From 25db12e80acc8930c7a395c7a63c5096669a58be Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Sun, 7 Jan 2024 15:27:03 +0000 Subject: [PATCH] fix: Gemfile & Gemfile.lock to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-RUBY-ACTIVESUPPORT-3237242 - https://snyk.io/vuln/SNYK-RUBY-ACTIVESUPPORT-3360028 - https://snyk.io/vuln/SNYK-RUBY-ACTIVESUPPORT-5851458 --- Gemfile | 2 +- Gemfile.lock | 17 ++++++++++------- 2 files changed, 11 insertions(+), 8 deletions(-) diff --git a/Gemfile b/Gemfile index ba2871b..45d86ed 100644 --- a/Gemfile +++ b/Gemfile @@ -31,7 +31,7 @@ gem 'jbuilder', '~> 2.7' gem 'bootsnap', '>= 1.4.2', require: false # gem 'graphql-client' -gem 'graphlient' +gem 'graphlient', '>= 0.8.0' group :development, :test do # Call 'byebug' anywhere in the code to stop execution and get a debugger console diff --git a/Gemfile.lock b/Gemfile.lock index 7dba161..578377c 100644 --- a/Gemfile.lock +++ b/Gemfile.lock @@ -59,6 +59,7 @@ GEM addressable (2.8.4) public_suffix (>= 2.0.2, < 6.0) ast (2.4.2) + base64 (0.2.0) bindex (0.8.1) bootsnap (1.16.0) msgpack (~> 1.2) @@ -77,21 +78,23 @@ GEM crass (1.0.6) date (3.3.3) erubi (1.12.0) - faraday (2.7.4) + faraday (2.8.1) + base64 faraday-net_http (>= 2.0, < 3.1) ruby2_keywords (>= 0.0.4) faraday-net_http (3.0.2) ffi (1.15.5) globalid (1.1.0) activesupport (>= 5.0) - graphlient (0.7.0) + graphlient (0.8.0) faraday (~> 2.0) graphql-client - graphql (2.0.21) + graphql (2.2.4) + racc (~> 1.4) graphql-client (0.18.0) activesupport (>= 3.0) graphql - i18n (1.12.0) + i18n (1.14.1) concurrent-ruby (~> 1.0) jbuilder (2.11.5) actionview (>= 5.0.0) @@ -113,7 +116,7 @@ GEM method_source (1.0.0) mini_mime (1.1.2) mini_portile2 (2.8.1) - minitest (5.18.0) + minitest (5.20.0) msgpack (1.7.0) net-imap (0.3.4) date @@ -246,7 +249,7 @@ GEM websocket-extensions (0.1.5) xpath (3.2.0) nokogiri (~> 1.8) - zeitwerk (2.6.7) + zeitwerk (2.6.12) PLATFORMS ruby @@ -255,7 +258,7 @@ DEPENDENCIES bootsnap (>= 1.4.2) byebug capybara (>= 2.15) - graphlient + graphlient (>= 0.8.0) jbuilder (~> 2.7) listen (>= 3.0.5, < 3.2) puma (~> 4.1)