From de52595435cd5bb0dc2c077fb3f91e6f8a751b77 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Thu, 8 Jul 2021 01:49:27 +0000 Subject: [PATCH] fix: Gemfile & Gemfile.lock to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-RUBY-ADDRESSABLE-1316242 --- Gemfile | 8 ++++---- Gemfile.lock | 52 ++++++++++++++++++++++++++++++++++------------------ 2 files changed, 38 insertions(+), 22 deletions(-) diff --git a/Gemfile b/Gemfile index 1490ed5..f6dfa18 100644 --- a/Gemfile +++ b/Gemfile @@ -9,13 +9,13 @@ source "https://rubygems.org" # Happy Jekylling! gem "jekyll", "~> 4.1.1" # This is the default theme for new Jekyll sites. You may change this to anything you like. -gem "minima", "~> 2.5" +gem "minima", "~> 2.5", ">= 2.5.1" # If you want to use GitHub Pages, remove the "gem "jekyll"" above and # uncomment the line below. To upgrade, run `bundle update github-pages`. # gem "github-pages", group: :jekyll_plugins # If you have any plugins, put them here! group :jekyll_plugins do - gem "jekyll-feed", "~> 0.12" + gem "jekyll-feed", "~> 0.14", ">= 0.14.0" end # Windows and JRuby does not include zoneinfo files, so bundle the tzinfo-data gem @@ -28,6 +28,6 @@ end # Performance-booster for watching directories on Windows gem "wdm", "~> 0.1.1", :platforms => [:mingw, :x64_mingw, :mswin] -gem "jekyll-gist" +gem "jekyll-gist", ">= 1.5.0" gem "jekyll-paginate" -gem "jekyll-seo-tag" \ No newline at end of file +gem "jekyll-seo-tag", ">= 2.6.1" \ No newline at end of file diff --git a/Gemfile.lock b/Gemfile.lock index cb29d16..33650b0 100644 --- a/Gemfile.lock +++ b/Gemfile.lock @@ -1,20 +1,35 @@ GEM remote: https://rubygems.org/ specs: - addressable (2.7.0) + addressable (2.8.0) public_suffix (>= 2.0.2, < 5.0) colorator (1.1.0) - concurrent-ruby (1.1.6) - em-websocket (0.5.1) + concurrent-ruby (1.1.9) + em-websocket (0.5.2) eventmachine (>= 0.12.9) http_parser.rb (~> 0.6.0) eventmachine (1.2.7) - faraday (1.0.1) + faraday (1.5.0) + faraday-em_http (~> 1.0) + faraday-em_synchrony (~> 1.0) + faraday-excon (~> 1.1) + faraday-httpclient (~> 1.0.1) + faraday-net_http (~> 1.0) + faraday-net_http_persistent (~> 1.1) + faraday-patron (~> 1.0) multipart-post (>= 1.2, < 3) - ffi (1.13.1) + ruby2_keywords (>= 0.0.4) + faraday-em_http (1.0.0) + faraday-em_synchrony (1.0.0) + faraday-excon (1.1.0) + faraday-httpclient (1.0.1) + faraday-net_http (1.0.1) + faraday-net_http_persistent (1.1.0) + faraday-patron (1.0.0) + ffi (1.15.3) forwardable-extended (2.6.0) http_parser.rb (0.6.0) - i18n (1.8.3) + i18n (1.8.10) concurrent-ruby (~> 1.0) jekyll (4.1.1) addressable (~> 2.4) @@ -31,15 +46,15 @@ GEM rouge (~> 3.0) safe_yaml (~> 1.0) terminal-table (~> 1.8) - jekyll-feed (0.14.0) + jekyll-feed (0.15.1) jekyll (>= 3.7, < 5.0) jekyll-gist (1.5.0) octokit (~> 4.2) jekyll-paginate (1.1.0) jekyll-sass-converter (2.1.0) sassc (> 2.0.1, < 3.0) - jekyll-seo-tag (2.6.1) - jekyll (>= 3.3, < 5.0) + jekyll-seo-tag (2.7.1) + jekyll (>= 3.8, < 5.0) jekyll-watch (2.2.1) listen (~> 3.0) kramdown (2.3.1) @@ -47,7 +62,7 @@ GEM kramdown-parser-gfm (1.1.0) kramdown (~> 2.0) liquid (4.0.3) - listen (3.2.1) + listen (3.5.1) rb-fsevent (~> 0.10, >= 0.10.3) rb-inotify (~> 0.9, >= 0.9.10) mercenary (0.4.0) @@ -56,17 +71,18 @@ GEM jekyll-feed (~> 0.9) jekyll-seo-tag (~> 2.1) multipart-post (2.1.1) - octokit (4.18.0) + octokit (4.21.0) faraday (>= 0.9) sawyer (~> 0.8.0, >= 0.5.3) pathutil (0.16.2) forwardable-extended (~> 2.6) - public_suffix (4.0.5) - rb-fsevent (0.10.4) + public_suffix (4.0.6) + rb-fsevent (0.11.0) rb-inotify (0.10.1) ffi (~> 1.0) rexml (3.2.5) - rouge (3.20.0) + rouge (3.26.0) + ruby2_keywords (0.0.4) safe_yaml (1.0.5) sassc (2.4.0) ffi (~> 1.9) @@ -82,11 +98,11 @@ PLATFORMS DEPENDENCIES jekyll (~> 4.1.1) - jekyll-feed (~> 0.12) - jekyll-gist + jekyll-feed (~> 0.14, >= 0.14.0) + jekyll-gist (>= 1.5.0) jekyll-paginate - jekyll-seo-tag - minima (~> 2.5) + jekyll-seo-tag (>= 2.6.1) + minima (~> 2.5, >= 2.5.1) tzinfo (~> 1.2) tzinfo-data wdm (~> 0.1.1)