From 44a0cba757aeacddf62f590baddec64796198d46 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Fri, 10 Oct 2025 06:05:43 +0000 Subject: [PATCH] fix: play-with-docker/Portus/Portus.1/Gemfile to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-RUBY-RACK-13378928 - https://snyk.io/vuln/SNYK-RUBY-RACK-13378930 - https://snyk.io/vuln/SNYK-RUBY-RACK-13378932 --- play-with-docker/Portus/Portus.1/Gemfile | 24 ++++++++++++------------ 1 file changed, 12 insertions(+), 12 deletions(-) diff --git a/play-with-docker/Portus/Portus.1/Gemfile b/play-with-docker/Portus/Portus.1/Gemfile index 3a55e116f..61d258515 100644 --- a/play-with-docker/Portus/Portus.1/Gemfile +++ b/play-with-docker/Portus/Portus.1/Gemfile @@ -1,27 +1,27 @@ source "https://rubygems.org" -gem "rails", "~> 5.2.7", ">= 5.2.7.1" +gem "rails", "~> 5.0.0" gem "sass-rails", ">= 5.0.5" gem "bootstrap-sass", "~> 3.3.4" gem "slim" gem "pundit" -gem "sprockets", "~> 2.12.3" +gem "sprockets", "~> 3.3.5" gem "jwt" gem "base32" gem "active_model_serializers" -gem "devise", ">= 4.4.2" +gem "devise", ">= 4.0.0" gem "gravatar_image_tag" -gem "public_activity" +gem "public_activity", ">= 1.4.3" gem "active_record_union" gem "mysql2" gem "search_cop" -gem "kaminari" +gem "kaminari", ">= 0.17.0" gem "crono" gem "net-ldap" gem "redcarpet" -gem "font-awesome-rails", ">= 4.7.0.4" +gem "font-awesome-rails", ">= 4.5.0.1" gem "rails_stdout_logging", "~> 0.0.5", group: [:development, :staging, :production] -gem "webpack-rails" +gem "webpack-rails", ">= 0.9.11" # Pinning these specific versions because that's what we have on OBS. gem "ethon", "~> 0.9.0" @@ -67,7 +67,7 @@ unless packaging? gem "quiet_assets" gem "pry-rails" gem "git-review", require: false - gem "rack-mini-profiler", require: false + gem "rack-mini-profiler", ">= 0.9.4", require: false gem "guard", require: false gem "guard-rubocop", require: false gem "guard-rspec", require: false @@ -76,12 +76,12 @@ unless packaging? group :development, :test do gem "rspec-rails", ">= 3.5.0" gem "byebug" - gem "web-console", "~> 2.1.3" + gem "web-console", "~> 2.2.0" gem "awesome_print" gem "hirb" gem "wirb" gem "wirble" - gem "factory_girl_rails" + gem "factory_girl_rails", ">= 4.6.0" gem "ffaker" gem "rubocop", "~> 0.41.2", require: false gem "brakeman", require: false @@ -96,8 +96,8 @@ unless packaging? gem "vcr" gem "webmock", "~> 2.3.2", require: false gem "simplecov", require: false - gem "capybara" - gem "poltergeist", require: false + gem "capybara", ">= 2.5.0" + gem "poltergeist", ">= 1.7.0", require: false gem "json-schema" gem "timecop" gem "codeclimate-test-reporter", group: :test, require: nil