From fa51f8ca3d23927566e1d184539e78d9d8759746 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Fri, 27 May 2022 11:36:34 +0000 Subject: [PATCH] fix: Gemfile & Gemfile.lock to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-RUBY-NOKOGIRI-2840634 --- Gemfile | 2 +- Gemfile.lock | 70 ++++++++++++++++++++++++++-------------------------- 2 files changed, 36 insertions(+), 36 deletions(-) diff --git a/Gemfile b/Gemfile index 57c2b48..c4fa7ea 100644 --- a/Gemfile +++ b/Gemfile @@ -1,7 +1,7 @@ source "https://rubygems.org" # synk -gem "nokogiri", "~> 1.8.1" +gem "nokogiri", "~> 1.13.6" gem "rack-protection", "~> 2.0.0" # jekyll diff --git a/Gemfile.lock b/Gemfile.lock index b3b0c61..cd52329 100644 --- a/Gemfile.lock +++ b/Gemfile.lock @@ -1,23 +1,23 @@ GEM remote: https://rubygems.org/ specs: - activesupport (4.2.10) - i18n (~> 0.7) - minitest (~> 5.1) - thread_safe (~> 0.3, >= 0.3.4) - tzinfo (~> 1.1) + activesupport (7.0.3) + concurrent-ruby (~> 1.0, >= 1.0.2) + i18n (>= 1.6, < 2) + minitest (>= 5.1) + tzinfo (~> 2.0) addressable (2.5.2) public_suffix (>= 2.0.2, < 4.0) colorator (1.1.0) - concurrent-ruby (1.0.5) + concurrent-ruby (1.1.10) faraday (0.13.1) multipart-post (>= 1.2, < 3) - ffi (1.9.18) + ffi (1.15.5) forwardable-extended (2.6.0) - html-pipeline (2.7.1) + html-pipeline (2.14.1) activesupport (>= 2) nokogiri (>= 1.4) - i18n (0.9.0) + i18n (1.10.0) concurrent-ruby (~> 1.0) jekyll (3.6.2) addressable (~> 2.4) @@ -38,46 +38,47 @@ GEM jekyll (~> 3.3) jekyll-gist (1.4.1) octokit (~> 4.2) - jekyll-mentions (1.2.0) - activesupport (~> 4.0) + jekyll-mentions (1.4.1) html-pipeline (~> 2.3) jekyll (~> 3.0) - jekyll-sass-converter (1.5.0) + jekyll-sass-converter (1.5.2) sass (~> 3.4) jekyll-seo-tag (2.3.0) jekyll (~> 3.3) jekyll-sitemap (1.1.1) jekyll (~> 3.3) - jekyll-watch (1.5.0) - listen (~> 3.0, < 3.1) - kramdown (1.15.0) - liquid (4.0.0) + jekyll-watch (1.5.1) + listen (~> 3.0) + kramdown (1.17.0) + liquid (4.0.3) liquid_reading_time (1.1.3) liquid (>= 2.6, < 5.0) nokogiri (~> 1.6) - listen (3.0.8) - rb-fsevent (~> 0.9, >= 0.9.4) - rb-inotify (~> 0.9, >= 0.9.7) + listen (3.7.1) + rb-fsevent (~> 0.10, >= 0.10.3) + rb-inotify (~> 0.9, >= 0.9.10) mercenary (0.3.6) - mini_portile2 (2.3.0) - minitest (5.10.3) + mini_portile2 (2.8.0) + minitest (5.15.0) multipart-post (2.0.0) - nokogiri (1.8.1) - mini_portile2 (~> 2.3.0) + nokogiri (1.13.6) + mini_portile2 (~> 2.8.0) + racc (~> 1.4) octokit (4.7.0) sawyer (~> 0.8.0, >= 0.5.3) - pathutil (0.16.0) + pathutil (0.16.2) forwardable-extended (~> 2.6) - public_suffix (3.0.0) + public_suffix (3.1.1) + racc (1.6.0) rack (2.0.3) rack-protection (2.0.0) rack - rb-fsevent (0.10.2) - rb-inotify (0.9.10) - ffi (>= 0.5.0, < 2) + rb-fsevent (0.11.1) + rb-inotify (0.10.1) + ffi (~> 1.0) rouge (2.2.1) - safe_yaml (1.0.4) - sass (3.5.2) + safe_yaml (1.0.5) + sass (3.7.4) sass-listen (~> 4.0.0) sass-listen (4.0.0) rb-fsevent (~> 0.9, >= 0.9.4) @@ -85,9 +86,8 @@ GEM sawyer (0.8.1) addressable (>= 2.3.5, < 2.6) faraday (~> 0.8, < 1.0) - thread_safe (0.3.6) - tzinfo (1.2.3) - thread_safe (~> 0.1) + tzinfo (2.0.4) + concurrent-ruby (~> 1.0) PLATFORMS ruby @@ -102,8 +102,8 @@ DEPENDENCIES jekyll-seo-tag jekyll-sitemap liquid_reading_time - nokogiri (~> 1.8.1) + nokogiri (~> 1.13.6) rack-protection (~> 2.0.0) BUNDLED WITH - 1.15.4 + 1.17.3