Browse Source

CLDC-4237: Resolve vulnerable dependencies

pull/3190/head
samyou-softwire 3 weeks ago
parent
commit
bd7f26bc08
  1. 4
      Gemfile
  2. 14
      Gemfile.lock

4
Gemfile

@ -51,7 +51,7 @@ gem "paper_trail-globalid"
gem "pundit" gem "pundit"
# Request rate limiting # Request rate limiting
gem "rack", ">= 2.2.6.3" gem "rack", "~> 3.1.20"
gem "rack-attack" gem "rack-attack"
gem "redis", "~> 4.8" gem "redis", "~> 4.8"
# Receive exceptions and configure alerts # Receive exceptions and configure alerts
@ -72,7 +72,7 @@ gem "sidekiq-cron"
gem "unread" gem "unread"
# Pinning versions to address vulnerabilities # Pinning versions to address vulnerabilities
gem "nokogiri", "~> 1.18.9" gem "nokogiri", "~> 1.19.1"
gem "thor", "~> 1.4.0" gem "thor", "~> 1.4.0"
group :development, :test do group :development, :test do

14
Gemfile.lock

@ -297,13 +297,13 @@ GEM
net-smtp (0.5.1) net-smtp (0.5.1)
net-protocol net-protocol
nio4r (2.7.4) nio4r (2.7.4)
nokogiri (1.18.9-arm64-darwin) nokogiri (1.19.1-arm64-darwin)
racc (~> 1.4) racc (~> 1.4)
nokogiri (1.18.9-x86_64-darwin) nokogiri (1.19.1-x86_64-darwin)
racc (~> 1.4) racc (~> 1.4)
nokogiri (1.18.9-x86_64-linux-gnu) nokogiri (1.19.1-x86_64-linux-gnu)
racc (~> 1.4) racc (~> 1.4)
nokogiri (1.18.9-x86_64-linux-musl) nokogiri (1.19.1-x86_64-linux-musl)
racc (~> 1.4) racc (~> 1.4)
notifications-ruby-client (6.0.0) notifications-ruby-client (6.0.0)
jwt (>= 1.5, < 3) jwt (>= 1.5, < 3)
@ -352,7 +352,7 @@ GEM
activesupport (>= 3.0.0) activesupport (>= 3.0.0)
raabro (1.4.0) raabro (1.4.0)
racc (1.8.1) racc (1.8.1)
rack (3.1.18) rack (3.1.20)
rack-attack (6.7.0) rack-attack (6.7.0)
rack (>= 1.0, < 4) rack (>= 1.0, < 4)
rack-mini-profiler (3.3.1) rack-mini-profiler (3.3.1)
@ -593,7 +593,7 @@ DEPENDENCIES
json-schema json-schema
listen (~> 3.3) listen (~> 3.3)
method_source (~> 1.1) method_source (~> 1.1)
nokogiri (~> 1.18.9) nokogiri (~> 1.19.1)
notifications-ruby-client notifications-ruby-client
overcommit (>= 0.37.0) overcommit (>= 0.37.0)
paper_trail (~> 15.2) paper_trail (~> 15.2)
@ -605,7 +605,7 @@ DEPENDENCIES
pry-byebug pry-byebug
puma (~> 6.4) puma (~> 6.4)
pundit pundit
rack (>= 2.2.6.3) rack (~> 3.1.20)
rack-attack rack-attack
rack-mini-profiler (~> 3.3.0) rack-mini-profiler (~> 3.3.0)
rails (~> 7.2.2) rails (~> 7.2.2)

Loading…
Cancel
Save