Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update gems #210

Open
wants to merge 5 commits into
base: master
Choose a base branch
from
Open

Conversation

EgorBarakhov
Copy link

@EgorBarakhov EgorBarakhov commented Jun 2, 2022

Summary

  • Update rails and related action* gems to 6.0.4.8
    • Update sprockets to 4.0.3
    • Update rack to 2.2.3.1
    • Update loofah to 2.18.0
    • Update nokogiri to 1.13.6
    • Update concurrent-ruby to 1.1.10
  • Update puma to 5.6.4

How it works

N/A

Test plan

List of steps to manually test introduced functionality:

  • Setup project
  • Run bin/quality
  • Make sure there's no warnings
  • Make sure app may run correctly

Review notes

While reviewing pull-request (especially when it's your pull-request),
please make sure that:

  • you understand what problem is solved by PR and how is it solved
  • new tests are in place, no redundant tests
  • DB schema changes reflect new migrations
  • newly introduced DB fields have indexes and constraints
  • there are no missed files (migrations, view templates)
  • required ENV variables added and described in .env.example and added to Heroku
  • associated Heroku review app works correctly with introduced changes

Deploy notes

N/A

References

CVE-2022-22577
CVE-2022-27777
CVE-2022-21831
Integer Overflow or Wraparound in libxml2 affects Nokogiri
CVE-2022-24839
CVE-2022-23437
CVE-2018-25032
CVE-2022-29181
CVE-2022-24836
CVE-2022-30123
CVE-2022-30122

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant