From f316823823b5ef5bd8536c2cd565532882d91b8f Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Sat, 20 Sep 2025 08:34:00 +0000 Subject: [PATCH] fix: Gemfile & Gemfile.lock to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-RUBY-REXML-12878608 --- Gemfile | 6 ++-- Gemfile.lock | 94 ++++++++++++++++++++++++++++++---------------------- 2 files changed, 58 insertions(+), 42 deletions(-) diff --git a/Gemfile b/Gemfile index 9bece64..dada48a 100644 --- a/Gemfile +++ b/Gemfile @@ -1,15 +1,15 @@ source "https://rubygems.org" -gem "jekyll", "~> 4.2", ">= 4.2.0" +gem "jekyll", "~> 4.3", ">= 4.3.2" gem "webrick", "~> 1.8" # Warning - in the start of 2020, Font Awesome was replaced, so from 0.9.0 # onwards the `fa` icons won't work. # https://github.com/jekyll-octopod/jekyll-bulma/commits/master . -gem "jekyll-bulma", "0.8.1" +gem "jekyll-bulma", "0.9.0" group :jekyll_plugins do - gem "jekyll-github-metadata", "~> 2.13", ">= 2.13.0" + gem "jekyll-github-metadata", "~> 2.15", ">= 2.15.0" gem "jekyll-sitemap", "~> 1.4", ">= 1.4.0" gem "jekyll-seo-tag", "~> 2.7", ">= 2.7.1" diff --git a/Gemfile.lock b/Gemfile.lock index 77753e2..5c0f9ac 100644 --- a/Gemfile.lock +++ b/Gemfile.lock @@ -6,15 +6,18 @@ GEM i18n (>= 1.6, < 2) minitest (>= 5.1) tzinfo (~> 2.0) - addressable (2.8.1) - public_suffix (>= 2.0.2, < 6.0) + addressable (2.8.7) + public_suffix (>= 2.0.2, < 7.0) + base64 (0.3.0) + bigdecimal (3.2.3) colorator (1.1.0) - concurrent-ruby (1.2.2) + concurrent-ruby (1.3.5) + csv (3.3.5) em-websocket (0.5.3) eventmachine (>= 0.12.9) http_parser.rb (~> 0) eventmachine (1.2.7) - faraday (1.10.0) + faraday (1.10.4) faraday-em_http (~> 1.0) faraday-em_synchrony (~> 1.0) faraday-excon (~> 1.1) @@ -27,48 +30,58 @@ GEM faraday-retry (~> 1.0) ruby2_keywords (>= 0.0.4) faraday-em_http (1.0.0) - faraday-em_synchrony (1.0.0) + faraday-em_synchrony (1.0.1) faraday-excon (1.1.0) faraday-httpclient (1.0.1) - faraday-multipart (1.0.3) - multipart-post (>= 1.2, < 3) - faraday-net_http (1.0.1) + faraday-multipart (1.1.1) + multipart-post (~> 2.0) + faraday-net_http (1.0.2) faraday-net_http_persistent (1.2.0) faraday-patron (1.0.0) faraday-rack (1.0.0) faraday-retry (1.0.3) - ffi (1.15.5) + ffi (1.17.2) + ffi (1.17.2-x86_64-linux-gnu) forwardable-extended (2.6.0) gemoji (4.0.1) + google-protobuf (4.32.1) + bigdecimal + rake (>= 13) + google-protobuf (4.32.1-x86_64-linux-gnu) + bigdecimal + rake (>= 13) html-pipeline (2.14.3) activesupport (>= 2) nokogiri (>= 1.4) http_parser.rb (0.8.0) - i18n (1.14.1) + i18n (1.14.7) concurrent-ruby (~> 1.0) - jekyll (4.3.1) + jekyll (4.4.1) addressable (~> 2.4) + base64 (~> 0.2) colorator (~> 1.0) + csv (~> 3.0) em-websocket (~> 0.5) i18n (~> 1.0) jekyll-sass-converter (>= 2.0, < 4.0) jekyll-watch (~> 2.0) + json (~> 2.6) kramdown (~> 2.3, >= 2.3.1) kramdown-parser-gfm (~> 1.0) liquid (~> 4.0) - mercenary (>= 0.3.6, < 0.5) + mercenary (~> 0.3, >= 0.3.6) pathutil (~> 0.9) rouge (>= 3.0, < 5.0) safe_yaml (~> 1.0) terminal-table (>= 1.8, < 4.0) webrick (~> 1.7) - jekyll-bulma (0.8.1) + jekyll-bulma (0.9.0) jekyll (~> 4.0) - jekyll-github-metadata (2.14.0) + jekyll-github-metadata (2.16.1) jekyll (>= 3.4, < 5.0) - octokit (~> 4.0, != 4.4.0) - jekyll-sass-converter (2.2.0) - sassc (> 2.0.1, < 3.0) + octokit (>= 4, < 7, != 4.4.0) + jekyll-sass-converter (3.1.0) + sass-embedded (~> 1.75) jekyll-seo-tag (2.8.0) jekyll (>= 3.8, < 5.0) jekyll-sitemap (1.4.0) @@ -81,50 +94,53 @@ GEM gemoji (>= 3, < 5) html-pipeline (~> 2.2) jekyll (>= 3.0, < 5.0) - kramdown (2.4.0) - rexml + json (2.14.1) + kramdown (2.5.1) + rexml (>= 3.3.9) kramdown-parser-gfm (1.1.0) kramdown (~> 2.0) - liquid (4.0.3) - listen (3.7.1) + liquid (4.0.4) + listen (3.9.0) rb-fsevent (~> 0.10, >= 0.10.3) rb-inotify (~> 0.9, >= 0.9.10) mercenary (0.4.0) mini_i18n (0.8.0) mini_portile2 (2.8.6) minitest (5.19.0) - multipart-post (2.1.1) + multipart-post (2.4.1) nokogiri (1.16.5) mini_portile2 (~> 2.8.2) racc (~> 1.4) nokogiri (1.16.5-x86_64-linux) racc (~> 1.4) - octokit (4.22.0) - faraday (>= 0.9) - sawyer (~> 0.8.0, >= 0.5.3) + octokit (6.1.1) + faraday (>= 1, < 3) + sawyer (~> 0.9) pathutil (0.16.2) forwardable-extended (~> 2.6) - public_suffix (5.0.1) + public_suffix (6.0.2) racc (1.7.3) + rake (13.3.0) rb-fsevent (0.11.2) - rb-inotify (0.10.1) + rb-inotify (0.11.1) ffi (~> 1.0) - rexml (3.3.9) - rouge (4.0.0) + rexml (3.4.4) + rouge (4.6.0) ruby2_keywords (0.0.5) rufo (0.12.0) safe_yaml (1.0.5) - sassc (2.4.0) - ffi (~> 1.9) - sawyer (0.8.2) + sass-embedded (1.93.0) + google-protobuf (~> 4.31) + rake (>= 13) + sawyer (0.9.2) addressable (>= 2.3.5) - faraday (> 0.8, < 2.0) + faraday (>= 0.17.3, < 3) terminal-table (3.0.2) unicode-display_width (>= 1.1.1, < 3) tzinfo (2.0.6) concurrent-ruby (~> 1.0) - unicode-display_width (2.3.0) - webrick (1.8.2) + unicode-display_width (2.6.0) + webrick (1.9.1) PLATFORMS ruby @@ -132,9 +148,9 @@ PLATFORMS DEPENDENCIES faraday (~> 1.3) - jekyll (~> 4.2, >= 4.2.0) - jekyll-bulma (= 0.8.1) - jekyll-github-metadata (~> 2.13, >= 2.13.0) + jekyll (~> 4.3, >= 4.3.2) + jekyll-bulma (= 0.9.0) + jekyll-github-metadata (~> 2.15, >= 2.15.0) jekyll-seo-tag (~> 2.7, >= 2.7.1) jekyll-sitemap (~> 1.4, >= 1.4.0) jekyll-timeago (~> 0.13) @@ -146,4 +162,4 @@ DEPENDENCIES webrick (~> 1.8) BUNDLED WITH - 2.1.4 + 2.3.26