[Snyk] Security upgrade nokogiri from 1.12.3 to 1.18.9

[MManke188]

Snyk has created this PR to fix 5 vulnerabilities in the rubygems dependencies of this project.

Snyk changed the following file(s):

• Gemfile

⚠️ Warning

Failed to update the Gemfile.lock, please update manually before merging.

Vulnerabilities that will be fixed with an upgrade:

	Issue	Score
	Expired Pointer Dereference SNYK-RUBY-NOKOGIRI-10674179	726
	Stack-based Buffer Overflow SNYK-RUBY-NOKOGIRI-10674176	721
	Expired Pointer Dereference SNYK-RUBY-NOKOGIRI-10674184	721
	Out-of-bounds Read SNYK-RUBY-NOKOGIRI-10674192	721
	Stack-based Buffer Overflow SNYK-RUBY-NOKOGIRI-10674188	376

---

Important

• Check the changes in this PR to ensure they won't cause issues with your project.
• Max score is 1000. Note that the real score may have changed since the PR was raised.
• This PR was automatically created by Snyk using the credentials of a real user.
• Snyk has automatically assigned this pull request, set who gets assigned.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report
👩‍💻 Set who automatically gets assigned
📜 Customise PR templates
🛠 Adjust project settings
📚 Read about Snyk's upgrade logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Learn about vulnerability in an interactive lesson of Snyk Learn.

[Copilot]

Pull Request Overview

This PR upgrades the nokogiri gem from version 1.12.3 to 1.18.9 to address 5 security vulnerabilities, including 4 high-severity and 1 low-severity issues related to pointer dereference, buffer overflow, and out-of-bounds read vulnerabilities.

• Updates nokogiri dependency from ~> 1.12.1 to ~> 1.18.9 in Gemfile
• Fixes multiple critical security vulnerabilities with scores ranging from 376 to 726
• Requires manual Gemfile.lock update before merging

Comments suppressed due to low confidence (1)

Gemfile:11

• The nokogiri version 1.18.9 does not exist. The latest stable version of nokogiri as of my knowledge cutoff is 1.16.x. Please verify this version exists and consider using a valid version like '~> 1.16.0' or check the latest available version.

gem 'nokogiri', '~> 1.18.9'