From 92aeacb34217a8171ce3bb35f020a29196abbc2b Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Tue, 12 Apr 2022 22:29:43 +0000 Subject: [PATCH] fix: Gemfile to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-RUBY-NOKOGIRI-2620374 - https://snyk.io/vuln/SNYK-RUBY-NOKOGIRI-2630623 - https://snyk.io/vuln/SNYK-RUBY-NOKOGIRI-2630898 --- Gemfile | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) mode change 100755 => 100644 Gemfile diff --git a/Gemfile b/Gemfile old mode 100755 new mode 100644 index 94c1ac6..89e0ea9 --- a/Gemfile +++ b/Gemfile @@ -10,13 +10,13 @@ end ruby '2.7.5' # Bundle edge Rails instead: gem 'rails', github: 'rails/rails' -gem 'rails', '~> 6.0.1' +gem 'rails', '~> 6.0.3', '>= 6.0.3.6' # Use postgresql as the database for Active Record gem 'pg', '~> 0.18' # Use Puma as the app server gem 'puma', '~> 3.7' # Use SCSS for stylesheets -gem 'sass-rails', '~> 5.0.7' +gem 'sass-rails', '~> 5.0.8' # Use Uglifier as compressor for JavaScript assets gem 'uglifier', '>= 1.3.0' # See https://github.com/rails/execjs#readme for more supported runtimes @@ -47,13 +47,13 @@ group :development, :test do gem 'selenium-webdriver' gem 'rspec_junit_formatter' - gem 'rspec-rails', '4.0.0.beta3' + gem 'rspec-rails', '4.0.0' end group :development do # Access an IRB console on exception pages or by using <%= console %> anywhere in the code. gem 'listen', '>= 3.0.5', '< 3.2' - gem 'web-console', '>= 3.7.0' + gem 'web-console', '>= 4.1.0' # Spring speeds up development by keeping your application running in the background. Read more: https://github.com/rails/spring gem 'spring', '~> 2.0.2' gem 'spring-watcher-listen', '~> 2.0.0'