From 98cec794a36abd63118ee54d828b278c518c020b Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Thu, 19 Jan 2023 22:53:07 -0800 Subject: [PATCH] fix: Gemfile to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-RUBY-ACTIONPACK-3237231 - https://snyk.io/vuln/SNYK-RUBY-ACTIONPACK-3237232 - https://snyk.io/vuln/SNYK-RUBY-ACTIVERECORD-3237236 - https://snyk.io/vuln/SNYK-RUBY-ACTIVERECORD-3237239 - https://snyk.io/vuln/SNYK-RUBY-ACTIVESUPPORT-3237242 - https://snyk.io/vuln/SNYK-RUBY-GLOBALID-3237234 - https://snyk.io/vuln/SNYK-RUBY-RACK-3237233 - https://snyk.io/vuln/SNYK-RUBY-RACK-3237237 - https://snyk.io/vuln/SNYK-RUBY-RACK-3237240 --- Gemfile | 12 ++++++------ 1 file changed, 6 insertions(+), 6 deletions(-) diff --git a/Gemfile b/Gemfile index dc7861d..d1c7dd7 100644 --- a/Gemfile +++ b/Gemfile @@ -4,15 +4,15 @@ git_source(:github) { |repo| "https://github.com/#{repo}.git" } ruby '~> 3.0' # Bundle edge Rails instead: gem 'rails', github: 'rails/rails' -gem 'rails', '~> 6.1' +gem 'rails', '~> 6.1', '>= 6.1.7.1' # Use Puma as the app server gem 'puma', '~> 5.0' # Transpile app-like JavaScript. Read more: https://github.com/rails/webpacker -gem 'webpacker', '~> 5.0' +gem 'webpacker', '~> 5.2', '>= 5.2.1' # Turbolinks makes navigating your web application faster. Read more: https://github.com/turbolinks/turbolinks gem 'turbolinks', '~> 5' # Build JSON APIs with ease. Read more: https://github.com/rails/jbuilder -gem 'jbuilder', '~> 2.7' +gem 'jbuilder', '~> 2.11', '>= 2.11.2' # Use Active Model has_secure_password # gem 'bcrypt', '~> 3.1.7' @@ -31,7 +31,7 @@ group :development do gem 'web-console', '>= 4.1.0' # Display performance information such as SQL time and flame graphs for each request in your browser. # Can be configured to work on production as well see: https://github.com/MiniProfiler/rack-mini-profiler/blob/master/README.md - gem 'rack-mini-profiler', '~> 2.0' + gem 'rack-mini-profiler', '~> 2.3', '>= 2.3.1' gem 'listen', '~> 3.3' # Spring speeds up development by keeping your application running in the background. Read more: https://github.com/rails/spring gem 'spring' @@ -39,7 +39,7 @@ end group :test do # Adds support for Capybara system testing and selenium driver - gem 'capybara', '>= 3.26' + gem 'capybara', '>= 3.35.3' gem 'selenium-webdriver' # Easy installation and use of web drivers to run system tests with browsers gem 'webdrivers' @@ -50,4 +50,4 @@ end # Windows does not include zoneinfo files, so bundle the tzinfo-data gem gem 'tzinfo-data', platforms: [:mingw, :mswin, :x64_mingw, :jruby] gem "twilio-ruby", "~> 5.46" -gem "bootstrap", "~> 4.5" +gem "bootstrap", "~> 4.6", ">= 4.6.0"