From 9ef49b2ac725a429be16744fe9a3cd615aae3cfd Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Fri, 1 Nov 2024 03:29:58 +0000 Subject: [PATCH] fix: Gemfile & Gemfile.lock to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-RUBY-REXML-8309365 --- Gemfile | 2 +- Gemfile.lock | 37 ++++++++++++++++++++----------------- 2 files changed, 21 insertions(+), 18 deletions(-) diff --git a/Gemfile b/Gemfile index 3c3565e0..b2b4cdbb 100644 --- a/Gemfile +++ b/Gemfile @@ -77,7 +77,7 @@ group :development do gem 'puma-ngrok-tunnel', '>= 1.2.0' # gem 'rails_real_favicon', '>= 0.1.0' gem 'listen' - gem 'rubocop', '>= 1.8.1', require: false + gem 'rubocop', '>= 1.66.0', require: false gem 'rubocop-performance', '>= 1.7.1' gem 'rubocop-rails', '~> 2.3.2' gem 'rubocop-rspec', '>= 1.43.2' diff --git a/Gemfile.lock b/Gemfile.lock index 220b0f8a..48ee8100 100644 --- a/Gemfile.lock +++ b/Gemfile.lock @@ -152,6 +152,8 @@ GEM io-like (0.3.1) jbuilder (2.11.2) activesupport (>= 5.0.0) + json (2.7.5) + language_server-protocol (3.17.0.3) listen (3.5.1) rb-fsevent (~> 0.10, >= 0.10.3) rb-inotify (~> 0.9, >= 0.9.10) @@ -178,9 +180,10 @@ GEM racc (~> 1.4) oj (3.11.5) pagy (3.7.3) - parallel (1.20.1) - parser (3.0.1.0) + parallel (1.26.3) + parser (3.3.5.1) ast (~> 2.4.1) + racc pg (1.2.3) pry (0.14.1) coderay (~> 1.1) @@ -227,24 +230,24 @@ GEM method_source rake (>= 0.8.7) thor (~> 1.0) - rainbow (3.0.0) + rainbow (3.1.1) rake (13.0.6) rb-fsevent (0.10.4) rb-inotify (0.10.1) ffi (~> 1.0) - regexp_parser (2.1.1) - rexml (3.2.5) - rubocop (1.13.0) + regexp_parser (2.9.2) + rubocop (1.68.0) + json (~> 2.3) + language_server-protocol (>= 3.17.0) parallel (~> 1.10) - parser (>= 3.0.0.0) + parser (>= 3.3.0.2) rainbow (>= 2.2.2, < 4.0) - regexp_parser (>= 1.8, < 3.0) - rexml - rubocop-ast (>= 1.2.0, < 2.0) + regexp_parser (>= 2.4, < 3.0) + rubocop-ast (>= 1.32.2, < 2.0) ruby-progressbar (~> 1.7) - unicode-display_width (>= 1.4.0, < 3.0) - rubocop-ast (1.4.1) - parser (>= 2.7.1.5) + unicode-display_width (>= 2.4.0, < 3.0) + rubocop-ast (1.33.0) + parser (>= 3.3.1.0) rubocop-performance (1.11.0) rubocop (>= 1.7.0, < 2.0) rubocop-ast (>= 0.4.0) @@ -254,7 +257,7 @@ GEM rubocop-rspec (2.2.0) rubocop (~> 1.0) rubocop-ast (>= 1.1.0) - ruby-progressbar (1.11.0) + ruby-progressbar (1.13.0) ruby2_keywords (0.0.4) rubyzip (2.3.0) sass (3.7.4) @@ -299,7 +302,7 @@ GEM turbolinks-source (5.2.0) tzinfo (2.0.4) concurrent-ruby (~> 1.0) - unicode-display_width (2.0.0) + unicode-display_width (2.6.0) web-console (4.1.0) actionview (>= 6.0.0) activemodel (>= 6.0.0) @@ -348,7 +351,7 @@ DEPENDENCIES puma-ngrok-tunnel (>= 1.2.0) rack-cors rails (~> 6.1.3.2) - rubocop (>= 1.8.1) + rubocop (>= 1.66.0) rubocop-performance (>= 1.7.1) rubocop-rails (~> 2.3.2) rubocop-rspec (>= 1.43.2) @@ -370,4 +373,4 @@ RUBY VERSION ruby 3.0.0p0 BUNDLED WITH - 2.2.24 + 2.2.3