From 08b5a714a15bb21c12b31114f1fdb827f9068fc7 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Tue, 2 May 2023 15:44:37 +0000 Subject: [PATCH] fix: Gemfile & Gemfile.lock to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-RUBY-AUDITED-5490134 --- Gemfile | 2 +- Gemfile.lock | 9 +++++---- 2 files changed, 6 insertions(+), 5 deletions(-) diff --git a/Gemfile b/Gemfile index 7a61c39fe..ee469f1cf 100644 --- a/Gemfile +++ b/Gemfile @@ -155,7 +155,7 @@ gem 'lograge', '~> 0.12.0', require: false # worked with microsoft refresh token gem 'omniauth-oauth2' -gem 'audited', '~> 5.2' +gem 'audited', '~> 5.3', '>= 5.3.3' # need for google auth gem 'omniauth' diff --git a/Gemfile.lock b/Gemfile.lock index 3fa0dddca..2eac679bd 100644 --- a/Gemfile.lock +++ b/Gemfile.lock @@ -90,8 +90,9 @@ GEM rake (>= 10.4, < 14.0) ast (2.4.2) attr_extras (6.2.5) - audited (5.2.0) + audited (5.3.3) activerecord (>= 5.0, < 7.1) + request_store (~> 1.2) aws-eventstream (1.2.0) aws-partitions (1.605.0) aws-sdk-core (3.131.2) @@ -355,7 +356,7 @@ GEM mini_mime (>= 1.0.0) multi_xml (>= 0.5.2) httpclient (2.8.3) - i18n (1.12.0) + i18n (1.13.0) concurrent-ruby (~> 1.0) image_processing (1.12.2) mini_magick (>= 4.9.5, < 5) @@ -764,7 +765,7 @@ GEM working_hours (1.4.1) activesupport (>= 3.2) tzinfo - zeitwerk (2.6.7) + zeitwerk (2.6.8) PLATFORMS arm64-darwin-20 @@ -781,7 +782,7 @@ DEPENDENCIES administrate annotate attr_extras - audited (~> 5.2) + audited (~> 5.3, >= 5.3.3) aws-sdk-s3 azure-storage-blob barnes