "web-console" + gem "web-console", ">= 3.5.0" end group :development, :test do @@ -66,7 +66,7 @@ group :development, :test do ################################################################################ # Manage application processes gem "foreman" - gem "factory_girl_rails" + gem "factory_girl_rails", ">= 4.8.0" ################################################################################ # Linters and Security @@ -80,7 +80,7 @@ group :development, :test do ################################################################################ # Favorite debugging gems gem "pry" - gem "pry-doc" + gem "pry-doc", ">= 0.10.0" gem "pry-rails" gem "pry-stack_explorer" gem "pry-rescue" @@ -93,15 +93,15 @@ end group :test do gem "coveralls", require: false - gem "capybara" - gem "capybara-screenshot" - gem "capybara-webkit" - gem "chromedriver-helper" + gem "capybara", ">= 2.8.0" + gem "capybara-screenshot", ">= 1.0.15" + gem "capybara-webkit", ">= 1.12.0" + gem "chromedriver-helper", ">= 1.1.0" gem "database_cleaner" - gem "generator_spec" + gem "generator_spec", ">= 0.9.4" gem "launchy" - gem "poltergeist" - gem "rspec-rails", "~> 3" + gem "poltergeist", ">= 1.12.0" + gem "rspec-rails", "~> 3", ">= 3.6.0" gem "rspec-retry" gem "selenium-webdriver", "<3.0.0" end