From 7492ecd6fdf9c94edc5bfdf852978d9e81fd6556 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Wed, 19 May 2021 04:46:19 +0000 Subject: [PATCH] fix: Gemfile to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-RUBY-NOKOGIRI-1293239 - https://snyk.io/vuln/SNYK-RUBY-PUMA-1291014 --- Gemfile | 12 ++++++------ 1 file changed, 6 insertions(+), 6 deletions(-) diff --git a/Gemfile b/Gemfile index 925e56f4..96bf3c53 100644 --- a/Gemfile +++ b/Gemfile @@ -1,25 +1,25 @@ source 'https://rubygems.org' ruby '2.3.5' -gem 'devise', '~> 3.0' +gem 'devise', '~> 3.5', '>= 3.5.10' gem 'geokit', '~> 1.0' gem 'haml', '~> 5.0' gem 'http_accept_language', '~> 2.0' gem 'local_time', '~> 2.0' gem 'obscenity', '~> 1.0', '>= 1.0.2' gem 'pg' -gem 'rails', '~> 4.2.4' -gem 'rails_admin', '~> 1.0' +gem 'rails', '~> 4.2.10' +gem 'rails_admin', '~> 1.2', '>= 1.2.0' gem 'validates_formatting_of', '~> 0.9.0' gem 'paranoia', '~> 2.2' gem 'tzinfo-data', platforms: %i[mingw mswin x64_mingw] gem 'byebug', groups: %i[development test] -gem 'dotenv-rails', groups: %i[development test] +gem 'dotenv-rails', '>= 2.2.1', groups: %i[development test] group :assets do - gem 'sass-rails', '>= 4.0.3' + gem 'sass-rails', '>= 5.0.6' gem 'uglifier' end @@ -28,7 +28,7 @@ group :development do end group :production do - gem 'puma' + gem 'puma', '>= 4.3.8' gem 'rails_12factor' end