From 8e38e4a79c2b8243428a83a5d3f675a953de7618 Mon Sep 17 00:00:00 2001 From: "dependabot-preview[bot]" <27856297+dependabot-preview[bot]@users.noreply.github.com> Date: Tue, 18 May 2021 01:55:45 +0000 Subject: [PATCH] [Security] Bump puma from 3.11.2 to 4.3.8 Bumps [puma](https://github.com/puma/puma) from 3.11.2 to 4.3.8. **This update includes security fixes.** - [Release notes](https://github.com/puma/puma/releases) - [Changelog](https://github.com/puma/puma/blob/master/History.md) - [Commits](https://github.com/puma/puma/compare/v3.11.2...v4.3.8) Signed-off-by: dependabot-preview[bot] --- Gemfile | 2 +- Gemfile.lock | 6 ++++-- 2 files changed, 5 insertions(+), 3 deletions(-) diff --git a/Gemfile b/Gemfile index bccab3d..ac50239 100644 --- a/Gemfile +++ b/Gemfile @@ -2,7 +2,7 @@ source 'https://rubygems.org' ruby '2.4.1' # HTTP server for Ruby/Rack recommended by Heroku -gem 'puma', '~> 3.11' +gem 'puma', '~> 4.3' # Middleman gem 'middleman', '~> 4.2', '>= 4.2.1' diff --git a/Gemfile.lock b/Gemfile.lock index fd288f2..480a75e 100644 --- a/Gemfile.lock +++ b/Gemfile.lock @@ -82,6 +82,7 @@ GEM middleman-core (>= 3.3) rack-livereload (~> 0.3.15) minitest (5.10.3) + nio4r (2.5.7) padrino-helpers (0.13.3.4) i18n (~> 0.6, >= 0.6.7) padrino-support (= 0.13.3.4) @@ -90,7 +91,8 @@ GEM activesupport (>= 3.1) parallel (1.12.0) public_suffix (3.0.0) - puma (3.11.2) + puma (4.3.8) + nio4r (~> 2.0) rack (2.0.3) rack-contrib (2.0.1) rack (~> 2.0) @@ -121,7 +123,7 @@ DEPENDENCIES itcsscli (~> 0.1.15) middleman (~> 4.2, >= 4.2.1) middleman-livereload (~> 3.4, >= 3.4.6) - puma (~> 3.11) + puma (~> 4.3) rack-contrib (~> 2.0) slim (~> 3.0, >= 3.0.8) tzinfo-data