Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Snyk] Fix for 1 vulnerabilities #130

Merged
merged 2 commits into from
Nov 30, 2024

Conversation

mefellows
Copy link
Member

@mefellows mefellows commented Nov 23, 2024

depends #122

snyk-top-banner

Snyk has created this PR to fix 1 vulnerabilities in the rubygems dependencies of this project.

Snyk changed the following file(s):

  • examples/Gemfile
⚠️ Warning
Failed to update the Gemfile.lock, please update manually before merging.

Vulnerabilities that will be fixed with an upgrade:

Issue Score
medium severity Reliance on Untrusted Inputs in a Security Decision
SNYK-RUBY-SINATRA-6483832
  586  

Important

  • Check the changes in this PR to ensure they won't cause issues with your project.
  • Max score is 1000. Note that the real score may have changed since the PR was raised.
  • This PR was automatically created by Snyk using the credentials of a real user.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report
📜 Customise PR templates
🛠 Adjust project settings
📚 Read about Snyk's upgrade logic


Learn how to fix vulnerabilities with free interactive lessons:

🦉 Learn about vulnerability in an interactive lesson of Snyk Learn.

@YOU54F
Copy link
Member

YOU54F commented Nov 29, 2024

We won't be able to update this at the moment until #122 is merged

Because pact-provider-verifier >= 1.26.0 depends on rack ~> 2.1
  and sinatra >= 4.0.0 depends on rack >= 3.0.0, < 4,
  pact-provider-verifier >= 1.26.0 is incompatible with sinatra >= 4.0.0.
So, because Gemfile depends on sinatra >= 4.1.0
  and Gemfile depends on pact-provider-verifier >= 1.38.1,
  version solving has failed.

@YOU54F YOU54F merged commit 5737728 into master Nov 30, 2024
27 checks passed
@YOU54F YOU54F deleted the snyk-fix-eb2db8b40f29216a80c489ed6479d911 branch November 30, 2024 11:37
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants