fix: Gemfile & Gemfile.lock to reduce vulnerabilities

The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-RUBY-REXML-7814166
blindsidenetworks · Aug 23, 2024 · 0b39f16 · 0b39f16
1 parent 3880dcd
commit 0b39f16
Show file tree

Hide file tree

Showing 2 changed files with 52 additions and 37 deletions.
diff --git a/Gemfile b/Gemfile
@@ -45,10 +45,10 @@ group :development, :test do
 
   gem 'rspec-rails', '~> 5.1.2'
 
-  gem 'rubocop', '~> 1.50.0', require: false
-  gem 'rubocop-performance',  require: false
-  gem 'rubocop-rails', '~> 2.19.0', require: false
-  gem 'rubocop-rspec', '~> 2.20', require: false
+  gem 'rubocop', '~> 1.50.2', require: false
+  gem 'rubocop-performance', '>= 1.18.0', require: false
+  gem 'rubocop-rails', '~> 2.19.1', require: false
+  gem 'rubocop-rspec', '~> 2.21', '>= 2.21.0', require: false
 end
 
 group :development do
@@ -62,7 +62,7 @@ group :test do
   gem 'fakeredis', '~> 0.8'
   gem 'minitest-stub_any_instance'
   gem 'rails-controller-testing'
-  gem 'webmock'
+  gem 'webmock', '>= 3.19.0'
 end
 
 # Windows does not include zoneinfo files, so bundle the tzinfo-data gem

diff --git a/Gemfile.lock b/Gemfile.lock
@@ -60,16 +60,18 @@ GEM
       minitest (>= 5.1)
       tzinfo (~> 2.0)
       zeitwerk (~> 2.3)
-    addressable (2.8.4)
-      public_suffix (>= 2.0.2, < 6.0)
+    addressable (2.8.7)
+      public_suffix (>= 2.0.2, < 7.0)
     ast (2.4.2)
+    bigdecimal (3.1.8)
     bootsnap (1.16.0)
       msgpack (~> 1.2)
     builder (3.2.4)
     byebug (11.1.3)
-    concurrent-ruby (1.2.2)
+    concurrent-ruby (1.3.4)
     connection_pool (2.4.0)
-    crack (0.4.5)
+    crack (1.0.0)
+      bigdecimal
       rexml
     crass (1.0.6)
     date (3.3.4)
@@ -91,10 +93,10 @@ GEM
     ffi (1.15.5)
     globalid (1.2.1)
       activesupport (>= 6.1)
-    hashdiff (1.0.1)
-    i18n (1.12.0)
+    hashdiff (1.1.1)
+    i18n (1.14.5)
       concurrent-ruby (~> 1.0)
-    json (2.6.3)
+    json (2.7.2)
     jwt (2.7.0)
     listen (3.8.0)
       rb-fsevent (~> 0.10, >= 0.10.3)
@@ -111,7 +113,7 @@ GEM
     method_source (1.0.0)
     mini_mime (1.1.5)
     mini_portile2 (2.8.7)
-    minitest (5.18.0)
+    minitest (5.25.1)
     minitest-stub_any_instance (1.0.3)
     msgpack (1.7.0)
     net-imap (0.4.14)
@@ -127,11 +129,12 @@ GEM
     nokogiri (1.16.5)
       mini_portile2 (~> 2.8.2)
       racc (~> 1.4)
-    parallel (1.22.1)
-    parser (3.2.2.0)
+    parallel (1.26.3)
+    parser (3.3.4.2)
       ast (~> 2.4.1)
+      racc
     pg (1.4.6)
-    public_suffix (5.0.1)
+    public_suffix (6.0.1)
     puma (6.4.2)
       nio4r (~> 2.0)
     racc (1.7.3)
@@ -176,9 +179,9 @@ GEM
     redis (4.8.1)
     redis-namespace (1.11.0)
       redis (>= 4)
-    regexp_parser (2.7.0)
-    rexml (3.2.8)
-      strscan (>= 3.0.9)
+    regexp_parser (2.9.2)
+    rexml (3.3.6)
+      strscan
     rspec-core (3.12.1)
       rspec-support (~> 3.12.0)
     rspec-expectations (3.12.2)
@@ -196,7 +199,7 @@ GEM
       rspec-mocks (~> 3.10)
       rspec-support (~> 3.10)
     rspec-support (3.12.0)
-    rubocop (1.50.1)
+    rubocop (1.50.2)
       json (~> 2.3)
       parallel (~> 1.10)
       parser (>= 3.2.0.0)
@@ -206,20 +209,26 @@ GEM
       rubocop-ast (>= 1.28.0, < 2.0)
       ruby-progressbar (~> 1.7)
       unicode-display_width (>= 2.4.0, < 3.0)
-    rubocop-ast (1.28.0)
-      parser (>= 3.2.1.0)
-    rubocop-capybara (2.18.0)
+    rubocop-ast (1.32.1)
+      parser (>= 3.3.1.0)
+    rubocop-capybara (2.21.0)
       rubocop (~> 1.41)
-    rubocop-performance (1.17.1)
-      rubocop (>= 1.7.0, < 2.0)
-      rubocop-ast (>= 0.4.0)
-    rubocop-rails (2.19.0)
+    rubocop-factory_bot (2.26.0)
+      rubocop (~> 1.41)
+    rubocop-performance (1.21.1)
+      rubocop (>= 1.48.1, < 2.0)
+      rubocop-ast (>= 1.31.1, < 2.0)
+    rubocop-rails (2.19.1)
       activesupport (>= 4.2.0)
       rack (>= 1.1)
       rubocop (>= 1.33.0, < 2.0)
-    rubocop-rspec (2.20.0)
-      rubocop (~> 1.33)
+    rubocop-rspec (2.31.0)
+      rubocop (~> 1.40)
       rubocop-capybara (~> 2.17)
+      rubocop-factory_bot (~> 2.22)
+      rubocop-rspec_rails (~> 2.28)
+    rubocop-rspec_rails (2.29.0)
+      rubocop (~> 1.40)
     ruby-progressbar (1.13.0)
     spring (2.1.1)
     spring-watcher-listen (2.0.1)
@@ -243,15 +252,15 @@ GEM
     tty-screen (0.8.1)
     tzinfo (2.0.6)
       concurrent-ruby (~> 1.0)
-    unicode-display_width (2.4.2)
-    webmock (3.18.1)
+    unicode-display_width (2.5.0)
+    webmock (3.23.1)
       addressable (>= 2.8.0)
       crack (>= 0.3.2)
       hashdiff (>= 0.4.0, < 2.0.0)
     websocket-driver (0.7.6)
       websocket-extensions (>= 0.1.0)
     websocket-extensions (0.1.5)
-    zeitwerk (2.6.7)
+    zeitwerk (2.6.17)
 
 PLATFORMS
   ruby
@@ -273,13 +282,19 @@ DEPENDENCIES
   redis (~> 4.8.0)
   redis-namespace (~> 1.11.0)
   rspec-rails (~> 5.1.2)
-  rubocop (~> 1.50.0)
-  rubocop-performance
-  rubocop-rails (~> 2.19.0)
-  rubocop-rspec (~> 2.20)
+  rubocop (~> 1.50.2)
+  rubocop-performance (>= 1.18.0)
+  rubocop-rails (~> 2.19.1)
+  rubocop-rspec (~> 2.21, >= 2.21.0)
   spring
   spring-watcher-listen (~> 2.0.1)
   sqlite3
   tabulo (~> 2.8.1)
   tzinfo-data
-  webmock
+  webmock (>= 3.19.0)
+
+RUBY VERSION
+   ruby 3.0.0p0
+
+BUNDLED WITH
+   2.2.3