From 089ea7edcb87c07a895a15b14f872e45a9132c4d Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Tue, 12 Apr 2022 23:52:21 +0000 Subject: [PATCH] fix: Gemfile & Gemfile.lock to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-RUBY-NOKOGIRI-2620374 - https://snyk.io/vuln/SNYK-RUBY-NOKOGIRI-2630623 - https://snyk.io/vuln/SNYK-RUBY-NOKOGIRI-2630898 --- Gemfile | 2 +- Gemfile.lock | 56 +++++++++++++++++++++++++++------------------------- 2 files changed, 30 insertions(+), 28 deletions(-) diff --git a/Gemfile b/Gemfile index 8cd99c9..094c251 100644 --- a/Gemfile +++ b/Gemfile @@ -22,7 +22,7 @@ source 'https://rubygems.org' gem 'rest-client' group :lint do - gem 'foodcritic', '~> 4.0' + gem 'foodcritic', '~> 4.0', '>= 4.0.0' gem 'rubocop', '~> 0.31' end diff --git a/Gemfile.lock b/Gemfile.lock index ccdd6d6..bcda6be 100644 --- a/Gemfile.lock +++ b/Gemfile.lock @@ -76,7 +76,7 @@ GEM fauxhai (~> 2.3) rspec (~> 3.0) cleanroom (1.0.0) - coderay (1.1.0) + coderay (1.1.3) dep-selector-libgecode (1.0.2) dep_selector (1.0.3) dep-selector-libgecode (~> 1.0) @@ -90,7 +90,7 @@ GEM fauxhai (2.3.0) net-ssh ohai - ffi (1.9.10) + ffi (1.15.5) ffi-yajl (2.2.2) libyajl2 (~> 1.2) foodcritic (4.0.0) @@ -101,13 +101,13 @@ GEM rufus-lru (~> 1.0) treetop (~> 1.4) yajl-ruby (~> 1.1) - formatador (0.2.5) + formatador (1.1.0) gherkin (2.12.2) multi_json (~> 1.3) - guard (2.13.0) + guard (2.17.0) formatador (>= 0.2.4) - listen (>= 2.7, <= 4.0) - lumberjack (~> 1.0) + listen (>= 2.7, < 4.0) + lumberjack (>= 1.0.12, < 2.0) nenv (~> 0.1) notiffany (~> 0.0) pry (>= 0.9.12) @@ -138,13 +138,13 @@ GEM net-sftp test-kitchen (>= 1.0.0) libyajl2 (1.2.0) - listen (3.0.3) - rb-fsevent (>= 0.9.3) - rb-inotify (>= 0.9) - lumberjack (1.0.9) + listen (3.7.1) + rb-fsevent (~> 0.10, >= 0.10.3) + rb-inotify (~> 0.9, >= 0.9.10) + lumberjack (1.2.8) method_source (0.8.2) mime-types (2.6.2) - mini_portile (0.6.2) + mini_portile2 (2.8.0) minitar (0.5.4) mixlib-authentication (1.3.0) mixlib-log @@ -152,9 +152,9 @@ GEM mixlib-config (2.2.1) mixlib-log (1.6.0) mixlib-shellout (2.1.0) - multi_json (1.11.2) + multi_json (1.15.0) multipart-post (2.0.0) - nenv (0.2.0) + nenv (0.3.0) net-http-persistent (2.9.4) net-scp (1.2.1) net-ssh (>= 2.6.5) @@ -169,9 +169,10 @@ GEM net-telnet (0.1.1) netrc (0.10.3) nio4r (1.1.1) - nokogiri (1.6.6.2) - mini_portile (~> 0.6.0) - notiffany (0.0.8) + nokogiri (1.13.4) + mini_portile2 (~> 2.8.0) + racc (~> 1.4) + notiffany (0.1.3) nenv (~> 0.1) shellany (~> 0.0) octokit (3.8.0) @@ -193,18 +194,19 @@ GEM plist (3.1.0) polyglot (0.3.5) powerpack (0.1.1) - pry (0.10.2) + pry (0.10.4) coderay (~> 1.1.0) method_source (~> 0.8.1) slop (~> 3.4) pry-nav (0.2.4) pry (>= 0.9.10, < 0.11.0) + racc (1.6.0) rack (1.6.4) rainbow (2.0.0) - rake (10.4.2) - rb-fsevent (0.9.6) - rb-inotify (0.9.5) - ffi (>= 0.5.0) + rake (10.5.0) + rb-fsevent (0.11.1) + rb-inotify (0.10.1) + ffi (~> 1.0) rest-client (1.8.0) http-cookie (>= 1.0.2, < 2.0) mime-types (>= 1.16, < 3.0) @@ -253,7 +255,7 @@ GEM rainbow (>= 1.99.1, < 3.0) ruby-progressbar (~> 1.4) ruby-progressbar (1.7.5) - rufus-lru (1.0.5) + rufus-lru (1.1.0) safe_yaml (1.0.4) sawyer (0.6.0) addressable (~> 2.3.5) @@ -283,10 +285,10 @@ GEM net-ssh (~> 2.7, < 2.10) safe_yaml (~> 1.0) thor (~> 0.18) - thor (0.19.1) + thor (0.20.3) timers (4.0.4) hitimes - treetop (1.6.3) + treetop (1.6.11) polyglot (~> 0.3) unf (0.1.4) unf_ext @@ -296,7 +298,7 @@ GEM buff-extensions (~> 1.0) hashie (>= 2.0.2, < 3.0.0) wmi-lite (1.0.0) - yajl-ruby (1.2.1) + yajl-ruby (1.4.2) yard (0.8.7.6) yard-classmethods (1.0.0) yard @@ -308,7 +310,7 @@ DEPENDENCIES berkshelf (~> 3) chef-zero chefspec (~> 4.2) - foodcritic (~> 4.0) + foodcritic (~> 4.0, >= 4.0.0) guard guard-foodcritic guard-kitchen @@ -323,4 +325,4 @@ DEPENDENCIES yard-classmethods BUNDLED WITH - 1.10.7.depsolverfix.0 + 1.17.3