From 88bcca6ebdef5876802b33870351ac1195450f23 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Wed, 5 Apr 2023 00:01:04 +0000 Subject: [PATCH] fix: Gemfile to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-RUBY-ACTIONPACK-1290051 - https://snyk.io/vuln/SNYK-RUBY-ACTIONPACK-1290052 - https://snyk.io/vuln/SNYK-RUBY-ACTIONPACK-20198 - https://snyk.io/vuln/SNYK-RUBY-ACTIONPACK-20200 - https://snyk.io/vuln/SNYK-RUBY-ACTIONPACK-20256 - https://snyk.io/vuln/SNYK-RUBY-ACTIONPACK-20258 - https://snyk.io/vuln/SNYK-RUBY-ACTIONPACK-20264 - https://snyk.io/vuln/SNYK-RUBY-ACTIONPACK-2400638 - https://snyk.io/vuln/SNYK-RUBY-ACTIONPACK-3237231 - https://snyk.io/vuln/SNYK-RUBY-ACTIONPACK-3237232 - https://snyk.io/vuln/SNYK-RUBY-ACTIONPACK-569599 - https://snyk.io/vuln/SNYK-RUBY-ACTIONPACK-569600 - https://snyk.io/vuln/SNYK-RUBY-ACTIVERECORD-1314522 - https://snyk.io/vuln/SNYK-RUBY-ACTIVERECORD-20149 - https://snyk.io/vuln/SNYK-RUBY-ACTIVERECORD-20259 - https://snyk.io/vuln/SNYK-RUBY-ACTIVERECORD-2960802 - https://snyk.io/vuln/SNYK-RUBY-ACTIVERECORD-3237239 - https://snyk.io/vuln/SNYK-RUBY-ACTIVERESOURCE-568275 - https://snyk.io/vuln/SNYK-RUBY-ACTIVESUPPORT-20229 - https://snyk.io/vuln/SNYK-RUBY-ACTIVESUPPORT-3237242 - https://snyk.io/vuln/SNYK-RUBY-ACTIVESUPPORT-3360028 - https://snyk.io/vuln/SNYK-RUBY-ACTIVESUPPORT-569598 - https://snyk.io/vuln/SNYK-RUBY-ADDRESSABLE-1316242 - https://snyk.io/vuln/SNYK-RUBY-EXCON-20404 - https://snyk.io/vuln/SNYK-RUBY-EXCON-537866 - https://snyk.io/vuln/SNYK-RUBY-FARADAYMIDDLEWARE-20334 - https://snyk.io/vuln/SNYK-RUBY-FFI-22037 - https://snyk.io/vuln/SNYK-RUBY-GUARDLIVERELOAD-20361 - https://snyk.io/vuln/SNYK-RUBY-HAML-20341 - https://snyk.io/vuln/SNYK-RUBY-HAML-20362 - https://snyk.io/vuln/SNYK-RUBY-HAMLRAILS-20342 - https://snyk.io/vuln/SNYK-RUBY-I18N-72582 - https://snyk.io/vuln/SNYK-RUBY-JQUERYRAILS-20225 - https://snyk.io/vuln/SNYK-RUBY-JQUERYRAILS-450225 - https://snyk.io/vuln/SNYK-RUBY-JQUERYRAILS-565439 - https://snyk.io/vuln/SNYK-RUBY-JQUERYRAILS-575390 - https://snyk.io/vuln/SNYK-RUBY-JSON-560838 - https://snyk.io/vuln/SNYK-RUBY-MAIL-20244 - https://snyk.io/vuln/SNYK-RUBY-NOKOGIRI-1055008 - https://snyk.io/vuln/SNYK-RUBY-NOKOGIRI-1293239 - https://snyk.io/vuln/SNYK-RUBY-NOKOGIRI-1583442 - https://snyk.io/vuln/SNYK-RUBY-NOKOGIRI-1726792 - https://snyk.io/vuln/SNYK-RUBY-NOKOGIRI-20214 - https://snyk.io/vuln/SNYK-RUBY-NOKOGIRI-20245 - https://snyk.io/vuln/SNYK-RUBY-NOKOGIRI-20277 - https://snyk.io/vuln/SNYK-RUBY-NOKOGIRI-20292 - https://snyk.io/vuln/SNYK-RUBY-NOKOGIRI-20299 - https://snyk.io/vuln/SNYK-RUBY-NOKOGIRI-20367 - https://snyk.io/vuln/SNYK-RUBY-NOKOGIRI-20368 - https://snyk.io/vuln/SNYK-RUBY-NOKOGIRI-20432 - https://snyk.io/vuln/SNYK-RUBY-NOKOGIRI-22013 - https://snyk.io/vuln/SNYK-RUBY-NOKOGIRI-22014 - https://snyk.io/vuln/SNYK-RUBY-NOKOGIRI-2413994 - https://snyk.io/vuln/SNYK-RUBY-NOKOGIRI-2620374 - https://snyk.io/vuln/SNYK-RUBY-NOKOGIRI-2630623 - https://snyk.io/vuln/SNYK-RUBY-NOKOGIRI-2630898 - https://snyk.io/vuln/SNYK-RUBY-NOKOGIRI-2840634 - https://snyk.io/vuln/SNYK-RUBY-NOKOGIRI-3052880 - https://snyk.io/vuln/SNYK-RUBY-NOKOGIRI-3357692 - https://snyk.io/vuln/SNYK-RUBY-NOKOGIRI-3357693 - https://snyk.io/vuln/SNYK-RUBY-NOKOGIRI-459107 - https://snyk.io/vuln/SNYK-RUBY-NOKOGIRI-534637 - https://snyk.io/vuln/SNYK-RUBY-NOKOGIRI-552159 - https://snyk.io/vuln/SNYK-RUBY-NOKOGIRI-72433 - https://snyk.io/vuln/SNYK-RUBY-OAUTH-1012727 - https://snyk.io/vuln/SNYK-RUBY-RACK-1061917 - https://snyk.io/vuln/SNYK-RUBY-RACK-20230 - https://snyk.io/vuln/SNYK-RUBY-RACK-20399 - https://snyk.io/vuln/SNYK-RUBY-RACK-2848599 - https://snyk.io/vuln/SNYK-RUBY-RACK-2848600 - https://snyk.io/vuln/SNYK-RUBY-RACK-3356639 - https://snyk.io/vuln/SNYK-RUBY-RACK-538324 - https://snyk.io/vuln/SNYK-RUBY-RACK-569066 - https://snyk.io/vuln/SNYK-RUBY-RACK-572377 - https://snyk.io/vuln/SNYK-RUBY-RACK-72567 - https://snyk.io/vuln/SNYK-RUBY-RACKPROTECTION-20394 - https://snyk.io/vuln/SNYK-RUBY-RACKPROTECTION-20395 - https://snyk.io/vuln/SNYK-RUBY-RACKPROTECTION-22019 - https://snyk.io/vuln/SNYK-RUBY-RAILTIES-20454 - https://snyk.io/vuln/SNYK-RUBY-RAKE-552000 - https://snyk.io/vuln/SNYK-RUBY-RDOC-1279617 - https://snyk.io/vuln/SNYK-RUBY-RDOC-1316279 - https://snyk.io/vuln/SNYK-RUBY-RUBYZIP-20336 - https://snyk.io/vuln/SNYK-RUBY-RUBYZIP-22039 - https://snyk.io/vuln/SNYK-RUBY-RUBYZIP-469156 - https://snyk.io/vuln/SNYK-RUBY-SIDEKIQ-1090607 - https://snyk.io/vuln/SNYK-RUBY-SIDEKIQ-1729733 - https://snyk.io/vuln/SNYK-RUBY-SIDEKIQ-20216 - https://snyk.io/vuln/SNYK-RUBY-SIDEKIQ-20221 - https://snyk.io/vuln/SNYK-RUBY-SIDEKIQ-20233 - https://snyk.io/vuln/SNYK-RUBY-SIDEKIQ-2359050 - https://snyk.io/vuln/SNYK-RUBY-SINATRA-20469 - https://snyk.io/vuln/SNYK-RUBY-SINATRA-20488 - https://snyk.io/vuln/SNYK-RUBY-SINATRA-22027 - https://snyk.io/vuln/SNYK-RUBY-SINATRA-2806372 - https://snyk.io/vuln/SNYK-RUBY-SINATRA-3150405 - https://snyk.io/vuln/SNYK-RUBY-SPROCKETS-20199 - https://snyk.io/vuln/SNYK-RUBY-SPROCKETS-22032 - https://snyk.io/vuln/SNYK-RUBY-TWITTERBOOTSTRAPRAILS-20153 - https://snyk.io/vuln/SNYK-RUBY-TZINFO-2958048 - https://snyk.io/vuln/SNYK-RUBY-UGLIFIER-20236 --- Gemfile | 30 +++++++++++++++--------------- 1 file changed, 15 insertions(+), 15 deletions(-) diff --git a/Gemfile b/Gemfile index 1735c78..d2baccb 100644 --- a/Gemfile +++ b/Gemfile @@ -1,11 +1,11 @@ source 'https://rubygems.org/' -gem 'rails' +gem 'rails', '>= 6.1.7.3' gem 'redis' # gem 'hiredis', :git => 'git://github.com/nviennot/hiredis-rb.git' -gem 'sidekiq' +gem 'sidekiq', '>= 6.2.1' gem 'faraday', '~> 0.8.7' -gem 'faraday_middleware' +gem 'faraday_middleware', '>= 0.12.0' gem 'net-http-persistent' gem 'protobuf', git: 'git://github.com/nviennot/protobuf.git', :branch => 'dev' gem 'stretcher', git: 'git://github.com/PoseBiz/stretcher.git' @@ -17,22 +17,22 @@ gem 'oj' gem 'statsd-instrument' # gem 'airbrake' gem 'whenever', :require => false -gem 'nokogiri', :require => false +gem 'nokogiri', '>= 1.13.9', :require => false gem "ruby-progressbar", :require => false gem 'text', git: 'git://github.com/threedaymonk/text.git' -gem 'rubyzip', :require => false +gem 'rubyzip', '>= 1.3.0', :require => false gem 's3', :require => false # Front end only gem 'unicorn', :require => false gem 'slim' gem 'will_paginate' -gem 'haml-rails' -gem 'jquery-rails' +gem 'haml-rails', '>= 1.0.0' +gem 'jquery-rails', '>= 4.4.0' gem 'therubyracer' gem 'less-rails' gem 'twitter-bootstrap-rails', git: 'https://github.com/seyhunak/twitter-bootstrap-rails.git' -gem 'sinatra', :require => false +gem 'sinatra', '>= 2.2.3', :require => false gem 'coderay' # Front end only @@ -41,18 +41,18 @@ group :development do gem 'capistrano', :require => false gem 'capistrano_colors', :require => false gem 'rvm-capistrano', :require => false - gem 'guard-livereload', :require => false + gem 'guard-livereload', '>= 2.5.2', :require => false #gem 'gsl', :require => false # token validation - gem 'oauth', :require => false - gem 'oauth2', :require => false + gem 'oauth', '>= 0.5.5', :require => false + gem 'oauth2', '>= 1.4.11', :require => false gem 'signet', :require => false - gem 'aws-sdk', :require => false + gem 'aws-sdk', '>= 1.52.0', :require => false end group :assets do - gem 'sass-rails', '~> 3.2.3', :require => false - gem 'coffee-rails', '~> 3.2.1', :require => false - gem 'uglifier', '>= 1.0.3', :require => false + gem 'sass-rails', '~> 5.0.8', :require => false + gem 'coffee-rails', '~> 4.2.2', :require => false + gem 'uglifier', '>= 2.7.2', :require => false end