From 67ffc075bd83e8e78b131495c15287eace777b07 Mon Sep 17 00:00:00 2001
From: snyk-bot <snyk-bot@snyk.io>
Date: Wed, 8 Oct 2025 22:18:01 +0000
Subject: [PATCH] fix: Gemfile & Gemfile.lock to reduce vulnerabilities

The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-RUBY-RACK-13378928
- https://snyk.io/vuln/SNYK-RUBY-RACK-13378930
- https://snyk.io/vuln/SNYK-RUBY-RACK-13378932
---
 Gemfile      |  4 ++--
 Gemfile.lock | 61 ++++++++++++++++++++++++++--------------------------
 2 files changed, 32 insertions(+), 33 deletions(-)

diff --git a/Gemfile b/Gemfile
index 6af87499ac4015..e41b7e38d0ea2d 100644
--- a/Gemfile
+++ b/Gemfile
@@ -7,10 +7,10 @@ gem "html-proofer"
 
 # If you have any plugins, put them here!
 group :jekyll_plugins do
-  gem "sprockets", "~> 4.0.beta", {
+  gem "sprockets", "~> 4.0.0", {
     require: false
   }
-  gem 'jekyll-assets', '3.0.11'
+  gem 'jekyll-assets', '3.0.12'
   gem 'jekyll-algolia', '~> 1.2.3'
   gem 'jekyll-toc', '0.9.0'
   gem 'autoprefixer-rails'
diff --git a/Gemfile.lock b/Gemfile.lock
index 9873c55d906392..a1534dbb41894d 100644
--- a/Gemfile.lock
+++ b/Gemfile.lock
@@ -20,13 +20,13 @@ GIT
 GEM
   remote: https://rubygems.org/
   specs:
-    activesupport (5.2.3)
+    activesupport (5.2.8.1)
       concurrent-ruby (~> 1.0, >= 1.0.2)
       i18n (>= 0.7, < 2)
       minitest (~> 5.1)
       tzinfo (~> 1.1)
-    addressable (2.6.0)
-      public_suffix (>= 2.0.2, < 4.0)
+    addressable (2.8.7)
+      public_suffix (>= 2.0.2, < 7.0)
     algolia_html_extractor (2.5.2)
       json (~> 2.0)
       nokogiri (~> 1.8.2)
@@ -37,18 +37,18 @@ GEM
       execjs
     colorator (1.1.0)
     colorize (0.8.1)
-    concurrent-ruby (1.1.5)
-    em-websocket (0.5.1)
+    concurrent-ruby (1.3.5)
+    em-websocket (0.5.3)
       eventmachine (>= 0.12.9)
-      http_parser.rb (~> 0.6.0)
+      http_parser.rb (~> 0)
     ethon (0.12.0)
       ffi (>= 1.3.0)
     eventmachine (1.2.7)
-    execjs (2.7.0)
+    execjs (2.10.0)
     extras (0.3.0)
       forwardable-extended (~> 2.5)
-    fastimage (2.1.5)
-    ffi (1.10.0)
+    fastimage (2.4.0)
+    ffi (1.17.2)
     filesize (0.2.0)
     forwardable-extended (2.6.0)
     html-proofer (3.9.3)
@@ -60,9 +60,9 @@ GEM
       parallel (~> 1.3)
       typhoeus (~> 1.3)
       yell (~> 2.0)
-    http_parser.rb (0.6.0)
+    http_parser.rb (0.8.0)
     httpclient (2.8.3)
-    i18n (1.6.0)
+    i18n (1.14.7)
       concurrent-ruby (~> 1.0)
     jekyll-algolia (1.2.7)
       algolia_html_extractor (~> 2.5.2)
@@ -73,7 +73,7 @@ GEM
       nokogiri (~> 1.6)
       progressbar (~> 1.9)
       verbal_expressions (~> 0.1.5)
-    jekyll-assets (3.0.11)
+    jekyll-assets (3.0.12)
       activesupport (~> 5.0)
       execjs (~> 2.7)
       extras (~> 0.2)
@@ -87,8 +87,9 @@ GEM
     jekyll-extlinks (0.0.4)
       jekyll (~> 3.0)
       nokogiri (~> 1.6)
-    jekyll-sanity (1.2.0)
-      jekyll (~> 3.1)
+    jekyll-sanity (1.6.0)
+      jekyll (>= 3.1, < 5.0)
+      pathutil (~> 0.16)
     jekyll-sass-converter (1.5.2)
       sass (~> 3.4)
     jekyll-toc (0.9.0)
@@ -97,45 +98,43 @@ GEM
       listen (~> 3.0)
     json (2.2.0)
     kramdown (1.17.0)
-    liquid (4.0.3)
+    liquid (4.0.4)
     liquid-md5 (0.0.3)
       liquid (>= 2.5, < 5.0)
     liquid-tag-parser (1.9.0)
       extras (~> 0.3)
       liquid (>= 3.0, < 5.0)
-    listen (3.1.5)
-      rb-fsevent (~> 0.9, >= 0.9.4)
-      rb-inotify (~> 0.9, >= 0.9.7)
-      ruby_dep (~> 1.2)
+    listen (3.9.0)
+      rb-fsevent (~> 0.10, >= 0.10.3)
+      rb-inotify (~> 0.9, >= 0.9.10)
     mercenary (0.3.6)
     mini_portile2 (2.3.0)
-    minitest (5.11.3)
+    minitest (5.26.0)
     nokogiri (1.8.3)
       mini_portile2 (~> 2.3.0)
     parallel (1.17.0)
     pathutil (0.16.2)
       forwardable-extended (~> 2.6)
     progressbar (1.10.0)
-    public_suffix (3.0.3)
-    rack (2.0.7)
-    rb-fsevent (0.10.3)
-    rb-inotify (0.10.0)
+    public_suffix (6.0.2)
+    rack (2.2.19)
+    rb-fsevent (0.11.2)
+    rb-inotify (0.11.1)
       ffi (~> 1.0)
-    rouge (3.3.0)
-    ruby_dep (1.5.0)
+    rouge (3.30.0)
     safe_yaml (1.0.5)
     sass (3.7.4)
       sass-listen (~> 4.0.0)
     sass-listen (4.0.0)
       rb-fsevent (~> 0.9, >= 0.9.4)
       rb-inotify (~> 0.9, >= 0.9.7)
-    sprockets (4.0.0.beta8)
+    sprockets (4.0.3)
       concurrent-ruby (~> 1.0)
       rack (> 1, < 3)
     thread_safe (0.3.6)
     typhoeus (1.3.1)
       ethon (>= 0.9.0)
-    tzinfo (1.2.5)
+    tzinfo (1.2.11)
       thread_safe (~> 0.1)
     verbal_expressions (0.1.5)
     yell (2.1.0)
@@ -148,13 +147,13 @@ DEPENDENCIES
   html-proofer
   jekyll!
   jekyll-algolia (~> 1.2.3)
-  jekyll-assets (= 3.0.11)
+  jekyll-assets (= 3.0.12)
   jekyll-extlinks
   jekyll-toc (= 0.9.0)
   liquid-md5
   nokogiri (= 1.8.3)
-  sprockets (~> 4.0.beta)
+  sprockets (~> 4.0.0)
   tzinfo-data
 
 BUNDLED WITH
-   1.16.6
+   2.3.27