From bcb4b138582cc59995e63612c8feddbd7e4f23ff Mon Sep 17 00:00:00 2001 From: "dependabot-preview[bot]" <27856297+dependabot-preview[bot]@users.noreply.github.com> Date: Tue, 18 May 2021 01:57:15 +0000 Subject: [PATCH] [Security] Bump puma from 3.12.1 to 4.3.8 Bumps [puma](https://github.com/puma/puma) from 3.12.1 to 4.3.8. **This update includes security fixes.** - [Release notes](https://github.com/puma/puma/releases) - [Changelog](https://github.com/puma/puma/blob/master/History.md) - [Commits](https://github.com/puma/puma/compare/v3.12.1...v4.3.8) Signed-off-by: dependabot-preview[bot] --- Gemfile | 2 +- Gemfile.lock | 9 ++++++--- 2 files changed, 7 insertions(+), 4 deletions(-) diff --git a/Gemfile b/Gemfile index cede48e..86ce40e 100644 --- a/Gemfile +++ b/Gemfile @@ -8,7 +8,7 @@ gem 'rails', '~> 5.2.2' # Use postgresql as the database for Active Record gem 'pg', '>= 0.18', '< 2.0' # Use Puma as the app server -gem 'puma', '~> 3.12' +gem 'puma', '~> 4.3' # Build JSON APIs with ease. Read more: https://github.com/rails/jbuilder # gem 'jbuilder', '~> 2.5' # Use Redis adapter to run Action Cable in production diff --git a/Gemfile.lock b/Gemfile.lock index 4d9653e..452c25d 100644 --- a/Gemfile.lock +++ b/Gemfile.lock @@ -78,7 +78,9 @@ GEM marcel (0.3.3) mimemagic (~> 0.3.2) method_source (0.9.2) - mimemagic (0.3.3) + mimemagic (0.3.10) + nokogiri (~> 1) + rake mini_mime (1.0.1) mini_portile2 (2.4.0) minitest (5.11.3) @@ -87,7 +89,8 @@ GEM nokogiri (1.10.3) mini_portile2 (~> 2.4.0) pg (1.1.4) - puma (3.12.1) + puma (4.3.8) + nio4r (~> 2.0) rack (2.0.7) rack-test (1.1.0) rack (>= 1.0, < 3) @@ -173,7 +176,7 @@ DEPENDENCIES factory_bot_rails listen (>= 3.0.5, < 3.2) pg (>= 0.18, < 2.0) - puma (~> 3.12) + puma (~> 4.3) rails (~> 5.2.2) rspec-rails slack-ruby-client