From 9ba0a340c314f1e2d995c33363522406c69f5a6b Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Thu, 4 Apr 2024 14:37:50 +0000 Subject: [PATCH] fix: Gemfile & Gemfile.lock to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-RUBY-NOKOGIRI-6228056 - https://snyk.io/vuln/SNYK-RUBY-RACK-6274383 - https://snyk.io/vuln/SNYK-RUBY-RACK-6274384 - https://snyk.io/vuln/SNYK-RUBY-RACK-6274385 --- Gemfile | 4 ++-- Gemfile.lock | 32 ++++++++++++++++++-------------- 2 files changed, 20 insertions(+), 16 deletions(-) diff --git a/Gemfile b/Gemfile index 66f5517..ae37c74 100644 --- a/Gemfile +++ b/Gemfile @@ -13,7 +13,7 @@ source "https://rubygems.org" gem "jekyll", "~> 3.8" # See https://github.com/envygeeks/jekyll-assets/issues/622 -gem "sprockets", "~> 3.7", ">= 3.7.2" +gem "sprockets", "~> 3.7", ">= 3.7.3" gem "kramdown-parser-gfm", "~> 1.1.0" gem "autoprefixer-rails" @@ -33,4 +33,4 @@ gem "tzinfo-data", platforms: [:mingw, :mswin, :x64_mingw, :jruby] # Performance-booster for watching directories on Windows gem "wdm", "~> 0.1.0" if Gem.win_platform? -gem "html-proofer", "~> 3.14", ">= 3.14.1" +gem "html-proofer", "~> 4.0", ">= 4.0.0" diff --git a/Gemfile.lock b/Gemfile.lock index 5e95bee..29f5121 100644 --- a/Gemfile.lock +++ b/Gemfile.lock @@ -6,12 +6,13 @@ GEM i18n (>= 0.7, < 2) minitest (~> 5.1) tzinfo (~> 1.1) - addressable (2.8.4) + addressable (2.8.6) public_suffix (>= 2.0.2, < 6.0) autoprefixer-rails (10.4.13.0) execjs (~> 2) + base64 (0.2.0) colorator (1.1.0) - concurrent-ruby (1.2.2) + concurrent-ruby (1.2.3) em-websocket (0.5.3) eventmachine (>= 0.12.9) http_parser.rb (~> 0) @@ -22,9 +23,9 @@ GEM extras (0.3.0) forwardable-extended (~> 2.5) fastimage (2.2.7) - ffi (1.15.5) + ffi (1.16.3) forwardable-extended (2.6.0) - html-proofer (3.19.4) + html-proofer (4.4.3) addressable (~> 2.3) mercenary (~> 0.3) nokogiri (~> 1.13) @@ -32,6 +33,7 @@ GEM rainbow (~> 3.0) typhoeus (~> 1.3) yell (~> 2.0) + zeitwerk (~> 2.5) http_parser.rb (0.8.0) i18n (1.14.1) concurrent-ruby (~> 1.0) @@ -88,17 +90,17 @@ GEM rb-fsevent (~> 0.10, >= 0.10.3) rb-inotify (~> 0.9, >= 0.9.10) mercenary (0.3.6) - mini_portile2 (2.8.2) + mini_portile2 (2.8.5) minitest (5.18.0) - nokogiri (1.15.2) + nokogiri (1.15.6) mini_portile2 (~> 2.8.2) racc (~> 1.4) - parallel (1.23.0) + parallel (1.24.0) pathutil (0.16.2) forwardable-extended (~> 2.6) - public_suffix (5.0.1) - racc (1.7.1) - rack (2.2.7) + public_suffix (5.0.5) + racc (1.7.3) + rack (2.2.9) rainbow (3.1.1) rb-fsevent (0.11.2) rb-inotify (0.10.1) @@ -111,22 +113,24 @@ GEM sass-listen (4.0.0) rb-fsevent (~> 0.9, >= 0.9.4) rb-inotify (~> 0.9, >= 0.9.7) - sprockets (3.7.2) + sprockets (3.7.3) + base64 concurrent-ruby (~> 1.0) rack (> 1, < 3) thread_safe (0.3.6) - typhoeus (1.4.0) + typhoeus (1.4.1) ethon (>= 0.9.0) tzinfo (1.2.11) thread_safe (~> 0.1) yell (2.2.2) + zeitwerk (2.6.13) PLATFORMS ruby DEPENDENCIES autoprefixer-rails - html-proofer (~> 3.14, >= 3.14.1) + html-proofer (~> 4.0, >= 4.0.0) jekyll (~> 3.8) jekyll-assets (~> 3.0, >= 3.0.12) jekyll-feed (~> 0.6) @@ -135,7 +139,7 @@ DEPENDENCIES jekyll-seo-tag jekyll-sitemap kramdown-parser-gfm (~> 1.1.0) - sprockets (~> 3.7, >= 3.7.2) + sprockets (~> 3.7, >= 3.7.3) tzinfo-data RUBY VERSION