From 955cd8e3eb62dc341aed6ed52c73c1f2d534b468 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Tue, 14 Nov 2023 15:20:48 +0000 Subject: [PATCH] fix: Gemfile to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-RUBY-NOKOGIRI-6056551 - https://snyk.io/vuln/SNYK-RUBY-NOKOGIRI-6056552 - https://snyk.io/vuln/SNYK-RUBY-NOKOGIRI-6056553 - https://snyk.io/vuln/SNYK-RUBY-NOKOGIRI-6056554 - https://snyk.io/vuln/SNYK-RUBY-NOKOGIRI-6056555 --- Gemfile | 28 ++++++++++++++-------------- 1 file changed, 14 insertions(+), 14 deletions(-) diff --git a/Gemfile b/Gemfile index 998e45e..38794e7 100644 --- a/Gemfile +++ b/Gemfile @@ -1,20 +1,20 @@ source 'https://rubygems.org' ruby '2.1.2' -gem 'rails', '4.2.5' -gem 'sass-rails', '~> 4.0.3' +gem 'rails', '4.2.5.1' +gem 'sass-rails', '~> 5.0.0' gem 'uglifier', '>= 1.3.0' -gem 'coffee-rails', '~> 4.0.0' -gem 'jquery-rails' -gem 'turbolinks' +gem 'coffee-rails', '~> 4.1.0' +gem 'jquery-rails', '>= 4.0.4' +gem 'turbolinks', '>= 2.5.4' gem 'jbuilder', '~> 2.0' gem 'sdoc', '~> 0.4.0', group: :doc gem 'spring', group: :development gem 'bootstrap-sass' -gem 'devise' +gem 'devise', '>= 3.5.1' gem 'pundit' -gem 'simple_form' -gem 'slim-rails' +gem 'simple_form', '>= 3.1.1' +gem 'slim-rails', '>= 3.1.0' gem 'bootstrap3_autocomplete_input' gem 'twitter-typeahead-rails' @@ -49,14 +49,14 @@ gem 'will_paginate-bootstrap' gem 'jquery-tokeninput-rails' # Multiple file upload plugin -gem "jquery-fileupload-rails" +gem "jquery-fileupload-rails", ">= 0.4.2" gem "que" # for link_helpers gem "nested_form" -gem 'jquery-ui-rails' +gem 'jquery-ui-rails', '>= 5.0.1' group :development do gem 'better_errors' @@ -80,19 +80,19 @@ group :development do end group :development, :test do - gem 'factory_girl_rails' + gem 'factory_girl_rails', '>= 4.6.0' gem 'faker' gem 'pry-rails' gem 'pry-rescue' - gem 'rspec-rails' + gem 'rspec-rails', '>= 3.2.1' end group :test do - gem 'capybara' + gem 'capybara', '>= 2.5.0' gem 'database_cleaner' gem 'launchy' gem 'selenium-webdriver' - gem 'cucumber-rails', :require=>false + gem 'cucumber-rails', '>= 1.4.3', :require=>false gem 'shoulda-matchers' # for Travis CI