Skip to content
This repository was archived by the owner on Jun 28, 2024. It is now read-only.

Commit 2bc7d09

Browse files
committed
fix: Gemfile to reduce vulnerabilities
The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-RUBY-NOKOGIRI-7164639
1 parent 1b3ad5f commit 2bc7d09

File tree

1 file changed

+14
-14
lines changed

1 file changed

+14
-14
lines changed

Gemfile

+14-14
Original file line numberDiff line numberDiff line change
@@ -1,12 +1,12 @@
11
source 'https://rubygems.org'
22

3-
gem 'rails', '5.2.8.1'
3+
gem 'rails', '6.0.0'
44

55
gem 'sprockets'
66

77
# Need to require sprockets-rails expicitly to get asset pipeline, at least untill we move to SASS
88
# Pinning sprockets-rails to 2.3.3 so that everything doesn't blow up. It might be time to start thinking about webpack.
9-
gem 'sprockets-rails', '2.3.3'
9+
gem 'sprockets-rails', '3.0.0'
1010
# We need less-rails outside of the assets group so that assets will build in production
1111
gem 'less-rails'
1212
# We want non-digest versions of our assets for font-awesome
@@ -24,27 +24,27 @@ gem 'zip-zip'
2424

2525
gem 'axlsx', git: 'https://github.com/randym/axlsx', branch: 'master'
2626
gem 'mongoid', '~> 7.1'
27-
gem 'devise'
27+
gem 'devise', '>= 4.8.1'
2828
gem 'systemu'
2929
gem 'multi_json'
3030
gem 'rest-client'
3131
# needed for parsing value sets (we need to use roo rather than rubyxl because the value sets are in xls rather than xlsx)
32-
gem 'roo', '~> 2.7'
32+
gem 'roo', '~> 2.9', '>= 2.9.0'
3333

3434

3535
gem 'oj' # Faster JSON
36-
gem 'apipie-rails'
36+
gem 'apipie-rails', '>= 0.5.19'
3737
gem 'maruku' # enable Markup for API documentation
38-
gem 'doorkeeper', '~> 4.4.0'
39-
gem "doorkeeper-mongodb", '~> 4.2.0'
38+
gem 'doorkeeper', '~> 5.0.0'
39+
gem "doorkeeper-mongodb", "~> 5.0.0"
4040

4141
group :test, :development, :ci do
4242
gem 'pry'
4343
# Pinning teaspoon to 1.1.5 because of sprockets-rails 2.3.3
44-
gem 'teaspoon', '1.1.5'
44+
gem 'teaspoon', '1.2.0'
4545
gem "overcommit"
4646
gem 'rubocop'
47-
gem 'teaspoon-jasmine'
47+
gem 'teaspoon-jasmine', '>= 2.4.1'
4848
gem 'simplecov', :require => false
4949
gem 'minitest'
5050
gem 'rails_best_practices'
@@ -56,7 +56,7 @@ group :test, :development, :ci do
5656
gem 'selenium-webdriver'
5757
gem 'codecov', :require => false
5858
gem 'rails-controller-testing'
59-
gem 'rails-html-sanitizer', '>=1.4.3'
59+
gem 'rails-html-sanitizer', '>= 1.4.4'
6060
end
6161

6262
group :test, :development do
@@ -86,12 +86,12 @@ end
8686
gem 'foreman'
8787

8888
gem 'handlebars_assets', '0.16'
89-
gem 'jquery-rails'
89+
gem 'jquery-rails', '>= 4.5.0'
9090

9191
# Browser Detection
9292
gem 'browser'
9393

94-
gem "reverse_markdown", "~> 2.0"
95-
gem "tinymce-rails"
94+
gem "reverse_markdown", "~> 2.1", ">= 2.1.1"
95+
gem "tinymce-rails", ">= 5.8.2"
9696

97-
gem "devise_saml_authenticatable"
97+
gem "devise_saml_authenticatable", ">= 1.7.0"

0 commit comments

Comments
 (0)