From f6c2b6d78a6cba82c4f84c5dc3472a36f4875de9 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Wed, 23 Jul 2025 10:36:01 +0000 Subject: [PATCH] fix: Gemfile to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-RUBY-NOKOGIRI-10674179 - https://snyk.io/vuln/SNYK-RUBY-NOKOGIRI-10674176 - https://snyk.io/vuln/SNYK-RUBY-NOKOGIRI-10674184 - https://snyk.io/vuln/SNYK-RUBY-NOKOGIRI-10674192 - https://snyk.io/vuln/SNYK-RUBY-THOR-10843853 - https://snyk.io/vuln/SNYK-RUBY-NOKOGIRI-10674188 --- Gemfile | 14 +++++++------- 1 file changed, 7 insertions(+), 7 deletions(-) diff --git a/Gemfile b/Gemfile index 7f13d01..04f86fe 100644 --- a/Gemfile +++ b/Gemfile @@ -7,7 +7,7 @@ gem 'faraday' gem 'faraday_middleware' # Bundle edge Rails instead: gem 'rails', github: 'rails/rails' -gem 'rails', '~> 6.1' +gem 'rails', '~> 6.1', '>= 6.1.4.2' # Use postgresql as the database for Active Record gem 'pg', '>= 0.18', '< 2.0' # Use Puma as the app server @@ -15,7 +15,7 @@ gem 'puma', '~> 5.4' # Use SCSS for stylesheets gem 'sass-rails', '>= 6' # Transpile app-like JavaScript. Read more: https://github.com/rails/webpacker -gem 'webpacker', '~> 5.4' +gem 'webpacker', '~> 5.4', '>= 5.4.3' # Turbolinks makes navigating your web application faster. Read more: https://github.com/turbolinks/turbolinks gem 'turbolinks', '~> 5' # Build JSON APIs with ease. Read more: https://github.com/rails/jbuilder @@ -31,27 +31,27 @@ gem 'jbuilder', '~> 2.7' gem 'bootsnap', '>= 1.4.2', require: false group :development, :test do - gem 'dotenv-rails' + gem 'dotenv-rails', '>= 2.8.0' gem 'listen' gem 'pry', '0.14.1' end group :development do # Access an interactive console on exception pages or by calling 'console' anywhere in the code. - gem 'web-console', '>= 3.3.0' + gem 'web-console', '>= 4.2.0' end # Windows does not include zoneinfo files, so bundle the tzinfo-data gem gem 'tzinfo-data', platforms: %i[mingw mswin x64_mingw jruby] group :test do - gem 'capybara' + gem 'capybara', '>= 3.36.0' gem 'factory_bot' gem 'faker', git: 'https://github.com/faker-ruby/faker.git', branch: 'master' gem 'fuubar' - gem 'rspec-rails', '~> 5.1.0' + gem 'rspec-rails', '~> 6.0.0' gem 'simplecov', '0.17.1', require: false # CC last supported v0.17 gem 'vcr' - gem 'webdrivers' + gem 'webdrivers', '>= 4.7.0' gem 'webmock' end