Skip to content

Commit f16e774

Browse files
jfedericosnyk-botfarhatahmad
authored
[Snyk] Security upgrade rails from 7.1.3.4 to 7.1.4.1 (#5959)
* fix: Gemfile & Gemfile.lock to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-RUBY-ACTIONMAILER-8220269 - https://snyk.io/vuln/SNYK-RUBY-ACTIONPACK-8220162 - https://snyk.io/vuln/SNYK-RUBY-ACTIONPACK-8220268 - https://snyk.io/vuln/SNYK-RUBY-ACTIONTEXT-8220270 * Update Gemfile.lock --------- Co-authored-by: snyk-bot <snyk-bot@snyk.io> Co-authored-by: Ahmad Farhat <ahmad.af.farhat@gmail.com>
1 parent ab9781e commit f16e774

File tree

2 files changed

+71
-71
lines changed

2 files changed

+71
-71
lines changed

‎Gemfile

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -30,7 +30,7 @@ gem 'omniauth-rails_csrf_protection', '~> 1.0.2'
3030
gem 'pagy', '~> 6.0', '>= 6.0.0'
3131
gem 'pg'
3232
gem 'puma', '~> 5.6'
33-
gem 'rails', '~> 7.1.3', '>= 7.1.3.3'
33+
gem 'rails', '~> 7.1.4', '>= 7.1.4.1'
3434
gem 'redis', '~> 4.0'
3535
gem 'sprockets-rails', '>= 3.5.0'
3636
gem 'tzinfo-data', platforms: %i[mingw mswin x64_mingw jruby]

‎Gemfile.lock

Lines changed: 70 additions & 70 deletions
Original file line numberDiff line numberDiff line change
@@ -1,51 +1,51 @@
11
GEM
22
remote: https://rubygems.org/
33
specs:
4-
actioncable (7.1.3.4)
5-
actionpack (= 7.1.3.4)
6-
activesupport (= 7.1.3.4)
4+
actioncable (7.1.4.1)
5+
actionpack (= 7.1.4.1)
6+
activesupport (= 7.1.4.1)
77
nio4r (~> 2.0)
88
websocket-driver (>= 0.6.1)
99
zeitwerk (~> 2.6)
10-
actionmailbox (7.1.3.4)
11-
actionpack (= 7.1.3.4)
12-
activejob (= 7.1.3.4)
13-
activerecord (= 7.1.3.4)
14-
activestorage (= 7.1.3.4)
15-
activesupport (= 7.1.3.4)
10+
actionmailbox (7.1.4.1)
11+
actionpack (= 7.1.4.1)
12+
activejob (= 7.1.4.1)
13+
activerecord (= 7.1.4.1)
14+
activestorage (= 7.1.4.1)
15+
activesupport (= 7.1.4.1)
1616
mail (>= 2.7.1)
1717
net-imap
1818
net-pop
1919
net-smtp
20-
actionmailer (7.1.3.4)
21-
actionpack (= 7.1.3.4)
22-
actionview (= 7.1.3.4)
23-
activejob (= 7.1.3.4)
24-
activesupport (= 7.1.3.4)
20+
actionmailer (7.1.4.1)
21+
actionpack (= 7.1.4.1)
22+
actionview (= 7.1.4.1)
23+
activejob (= 7.1.4.1)
24+
activesupport (= 7.1.4.1)
2525
mail (~> 2.5, >= 2.5.4)
2626
net-imap
2727
net-pop
2828
net-smtp
2929
rails-dom-testing (~> 2.2)
30-
actionpack (7.1.3.4)
31-
actionview (= 7.1.3.4)
32-
activesupport (= 7.1.3.4)
30+
actionpack (7.1.4.1)
31+
actionview (= 7.1.4.1)
32+
activesupport (= 7.1.4.1)
3333
nokogiri (>= 1.8.5)
3434
racc
3535
rack (>= 2.2.4)
3636
rack-session (>= 1.0.1)
3737
rack-test (>= 0.6.3)
3838
rails-dom-testing (~> 2.2)
3939
rails-html-sanitizer (~> 1.6)
40-
actiontext (7.1.3.4)
41-
actionpack (= 7.1.3.4)
42-
activerecord (= 7.1.3.4)
43-
activestorage (= 7.1.3.4)
44-
activesupport (= 7.1.3.4)
40+
actiontext (7.1.4.1)
41+
actionpack (= 7.1.4.1)
42+
activerecord (= 7.1.4.1)
43+
activestorage (= 7.1.4.1)
44+
activesupport (= 7.1.4.1)
4545
globalid (>= 0.6.0)
4646
nokogiri (>= 1.8.5)
47-
actionview (7.1.3.4)
48-
activesupport (= 7.1.3.4)
47+
actionview (7.1.4.1)
48+
activesupport (= 7.1.4.1)
4949
builder (~> 3.1)
5050
erubi (~> 1.11)
5151
rails-dom-testing (~> 2.2)
@@ -60,22 +60,22 @@ GEM
6060
activemodel (>= 5.2.0)
6161
activestorage (>= 5.2.0)
6262
activesupport (>= 5.2.0)
63-
activejob (7.1.3.4)
64-
activesupport (= 7.1.3.4)
63+
activejob (7.1.4.1)
64+
activesupport (= 7.1.4.1)
6565
globalid (>= 0.3.6)
66-
activemodel (7.1.3.4)
67-
activesupport (= 7.1.3.4)
68-
activerecord (7.1.3.4)
69-
activemodel (= 7.1.3.4)
70-
activesupport (= 7.1.3.4)
66+
activemodel (7.1.4.1)
67+
activesupport (= 7.1.4.1)
68+
activerecord (7.1.4.1)
69+
activemodel (= 7.1.4.1)
70+
activesupport (= 7.1.4.1)
7171
timeout (>= 0.4.0)
72-
activestorage (7.1.3.4)
73-
actionpack (= 7.1.3.4)
74-
activejob (= 7.1.3.4)
75-
activerecord (= 7.1.3.4)
76-
activesupport (= 7.1.3.4)
72+
activestorage (7.1.4.1)
73+
actionpack (= 7.1.4.1)
74+
activejob (= 7.1.4.1)
75+
activerecord (= 7.1.4.1)
76+
activesupport (= 7.1.4.1)
7777
marcel (~> 1.0)
78-
activesupport (7.1.3.4)
78+
activesupport (7.1.4.1)
7979
base64
8080
bigdecimal
8181
concurrent-ruby (~> 1.0, >= 1.0.2)
@@ -106,7 +106,7 @@ GEM
106106
aws-sigv4 (~> 1.4)
107107
aws-sigv4 (1.5.2)
108108
aws-eventstream (~> 1, >= 1.0.2)
109-
base64 (0.1.1)
109+
base64 (0.1.2)
110110
bcrypt (3.1.18)
111111
bigbluebutton-api-ruby (1.9.1)
112112
childprocess (>= 1.0.1)
@@ -135,7 +135,7 @@ GEM
135135
activesupport
136136
childprocess (4.1.0)
137137
clamby (1.6.10)
138-
concurrent-ruby (1.3.3)
138+
concurrent-ruby (1.3.4)
139139
connection_pool (2.4.1)
140140
crack (0.4.5)
141141
rexml
@@ -158,7 +158,7 @@ GEM
158158
dotenv (= 2.8.1)
159159
railties (>= 3.2)
160160
drb (2.2.1)
161-
erubi (1.12.0)
161+
erubi (1.13.0)
162162
factory_bot (6.4.5)
163163
activesupport (>= 5.0.0)
164164
factory_bot_rails (6.4.3)
@@ -215,14 +215,14 @@ GEM
215215
json
216216
hiredis (0.6.3)
217217
httpclient (2.8.3)
218-
i18n (1.14.5)
218+
i18n (1.14.6)
219219
concurrent-ruby (~> 1.0)
220220
i18n-language-mapping (0.1.3.1)
221221
image_processing (1.12.2)
222222
mini_magick (>= 4.9.5, < 5)
223223
ruby-vips (>= 2.0.17, < 3)
224224
io-console (0.7.2)
225-
irb (1.13.1)
225+
irb (1.14.1)
226226
rdoc (>= 4.0.0)
227227
reline (>= 0.4.2)
228228
jbuilder (2.11.5)
@@ -261,13 +261,13 @@ GEM
261261
mini_magick (4.12.0)
262262
mini_mime (1.1.5)
263263
mini_portile2 (2.8.7)
264-
minitest (5.23.1)
264+
minitest (5.25.1)
265265
msgpack (1.6.0)
266266
multi_json (1.15.0)
267267
mutex_m (0.2.0)
268268
net-http (0.4.1)
269269
uri
270-
net-imap (0.4.12)
270+
net-imap (0.4.17)
271271
date
272272
net-protocol
273273
net-pop (0.1.2)
@@ -277,10 +277,10 @@ GEM
277277
net-smtp (0.5.0)
278278
net-protocol
279279
nio4r (2.7.3)
280-
nokogiri (1.16.5)
280+
nokogiri (1.16.7)
281281
mini_portile2 (~> 2.8.2)
282282
racc (~> 1.4)
283-
nokogiri (1.16.5-x86_64-linux)
283+
nokogiri (1.16.7-x86_64-linux)
284284
racc (~> 1.4)
285285
omniauth (2.1.2)
286286
hashie (>= 3.4.6)
@@ -317,8 +317,8 @@ GEM
317317
public_suffix (5.0.3)
318318
puma (5.6.8)
319319
nio4r (~> 2.0)
320-
racc (1.8.0)
321-
rack (2.2.9)
320+
racc (1.8.1)
321+
rack (2.2.10)
322322
rack-oauth2 (2.2.0)
323323
activesupport
324324
attr_required
@@ -336,30 +336,30 @@ GEM
336336
rackup (1.0.0)
337337
rack (< 3)
338338
webrick
339-
rails (7.1.3.4)
340-
actioncable (= 7.1.3.4)
341-
actionmailbox (= 7.1.3.4)
342-
actionmailer (= 7.1.3.4)
343-
actionpack (= 7.1.3.4)
344-
actiontext (= 7.1.3.4)
345-
actionview (= 7.1.3.4)
346-
activejob (= 7.1.3.4)
347-
activemodel (= 7.1.3.4)
348-
activerecord (= 7.1.3.4)
349-
activestorage (= 7.1.3.4)
350-
activesupport (= 7.1.3.4)
339+
rails (7.1.4.1)
340+
actioncable (= 7.1.4.1)
341+
actionmailbox (= 7.1.4.1)
342+
actionmailer (= 7.1.4.1)
343+
actionpack (= 7.1.4.1)
344+
actiontext (= 7.1.4.1)
345+
actionview (= 7.1.4.1)
346+
activejob (= 7.1.4.1)
347+
activemodel (= 7.1.4.1)
348+
activerecord (= 7.1.4.1)
349+
activestorage (= 7.1.4.1)
350+
activesupport (= 7.1.4.1)
351351
bundler (>= 1.15.0)
352-
railties (= 7.1.3.4)
352+
railties (= 7.1.4.1)
353353
rails-dom-testing (2.2.0)
354354
activesupport (>= 5.0.0)
355355
minitest
356356
nokogiri (>= 1.6)
357357
rails-html-sanitizer (1.6.0)
358358
loofah (~> 2.21)
359359
nokogiri (~> 1.14)
360-
railties (7.1.3.4)
361-
actionpack (= 7.1.3.4)
362-
activesupport (= 7.1.3.4)
360+
railties (7.1.4.1)
361+
actionpack (= 7.1.4.1)
362+
activesupport (= 7.1.4.1)
363363
irb
364364
rackup (>= 1.0.0)
365365
rake (>= 12.2)
@@ -371,7 +371,7 @@ GEM
371371
psych (>= 4.0.0)
372372
redis (4.8.0)
373373
regexp_parser (2.8.1)
374-
reline (0.5.9)
374+
reline (0.5.10)
375375
io-console (~> 0.5)
376376
remote_syslog_logger (1.0.4)
377377
syslog_protocol
@@ -449,14 +449,14 @@ GEM
449449
actionpack (>= 6.1)
450450
activesupport (>= 6.1)
451451
sprockets (>= 3.0.0)
452-
stringio (3.1.0)
452+
stringio (3.1.1)
453453
swd (2.0.2)
454454
activesupport (>= 3)
455455
attr_required (>= 0.0.5)
456456
faraday (~> 2.0)
457457
faraday-follow_redirects
458458
syslog_protocol (0.9.2)
459-
thor (1.3.1)
459+
thor (1.3.2)
460460
timeout (0.4.1)
461461
trailblazer-option (0.1.2)
462462
tzinfo (2.0.6)
@@ -487,7 +487,7 @@ GEM
487487
addressable (>= 2.8.0)
488488
crack (>= 0.3.2)
489489
hashdiff (>= 0.4.0, < 2.0.0)
490-
webrick (1.8.1)
490+
webrick (1.8.2)
491491
websocket (1.2.9)
492492
websocket-driver (0.7.6)
493493
websocket-extensions (>= 0.1.0)
@@ -496,7 +496,7 @@ GEM
496496
rexml
497497
xpath (3.2.0)
498498
nokogiri (~> 1.8)
499-
zeitwerk (2.6.15)
499+
zeitwerk (2.6.18)
500500

501501
PLATFORMS
502502
ruby
@@ -534,7 +534,7 @@ DEPENDENCIES
534534
pagy (~> 6.0, >= 6.0.0)
535535
pg
536536
puma (~> 5.6)
537-
rails (~> 7.1.3, >= 7.1.3.3)
537+
rails (~> 7.1.4, >= 7.1.4.1)
538538
redis (~> 4.0)
539539
remote_syslog_logger
540540
rspec-rails (>= 6.0.4)

0 commit comments

Comments
 (0)