From 164ca4512f0d3f296f5803a9bc625a499c538967 Mon Sep 17 00:00:00 2001 From: Jesus Federico Date: Thu, 24 Aug 2023 10:13:51 -0400 Subject: [PATCH] [Snyk] Security upgrade react-rails from 2.7.1 to 3.0.0 (#161) * fix: Gemfile & Gemfile.lock to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-RUBY-RACK-1061917 * Update Gemfile.lock --------- Co-authored-by: snyk-bot --- Gemfile | 2 +- Gemfile.lock | 4 ++-- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/Gemfile b/Gemfile index 1382519f..7f6f56a0 100644 --- a/Gemfile +++ b/Gemfile @@ -45,7 +45,7 @@ gem 'doorkeeper', '~> 5.4.0' gem 'repost', '~> 0.3.8' gem 'lodash-rails' -gem 'react-rails', '>= 2.7.0' +gem 'react-rails', '>= 3.0.0' gem 'rails_lti2_provider', git: 'https://github.com/blindsidenetworks/rails_lti2_provider.git', tag: '0.1.5' diff --git a/Gemfile.lock b/Gemfile.lock index da8fa72e..b36f9e37 100644 --- a/Gemfile.lock +++ b/Gemfile.lock @@ -304,7 +304,7 @@ GEM ffi (~> 1.0) rdoc (6.5.0) psych (>= 4.0.0) - react-rails (2.7.1) + react-rails (3.0.0) babel-transpiler (>= 0.7.0) connection_pool execjs @@ -453,7 +453,7 @@ DEPENDENCIES rails (~> 6.1, >= 6.1.7.5) rails_lti2_provider! rdoc - react-rails (>= 2.7.0) + react-rails (>= 3.0.0) redis (~> 4.2) remote_syslog_logger repost (~> 0.3.8)