[Snyk] Security upgrade omniauth from 2.1.1 to 2.1.2 (#258)

* fix: Gemfile & Gemfile.lock to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-RUBY-RACK-1061917 * Update Gemfile.lock --------- Co-authored-by: snyk-bot <[email protected]>
bigbluebutton · Jan 2, 2024 · 4b9a002 · 4b9a002
1 parent ddaba0d
commit 4b9a002
Show file tree

Hide file tree

Showing 2 changed files with 3 additions and 3 deletions.
diff --git a/Gemfile b/Gemfile
@@ -90,7 +90,7 @@ gem 'bigbluebutton-api-ruby', '~> 1.9.1'
 
 gem 'rest-client'
 
-gem 'omniauth', '>= 2.1.1'
+gem 'omniauth', '>= 2.1.2'
 gem 'omniauth-oauth2', '>= 1.8.0'
 gem 'omniauth-rails_csrf_protection', '~> 1.0.1'
 gem 'repost', '~> 0.4.1'

diff --git a/Gemfile.lock b/Gemfile.lock
@@ -204,7 +204,7 @@ GEM
       rack (>= 1.2, < 4)
       snaky_hash (~> 2.0)
       version_gem (~> 1.1)
-    omniauth (2.1.1)
+    omniauth (2.1.2)
       hashie (>= 3.4.6)
       rack (>= 2.2.3)
       rack-protection
@@ -433,7 +433,7 @@ DEPENDENCIES
   lograge (~> 0.14.0)
   minitest
   net-smtp
-  omniauth (>= 2.1.1)
+  omniauth (>= 2.1.2)
   omniauth-bbbltibroker!
   omniauth-oauth2 (>= 1.8.0)
   omniauth-rails_csrf_protection (~> 1.0.1)