From 8df19a6c70167bc59e0c55c898d7966e2c141687 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Sat, 23 Jul 2022 01:26:08 +0000 Subject: [PATCH] fix: Gemfile.lock to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-RUBY-TZINFO-2958048 --- Gemfile.lock | 55 ++++++++++++++++++++++------------------------------ 1 file changed, 23 insertions(+), 32 deletions(-) diff --git a/Gemfile.lock b/Gemfile.lock index 88c7358..9a8741b 100644 --- a/Gemfile.lock +++ b/Gemfile.lock @@ -2,11 +2,6 @@ GEM remote: https://rubygems.org/ remote: https://rails-assets.org/ specs: - activesupport (5.0.1) - concurrent-ruby (~> 1.0, >= 1.0.2) - i18n (~> 0.7) - minitest (~> 5.1) - tzinfo (~> 1.1) addressable (2.4.0) algoliasearch (1.10.0) httpclient (~> 2.7.1) @@ -30,30 +25,28 @@ GEM autoprefixer-rails (>= 5.2.1) sass (>= 3.3.4) colorator (0.1) - colored (1.2) - concurrent-ruby (1.0.2) - ethon (0.10.1) - ffi (>= 1.3.0) + concurrent-ruby (1.1.10) + ethon (0.15.0) + ffi (>= 1.15.0) execjs (2.6.0) extras (0.1.0) forwardable-extended (~> 2.5) fastimage (2.0.0) addressable (~> 2) - ffi (1.9.10) + ffi (1.15.5) font-awesome-sass (4.6.2) sass (>= 3.2) forwardable-extended (2.6.0) - html-proofer (3.4.0) - activesupport (>= 4.2, < 6.0) + html-proofer (4.2.0) addressable (~> 2.3) - colored (~> 1.2) - mercenary (~> 0.3.2) - nokogiri (~> 1.5) - parallel (~> 1.3) - typhoeus (~> 0.7) + mercenary (~> 0.3) + nokogiri (~> 1.13) + parallel (~> 1.10) + rainbow (~> 3.0) + typhoeus (~> 1.3) yell (~> 2.0) + zeitwerk (~> 2.5) httpclient (2.7.2) - i18n (0.7.0) jekyll (3.1.2) colorator (~> 0.1) jekyll-sass-converter (~> 1.0) @@ -87,18 +80,18 @@ GEM rb-fsevent (>= 0.9.3) rb-inotify (>= 0.9.7) mercenary (0.3.6) - mini_portile2 (2.1.0) - minitest (5.10.1) - nokogiri (1.6.8) - mini_portile2 (~> 2.1.0) - pkg-config (~> 1.1.7) + mini_portile2 (2.8.0) + nokogiri (1.13.7) + mini_portile2 (~> 2.8.0) + racc (~> 1.4) nuggets (1.0.0) - parallel (1.10.0) + parallel (1.22.1) pathutil (0.9.0) forwardable-extended (~> 2.6) - pkg-config (1.1.7) + racc (1.6.0) rack (1.6.4) rails-assets-jquery (2.2.3) + rainbow (3.1.1) rake (11.2.2) rb-fsevent (0.9.7) rb-inotify (0.9.7) @@ -112,15 +105,13 @@ GEM concurrent-ruby (~> 1.0) rack (> 1, < 3) thor (0.19.1) - thread_safe (0.3.5) - typhoeus (0.8.0) - ethon (>= 0.8.0) - tzinfo (1.2.2) - thread_safe (~> 0.1) + typhoeus (1.4.0) + ethon (>= 0.9.0) uglifier (3.1.4) execjs (>= 0.3.0, < 3) verbal_expressions (0.1.5) - yell (2.0.7) + yell (2.2.2) + zeitwerk (2.6.0) PLATFORMS ruby @@ -141,4 +132,4 @@ DEPENDENCIES uglifier BUNDLED WITH - 1.14.0 + 1.17.3