From 34993ec48833ef56ff108dee728edcdccf5fbe52 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Sat, 21 Sep 2024 06:48:06 +0000 Subject: [PATCH] fix: Gemfile & Gemfile.lock to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-RUBY-PUMA-8062124 --- Gemfile | 2 +- Gemfile.lock | 10 ++++++++-- 2 files changed, 9 insertions(+), 3 deletions(-) diff --git a/Gemfile b/Gemfile index 9e19b81431..bee8952609 100644 --- a/Gemfile +++ b/Gemfile @@ -29,7 +29,7 @@ gem 'omniauth_openid_connect', '>= 0.6.1' gem 'omniauth-rails_csrf_protection', '~> 1.0.2' gem 'pagy', '~> 6.0', '>= 6.0.0' gem 'pg' -gem 'puma', '~> 5.6' +gem 'puma', '~> 5.6', '>= 5.6.9' gem 'rails', '~> 7.1.3', '>= 7.1.3.3' gem 'redis', '~> 4.0' gem 'sprockets-rails', '>= 3.5.0' diff --git a/Gemfile.lock b/Gemfile.lock index 86bfec749b..5a5442ea92 100644 --- a/Gemfile.lock +++ b/Gemfile.lock @@ -315,7 +315,7 @@ GEM psych (5.1.2) stringio public_suffix (5.0.3) - puma (5.6.8) + puma (5.6.9) nio4r (~> 2.0) racc (1.8.0) rack (2.2.9) @@ -533,7 +533,7 @@ DEPENDENCIES omniauth_openid_connect (>= 0.6.1) pagy (~> 6.0, >= 6.0.0) pg - puma (~> 5.6) + puma (~> 5.6, >= 5.6.9) rails (~> 7.1.3, >= 7.1.3.3) redis (~> 4.0) remote_syslog_logger @@ -551,3 +551,9 @@ DEPENDENCIES web-console (>= 4.2.1) webdrivers webmock + +RUBY VERSION + ruby 3.0.0p0 + +BUNDLED WITH + 2.2.3