From 0ed3140885eae1ee3129d99215f043e40cd89449 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Sat, 21 Sep 2024 08:03:49 +0000 Subject: [PATCH] fix: Gemfile & Gemfile.lock to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-RUBY-PUMA-8062124 --- Gemfile | 2 +- Gemfile.lock | 6 +++--- 2 files changed, 4 insertions(+), 4 deletions(-) diff --git a/Gemfile b/Gemfile index 8fbdb84..cdeb7ee 100644 --- a/Gemfile +++ b/Gemfile @@ -12,7 +12,7 @@ gem "sprockets-rails" gem "sqlite3", "~> 1.4" # Use the Puma web server [https://github.com/puma/puma] -gem "puma", ">= 5.0" +gem "puma", ">= 6.4.3" # Use JavaScript with ESM import maps [https://github.com/rails/importmap-rails] gem "importmap-rails" diff --git a/Gemfile.lock b/Gemfile.lock index bcd7a65..8adc701 100644 --- a/Gemfile.lock +++ b/Gemfile.lock @@ -142,7 +142,7 @@ GEM timeout net-smtp (0.4.0.1) net-protocol - nio4r (2.7.0) + nio4r (2.7.3) nokogiri (1.16.2-arm64-darwin) racc (~> 1.4) nokogiri (1.16.2-x86_64-linux) @@ -153,7 +153,7 @@ GEM psych (5.1.2) stringio public_suffix (5.0.4) - puma (6.4.2) + puma (6.4.3) nio4r (~> 2.0) racc (1.7.3) rack (3.0.9.1) @@ -255,7 +255,7 @@ DEPENDENCIES importmap-rails jbuilder pry - puma (>= 5.0) + puma (>= 6.4.3) rails (~> 7.1.3, >= 7.1.3.1) redcarpet rouge