From f934e1cfb6a35c3e56c2239e6af5d8dc0f32abef Mon Sep 17 00:00:00 2001 From: "dependabot-preview[bot]" <27856297+dependabot-preview[bot]@users.noreply.github.com> Date: Tue, 18 May 2021 01:59:48 +0000 Subject: [PATCH] [Security] Bump puma from 3.11.4 to 4.3.8 Bumps [puma](https://github.com/puma/puma) from 3.11.4 to 4.3.8. **This update includes security fixes.** - [Release notes](https://github.com/puma/puma/releases) - [Changelog](https://github.com/puma/puma/blob/master/History.md) - [Commits](https://github.com/puma/puma/compare/v3.11.4...v4.3.8) Signed-off-by: dependabot-preview[bot] --- Gemfile | 2 +- Gemfile.lock | 9 ++++++--- 2 files changed, 7 insertions(+), 4 deletions(-) diff --git a/Gemfile b/Gemfile index 0d6bdd8..d2e6181 100644 --- a/Gemfile +++ b/Gemfile @@ -13,7 +13,7 @@ gem "pg", "~> 0.21.0" gem "geo_coord" # Use Puma as the app server -gem "puma", "~> 3.7" +gem "puma", "~> 4.3" gem "chronic" # Use SCSS for stylesheets gem "sass-rails", "~> 6.0" diff --git a/Gemfile.lock b/Gemfile.lock index e279742..ca65425 100644 --- a/Gemfile.lock +++ b/Gemfile.lock @@ -244,7 +244,9 @@ GEM mimemagic (~> 0.3.2) memoist (0.16.2) method_source (0.9.2) - mimemagic (0.3.3) + mimemagic (0.3.10) + nokogiri (~> 1) + rake mini_mime (1.0.2) mini_portile2 (2.4.0) minitest (5.12.2) @@ -274,7 +276,8 @@ GEM pry (>= 0.10.4) psych (3.1.0) public_suffix (4.0.1) - puma (3.11.4) + puma (4.3.8) + nio4r (~> 2.0) pundit (1.1.0) activesupport (>= 3.0.0) pundit-matchers (1.4.1) @@ -514,7 +517,7 @@ DEPENDENCIES pg (~> 0.21.0) pry-byebug (~> 3.5) pry-rails - puma (~> 3.7) + puma (~> 4.3) pundit (~> 1.1) pundit-matchers (~> 1.4.1) rails (~> 5.2.2.1)