diff --git a/Gemfile b/Gemfile index 0e5be060d..1e5cdfc3e 100644 --- a/Gemfile +++ b/Gemfile @@ -119,7 +119,7 @@ end gem "cssbundling-rails" gem "tzinfo-data", platforms: %i[mingw mswin x64_mingw jruby] -gem "excon", "~> 0.111.0" +gem "excon", ">= 1.5.0" # faraday is a transitive dependency, but we need to force the version to 2.14.1 to avoid a vulnerability. gem "faraday", ">= 2.14.1" diff --git a/Gemfile.lock b/Gemfile.lock index da3fe1c1f..cc5db7e08 100644 --- a/Gemfile.lock +++ b/Gemfile.lock @@ -202,7 +202,8 @@ GEM et-orbi (1.4.0) tzinfo event_stream_parser (1.0.0) - excon (0.111.0) + excon (1.5.0) + logger factory_bot (6.5.0) activesupport (>= 5.0.0) factory_bot_rails (6.4.4) @@ -305,13 +306,13 @@ GEM net-smtp (0.5.1) net-protocol nio4r (2.7.5) - nokogiri (1.19.3-arm64-darwin) + nokogiri (1.19.4-arm64-darwin) racc (~> 1.4) - nokogiri (1.19.3-x86_64-darwin) + nokogiri (1.19.4-x86_64-darwin) racc (~> 1.4) - nokogiri (1.19.3-x86_64-linux-gnu) + nokogiri (1.19.4-x86_64-linux-gnu) racc (~> 1.4) - nokogiri (1.19.3-x86_64-linux-musl) + nokogiri (1.19.4-x86_64-linux-musl) racc (~> 1.4) notifications-ruby-client (6.4.0) jwt (>= 1.5, < 4) @@ -600,7 +601,7 @@ DEPENDENCIES devise_two_factor_authentication dotenv-rails erb_lint - excon (~> 0.111.0) + excon (>= 1.5.0) factory_bot_rails faker faraday (>= 2.14.1)