From 35e2ef4eb474434901d10787c8f4081a1bb49998 Mon Sep 17 00:00:00 2001 From: "dependabot-preview[bot]" <27856297+dependabot-preview[bot]@users.noreply.github.com> Date: Tue, 18 May 2021 02:01:57 +0000 Subject: [PATCH] [Security] Bump puma from 3.12.6 to 4.3.8 Bumps [puma](https://github.com/puma/puma) from 3.12.6 to 4.3.8. **This update includes a security fix.** - [Release notes](https://github.com/puma/puma/releases) - [Changelog](https://github.com/puma/puma/blob/master/History.md) - [Commits](https://github.com/puma/puma/compare/v3.12.6...v4.3.8) Signed-off-by: dependabot-preview[bot] --- Gemfile | 2 +- Gemfile.lock | 9 ++++++--- 2 files changed, 7 insertions(+), 4 deletions(-) diff --git a/Gemfile b/Gemfile index e3cd099625c..845ae43d4b0 100644 --- a/Gemfile +++ b/Gemfile @@ -79,7 +79,7 @@ group :development, :test do gem "knapsack_pro", "~> 1.1.0" gem "launchy", "~> 2.4.3" gem "letter_opener_web", "~> 1.3.4" - gem "puma", "~> 3.12.1" + gem "puma", "~> 4.3.8" gem "spring", "~> 2.0.1" gem "spring-commands-rspec", "~> 1.0.4" end diff --git a/Gemfile.lock b/Gemfile.lock index 32dec0fa812..5c71c158841 100644 --- a/Gemfile.lock +++ b/Gemfile.lock @@ -289,7 +289,9 @@ GEM mime-types (3.3.1) mime-types-data (~> 3.2015) mime-types-data (3.2020.0512) - mimemagic (0.3.5) + mimemagic (0.3.10) + nokogiri (~> 1) + rake mini_mime (1.0.2) mini_portile2 (2.4.0) minitest (5.14.1) @@ -358,7 +360,8 @@ GEM arel (>= 6) powerpack (0.1.2) public_suffix (4.0.5) - puma (3.12.6) + puma (4.3.8) + nio4r (~> 2.0) rack (2.2.3) rack-accept (0.4.5) rack (>= 0.4) @@ -612,7 +615,7 @@ DEPENDENCIES paranoia (~> 2.4.1) pg (~> 0.21.0) pg_search (~> 2.0.1) - puma (~> 3.12.1) + puma (~> 4.3.8) rails (= 5.0.7.2) rails-assets-leaflet! rails-assets-markdown-it (~> 8.2.1)!