From 08760376f47f1a5db4bb4faa3106cf52ab4b2ace Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Wed, 15 Nov 2023 15:06:13 +0000 Subject: [PATCH] fix: Gemfile to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-RUBY-NOKOGIRI-6056551 - https://snyk.io/vuln/SNYK-RUBY-NOKOGIRI-6056552 - https://snyk.io/vuln/SNYK-RUBY-NOKOGIRI-6056553 - https://snyk.io/vuln/SNYK-RUBY-NOKOGIRI-6056554 - https://snyk.io/vuln/SNYK-RUBY-NOKOGIRI-6056555 --- Gemfile | 18 +++++++++--------- 1 file changed, 9 insertions(+), 9 deletions(-) diff --git a/Gemfile b/Gemfile index 83d0189..d7fb4c6 100644 --- a/Gemfile +++ b/Gemfile @@ -9,19 +9,19 @@ end # Bundle edge Rails instead: gem 'rails', github: 'rails/rails' # ruby 2.4.0 - formerly ruby '2.5.3' -gem 'rails', '~> 5.1.3' +gem 'rails', '~> 5.1.6', '>= 5.1.6.2' # Use sqlite3 as the database for Active Record # Use Puma as the app server gem 'puma', '~> 3.7' # Use SCSS for stylesheets -gem 'sass-rails', '~> 5.0' +gem 'sass-rails', '~> 5.0', '>= 5.0.8' # Use Uglifier as compressor for JavaScript assets gem 'uglifier', '>= 1.3.0' # See https://github.com/rails/execjs#readme for more supported runtimes # gem 'therubyracer', platforms: :ruby # Use CoffeeScript for .coffee assets and views -gem 'coffee-rails', '~> 4.2' +gem 'coffee-rails', '~> 5.0', '>= 5.0.0' # Turbolinks makes navigating your web application faster. Read more: https://github.com/turbolinks/turbolinks gem 'turbolinks', '~> 5' # Build JSON APIs with ease. Read more: https://github.com/rails/jbuilder @@ -43,13 +43,13 @@ group :development, :test do # Call 'byebug' anywhere in the code to stop execution and get a debugger console gem 'byebug', platforms: [:mri, :mingw, :x64_mingw] # Adds support for Capybara system testing and selenium driver - gem 'capybara', '~> 2.13' + gem 'capybara', '~> 3.0', '>= 3.0.0' gem 'selenium-webdriver' end group :development do # Access an IRB console on exception pages or by using <%= console %> anywhere in the code. - gem 'web-console', '>= 3.3.0' + gem 'web-console', '>= 4.0.0' gem 'listen', '>= 3.0.5', '< 3.2' # Spring speeds up development by keeping your application running in the background. Read more: https://github.com/rails/spring gem 'spring' @@ -61,10 +61,10 @@ end gem 'tzinfo-data', platforms: [:mingw, :mswin, :x64_mingw, :jruby] gem 'bootstrap-sass', '~> 3.3.6' -gem 'haml-rails' +gem 'haml-rails', '>= 2.0.0' gem 'high_voltage' gem 'mysql2', '~> 0.3.18' -gem 'devise' +gem 'devise', '>= 4.6.2' gem 'cancancan', '~> 2.0' #added Bootstrap theme @@ -75,7 +75,7 @@ group :development do gem 'guard-bundler' gem 'guard-rails' gem 'guard-rspec' - gem 'html2haml' + gem 'html2haml', '>= 2.3.0' gem 'hub', :require=>nil gem 'rails_apps_pages' gem 'rails_apps_testing' @@ -89,7 +89,7 @@ end group :development, :test do gem 'factory_girl_rails' gem 'faker' - gem 'rspec-rails' + gem 'rspec-rails', '>= 3.8.3' end group :test do