msi: update Nokogiri to latest version

* Fixed CVE-2024-34459 in v1.16.5 Actually Nokogiri is not affected, but security scannaers may claim it. Signed-off-by: Kentaro Hayashi <[email protected]>
fluent · Jul 5, 2024 · 00e4771 · 00e4771
1 parent 04d8941
commit 00e4771
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 2 deletions.
diff --git a/fluent-package/Gemfile b/fluent-package/Gemfile
@@ -83,7 +83,7 @@ gem "fluent-plugin-opensearch", "1.1.4"
 windows_platforms = [:mingw, :x64_mingw] # :mswin
 gem "ffi", "1.15.5", platforms: windows_platforms
 gem "ffi-win32-extensions", "1.0.4", platforms: windows_platforms
-gem "nokogiri", "1.16.2", platforms: windows_platforms
+gem "nokogiri", "1.16.6", platforms: windows_platforms
 gem "win32-event", "0.6.3", platforms: windows_platforms
 gem "win32-ipc", "0.7.0", platforms: windows_platforms
 # Use officially released version when PR was merged and released.

diff --git a/fluent-package/Gemfile.lock b/fluent-package/Gemfile.lock
@@ -324,7 +324,7 @@ DEPENDENCIES
   jmespath (= 1.6.2)
   mini_portile2 (= 2.8.2)
   msgpack (= 1.7.2)
-  nokogiri (= 1.16.2)
+  nokogiri (= 1.16.6)
   oj (= 3.16.1)
   opensearch-ruby (= 2.1.0)
   prometheus-client (= 2.1.0)