Skip to content

[TBT-456] update gems to fix critical/high vulnerabilities #355

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
nikolaTrichkovski wants to merge 1 commit into
base: master
Choose a base branch
from
+71 −50
Open

[TBT-456] update gems to fix critical/high vulnerabilities #355

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
10 changes: 6 additions & 4 deletions Gemfile
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -22,7 +22,7 @@ gem 'keen'
gem 'gh', git: 'https://github.com/travis-ci/gh'

gem 'aws-sdk'
gem 'actionmailer'
gem 'actionmailer', '~> 7.0.8', '>= 7.0.8.7'
gem 'roadie'
gem 'roadie-rails'
gem 'multi_json'
Expand All @@ -31,11 +31,13 @@ gem 'intercom', '~> 3.8.0'
gem 'faraday'

gem "activesupport"
gem "actionpack"
gem "railties"
gem "actionpack", '~> 7.0.8', '>= 7.0.8.7'
gem "railties", '~> 7.0.8', '>= 7.0.8.7'
gem 'nokogiri', '>= 1.18.9'
gem 'rack', '~> 2.2.20'

gem 'net-smtp', require: false
gem 'net-imap', require: false
gem 'net-imap', '>= 0.5.7', require: false
gem 'net-pop', require: false
gem 'globalid', '~> 1.0'
gem 'rexml'
Expand Down
111 changes: 65 additions & 46 deletions Gemfile.lock
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -76,36 +76,44 @@ GEM
remote: https://rubygems.org/
specs:
HDRHistogram (0.1.11)
actionmailer (7.0.8.1)
actionpack (= 7.0.8.1)
actionview (= 7.0.8.1)
activejob (= 7.0.8.1)
activesupport (= 7.0.8.1)
actionmailer (7.0.10)
actionpack (= 7.0.10)
actionview (= 7.0.10)
activejob (= 7.0.10)
activesupport (= 7.0.10)
mail (~> 2.5, >= 2.5.4)
net-imap
net-pop
net-smtp
rails-dom-testing (~> 2.0)
actionpack (7.0.8.1)
actionview (= 7.0.8.1)
activesupport (= 7.0.8.1)
actionpack (7.0.10)
actionview (= 7.0.10)
activesupport (= 7.0.10)
racc
rack (~> 2.0, >= 2.2.4)
rack-test (>= 0.6.3)
rails-dom-testing (~> 2.0)
rails-html-sanitizer (~> 1.0, >= 1.2.0)
actionview (7.0.8.1)
activesupport (= 7.0.8.1)
actionview (7.0.10)
activesupport (= 7.0.10)
builder (~> 3.1)
erubi (~> 1.4)
rails-dom-testing (~> 2.0)
rails-html-sanitizer (~> 1.1, >= 1.2.0)
activejob (7.0.8.1)
activesupport (= 7.0.8.1)
activejob (7.0.10)
activesupport (= 7.0.10)
globalid (>= 0.3.6)
activesupport (7.0.8.1)
activesupport (7.0.10)
base64
benchmark (>= 0.3)
bigdecimal
concurrent-ruby (~> 1.0, >= 1.0.2)
drb
i18n (>= 1.6, < 2)
logger (>= 1.4.2)
minitest (>= 5.1)
mutex_m
securerandom (>= 0.3)
tzinfo (~> 2.0)
addressable (2.8.6)
public_suffix (>= 2.0.2, < 6.0)
Expand Down Expand Up @@ -1636,9 +1644,10 @@ GEM
aws-sigv2 (1.2.0)
aws-sigv4 (1.8.0)
aws-eventstream (~> 1, >= 1.0.2)
base64 (0.2.0)
bigdecimal (3.1.7)
builder (3.2.4)
base64 (0.3.0)
benchmark (0.5.0)
bigdecimal (3.3.1)
builder (3.3.0)
capybara (3.40.0)
addressable
matrix
Expand All @@ -1649,17 +1658,18 @@ GEM
regexp_parser (>= 1.5, < 3.0)
xpath (~> 3.2)
coderay (1.1.3)
concurrent-ruby (1.2.3)
concurrent-ruby (1.3.5)
connection_pool (2.4.1)
crack (1.0.0)
bigdecimal
rexml
crass (1.0.6)
css_parser (1.16.0)
addressable
date (3.3.4)
date (3.5.0)
diff-lcs (1.5.1)
erubi (1.12.0)
drb (2.2.3)
erubi (1.13.1)
ethon (0.16.0)
ffi (>= 1.15.0)
faraday (2.9.0)
Expand All @@ -1676,7 +1686,7 @@ GEM
ffi (1.16.3)
foreman (0.87.2)
formatador (1.1.0)
globalid (1.2.1)
globalid (1.3.0)
activesupport (>= 6.1)
guard (2.18.1)
formatador (>= 0.2.4)
Expand All @@ -1695,7 +1705,7 @@ GEM
hashdiff (1.1.0)
hashr (2.0.1)
hitimes (1.3.1)
i18n (1.14.4)
i18n (1.14.7)
concurrent-ruby (~> 1.0)
intercom (3.8.1)
jmespath (1.6.2)
Expand All @@ -1707,38 +1717,43 @@ GEM
listen (3.9.0)
rb-fsevent (~> 0.10, >= 0.10.3)
rb-inotify (~> 0.9, >= 0.9.10)
loofah (2.22.0)
logger (1.7.0)
loofah (2.24.1)
crass (~> 1.0.2)
nokogiri (>= 1.12.0)
lumberjack (1.2.10)
mail (2.8.1)
mail (2.9.0)
logger
mini_mime (>= 0.1.1)
net-imap
net-pop
net-smtp
matrix (0.4.2)
method_source (1.0.0)
method_source (1.1.0)
mini_mime (1.1.5)
minitest (5.22.3)
minitest (5.26.2)
mocha (2.0.4)
ruby2_keywords (>= 0.0.5)
multi_json (1.15.0)
mutex_m (0.3.0)
nenv (0.3.0)
net-http (0.4.1)
uri
net-http-persistent (4.0.2)
connection_pool (~> 2.2)
net-http-pipeline (1.0.1)
net-imap (0.4.10)
net-imap (0.5.12)
date
net-protocol
net-pop (0.1.2)
net-protocol
net-protocol (0.2.2)
timeout
net-smtp (0.4.0.1)
net-smtp (0.5.1)
net-protocol
nokogiri (1.16.3-x86_64-linux)
nokogiri (1.18.10-arm64-darwin)
racc (~> 1.4)
nokogiri (1.18.10-x86_64-linux-gnu)
racc (~> 1.4)
notiffany (0.1.3)
nenv (~> 0.1)
Expand All @@ -1747,25 +1762,25 @@ GEM
coderay (~> 1.1)
method_source (~> 1.0)
public_suffix (5.0.4)
racc (1.7.3)
rack (2.2.9)
rack-test (2.1.0)
racc (1.8.1)
rack (2.2.21)
rack-test (2.2.0)
rack (>= 1.3)
rails-dom-testing (2.2.0)
rails-dom-testing (2.3.0)
activesupport (>= 5.0.0)
minitest
nokogiri (>= 1.6)
rails-html-sanitizer (1.6.0)
rails-html-sanitizer (1.6.2)
loofah (~> 2.21)
nokogiri (~> 1.14)
railties (7.0.8.1)
actionpack (= 7.0.8.1)
activesupport (= 7.0.8.1)
nokogiri (>= 1.15.7, != 1.16.7, != 1.16.6, != 1.16.5, != 1.16.4, != 1.16.3, != 1.16.2, != 1.16.1, != 1.16.0.rc1, != 1.16.0)
railties (7.0.10)
actionpack (= 7.0.10)
activesupport (= 7.0.10)
method_source
rake (>= 12.2)
thor (~> 1.0)
zeitwerk (~> 2.5)
rake (13.1.0)
rake (13.3.1)
rb-fsevent (0.11.2)
rb-inotify (0.10.1)
ffi (~> 1.0)
Expand All @@ -1776,7 +1791,7 @@ GEM
redis-namespace (1.11.0)
redis (>= 4)
regexp_parser (2.9.0)
rexml (3.2.6)
rexml (3.4.4)
roadie (5.2.1)
css_parser (~> 1.4)
nokogiri (~> 1.15)
Expand All @@ -1797,6 +1812,7 @@ GEM
rspec-support (~> 3.13.0)
rspec-support (3.13.1)
ruby2_keywords (0.0.5)
securerandom (0.4.1)
sentry-ruby (5.17.1)
bigdecimal
concurrent-ruby (~> 1.0, >= 1.0.2)
Expand All @@ -1806,8 +1822,8 @@ GEM
connection_pool (>= 2.3.0)
rack (>= 2.2.4)
redis-client (>= 0.19.0)
thor (1.3.1)
timeout (0.4.1)
thor (1.4.0)
timeout (0.4.4)
typhoeus (1.4.1)
ethon (>= 0.9.0)
tzinfo (2.0.6)
Expand All @@ -1819,14 +1835,15 @@ GEM
hashdiff (>= 0.4.0, < 2.0.0)
xpath (3.2.0)
nokogiri (~> 1.8)
zeitwerk (2.6.13)
zeitwerk (2.7.3)

PLATFORMS
arm64-darwin-24
x86_64-linux

DEPENDENCIES
actionmailer
actionpack
actionmailer (~> 7.0.8, >= 7.0.8.7)
actionpack (~> 7.0.8, >= 7.0.8.7)
activesupport
aws-sdk
capybara
Expand All @@ -1844,10 +1861,12 @@ DEPENDENCIES
metriks-librato_metrics!
mocha (~> 2.0.4)
multi_json
net-imap
net-imap (>= 0.5.7)
net-pop
net-smtp
railties
nokogiri (>= 1.18.9)
rack (~> 2.2.20)
railties (~> 7.0.8, >= 7.0.8.7)
redis-namespace
rexml
roadie
Expand Down