Skip to content

Commit dbd20ca

Browse files
committed
Gemfile.lock: update sprockets version
Apparently 2.11.0 has a vulnerability (CVE-2014-7819). I had to hand-munge this one because "bundle update sprockets" doesn't work (I think because sass-rails has a dependency on 2.11.0).
1 parent f159a8c commit dbd20ca

File tree

1 file changed

+2
-2
lines changed

1 file changed

+2
-2
lines changed

Gemfile.lock

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -204,14 +204,14 @@ GEM
204204
sass-rails (4.0.3)
205205
railties (>= 4.0.0, < 5.0)
206206
sass (~> 3.2.0)
207-
sprockets (~> 2.8, <= 2.11.0)
207+
sprockets (~> 2.8, <= 2.11.3)
208208
sprockets-rails (~> 2.0)
209209
sawyer (0.8.1)
210210
addressable (>= 2.3.5, < 2.6)
211211
faraday (~> 0.8, < 1.0)
212212
shoulda-matchers (3.1.2)
213213
activesupport (>= 4.0.0)
214-
sprockets (2.11.0)
214+
sprockets (2.11.3)
215215
hike (~> 1.2)
216216
multi_json (~> 1.0)
217217
rack (~> 1.0)

0 commit comments

Comments
 (0)