Skip to content

Commit

Permalink
Merge pull request #57 from CodiTramuntana/fix_security_gemfile
Browse files Browse the repository at this point in the history
Fix security alerts from dependabot
  • Loading branch information
ClaudiaMoPr authored May 25, 2022
2 parents 91b13f6 + 8f34dc8 commit 535a6b6
Show file tree
Hide file tree
Showing 2 changed files with 61 additions and 44 deletions.
9 changes: 7 additions & 2 deletions Gemfile
Original file line number Diff line number Diff line change
Expand Up @@ -4,6 +4,10 @@ ruby RUBY_VERSION

DECIDIM_VERSION = { git: 'https://github.com/CodiTramuntana/decidim.git', branch: 'release/0.24-stable' }

gem "actionview", ">= 5.2.7.1"
gem "actionpack", ">= 5.2.7.1"
gem "activestorage", ">= 5.2.6.3"

gem 'decidim', DECIDIM_VERSION
gem 'decidim-file_authorization_handler', git: "https://github.com/CodiTramuntana/decidim-file_authorization_handler.git"
# gem 'decidim-consultations', "~> #{DECIDIM_VERSION}"
Expand All @@ -14,12 +18,13 @@ gem 'puma'
gem 'uglifier', '>= 4.0.0'
gem "whenever", require: false

gem 'rails', '< 6'

gem 'rails', '~> 5.2.7.1'

gem 'figaro', '>= 1.1.1'

group :development, :test do
gem 'faker', '~> 1.9.6'
gem 'faker', "~> 2.19.0"
gem 'byebug', platform: :mri
gem 'decidim-dev', DECIDIM_VERSION
end
Expand Down
96 changes: 54 additions & 42 deletions Gemfile.lock
Original file line number Diff line number Diff line change
Expand Up @@ -218,46 +218,46 @@ GIT
GEM
remote: https://rubygems.org/
specs:
actioncable (5.2.6)
actionpack (= 5.2.6)
actioncable (5.2.7.1)
actionpack (= 5.2.7.1)
nio4r (~> 2.0)
websocket-driver (>= 0.6.1)
actionmailer (5.2.6)
actionpack (= 5.2.6)
actionview (= 5.2.6)
activejob (= 5.2.6)
actionmailer (5.2.7.1)
actionpack (= 5.2.7.1)
actionview (= 5.2.7.1)
activejob (= 5.2.7.1)
mail (~> 2.5, >= 2.5.4)
rails-dom-testing (~> 2.0)
actionpack (5.2.6)
actionview (= 5.2.6)
activesupport (= 5.2.6)
actionpack (5.2.7.1)
actionview (= 5.2.7.1)
activesupport (= 5.2.7.1)
rack (~> 2.0, >= 2.0.8)
rack-test (>= 0.6.3)
rails-dom-testing (~> 2.0)
rails-html-sanitizer (~> 1.0, >= 1.0.2)
actionview (5.2.6)
activesupport (= 5.2.6)
actionview (5.2.7.1)
activesupport (= 5.2.7.1)
builder (~> 3.1)
erubi (~> 1.4)
rails-dom-testing (~> 2.0)
rails-html-sanitizer (~> 1.0, >= 1.0.3)
active_link_to (1.0.5)
actionpack
addressable
activejob (5.2.6)
activesupport (= 5.2.6)
activejob (5.2.7.1)
activesupport (= 5.2.7.1)
globalid (>= 0.3.6)
activemodel (5.2.6)
activesupport (= 5.2.6)
activerecord (5.2.6)
activemodel (= 5.2.6)
activesupport (= 5.2.6)
activemodel (5.2.7.1)
activesupport (= 5.2.7.1)
activerecord (5.2.7.1)
activemodel (= 5.2.7.1)
activesupport (= 5.2.7.1)
arel (>= 9.0)
activestorage (5.2.6)
actionpack (= 5.2.6)
activerecord (= 5.2.6)
activestorage (5.2.7.1)
actionpack (= 5.2.7.1)
activerecord (= 5.2.7.1)
marcel (~> 1.0.0)
activesupport (5.2.6)
activesupport (5.2.7.1)
concurrent-ruby (~> 1.0, >= 1.0.2)
i18n (>= 0.7, < 2)
minitest (~> 5.1)
Expand Down Expand Up @@ -421,10 +421,19 @@ GEM
factory_bot_rails (4.11.1)
factory_bot (~> 4.11.1)
railties (>= 3.0.0)
faker (1.9.6)
i18n (>= 0.7)
faraday (2.2.0)
faraday-net_http (~> 2.0)
faker (2.19.0)
i18n (>= 1.6, < 2)
faraday (1.9.3)
faraday-em_http (~> 1.0)
faraday-em_synchrony (~> 1.0)
faraday-excon (~> 1.1)
faraday-httpclient (~> 1.0)
faraday-multipart (~> 1.0)
faraday-net_http (~> 1.0)
faraday-net_http_persistent (~> 1.0)
faraday-patron (~> 1.0)
faraday-rack (~> 1.0)
faraday-retry (~> 1.0)
ruby2_keywords (>= 0.0.4)
faraday-net_http (2.0.2)
ffi (1.15.5)
Expand Down Expand Up @@ -624,18 +633,18 @@ GEM
rack (>= 2.0.0)
rack-test (1.1.0)
rack (>= 1.0, < 3)
rails (5.2.6)
actioncable (= 5.2.6)
actionmailer (= 5.2.6)
actionpack (= 5.2.6)
actionview (= 5.2.6)
activejob (= 5.2.6)
activemodel (= 5.2.6)
activerecord (= 5.2.6)
activestorage (= 5.2.6)
activesupport (= 5.2.6)
rails (5.2.7.1)
actioncable (= 5.2.7.1)
actionmailer (= 5.2.7.1)
actionpack (= 5.2.7.1)
actionview (= 5.2.7.1)
activejob (= 5.2.7.1)
activemodel (= 5.2.7.1)
activerecord (= 5.2.7.1)
activestorage (= 5.2.7.1)
activesupport (= 5.2.7.1)
bundler (>= 1.3.0)
railties (= 5.2.6)
railties (= 5.2.7.1)
sprockets-rails (>= 2.0.0)
rails-controller-testing (1.0.5)
actionpack (>= 5.0.1.rc1)
Expand All @@ -649,9 +658,9 @@ GEM
rails-i18n (5.1.3)
i18n (>= 0.7, < 2)
railties (>= 5.0, < 6)
railties (5.2.6)
actionpack (= 5.2.6)
activesupport (= 5.2.6)
railties (5.2.7.1)
actionpack (= 5.2.7.1)
activesupport (= 5.2.7.1)
method_source
rake (>= 0.8.7)
thor (>= 0.19.0, < 2.0)
Expand Down Expand Up @@ -839,6 +848,9 @@ PLATFORMS
ruby

DEPENDENCIES
actionpack (>= 5.2.7.1)
actionview (>= 5.2.7.1)
activestorage (>= 5.2.6.3)
better_errors (>= 2.3.0)
binding_of_caller
byebug
Expand All @@ -847,12 +859,12 @@ DEPENDENCIES
decidim-dev!
decidim-file_authorization_handler!
delayed_job_active_record
faker (~> 1.9.6)
faker (~> 2.19.0)
figaro (>= 1.1.1)
letter_opener_web (~> 1.3.0)
listen (~> 3.1.0)
puma
rails (< 6)
rails (~> 5.2.7.1)
spring
spring-watcher-listen (~> 2.0.0)
uglifier (>= 4.0.0)
Expand Down

0 comments on commit 535a6b6

Please sign in to comment.