From 0ba81ed1c12c47a9824f01d382fa24b1405f81d1 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Fri, 31 May 2024 08:56:59 +0000 Subject: [PATCH] fix: Gemfile & Gemfile.lock to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-RUBY-NOKOGIRI-7164639 --- Gemfile | 2 +- Gemfile.lock | 40 +++++++++++++++++++++++++--------------- 2 files changed, 26 insertions(+), 16 deletions(-) diff --git a/Gemfile b/Gemfile index f8620a6..dfd6bfb 100644 --- a/Gemfile +++ b/Gemfile @@ -17,7 +17,7 @@ gem "pygments.rb" gem "github-linguist" group :development do - gem "capybara" + gem "capybara", ">= 2.4.2" gem "chef-zero" gem "cucumber" gem "rack-test" diff --git a/Gemfile.lock b/Gemfile.lock index e552ee1..91aa0dc 100644 --- a/Gemfile.lock +++ b/Gemfile.lock @@ -11,12 +11,15 @@ GEM buff-shell_out (0.2.0) buff-ruby_engine (~> 0.1.0) builder (3.2.2) - capybara (2.4.1) - mime-types (>= 1.16) - nokogiri (>= 1.3.3) - rack (>= 1.0.0) - rack-test (>= 0.5.4) - xpath (~> 2.0) + capybara (3.39.2) + addressable + matrix + mini_mime (>= 0.1.3) + nokogiri (~> 1.8) + rack (>= 1.6.0) + rack-test (>= 0.6.3) + regexp_parser (>= 1.5, < 3.0) + xpath (~> 3.2) celluloid (0.16.0) timers (~> 4.0.0) celluloid-io (0.16.1) @@ -62,9 +65,11 @@ GEM json (1.8.2) kramdown (1.4.0) libyajl2 (1.2.0) + matrix (0.4.2) method_source (0.8.2) mime-types (1.25.1) - mini_portile (0.6.0) + mini_mime (1.1.5) + mini_portile2 (2.8.6) minitest (5.4.0) mixlib-authentication (1.3.0) mixlib-log @@ -74,8 +79,9 @@ GEM multipart-post (2.0.0) net-http-persistent (2.9.4) nio4r (1.1.0) - nokogiri (1.6.2.1) - mini_portile (= 0.6.0) + nokogiri (1.15.6) + mini_portile2 (~> 2.8.2) + racc (~> 1.4) oj (2.9.9) posix-spawn (0.3.8) predicated (0.2.6) @@ -89,11 +95,12 @@ GEM posix-spawn (~> 0.3.6) yajl-ruby (= 1.2.1) racc (1.4.11) - rack (1.6.0) + rack (1.6.13) rack-protection (1.5.3) rack - rack-test (0.6.2) - rack (>= 1.0) + rack-test (2.1.0) + rack (>= 1.3) + regexp_parser (2.9.2) retryable (2.0.0) ridley (4.1.2) addressable @@ -343,15 +350,15 @@ GEM ruby2ruby (>= 2.0.1) ruby_parser (>= 3.0.1) sexp_processor (>= 4.0) - xpath (2.0.0) - nokogiri (~> 1.3) + xpath (3.2.0) + nokogiri (~> 1.8) yajl-ruby (1.2.1) PLATFORMS ruby DEPENDENCIES - capybara + capybara (>= 2.4.2) chef-zero coderay cucumber @@ -373,3 +380,6 @@ DEPENDENCIES sinatra tinyconfig (~> 0.1) wrong (= 0.7.1) + +BUNDLED WITH + 2.1.4