Skip to content

Commit

Permalink
fix: Gemfile & Gemfile.lock to reduce vulnerabilities
Browse files Browse the repository at this point in the history
The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-RUBY-REXML-8309365
  • Loading branch information
snyk-bot committed Nov 3, 2024
1 parent e92df40 commit a34c229
Show file tree
Hide file tree
Showing 2 changed files with 21 additions and 17 deletions.
2 changes: 1 addition & 1 deletion Gemfile
Original file line number Diff line number Diff line change
Expand Up @@ -69,7 +69,7 @@ group :development do

# run some pre commit hooks
gem 'pre-commit', require: false
gem 'rubocop', '>= 1.7.0', require: false
gem 'rubocop', '>= 1.66.0', require: false

# https://github.com/tmm1/stackprof
# sampling call-stack profiler for ruby
Expand Down
36 changes: 20 additions & 16 deletions Gemfile.lock
Original file line number Diff line number Diff line change
Expand Up @@ -168,6 +168,7 @@ GEM
i18n (1.10.0)
concurrent-ruby (~> 1.0)
jaro_winkler (1.5.4)
json (2.7.5)
json-schema (2.8.1)
addressable (>= 2.4)
json-schema-rspec (0.0.4)
Expand All @@ -180,6 +181,7 @@ GEM
kredis (1.3.0.1)
activesupport (>= 6.0.0)
redis (>= 4.2, < 6)
language_server-protocol (3.17.0.3)
loofah (2.19.1)
crass (~> 1.0.2)
nokogiri (>= 1.5.9)
Expand Down Expand Up @@ -216,9 +218,10 @@ GEM
oj_mimic_json (1.0.1)
pagy (5.10.1)
activesupport
parallel (1.22.1)
parser (3.1.1.0)
parallel (1.26.3)
parser (3.3.5.1)
ast (~> 2.4.1)
racc
pg (1.3.5)
pluginator (1.5.0)
pre-commit (0.39.0)
Expand Down Expand Up @@ -272,10 +275,10 @@ GEM
redis-client (>= 0.9.0)
redis-client (0.14.0)
connection_pool
regexp_parser (2.2.1)
regexp_parser (2.9.2)
reverse_markdown (2.1.1)
nokogiri
rexml (3.2.5)
rexml (3.3.9)
rspec (3.11.0)
rspec-core (~> 3.11.0)
rspec-expectations (~> 3.11.0)
Expand All @@ -297,17 +300,18 @@ GEM
rspec-mocks (~> 3.10)
rspec-support (~> 3.10)
rspec-support (3.11.0)
rubocop (1.26.1)
rubocop (1.68.0)
json (~> 2.3)
language_server-protocol (>= 3.17.0)
parallel (~> 1.10)
parser (>= 3.1.0.0)
parser (>= 3.3.0.2)
rainbow (>= 2.2.2, < 4.0)
regexp_parser (>= 1.8, < 3.0)
rexml
rubocop-ast (>= 1.16.0, < 2.0)
regexp_parser (>= 2.4, < 3.0)
rubocop-ast (>= 1.32.2, < 2.0)
ruby-progressbar (~> 1.7)
unicode-display_width (>= 1.4.0, < 3.0)
rubocop-ast (1.16.0)
parser (>= 3.1.1.0)
unicode-display_width (>= 2.4.0, < 3.0)
rubocop-ast (1.33.1)
parser (>= 3.3.1.0)
rubocop-minitest (0.19.0)
rubocop (>= 0.90, < 2.0)
rubocop-packaging (0.5.1)
Expand All @@ -329,7 +333,7 @@ GEM
rubocop-rails (~> 2.0)
rubocop-rspec (2.9.0)
rubocop (~> 1.19)
ruby-progressbar (1.11.0)
ruby-progressbar (1.13.0)
ruby-statistics (3.0.0)
ruby2_keywords (0.0.5)
sentry-raven (3.1.2)
Expand Down Expand Up @@ -370,7 +374,7 @@ GEM
concurrent-ruby (~> 1.0)
tzinfo-data (1.2022.1)
tzinfo (>= 1.0.0)
unicode-display_width (2.1.0)
unicode-display_width (2.6.0)
uniform_notifier (1.16.0)
webrick (1.7.0)
websocket-driver (0.7.5)
Expand Down Expand Up @@ -411,7 +415,7 @@ DEPENDENCIES
rails (~> 7.0.2, >= 7.0.2.3)
rails-html-sanitizer (>= 1.4.4)
rspec-rails (= 5.0.2)
rubocop (>= 1.7.0)
rubocop (>= 1.66.0)
rubocop-rails_config (>= 1.9.1)
rubocop-rspec (>= 2.1.0)
ruby-progressbar
Expand All @@ -428,4 +432,4 @@ RUBY VERSION
ruby 3.1.0p0

BUNDLED WITH
2.3.3
2.3.26

0 comments on commit a34c229

Please sign in to comment.