From a348af7dcd0d9876af1ca54bb5edb0f16c8712fc Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Mon, 18 Jun 2018 13:09:28 +0000 Subject: [PATCH] fix: Gemfile.lock & Gemfile to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-RUBY-CRACK-20049 - https://snyk.io/vuln/SNYK-RUBY-RESTCLIENT-20204 - https://snyk.io/vuln/SNYK-RUBY-RESTCLIENT-20211 --- Gemfile | 6 ++--- Gemfile.lock | 73 +++++++++++++++++++++++++++++++++++----------------- 2 files changed, 52 insertions(+), 27 deletions(-) diff --git a/Gemfile b/Gemfile index 4dee63e9cd..c833898395 100644 --- a/Gemfile +++ b/Gemfile @@ -1,13 +1,13 @@ source "http://rubygems.org" group :development do - gem 'coveralls', require: false + gem 'coveralls', '>= 0.6.2', require: false gem 'rspec' - gem 'webmock' + gem 'webmock', '>= 1.9.0' gem 'guard' gem 'guard-rspec' gem 'vcr' end gem 'bunny' -gem 'rest-client' +gem 'rest-client', '>= 1.8.0' diff --git a/Gemfile.lock b/Gemfile.lock index c653694995..87b2cf3867 100644 --- a/Gemfile.lock +++ b/Gemfile.lock @@ -1,20 +1,24 @@ GEM remote: http://rubygems.org/ specs: - addressable (2.3.2) + addressable (2.5.2) + public_suffix (>= 2.0.2, < 4.0) amq-protocol (1.9.2) bunny (1.5.0) amq-protocol (>= 1.9.2) coderay (1.0.8) - colorize (0.5.8) - coveralls (0.6.2) - colorize - multi_json (~> 1.3) - rest-client - simplecov (>= 0.7) - thor - crack (0.3.1) + coveralls (0.8.21) + json (>= 1.8, < 3) + simplecov (~> 0.14.1) + term-ansicolor (~> 1.3) + thor (~> 0.19.4) + tins (~> 1.6) + crack (0.4.3) + safe_yaml (~> 1.0.0) diff-lcs (1.1.3) + docile (1.1.5) + domain_name (0.5.20180417) + unf (>= 0.0.5, < 1.0.0) guard (1.5.4) listen (>= 0.4.2) lumberjack (>= 1.0.2) @@ -23,17 +27,26 @@ GEM guard-rspec (2.1.2) guard (>= 1.1) rspec (~> 2.11) + hashdiff (0.3.7) + http-cookie (1.0.3) + domain_name (~> 0.5) + json (2.1.0) listen (0.5.3) lumberjack (1.0.2) method_source (0.8.1) - mime-types (1.21) - multi_json (1.6.1) + mime-types (3.1) + mime-types-data (~> 3.2015) + mime-types-data (3.2016.0521) + netrc (0.11.0) pry (0.9.10) coderay (~> 1.0.5) method_source (~> 0.8) slop (~> 3.3.1) - rest-client (1.6.7) - mime-types (>= 1.16) + public_suffix (3.0.2) + rest-client (2.0.2) + http-cookie (>= 1.0.2, < 2.0) + mime-types (>= 1.16, < 4.0) + netrc (~> 0.8) rspec (2.12.0) rspec-core (~> 2.12.0) rspec-expectations (~> 2.12.0) @@ -42,26 +55,38 @@ GEM rspec-expectations (2.12.1) diff-lcs (~> 1.1.3) rspec-mocks (2.12.2) - simplecov (0.7.1) - multi_json (~> 1.0) - simplecov-html (~> 0.7.1) - simplecov-html (0.7.1) + safe_yaml (1.0.4) + simplecov (0.14.1) + docile (~> 1.1.0) + json (>= 1.8, < 3) + simplecov-html (~> 0.10.0) + simplecov-html (0.10.2) slop (3.3.3) - thor (0.16.0) + term-ansicolor (1.6.0) + tins (~> 1.0) + thor (0.19.4) + tins (1.16.3) + unf (0.1.4) + unf_ext + unf_ext (0.0.7.5) vcr (2.4.0) - webmock (1.9.0) - addressable (>= 2.2.7) - crack (>= 0.1.7) + webmock (3.4.2) + addressable (>= 2.3.6) + crack (>= 0.3.2) + hashdiff PLATFORMS ruby DEPENDENCIES bunny - coveralls + coveralls (>= 0.6.2) guard guard-rspec - rest-client + rest-client (>= 1.8.0) rspec vcr - webmock + webmock (>= 1.9.0) + +BUNDLED WITH + 1.16.1