Update vulnerable gems and packages (#252)

* Bump semver from 6.3.0 to 6.3.1 (#235)
* Bump puma from 4.3.12 to 5.6.8 (#250)
* Bump @babel/traverse from 7.21.5 to 7.23.7 (#251)
* Bump rails from 6.1.7.3 to 6.1.7.5
This commit is contained in:
Riccardo Graziosi
2024-01-09 17:18:16 +01:00
committed by GitHub
parent 8faf36eb66
commit d9d052aa0a
3 changed files with 191 additions and 102 deletions

View File

@@ -1,60 +1,60 @@
GEM
remote: https://rubygems.org/
specs:
actioncable (6.1.7.3)
actionpack (= 6.1.7.3)
activesupport (= 6.1.7.3)
actioncable (6.1.7.5)
actionpack (= 6.1.7.5)
activesupport (= 6.1.7.5)
nio4r (~> 2.0)
websocket-driver (>= 0.6.1)
actionmailbox (6.1.7.3)
actionpack (= 6.1.7.3)
activejob (= 6.1.7.3)
activerecord (= 6.1.7.3)
activestorage (= 6.1.7.3)
activesupport (= 6.1.7.3)
actionmailbox (6.1.7.5)
actionpack (= 6.1.7.5)
activejob (= 6.1.7.5)
activerecord (= 6.1.7.5)
activestorage (= 6.1.7.5)
activesupport (= 6.1.7.5)
mail (>= 2.7.1)
actionmailer (6.1.7.3)
actionpack (= 6.1.7.3)
actionview (= 6.1.7.3)
activejob (= 6.1.7.3)
activesupport (= 6.1.7.3)
actionmailer (6.1.7.5)
actionpack (= 6.1.7.5)
actionview (= 6.1.7.5)
activejob (= 6.1.7.5)
activesupport (= 6.1.7.5)
mail (~> 2.5, >= 2.5.4)
rails-dom-testing (~> 2.0)
actionpack (6.1.7.3)
actionview (= 6.1.7.3)
activesupport (= 6.1.7.3)
actionpack (6.1.7.5)
actionview (= 6.1.7.5)
activesupport (= 6.1.7.5)
rack (~> 2.0, >= 2.0.9)
rack-test (>= 0.6.3)
rails-dom-testing (~> 2.0)
rails-html-sanitizer (~> 1.0, >= 1.2.0)
actiontext (6.1.7.3)
actionpack (= 6.1.7.3)
activerecord (= 6.1.7.3)
activestorage (= 6.1.7.3)
activesupport (= 6.1.7.3)
actiontext (6.1.7.5)
actionpack (= 6.1.7.5)
activerecord (= 6.1.7.5)
activestorage (= 6.1.7.5)
activesupport (= 6.1.7.5)
nokogiri (>= 1.8.5)
actionview (6.1.7.3)
activesupport (= 6.1.7.3)
actionview (6.1.7.5)
activesupport (= 6.1.7.5)
builder (~> 3.1)
erubi (~> 1.4)
rails-dom-testing (~> 2.0)
rails-html-sanitizer (~> 1.1, >= 1.2.0)
activejob (6.1.7.3)
activesupport (= 6.1.7.3)
activejob (6.1.7.5)
activesupport (= 6.1.7.5)
globalid (>= 0.3.6)
activemodel (6.1.7.3)
activesupport (= 6.1.7.3)
activerecord (6.1.7.3)
activemodel (= 6.1.7.3)
activesupport (= 6.1.7.3)
activestorage (6.1.7.3)
actionpack (= 6.1.7.3)
activejob (= 6.1.7.3)
activerecord (= 6.1.7.3)
activesupport (= 6.1.7.3)
activemodel (6.1.7.5)
activesupport (= 6.1.7.5)
activerecord (6.1.7.5)
activemodel (= 6.1.7.5)
activesupport (= 6.1.7.5)
activestorage (6.1.7.5)
actionpack (= 6.1.7.5)
activejob (= 6.1.7.5)
activerecord (= 6.1.7.5)
activesupport (= 6.1.7.5)
marcel (~> 1.0)
mini_mime (>= 1.1.0)
activesupport (6.1.7.3)
activesupport (6.1.7.5)
concurrent-ruby (~> 1.0, >= 1.0.2)
i18n (>= 1.6, < 2)
minitest (>= 5.1)
@@ -87,7 +87,7 @@ GEM
crass (1.0.6)
cssbundling-rails (1.1.2)
railties (>= 6.0.0)
date (3.3.3)
date (3.3.4)
devise (4.7.3)
bcrypt (~> 3.0)
orm_adapter (~> 0.1)
@@ -103,12 +103,12 @@ GEM
factory_bot (~> 5.0.2)
railties (>= 4.2.0)
ffi (1.15.5)
globalid (1.1.0)
activesupport (>= 5.0)
globalid (1.2.1)
activesupport (>= 6.1)
httparty (0.21.0)
mini_mime (>= 1.0.0)
multi_xml (>= 0.5.2)
i18n (1.13.0)
i18n (1.14.1)
concurrent-ruby (~> 1.0)
i18n-js (3.9.2)
i18n (>= 0.6.6)
@@ -132,7 +132,7 @@ GEM
listen (3.5.1)
rb-fsevent (~> 0.10, >= 0.10.3)
rb-inotify (~> 0.9, >= 0.9.10)
loofah (2.21.2)
loofah (2.22.0)
crass (~> 1.0.2)
nokogiri (>= 1.12.0)
mail (2.8.1)
@@ -143,58 +143,60 @@ GEM
marcel (1.0.2)
matrix (0.4.2)
method_source (1.0.0)
mini_mime (1.1.2)
mini_portile2 (2.8.2)
minitest (5.18.0)
mini_mime (1.1.5)
mini_portile2 (2.8.5)
minitest (5.20.0)
msgpack (1.5.2)
multi_xml (0.6.0)
net-imap (0.3.4)
net-imap (0.4.9.1)
date
net-protocol
net-pop (0.1.2)
net-protocol
net-protocol (0.2.1)
net-protocol (0.2.2)
timeout
net-smtp (0.3.3)
net-smtp (0.4.0.1)
net-protocol
nio4r (2.5.9)
nokogiri (1.14.4)
mini_portile2 (~> 2.8.0)
nio4r (2.7.0)
nokogiri (1.16.0)
mini_portile2 (~> 2.8.2)
racc (~> 1.4)
orm_adapter (0.5.0)
pg (1.3.5)
public_suffix (4.0.7)
puma (4.3.12)
puma (5.6.8)
nio4r (~> 2.0)
pundit (2.2.0)
activesupport (>= 3.0.0)
racc (1.6.2)
rack (2.2.7)
racc (1.7.3)
rack (2.2.8)
rack-test (2.1.0)
rack (>= 1.3)
rails (6.1.7.3)
actioncable (= 6.1.7.3)
actionmailbox (= 6.1.7.3)
actionmailer (= 6.1.7.3)
actionpack (= 6.1.7.3)
actiontext (= 6.1.7.3)
actionview (= 6.1.7.3)
activejob (= 6.1.7.3)
activemodel (= 6.1.7.3)
activerecord (= 6.1.7.3)
activestorage (= 6.1.7.3)
activesupport (= 6.1.7.3)
rails (6.1.7.5)
actioncable (= 6.1.7.5)
actionmailbox (= 6.1.7.5)
actionmailer (= 6.1.7.5)
actionpack (= 6.1.7.5)
actiontext (= 6.1.7.5)
actionview (= 6.1.7.5)
activejob (= 6.1.7.5)
activemodel (= 6.1.7.5)
activerecord (= 6.1.7.5)
activestorage (= 6.1.7.5)
activesupport (= 6.1.7.5)
bundler (>= 1.15.0)
railties (= 6.1.7.3)
railties (= 6.1.7.5)
sprockets-rails (>= 2.0.0)
rails-dom-testing (2.0.3)
activesupport (>= 4.2.0)
rails-dom-testing (2.2.0)
activesupport (>= 5.0.0)
minitest
nokogiri (>= 1.6)
rails-html-sanitizer (1.5.0)
loofah (~> 2.19, >= 2.19.1)
railties (6.1.7.3)
actionpack (= 6.1.7.3)
activesupport (= 6.1.7.3)
rails-html-sanitizer (1.6.0)
loofah (~> 2.21)
nokogiri (~> 1.14)
railties (6.1.7.5)
actionpack (= 6.1.7.5)
activesupport (= 6.1.7.5)
method_source
rake (>= 12.2)
thor (~> 1.0)
@@ -239,16 +241,16 @@ GEM
spring-watcher-listen (2.0.1)
listen (>= 2.7, < 4.0)
spring (>= 1.2, < 3.0)
sprockets (4.2.0)
sprockets (4.2.1)
concurrent-ruby (~> 1.0)
rack (>= 2.2.4, < 4)
sprockets-rails (3.4.2)
actionpack (>= 5.2)
activesupport (>= 5.2)
sprockets (>= 3.0.0)
thor (1.2.2)
thor (1.3.0)
tilt (2.0.10)
timeout (0.3.2)
timeout (0.4.1)
turbolinks (5.2.1)
turbolinks-source (~> 5.2)
turbolinks-source (5.2.0)
@@ -265,12 +267,12 @@ GEM
nokogiri (~> 1.6)
rubyzip (>= 1.3.0)
selenium-webdriver (~> 4.0, < 4.11)
websocket-driver (0.7.5)
websocket-driver (0.7.6)
websocket-extensions (>= 0.1.0)
websocket-extensions (0.1.5)
xpath (3.2.0)
nokogiri (~> 1.8)
zeitwerk (2.6.8)
zeitwerk (2.6.12)
PLATFORMS
ruby
@@ -289,9 +291,9 @@ DEPENDENCIES
kaminari (= 1.2.2)
listen (= 3.5.1)
pg (= 1.3.5)
puma (= 4.3.12)
puma (= 5.6.8)
pundit (= 2.2.0)
rails (= 6.1.7.3)
rails (= 6.1.7.5)
rake (= 12.3.3)
react-rails (= 2.6.2)
rspec-rails (= 4.0.2)