From 4f4e8b2f6592eca606aa37c624b1a32aa31ec461 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Fri, 28 Oct 2022 05:43:46 +0000 Subject: [PATCH] fix: Gemfile & Gemfile.lock to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-RUBY-RACK-1061917 --- Gemfile | 2 +- Gemfile.lock | 19 +++++++++++-------- 2 files changed, 12 insertions(+), 9 deletions(-) diff --git a/Gemfile b/Gemfile index b744ba1..f58b970 100644 --- a/Gemfile +++ b/Gemfile @@ -5,5 +5,5 @@ group :development do gem "foreman", "~> 0.13" gem "serve", "~> 1.0" gem "jekyll", "~> 0.10" - gem "thin", "~> 1.2" + gem "thin", "~> 1.2", ">= 1.2.11" end diff --git a/Gemfile.lock b/Gemfile.lock index 8b54f2a..53c17c9 100644 --- a/Gemfile.lock +++ b/Gemfile.lock @@ -5,9 +5,9 @@ GEM activesupport (3.0.7) classifier (1.3.3) fast-stemmer (>= 1.0.0) - daemons (1.1.3) + daemons (1.4.1) directory_watcher (1.4.0) - eventmachine (0.12.10) + eventmachine (1.2.7) fast-stemmer (1.0.0) foreman (0.13.0) term-ansicolor (~> 1.0.5) @@ -21,7 +21,7 @@ GEM liquid (2.2.2) maruku (0.6.0) syntax (>= 1.0.0) - rack (1.2.2) + rack (1.2.8) serve (1.0.0) activesupport (~> 3.0.1) i18n (~> 0.4.1) @@ -29,10 +29,10 @@ GEM tzinfo (~> 0.3.23) syntax (1.0.0) term-ansicolor (1.0.5) - thin (1.2.11) - daemons (>= 1.0.9) - eventmachine (>= 0.12.6) - rack (>= 1.0.0) + thin (1.8.1) + daemons (~> 1.0, >= 1.0.9) + eventmachine (~> 1.0, >= 1.0.4) + rack (>= 1, < 3) thor (0.14.6) tzinfo (0.3.27) @@ -44,4 +44,7 @@ DEPENDENCIES foreman (~> 0.13) jekyll (~> 0.10) serve (~> 1.0) - thin (~> 1.2) + thin (~> 1.2, >= 1.2.11) + +BUNDLED WITH + 2.1.4