From 5e2b7dbe4f908930a536f242a33138a783c72b6f Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Sat, 22 May 2021 04:03:05 +0000 Subject: [PATCH] fix: Gemfile & Gemfile.lock to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-RUBY-NOKOGIRI-1293239 --- Gemfile | 2 +- Gemfile.lock | 56 +++++++++++++++++++++++++++++++--------------------- 2 files changed, 34 insertions(+), 24 deletions(-) diff --git a/Gemfile b/Gemfile index 687943e..6bf24f4 100644 --- a/Gemfile +++ b/Gemfile @@ -3,7 +3,7 @@ source 'https://rubygems.org' gem 'maybe' gem 'awesome_print' gem 'wordref', :git => 'https://github.com/pcboy/wordref.git' -gem 'rtatoeba', '>= 1.0.2' +gem 'rtatoeba', '>= 1.1.0' gem 'rforvo', :git => 'https://github.com/pcboy/rforvo.git' gem 'trollop' gem 'furigana' diff --git a/Gemfile.lock b/Gemfile.lock index b695631..c041dfa 100644 --- a/Gemfile.lock +++ b/Gemfile.lock @@ -16,9 +16,9 @@ GIT GIT remote: https://github.com/pcboy/wordref.git - revision: d8c493e2d6a147ec88edf56883c93266c80fc123 + revision: 206e3140412829f533e96500ffc7030c1d7d1eb7 specs: - wordref (0.0.7) + wordref (0.0.8) attempt (= 0.3) multi_json (~> 1.12) nokogiri (~> 1.8) @@ -26,36 +26,44 @@ GIT GEM remote: https://rubygems.org/ specs: + addressable (2.7.0) + public_suffix (>= 2.0.2, < 5.0) attempt (0.3.0) structured_warnings (~> 0.3.0) awesome_print (1.8.0) + connection_pool (2.2.5) diff-lcs (1.3) - domain_name (0.5.20170404) + domain_name (0.5.20190701) unf (>= 0.0.5, < 1.0.0) furigana (0.0.8) diff-lcs http-cookie (1.0.3) domain_name (~> 0.5) maybe (1.1.0) - mechanize (2.7.5) - domain_name (~> 0.5, >= 0.5.1) - http-cookie (~> 1.0) - mime-types (>= 1.17.2) - net-http-digest_auth (~> 1.1, >= 1.1.1) - net-http-persistent (~> 2.5, >= 2.5.2) - nokogiri (~> 1.6) - ntlm-http (~> 0.1, >= 0.1.1) - webrobots (>= 0.0.9, < 0.2) - mime-types (3.1) + mechanize (2.8.1) + addressable (~> 2.7) + domain_name (~> 0.5, >= 0.5.20190701) + http-cookie (~> 1.0, >= 1.0.3) + mime-types (~> 3.0) + net-http-digest_auth (~> 1.4, >= 1.4.1) + net-http-persistent (>= 2.5.2, < 5.0.dev) + nokogiri (~> 1.11, >= 1.11.2) + rubyntlm (~> 0.6, >= 0.6.3) + webrick (~> 1.7) + webrobots (~> 0.1.2) + mime-types (3.3.1) mime-types-data (~> 3.2015) - mime-types-data (3.2016.0521) - mini_portile2 (2.3.0) - multi_json (1.13.1) + mime-types-data (3.2021.0225) + mini_portile2 (2.5.1) + multi_json (1.15.0) net-http-digest_auth (1.4.1) - net-http-persistent (2.9.4) - nokogiri (1.8.1) - mini_portile2 (~> 2.3.0) - ntlm-http (0.1.1) + net-http-persistent (4.0.1) + connection_pool (~> 2.2) + nokogiri (1.11.5) + mini_portile2 (~> 2.5.0) + racc (~> 1.4) + public_suffix (4.0.6) + racc (1.5.2) rspec (2.14.1) rspec-core (~> 2.14.0) rspec-expectations (~> 2.14.0) @@ -66,11 +74,13 @@ GEM rspec-mocks (2.14.6) rtatoeba (1.1.0) mechanize + rubyntlm (0.6.3) structured_warnings (0.3.0) trollop (2.1.2) unf (0.1.4) unf_ext - unf_ext (0.0.7.4) + unf_ext (0.0.7.7) + webrick (1.7.0) webrobots (0.1.2) PLATFORMS @@ -84,9 +94,9 @@ DEPENDENCIES imgin! maybe rforvo! - rtatoeba (>= 1.0.2) + rtatoeba (>= 1.1.0) trollop wordref! BUNDLED WITH - 1.16.1 + 1.17.3