From 123ee4e8af69eb200e30db40493f0292e280d67e Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Wed, 15 Mar 2023 15:08:29 +0000 Subject: [PATCH] fix: backend/Gemfile to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-RUBY-ACTIVESUPPORT-3360028 - https://snyk.io/vuln/SNYK-RUBY-RACK-3360233 --- backend/Gemfile | 10 +++++----- 1 file changed, 5 insertions(+), 5 deletions(-) diff --git a/backend/Gemfile b/backend/Gemfile index 225b4a8f..28699031 100644 --- a/backend/Gemfile +++ b/backend/Gemfile @@ -7,14 +7,14 @@ git_source(:github) do |repo_name| "https://github.com/#{repo_name}.git" end -gem 'activerecord-postgis-adapter' -gem 'devise_token_auth' +gem 'activerecord-postgis-adapter', '>= 6.0.0' +gem 'devise_token_auth', '>= 1.1.5' gem 'faker' -gem 'jbuilder' +gem 'jbuilder', '>= 2.6.4' gem 'pg' gem 'puma' gem 'rack-cors' -gem 'rails' +gem 'rails', '>= 6.1.7.3' gem 'rgeo' gem 'rolify' gem 'swagger-blocks' @@ -27,7 +27,7 @@ gem 'twilio-ruby' group :development, :test do gem 'byebug', platform: :mri - gem 'dotenv-rails' + gem 'dotenv-rails', '>= 2.7.6' gem 'factory_girl_rails' gem 'rspec-rails' gem 'rubocop', require: false