Skip to content
This repository was archived by the owner on May 13, 2025. It is now read-only.

Commit 2153ebd

Browse files
committed
fix: Gemfile & Gemfile.lock to reduce vulnerabilities
The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-RUBY-BOOTSTRAP-7640980 - https://snyk.io/vuln/SNYK-RUBY-BOOTSTRAP-7640987
1 parent 82b08bb commit 2153ebd

File tree

2 files changed

+42
-53
lines changed

2 files changed

+42
-53
lines changed

Gemfile

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -50,4 +50,4 @@ end
5050
# Windows does not include zoneinfo files, so bundle the tzinfo-data gem
5151
gem 'tzinfo-data', platforms: [:mingw, :mswin, :x64_mingw, :jruby]
5252
gem "twilio-ruby", "~> 5.46"
53-
gem "bootstrap", "~> 4.5"
53+
gem "bootstrap", "~> 5.0", ">= 5.0.0"

Gemfile.lock

Lines changed: 41 additions & 52 deletions
Original file line numberDiff line numberDiff line change
@@ -62,16 +62,15 @@ GEM
6262
zeitwerk (~> 2.3)
6363
addressable (2.7.0)
6464
public_suffix (>= 2.0.2, < 5.0)
65-
autoprefixer-rails (10.2.4.0)
66-
execjs
65+
autoprefixer-rails (10.4.19.0)
66+
execjs (~> 2)
6767
bindex (0.8.1)
6868
bootsnap (1.7.3)
6969
msgpack (~> 1.0)
70-
bootstrap (4.6.0)
70+
bootstrap (5.3.3)
7171
autoprefixer-rails (>= 9.1.0)
72-
popper_js (>= 1.14.3, < 2)
73-
sassc-rails (>= 2.0.0)
74-
builder (3.2.4)
72+
popper_js (>= 2.11.8, < 3)
73+
builder (3.3.0)
7574
byebug (11.1.3)
7675
capybara (3.35.3)
7776
addressable
@@ -82,7 +81,7 @@ GEM
8281
regexp_parser (>= 1.5, < 3.0)
8382
xpath (~> 3.2)
8483
childprocess (3.0.0)
85-
concurrent-ruby (1.1.8)
84+
concurrent-ruby (1.3.3)
8685
crack (0.4.5)
8786
rexml
8887
crass (1.0.6)
@@ -91,58 +90,57 @@ GEM
9190
dotenv-rails (2.7.6)
9291
dotenv (= 2.7.6)
9392
railties (>= 3.2)
94-
erubi (1.10.0)
95-
execjs (2.7.0)
93+
erubi (1.13.0)
94+
execjs (2.9.1)
9695
faraday (1.3.0)
9796
faraday-net_http (~> 1.0)
9897
multipart-post (>= 1.2, < 3)
9998
ruby2_keywords
10099
faraday-net_http (1.0.1)
101-
ffi (1.15.0)
102-
ffi (1.15.0-x64-mingw32)
100+
ffi (1.17.0)
103101
globalid (0.4.2)
104102
activesupport (>= 4.2.0)
105103
hashdiff (1.0.1)
106-
i18n (1.8.10)
104+
i18n (1.14.5)
107105
concurrent-ruby (~> 1.0)
108106
jbuilder (2.11.2)
109107
activesupport (>= 5.0.0)
110108
jwt (2.2.2)
111109
listen (3.5.1)
112110
rb-fsevent (~> 0.10, >= 0.10.3)
113111
rb-inotify (~> 0.9, >= 0.9.10)
114-
loofah (2.9.0)
112+
loofah (2.22.0)
115113
crass (~> 1.0.2)
116-
nokogiri (>= 1.5.9)
114+
nokogiri (>= 1.12.0)
117115
mail (2.7.1)
118116
mini_mime (>= 0.1.1)
119117
marcel (1.0.1)
120-
method_source (1.0.0)
118+
method_source (1.1.0)
121119
mini_mime (1.0.3)
122-
minitest (5.14.4)
120+
minitest (5.24.1)
123121
msgpack (1.4.2)
124122
multipart-post (2.1.1)
125123
nio4r (2.5.7)
126-
nokogiri (1.11.2-arm64-darwin)
124+
nokogiri (1.16.7-arm64-darwin)
127125
racc (~> 1.4)
128-
nokogiri (1.11.2-x64-mingw32)
126+
nokogiri (1.16.7-x64-mingw32)
129127
racc (~> 1.4)
130-
nokogiri (1.11.2-x86_64-darwin)
128+
nokogiri (1.16.7-x86_64-darwin)
131129
racc (~> 1.4)
132-
nokogiri (1.11.2-x86_64-linux)
130+
nokogiri (1.16.7-x86_64-linux)
133131
racc (~> 1.4)
134-
popper_js (1.16.0)
132+
popper_js (2.11.8)
135133
public_suffix (4.0.6)
136134
puma (5.2.2)
137135
nio4r (~> 2.0)
138-
racc (1.5.2)
139-
rack (2.2.3)
136+
racc (1.8.1)
137+
rack (2.2.9)
140138
rack-mini-profiler (2.3.1)
141139
rack (>= 1.2.0)
142140
rack-proxy (0.6.5)
143141
rack
144-
rack-test (1.1.0)
145-
rack (>= 1.0, < 3)
142+
rack-test (2.1.0)
143+
rack (>= 1.3)
146144
rails (6.1.3.1)
147145
actioncable (= 6.1.3.1)
148146
actionmailbox (= 6.1.3.1)
@@ -158,18 +156,20 @@ GEM
158156
bundler (>= 1.15.0)
159157
railties (= 6.1.3.1)
160158
sprockets-rails (>= 2.0.0)
161-
rails-dom-testing (2.0.3)
162-
activesupport (>= 4.2.0)
159+
rails-dom-testing (2.2.0)
160+
activesupport (>= 5.0.0)
161+
minitest
163162
nokogiri (>= 1.6)
164-
rails-html-sanitizer (1.3.0)
165-
loofah (~> 2.3)
163+
rails-html-sanitizer (1.6.0)
164+
loofah (~> 2.21)
165+
nokogiri (~> 1.14)
166166
railties (6.1.3.1)
167167
actionpack (= 6.1.3.1)
168168
activesupport (= 6.1.3.1)
169169
method_source
170170
rake (>= 0.8.7)
171171
thor (~> 1.0)
172-
rake (13.0.3)
172+
rake (13.2.1)
173173
rb-fsevent (0.10.4)
174174
rb-inotify (0.10.1)
175175
ffi (~> 1.0)
@@ -194,38 +194,27 @@ GEM
194194
rspec-support (3.10.2)
195195
ruby2_keywords (0.0.4)
196196
rubyzip (2.3.0)
197-
sassc (2.4.0)
198-
ffi (~> 1.9)
199-
sassc (2.4.0-x64-mingw32)
200-
ffi (~> 1.9)
201-
sassc-rails (2.1.2)
202-
railties (>= 4.0.0)
203-
sassc (>= 2.0)
204-
sprockets (> 3.0)
205-
sprockets-rails
206-
tilt
207197
selenium-webdriver (3.142.7)
208198
childprocess (>= 0.5, < 4.0)
209199
rubyzip (>= 1.2.2)
210200
semantic_range (3.0.0)
211201
spring (2.1.1)
212-
sprockets (4.0.2)
202+
sprockets (4.2.1)
213203
concurrent-ruby (~> 1.0)
214-
rack (> 1, < 3)
215-
sprockets-rails (3.2.2)
216-
actionpack (>= 4.0)
217-
activesupport (>= 4.0)
204+
rack (>= 2.2.4, < 4)
205+
sprockets-rails (3.5.2)
206+
actionpack (>= 6.1)
207+
activesupport (>= 6.1)
218208
sprockets (>= 3.0.0)
219-
thor (1.1.0)
220-
tilt (2.0.10)
209+
thor (1.3.1)
221210
turbolinks (5.2.1)
222211
turbolinks-source (~> 5.2)
223212
turbolinks-source (5.2.0)
224213
twilio-ruby (5.50.0)
225214
faraday (>= 0.9, < 2.0)
226215
jwt (>= 1.5, <= 2.5)
227216
nokogiri (>= 1.6, < 2.0)
228-
tzinfo (2.0.4)
217+
tzinfo (2.0.6)
229218
concurrent-ruby (~> 1.0)
230219
tzinfo-data (1.2021.1)
231220
tzinfo (>= 1.0.0)
@@ -253,7 +242,7 @@ GEM
253242
websocket-extensions (0.1.5)
254243
xpath (3.2.0)
255244
nokogiri (~> 1.8)
256-
zeitwerk (2.4.2)
245+
zeitwerk (2.6.17)
257246

258247
PLATFORMS
259248
universal-darwin-19
@@ -262,15 +251,15 @@ PLATFORMS
262251

263252
DEPENDENCIES
264253
bootsnap (>= 1.4.4)
265-
bootstrap (~> 4.5)
254+
bootstrap (~> 5.0, >= 5.0.0)
266255
byebug
267256
capybara (>= 3.26)
268257
dotenv-rails
269258
jbuilder (~> 2.7)
270259
listen (~> 3.3)
271260
puma (~> 5.0)
272261
rack-mini-profiler (~> 2.0)
273-
rails (~> 6.1.3.1)
262+
rails (~> 6.1)
274263
rspec-rails
275264
selenium-webdriver
276265
spring
@@ -287,4 +276,4 @@ RUBY VERSION
287276
ruby 3.0.0p0
288277

289278
BUNDLED WITH
290-
2.2.6
279+
2.2.3

0 commit comments

Comments
 (0)