From 902632cb098d5e8a1697c628982c4bf49fdbd0ab Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Wed, 15 Nov 2023 01:49:43 +0000 Subject: [PATCH] fix: docs/Gemfile & docs/Gemfile.lock to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-RUBY-NOKOGIRI-6056551 - https://snyk.io/vuln/SNYK-RUBY-NOKOGIRI-6056552 - https://snyk.io/vuln/SNYK-RUBY-NOKOGIRI-6056553 - https://snyk.io/vuln/SNYK-RUBY-NOKOGIRI-6056554 - https://snyk.io/vuln/SNYK-RUBY-NOKOGIRI-6056555 --- docs/Gemfile | 2 +- docs/Gemfile.lock | 51 +++++++++++++++++++++++++++++++---------------- 2 files changed, 35 insertions(+), 18 deletions(-) mode change 100755 => 100644 docs/Gemfile diff --git a/docs/Gemfile b/docs/Gemfile old mode 100755 new mode 100644 index e515a326e45..12640b29bb6 --- a/docs/Gemfile +++ b/docs/Gemfile @@ -5,4 +5,4 @@ gem 'jekyll', '2.0.3' gem 'jekyll-sitemap', '0.4.1' gem 'jekyll-assets' gem 'github-markdown' -gem 'html-pipeline' +gem 'html-pipeline', '>= 2.5.0' diff --git a/docs/Gemfile.lock b/docs/Gemfile.lock index 8818a00d494..48eb27f22be 100644 --- a/docs/Gemfile.lock +++ b/docs/Gemfile.lock @@ -1,12 +1,19 @@ GEM remote: https://rubygems.org/ specs: - activesupport (5.0.0.1) + activesupport (7.1.2) + base64 + bigdecimal concurrent-ruby (~> 1.0, >= 1.0.2) - i18n (~> 0.7) - minitest (~> 5.1) - tzinfo (~> 1.1) + connection_pool (>= 2.2.5) + drb + i18n (>= 1.6, < 2) + minitest (>= 5.1) + mutex_m + tzinfo (~> 2.0) addressable (2.3.8) + base64 (0.2.0) + bigdecimal (3.1.4) blankslate (2.1.2.4) celluloid (0.16.0) timers (~> 4.0.0) @@ -17,7 +24,10 @@ GEM execjs coffee-script-source (1.10.0) colorator (0.1) - concurrent-ruby (1.0.2) + concurrent-ruby (1.2.2) + connection_pool (2.4.1) + drb (2.2.0) + ruby2_keywords execjs (2.7.0) fast-stemmer (1.0.2) fastimage (1.9.0) @@ -26,10 +36,11 @@ GEM github-markdown (0.6.9) hike (1.2.3) hitimes (1.2.4) - html-pipeline (2.4.2) + html-pipeline (2.14.3) activesupport (>= 2) nokogiri (>= 1.4) - i18n (0.7.0) + i18n (1.14.1) + concurrent-ruby (~> 1.0) jekyll (2.0.3) classifier (~> 1.3) colorator (~> 0.1) @@ -65,22 +76,26 @@ GEM rb-inotify (>= 0.9) mercenary (0.3.6) mini_magick (4.5.1) - mini_portile2 (2.1.0) - minitest (5.9.1) + mini_portile2 (2.8.5) + minitest (5.20.0) multi_json (1.12.1) - nokogiri (1.6.8.1) - mini_portile2 (~> 2.1.0) + mutex_m (0.2.0) + nokogiri (1.15.4) + mini_portile2 (~> 2.8.2) + racc (~> 1.4) parslet (1.5.0) blankslate (~> 2.0) posix-spawn (0.3.12) pygments.rb (0.5.4) posix-spawn (~> 0.3.6) yajl-ruby (~> 1.1.0) + racc (1.7.3) rack (1.6.5) rb-fsevent (0.9.8) rb-inotify (0.9.7) ffi (>= 0.5.0) redcarpet (3.3.4) + ruby2_keywords (0.0.5) safe_yaml (1.0.4) sass (3.4.22) sprockets (2.12.4) @@ -93,15 +108,14 @@ GEM sprockets-sass (1.3.1) sprockets (~> 2.0) tilt (~> 1.1) - thread_safe (0.3.5) tilt (1.4.1) timers (4.0.4) hitimes toml (0.1.2) parslet (~> 1.5.0) - tzinfo (1.2.2) - thread_safe (~> 0.1) - uglifier (3.0.3) + tzinfo (2.0.6) + concurrent-ruby (~> 1.0) + uglifier (3.0.4) execjs (>= 0.3.0, < 3) yajl-ruby (1.1.0) @@ -110,8 +124,11 @@ PLATFORMS DEPENDENCIES github-markdown - html-pipeline + html-pipeline (>= 2.5.0) jekyll (= 2.0.3) jekyll-assets jekyll-sitemap (= 0.4.1) - uglifier + uglifier (= 3.0.4) + +BUNDLED WITH + 2.1.4