Skip to content
This repository has been archived by the owner on Dec 2, 2024. It is now read-only.

Vuln fixes #312

Merged
merged 8 commits into from
Mar 2, 2023
Merged

Vuln fixes #312

merged 8 commits into from
Mar 2, 2023

Conversation

jtuttle
Copy link
Member

@jtuttle jtuttle commented Feb 28, 2023

Cherry-picking multiple dependabot alerts into one PR.

dependabot bot added 2 commits February 28, 2023 16:48
Bumps [golang.org/x/sys](https://github.com/golang/sys) from 0.0.0-20211214234402-4825e8c3871d to 0.1.0.
- [Release notes](https://github.com/golang/sys/releases)
- [Commits](https://github.com/golang/sys/commits/v0.1.0)

---
updated-dependencies:
- dependency-name: golang.org/x/sys
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <[email protected]>
Bumps [activesupport](https://github.com/rails/rails) from 6.1.7 to 6.1.7.1.
- [Release notes](https://github.com/rails/rails/releases)
- [Changelog](https://github.com/rails/rails/blob/v7.0.4.1/activesupport/CHANGELOG.md)
- [Commits](rails/rails@v6.1.7...v6.1.7.1)

Signed-off-by: Andy Tinkham <[email protected]>

---
updated-dependencies:
- dependency-name: activesupport
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <[email protected]>
@jtuttle jtuttle requested review from a team as code owners February 28, 2023 21:49
john-odonnell and others added 3 commits March 1, 2023 15:49
Test app's prior Ruby version, 2.4.1, includes HTTP server
gem webrick by default - Ruby 3 does not.
Add web server gem to Ruby test app
Comment on lines +15 to +16
- Update activesupport in Gemfile.lock to 6.1.7.1 for CVE-2023-22796 (not vulnerable)
[cyberark/conjur-service-broker#310](https://github.com/cyberark/conjur-service-broker/pull/310)
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This is outdated, but I'll update in another PR to prepare for release.

@john-odonnell john-odonnell merged commit b3adea2 into main Mar 2, 2023
@doodlesbykumbi doodlesbykumbi deleted the vuln-fixes branch March 2, 2023 20:55
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants