From 36306f887c2ea19d9daafdf8ef31148c3def3061 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Thu, 6 May 2021 23:06:59 +0000 Subject: [PATCH] fix: Gemfile to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-RUBY-ACTIONPACK-1290051 - https://snyk.io/vuln/SNYK-RUBY-ACTIONPACK-1290052 --- Gemfile | 10 +++++----- 1 file changed, 5 insertions(+), 5 deletions(-) diff --git a/Gemfile b/Gemfile index c2fec96..039f75d 100644 --- a/Gemfile +++ b/Gemfile @@ -1,6 +1,6 @@ source 'http://rubygems.org' -gem 'rails', '3.1.3' +gem 'rails', '5.2.4.6' # Bundle edge Rails instead: # gem 'rails', :git => 'git://github.com/rails/rails.git' @@ -10,17 +10,17 @@ gem 'devise' gem 'omniauth' gem 'omniauth-oauth2' gem 'omniauth-storenvy' -gem 'haml-rails' +gem 'haml-rails', '>= 0.5.3' # Gems used only for assets and not required # in production environments by default. group :assets do - gem 'sass-rails', '~> 3.1.5' - gem 'coffee-rails', '~> 3.1.1' + gem 'sass-rails', '~> 5.0.5' + gem 'coffee-rails', '~> 4.2.2' gem 'uglifier', '>= 1.0.3' end -gem 'jquery-rails' +gem 'jquery-rails', '>= 4.0.1' # To use ActiveModel has_secure_password # gem 'bcrypt-ruby', '~> 3.0.0'