From ba92422ea1bba84186dfff739a0f146409bca9c9 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Thu, 16 Mar 2023 05:26:06 +0530 Subject: [PATCH 1/2] fix: Gemfile & Gemfile.lock to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-RUBY-ACTIVESUPPORT-3360028 - https://snyk.io/vuln/SNYK-RUBY-RACK-3360233 --- Gemfile | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/Gemfile b/Gemfile index 2f40054..3750934 100644 --- a/Gemfile +++ b/Gemfile @@ -2,7 +2,7 @@ source 'https://rubygems.org' ruby "3.1.2" gem "sinatra" -gem "activerecord" +gem "activerecord" , ">= 7.0.4.3" gem "sinatra-activerecord" gem 'pg' From ac6aaa3cb559862cf914955b258734f30834c616 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Thu, 16 Mar 2023 05:26:07 +0530 Subject: [PATCH 2/2] fix: Gemfile & Gemfile.lock to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-RUBY-ACTIVESUPPORT-3360028 - https://snyk.io/vuln/SNYK-RUBY-RACK-3360233 --- Gemfile.lock | 32 ++++++++++++++++---------------- 1 file changed, 16 insertions(+), 16 deletions(-) diff --git a/Gemfile.lock b/Gemfile.lock index 2c5b4d1..d88d018 100644 --- a/Gemfile.lock +++ b/Gemfile.lock @@ -1,29 +1,29 @@ GEM remote: https://rubygems.org/ specs: - activemodel (7.0.4) - activesupport (= 7.0.4) - activerecord (7.0.4) - activemodel (= 7.0.4) - activesupport (= 7.0.4) - activesupport (7.0.4) + activemodel (7.0.4.3) + activesupport (= 7.0.4.3) + activerecord (7.0.4.3) + activemodel (= 7.0.4.3) + activesupport (= 7.0.4.3) + activesupport (7.0.4.3) concurrent-ruby (~> 1.0, >= 1.0.2) i18n (>= 1.6, < 2) minitest (>= 5.1) tzinfo (~> 2.0) bond (0.5.1) - concurrent-ruby (1.1.10) + concurrent-ruby (1.2.2) i18n (1.12.0) concurrent-ruby (~> 1.0) - minitest (5.16.3) + minitest (5.18.0) mustermann (3.0.0) ruby2_keywords (~> 0.0.1) nio4r (2.5.8) pg (1.4.5) puma (6.0.0) nio4r (~> 2.0) - rack (2.2.4) - rack-protection (3.0.4) + rack (2.2.6.4) + rack-protection (3.0.5) rack rack-test (0.6.3) rack (>= 1.0) @@ -36,28 +36,28 @@ GEM rack-test (~> 0.6.2) ripl (>= 0.7.0) ruby2_keywords (0.0.5) - sinatra (3.0.4) + sinatra (3.0.5) mustermann (~> 3.0) rack (~> 2.2, >= 2.2.4) - rack-protection (= 3.0.4) + rack-protection (= 3.0.5) tilt (~> 2.0) sinatra-activerecord (2.0.26) activerecord (>= 4.1) sinatra (>= 1.0) - tilt (2.0.11) + tilt (2.1.0) tux (0.3.0) ripl (>= 0.3.5) ripl-multi_line (>= 0.2.4) ripl-rack (>= 0.2.0) sinatra (>= 1.2.1) - tzinfo (2.0.5) + tzinfo (2.0.6) concurrent-ruby (~> 1.0) PLATFORMS ruby DEPENDENCIES - activerecord + activerecord (>= 7.0.4.3) pg puma sinatra @@ -68,4 +68,4 @@ RUBY VERSION ruby 3.1.2p20 BUNDLED WITH - 2.3.11 + 2.3.7