From 2627f76e0ef75069197495df40a8b1f6b12d1df9 Mon Sep 17 00:00:00 2001 From: "dependabot-preview[bot]" <27856297+dependabot-preview[bot]@users.noreply.github.com> Date: Mon, 24 Feb 2020 19:41:27 +0000 Subject: [PATCH] [Security] Bump nokogiri from 1.10.3 to 1.10.8 Bumps [nokogiri](https://github.com/sparklemotion/nokogiri) from 1.10.3 to 1.10.8. **This update includes security fixes.** - [Release notes](https://github.com/sparklemotion/nokogiri/releases) - [Changelog](https://github.com/sparklemotion/nokogiri/blob/master/CHANGELOG.md) - [Commits](https://github.com/sparklemotion/nokogiri/compare/v1.10.3...v1.10.8) Signed-off-by: dependabot-preview[bot] --- Gemfile | 2 +- Gemfile.lock | 4 ++-- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/Gemfile b/Gemfile index a10d11432..3ba10327e 100644 --- a/Gemfile +++ b/Gemfile @@ -93,7 +93,7 @@ gem 'json', '~> 2.1.0' gem 'kaminari', '~> 0.17.0' gem 'liquid', '~> 4.0.0' gem 'nav_lynx', '~> 1.1.1' -gem 'nokogiri', '~> 1.10.3' +gem 'nokogiri', '~> 1.10.8' gem 'paperclip', '~> 6.1.0' gem 'paranoia', '~> 2.4' gem 'phony_rails', '~> 0.14.0' diff --git a/Gemfile.lock b/Gemfile.lock index c69a6e96c..df36e53ef 100644 --- a/Gemfile.lock +++ b/Gemfile.lock @@ -995,7 +995,7 @@ GEM rails (>= 3.1.0) nested_form (0.3.2) nio4r (2.3.1) - nokogiri (1.10.3) + nokogiri (1.10.8) mini_portile2 (~> 2.4.0) oj (3.7.12) orm_adapter (0.5.0) @@ -1299,7 +1299,7 @@ DEPENDENCIES lograge meta_request (~> 0.7.0) nav_lynx (~> 1.1.1) - nokogiri (~> 1.10.3) + nokogiri (~> 1.10.8) oj paperclip (~> 6.1.0) paranoia (~> 2.4)