diff --git a/Gemfile b/Gemfile index 0f528bf333942..a12141d7e76b8 100644 --- a/Gemfile +++ b/Gemfile @@ -56,7 +56,6 @@ gem "jsonapi-serializer", "~> 2.1" # Serializer for Ruby objects gem "kaminari", "~> 1.2" # A Scope & Engine based, clean, powerful, customizable and sophisticated paginator gem "katex", "~> 0.6.1" # This rubygem enables you to render TeX math to HTML using KaTeX. It uses ExecJS under the hood gem "liquid", "~> 5.0" # A secure, non-evaling end user template engine with aesthetic markup -gem "mini_racer", "~> 0.3.1" # Minimal embedded v8 gem "nokogiri", "~> 1.11" # HTML, XML, SAX, and Reader parser gem "octokit", "~> 4.20" # Simple wrapper for the GitHub API gem "oj", "~> 3.11" # JSON parser and object serializer @@ -72,7 +71,7 @@ gem "puma", "~> 5.1.1" # Puma is a simple, fast, threaded, and highly concurrent gem "pundit", "~> 2.1" # Object oriented authorization for Rails applications gem "pusher", "~> 1.4" # Ruby library for Pusher Channels HTTP API gem "pusher-push-notifications", "~> 1.3" # Pusher Push Notifications Ruby server SDK -gem "rack-attack", "~> 6.3.1" # Used to throttle requests to prevent brute force attacks +gem "rack-attack", "~> 6.4.0" # Used to throttle requests to prevent brute force attacks gem "rack-cors", "~> 1.1" # Middleware that will make Rack-based apps CORS compatible gem "rack-timeout", "~> 0.6" # Rack middleware which aborts requests that have been running for longer than a specified timeout gem "rails", "~> 6.0.3" # Ruby on Rails @@ -95,10 +94,9 @@ gem "rolify", "~> 5.3" # Very simple Roles library gem "rouge", "~> 3.26" # A pure-ruby code highlighter gem "rubyzip", "~> 2.3" # Rubyzip is a ruby library for reading and writing zip files gem "s3_direct_upload", "~> 0.1" # Direct Upload to Amazon S3 -gem "sassc-rails", "~> 2.1.2" # Integrate SassC-Ruby into Rails -gem "sidekiq", "~> 6.1.2" # Sidekiq is used to process background jobs with the help of Redis +gem "sidekiq", "~> 6.1.3" # Sidekiq is used to process background jobs with the help of Redis gem "sidekiq-cron", "~> 1.1" # Allows execution of scheduled cron jobs as specific times -gem "sidekiq-unique-jobs", "~> 6.0.25" # Ensures that Sidekiq jobs are unique when enqueued +gem "sidekiq-unique-jobs", "~> 7.0.0" # Ensures that Sidekiq jobs are unique when enqueued gem "sitemap_generator", "~> 6.1" # SitemapGenerator is a framework-agnostic XML Sitemap generator gem "slack-notifier", "~> 2.3" # A slim ruby wrapper for posting to slack webhooks gem "sprockets", "~> 4.0" # Sprockets is a Rack-based asset packaging system @@ -153,6 +151,7 @@ group :development, :test do gem "rubocop-performance", "~> 1.9", require: false # A collection of RuboCop cops to check for performance optimizations in Ruby code gem "rubocop-rails", "~> 2.9", require: false # Automatic Rails code style checking tool gem "rubocop-rspec", "~> 2.1", require: false # Code style checking for RSpec files + gem "sassc-rails", "~> 2.1.2" # Integrate SassC-Ruby into Rails gem "spring", "~> 2.1" # Preloads your application so things like console, rake and tests run faster gem "spring-commands-rspec", "~> 1.0" # rspec command for spring end @@ -170,10 +169,10 @@ group :test do gem "simplecov", "~> 0.21.2", require: false # Code coverage with a powerful configuration library and automatic merging of coverage across test suites gem "stackprof", "~> 0.2", require: false, platforms: :ruby # stackprof is a fast sampling profiler for ruby code, with cpu, wallclock and object allocation samplers gem "stripe-ruby-mock", "~> 3.0", require: "stripe_mock" # A drop-in library to test stripe without hitting their servers - gem "test-prof", "~> 0.12" # Ruby Tests Profiling Toolbox + gem "test-prof", "~> 1.0" # Ruby Tests Profiling Toolbox gem "timecop", "~> 0.9" # A gem providing "time travel" and "time freezing" capabilities, making it dead simple to test time-dependent code gem "vcr", "~> 6.0" # Record your test suite's HTTP interactions and replay them during future test runs for fast, deterministic, accurate tests - gem "webdrivers", "~> 4.4" # Run Selenium tests more easily with install and updates for all supported webdrivers + gem "webdrivers", "~> 4.5" # Run Selenium tests more easily with install and updates for all supported webdrivers gem "webmock", "~> 3.11", require: false # WebMock allows stubbing HTTP requests and setting expectations on HTTP requests gem "zonebie", "~> 0.6.1" # Runs your tests in a random timezone end diff --git a/Gemfile.lock b/Gemfile.lock index 020eaa3c044b4..c46b0471615ca 100644 --- a/Gemfile.lock +++ b/Gemfile.lock @@ -135,6 +135,9 @@ GEM msgpack (~> 1.0) brakeman (4.10.1) browser (5.2.0) + brpoplpush-redis_script (0.1.1) + concurrent-ruby (~> 1.0, >= 1.0.5) + redis (>= 1.0, <= 5.0) buffer (0.1.3) addressable environs @@ -146,7 +149,7 @@ GEM yajl-ruby buftok (0.2.0) builder (3.2.4) - bullet (6.1.2) + bullet (6.1.3) activesupport (>= 3.0.0) uniform_notifier (~> 1.11) bundler-audit (0.7.0.1) @@ -191,7 +194,7 @@ GEM coffee-script-source execjs coffee-script-source (1.12.2) - concurrent-ruby (1.1.7) + concurrent-ruby (1.1.8) connection_pool (2.2.3) counter_culture (2.7.0) activerecord (>= 4.2) @@ -430,10 +433,6 @@ GEM libhoney (1.17.0) addressable (~> 2.0) http (>= 2.0, < 5.0) - libv8 (8.4.255.0) - libv8 (8.4.255.0-x86_64-darwin-19) - libv8 (8.4.255.0-x86_64-darwin-20) - libv8 (8.4.255.0-x86_64-linux) liquid (5.0.0) listen (3.4.1) rb-fsevent (~> 0.10, >= 0.10.3) @@ -458,8 +457,6 @@ GEM mini_magick (4.11.0) mini_mime (1.0.2) mini_portile2 (2.5.0) - mini_racer (0.3.1) - libv8 (~> 8.4.255) minitest (5.14.3) msgpack (1.3.3) multi_json (1.15.0) @@ -544,7 +541,7 @@ GEM raabro (1.4.0) racc (1.5.2) rack (2.2.3) - rack-attack (6.3.1) + rack-attack (6.4.0) rack (>= 1.0, < 3) rack-cors (1.1.1) rack (>= 2.0.0) @@ -714,16 +711,17 @@ GEM shellany (0.0.1) shoulda-matchers (4.5.0) activesupport (>= 4.2.0) - sidekiq (6.1.2) + sidekiq (6.1.3) connection_pool (>= 2.2.2) rack (~> 2.0) redis (>= 4.2.0) sidekiq-cron (1.2.0) fugit (~> 1.1) sidekiq (>= 4.2.1) - sidekiq-unique-jobs (6.0.25) + sidekiq-unique-jobs (7.0.0) + brpoplpush-redis_script (> 0.0.0, <= 2.0.0) concurrent-ruby (~> 1.0, >= 1.0.5) - sidekiq (>= 4.0, < 7.0) + sidekiq (>= 5.0, < 7.0) thor (>= 0.20, < 2.0) simple_oauth (0.3.1) simplecov (0.21.2) @@ -760,7 +758,7 @@ GEM stripe (> 5, < 6) strong_migrations (0.7.6) activerecord (>= 5) - test-prof (0.12.2) + test-prof (1.0.0) thor (0.20.3) thread_safe (0.3.6) tilt (2.0.10) @@ -789,7 +787,7 @@ GEM unf_ext unf_ext (0.0.7.7) unicode-display_width (2.0.0) - uniform_notifier (1.13.0) + uniform_notifier (1.13.2) validate_url (1.0.13) activemodel (>= 3.0.0) public_suffix @@ -809,7 +807,7 @@ GEM activemodel (>= 6.0.0) bindex (>= 0.4.0) railties (>= 6.0.0) - webdrivers (4.4.2) + webdrivers (4.5.0) nokogiri (~> 1.6) rubyzip (>= 1.3.0) selenium-webdriver (>= 3.0, < 4.0) @@ -913,7 +911,6 @@ DEPENDENCIES liquid (~> 5.0) listen (~> 3.4) memory_profiler (~> 1.0) - mini_racer (~> 0.3.1) nakayoshi_fork (~> 0.0.4) nokogiri (~> 1.11) octokit (~> 4.20) @@ -934,7 +931,7 @@ DEPENDENCIES pundit-matchers (~> 1.6) pusher (~> 1.4) pusher-push-notifications (~> 1.3) - rack-attack (~> 6.3.1) + rack-attack (~> 6.4.0) rack-cors (~> 1.1) rack-host-redirect (~> 1.3) rack-timeout (~> 0.6) @@ -962,9 +959,9 @@ DEPENDENCIES s3_direct_upload (~> 0.1) sassc-rails (~> 2.1.2) shoulda-matchers (~> 4.5.0) - sidekiq (~> 6.1.2) + sidekiq (~> 6.1.3) sidekiq-cron (~> 1.1) - sidekiq-unique-jobs (~> 6.0.25) + sidekiq-unique-jobs (~> 7.0.0) simplecov (~> 0.21.2) sitemap_generator (~> 6.1) slack-notifier (~> 2.3) @@ -978,7 +975,7 @@ DEPENDENCIES stripe (~> 5.29) stripe-ruby-mock (~> 3.0) strong_migrations (~> 0.7) - test-prof (~> 0.12) + test-prof (~> 1.0) timecop (~> 0.9) twilio-ruby (~> 5.46) twitter (~> 7.0) @@ -989,7 +986,7 @@ DEPENDENCIES vcr (~> 6.0) wcag_color_contrast (~> 0.1) web-console (~> 4.1) - webdrivers (~> 4.4) + webdrivers (~> 4.5) webmock (~> 3.11) webpacker (~> 5.2.1) yard (~> 0.9.26) diff --git a/vendor/cache/rack-attack-6.3.1.gem b/vendor/cache/rack-attack-6.3.1.gem deleted file mode 100644 index 4280c7de0e5ba..0000000000000 Binary files a/vendor/cache/rack-attack-6.3.1.gem and /dev/null differ diff --git a/vendor/cache/rack-attack-6.4.0.gem b/vendor/cache/rack-attack-6.4.0.gem new file mode 100644 index 0000000000000..c154a517776fe Binary files /dev/null and b/vendor/cache/rack-attack-6.4.0.gem differ