From 7ba7003ba5499a9f0fabb27d36b7a943dacd747e Mon Sep 17 00:00:00 2001
From: snyk-bot <snyk-bot@snyk.io>
Date: Thu, 29 Jun 2023 15:28:53 +0000
Subject: [PATCH] fix: Gemfile to reduce vulnerabilities

The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-RUBY-ACTIONPACK-5741907
---
 Gemfile | 26 +++++++++++++-------------
 1 file changed, 13 insertions(+), 13 deletions(-)

diff --git a/Gemfile b/Gemfile
index 998e45e..7fcf773 100644
--- a/Gemfile
+++ b/Gemfile
@@ -1,20 +1,20 @@
 source 'https://rubygems.org'
 ruby '2.1.2'
 
-gem 'rails', '4.2.5'
-gem 'sass-rails', '~> 4.0.3'
+gem 'rails', '6.1.7.4'
+gem 'sass-rails', '~> 5.0.8'
 gem 'uglifier', '>= 1.3.0'
-gem 'coffee-rails', '~> 4.0.0'
-gem 'jquery-rails'
-gem 'turbolinks'
+gem 'coffee-rails', '~> 4.2.2'
+gem 'jquery-rails', '>= 4.0.4'
+gem 'turbolinks', '>= 2.5.4'
 gem 'jbuilder', '~> 2.0'
 gem 'sdoc', '~> 0.4.0',          group: :doc
 gem 'spring',        group: :development
 gem 'bootstrap-sass'
-gem 'devise'
+gem 'devise', '>= 4.7.0'
 gem 'pundit'
-gem 'simple_form'
-gem 'slim-rails'
+gem 'simple_form', '>= 4.0.0'
+gem 'slim-rails', '>= 3.1.0'
 
 gem 'bootstrap3_autocomplete_input'
 gem 'twitter-typeahead-rails'
@@ -49,14 +49,14 @@ gem 'will_paginate-bootstrap'
 gem 'jquery-tokeninput-rails'
 
 # Multiple file upload plugin
-gem "jquery-fileupload-rails"
+gem "jquery-fileupload-rails", ">= 0.4.2"
 
 gem "que"
 
 # for link_helpers
 gem "nested_form"
 
-gem 'jquery-ui-rails'
+gem 'jquery-ui-rails', '>= 5.0.1'
 
 group :development do
   gem 'better_errors'
@@ -80,11 +80,11 @@ group :development do
 end
 
 group :development, :test do
-  gem 'factory_girl_rails'
+  gem 'factory_girl_rails', '>= 4.6.0'
   gem 'faker'
   gem 'pry-rails'
   gem 'pry-rescue'
-  gem 'rspec-rails'
+  gem 'rspec-rails', '>= 3.5.0'
 end
 
 group :test do
@@ -92,7 +92,7 @@ group :test do
   gem 'database_cleaner'
   gem 'launchy'
   gem 'selenium-webdriver'
-  gem 'cucumber-rails', :require=>false
+  gem 'cucumber-rails', '>= 1.4.3', :require=>false
   gem 'shoulda-matchers'
 
   # for Travis CI