fix a couple of vulnerability issues in a couple of gems (Nokogiri, ...etc) by upgrading them
did
committed Aug 09, 2016
commit 1f4bca5e6ca2ab444c62dd371fc34296d47b87bb
Showing 3
changed files with
19 additions
and 17 deletions
Gemfile
+1
-1
| @@ | @@ -13,7 +13,7 @@ group :development do |
| gem 'yui-compressor', '~> 0.12.0' | |
| gem 'haml', '~> 4.0.6' | |
| - | gem 'rack-mini-profiler' |
| + | gem 'rack-mini-profiler', '~> 0.10.1' |
| gem 'flamegraph' | |
| gem 'stackprof' # ruby 2.1+ only | |
| gem 'memory_profiler' | |
Gemfile.lock
+16
-14
| @@ | @@ -2,7 +2,7 @@ PATH |
| remote: . | |
| specs: | |
| locomotivecms_steam (1.2.0.beta1) | |
| - | RedCloth (~> 4.2.9) |
| + | RedCloth (~> 4.3.2) |
| autoprefixer-rails (~> 6.3.3.1) | |
| chronic (~> 0.10.2) | |
| coffee-script (~> 2.4.1) | |
| @@ | @@ -17,7 +17,7 @@ PATH |
| mimetype-fu (~> 0.1.2) | |
| moneta (~> 0.8.0) | |
| morphine (~> 0.1.1) | |
| - | nokogiri (~> 1.6.7.2) |
| + | nokogiri (~> 1.6.8) |
| pony (~> 1.11) | |
| rack-cache (~> 1.6.1) | |
| rack-rewrite (~> 1.5.1) | |
| @@ | @@ -29,8 +29,8 @@ PATH |
| GEM | |
| remote: https://rubygems.org/ | |
| specs: | |
| - | RedCloth (4.2.9) |
| - | activesupport (4.2.6) |
| + | RedCloth (4.3.2) |
| + | activesupport (4.2.7) |
| i18n (~> 0.7) | |
| json (~> 1.7, >= 1.7.7) | |
| minitest (~> 5.1) | |
| @@ | @@ -43,7 +43,7 @@ GEM |
| bson (4.1.1) | |
| byebug (8.2.5) | |
| chronic (0.10.2) | |
| - | chunky_png (1.3.5) |
| + | chunky_png (1.3.6) |
| codeclimate-test-reporter (0.4.8) | |
| simplecov (>= 0.7.1, < 1.0.0) | |
| coderay (1.1.1) | |
| @@ | @@ -51,7 +51,7 @@ GEM |
| coffee-script-source | |
| execjs | |
| coffee-script-source (1.10.0) | |
| - | colorize (0.7.7) |
| + | colorize (0.8.1) |
| compass (1.0.3) | |
| chunky_png (~> 1.2) | |
| compass-core (~> 1.0.2) | |
| @@ | @@ -81,7 +81,7 @@ GEM |
| duktape (1.3.0.6) | |
| execjs (2.7.0) | |
| fast_stack (0.2.0) | |
| - | ffi (1.9.10) |
| + | ffi (1.9.14) |
| flamegraph (0.1.0) | |
| fast_stack | |
| haml (4.0.7) | |
| @@ | @@ -113,7 +113,7 @@ GEM |
| method_source (0.8.2) | |
| mime-types (2.6.2) | |
| mimetype-fu (0.1.2) | |
| - | mini_portile2 (2.0.0) |
| + | mini_portile2 (2.1.0) |
| minitest (5.9.0) | |
| moneta (0.8.0) | |
| mongo (2.2.5) | |
| @@ | @@ -121,11 +121,13 @@ GEM |
| morphine (0.1.1) | |
| multi_json (1.12.0) | |
| multi_xml (0.5.5) | |
| - | nokogiri (1.6.7.2) |
| - | mini_portile2 (~> 2.0.0.rc2) |
| - | nokogumbo (1.4.7) |
| + | nokogiri (1.6.8) |
| + | mini_portile2 (~> 2.1.0) |
| + | pkg-config (~> 1.1.7) |
| + | nokogumbo (1.4.9) |
| nokogiri | |
| origin (2.1.1) | |
| + | pkg-config (1.1.7) |
| pony (1.11) | |
| mail (>= 2.0) | |
| pry (0.10.3) | |
| @@ | @@ -139,7 +141,7 @@ GEM |
| rack (1.6.4) | |
| rack-cache (1.6.1) | |
| rack (>= 0.4) | |
| - | rack-mini-profiler (0.9.9.2) |
| + | rack-mini-profiler (0.10.1) |
| rack (>= 1.2.0) | |
| rack-rewrite (1.5.1) | |
| rack-test (0.6.3) | |
| @@ | @@ -178,7 +180,7 @@ GEM |
| concurrent-ruby (~> 1.0) | |
| rack (> 1, < 3) | |
| stackprof (0.2.9) | |
| - | stringex (2.6.0) |
| + | stringex (2.6.1) |
| term-ansicolor (1.3.2) | |
| tins (~> 1.0) | |
| thor (0.19.1) | |
| @@ | @@ -207,7 +209,7 @@ DEPENDENCIES |
| origin (~> 2.1.1) | |
| pry-byebug (~> 3.3.0) | |
| puma | |
| - | rack-mini-profiler |
| + | rack-mini-profiler (~> 0.10.1) |
| rack-test (~> 0.6.3) | |
| rake (~> 10.4.2) | |
| rspec (~> 3.4.0) | |
locomotivecms_steam.gemspec
+2
-2
| @@ | @@ -21,7 +21,7 @@ Gem::Specification.new do |spec| |
| spec.add_development_dependency 'mongo', '~> 2.2.3' | |
| spec.add_development_dependency 'origin', '~> 2.1.1' | |
| - | spec.add_dependency 'nokogiri', '~> 1.6.7.2' |
| + | spec.add_dependency 'nokogiri', '~> 1.6.8' |
| spec.add_dependency 'sanitize', '~> 4.0.1' | |
| spec.add_dependency 'morphine', '~> 0.1.1' | |
| spec.add_dependency 'httparty', '~> 0.13.6' | |
| @@ | @@ -40,7 +40,7 @@ Gem::Specification.new do |spec| |
| spec.add_dependency 'autoprefixer-rails', '~> 6.3.3.1' | |
| spec.add_dependency 'kramdown', '~> 1.10.0' | |
| - | spec.add_dependency 'RedCloth', '~> 4.2.9' |
| + | spec.add_dependency 'RedCloth', '~> 4.3.2' |
| spec.add_dependency 'mimetype-fu', '~> 0.1.2' | |
| spec.add_dependency 'mime-types', '~> 2.6.1' | |
| spec.add_dependency 'duktape', '~> 1.3.0.6' | |