From 51ca26e4b8483a1217398e05f745fc90f69a895e Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Sat, 21 Mar 2020 05:09:43 +0000 Subject: [PATCH] fix: Gemfile to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-RUBY-ACTIONVIEW-560837 - https://snyk.io/vuln/SNYK-RUBY-JSON-560838 --- Gemfile | 16 ++++++++-------- 1 file changed, 8 insertions(+), 8 deletions(-) diff --git a/Gemfile b/Gemfile index 88893f0..1701545 100644 --- a/Gemfile +++ b/Gemfile @@ -6,7 +6,7 @@ git_source(:github) { |repo| "https://github.com/#{repo}.git" } ruby '2.6.2' # Bundle edge Rails instead: gem 'rails', github: 'rails/rails' -gem 'rails', '~> 5.2.1' +gem 'rails', '~> 5.2.4', '>= 5.2.4.2' # Use sqlite3 as the database for Active Record gem 'sqlite3' # Use Puma as the app server @@ -29,26 +29,26 @@ gem 'bootsnap', '>= 1.1.0', require: false # gem 'rack-cors' # Authentication -gem 'devise' -gem 'devise_token_auth' +gem 'devise', '>= 4.7.1' +gem 'devise_token_auth', '>= 1.1.3' gem 'rack-cors' # Interactors gem 'interactor' -gem 'interactor-rails' +gem 'interactor-rails', '>= 2.2.1' -gem 'active_model_serializers' +gem 'active_model_serializers', '>= 0.10.10' gem 'mailgun-ruby' group :development, :test do # Call 'byebug' anywhere in the code to stop execution and get a debugger console gem 'byebug', platforms: %i[mri mingw x64_mingw] - gem 'coveralls', require: false - gem 'factory_bot_rails' + gem 'coveralls', '>= 0.8.23', require: false + gem 'factory_bot_rails', '>= 5.1.1' gem 'faker' - gem 'rspec-rails' + gem 'rspec-rails', '>= 3.9.0' gem 'shoulda-matchers' end