From 0826e3fb4b680812fb0a4e5d705e162eebc13bd6 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Fri, 22 Nov 2019 03:10:48 +0000 Subject: [PATCH] fix: Gemfile & Gemfile.lock to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-RUBY-NOKOGIRI-534637 --- Gemfile | 2 +- Gemfile.lock | 32 +++++++++++++++++--------------- 2 files changed, 18 insertions(+), 16 deletions(-) diff --git a/Gemfile b/Gemfile index 687943e..6bf24f4 100644 --- a/Gemfile +++ b/Gemfile @@ -3,7 +3,7 @@ source 'https://rubygems.org' gem 'maybe' gem 'awesome_print' gem 'wordref', :git => 'https://github.com/pcboy/wordref.git' -gem 'rtatoeba', '>= 1.0.2' +gem 'rtatoeba', '>= 1.1.0' gem 'rforvo', :git => 'https://github.com/pcboy/rforvo.git' gem 'trollop' gem 'furigana' diff --git a/Gemfile.lock b/Gemfile.lock index b695631..8d906a2 100644 --- a/Gemfile.lock +++ b/Gemfile.lock @@ -16,9 +16,9 @@ GIT GIT remote: https://github.com/pcboy/wordref.git - revision: d8c493e2d6a147ec88edf56883c93266c80fc123 + revision: 206e3140412829f533e96500ffc7030c1d7d1eb7 specs: - wordref (0.0.7) + wordref (0.0.8) attempt (= 0.3) multi_json (~> 1.12) nokogiri (~> 1.8) @@ -29,32 +29,34 @@ GEM attempt (0.3.0) structured_warnings (~> 0.3.0) awesome_print (1.8.0) + connection_pool (2.2.2) diff-lcs (1.3) - domain_name (0.5.20170404) + domain_name (0.5.20190701) unf (>= 0.0.5, < 1.0.0) furigana (0.0.8) diff-lcs http-cookie (1.0.3) domain_name (~> 0.5) maybe (1.1.0) - mechanize (2.7.5) + mechanize (2.7.6) domain_name (~> 0.5, >= 0.5.1) http-cookie (~> 1.0) mime-types (>= 1.17.2) net-http-digest_auth (~> 1.1, >= 1.1.1) - net-http-persistent (~> 2.5, >= 2.5.2) + net-http-persistent (>= 2.5.2) nokogiri (~> 1.6) ntlm-http (~> 0.1, >= 0.1.1) webrobots (>= 0.0.9, < 0.2) - mime-types (3.1) + mime-types (3.3) mime-types-data (~> 3.2015) - mime-types-data (3.2016.0521) - mini_portile2 (2.3.0) - multi_json (1.13.1) + mime-types-data (3.2019.1009) + mini_portile2 (2.4.0) + multi_json (1.14.1) net-http-digest_auth (1.4.1) - net-http-persistent (2.9.4) - nokogiri (1.8.1) - mini_portile2 (~> 2.3.0) + net-http-persistent (3.1.0) + connection_pool (~> 2.2) + nokogiri (1.10.5) + mini_portile2 (~> 2.4.0) ntlm-http (0.1.1) rspec (2.14.1) rspec-core (~> 2.14.0) @@ -70,7 +72,7 @@ GEM trollop (2.1.2) unf (0.1.4) unf_ext - unf_ext (0.0.7.4) + unf_ext (0.0.7.6) webrobots (0.1.2) PLATFORMS @@ -84,9 +86,9 @@ DEPENDENCIES imgin! maybe rforvo! - rtatoeba (>= 1.0.2) + rtatoeba (>= 1.1.0) trollop wordref! BUNDLED WITH - 1.16.1 + 1.17.3