fix: update ruby gems to address security vulnerabilities.

openedx · Mar 1, 2022 · a91f081 · a91f081
1 parent 9833ccf
commit a91f081
Show file tree

Hide file tree

Showing 2 changed files with 8 additions and 5 deletions.
diff --git a/Gemfile b/Gemfile
@@ -9,7 +9,7 @@ gem 'pry-nav'
 
 gem 'bundler'
 
-gem 'rake'
+gem 'rake', '~> 12.3.3'
 
 gem 'sinatra'
 gem 'sinatra-param', '~> 1.4'
@@ -55,6 +55,8 @@ gem 'addressable', '~> 2.8.0'
 
 gem 'activesupport', '~> 6.0.3.1'
 
+gem 'rack-protection', '~> 1.5.5'
+
 group :test do
   gem 'codecov', :require => false
   gem 'mongoid_cleaner', '~> 1.2.0'

diff --git a/Gemfile.lock b/Gemfile.lock
@@ -139,14 +139,14 @@ GEM
     pry-nav (0.2.4)
       pry (>= 0.9.10, < 0.11.0)
     public_suffix (4.0.6)
-    rack (1.6.8)
-    rack-protection (1.5.3)
+    rack (1.6.13)
+    rack-protection (1.5.5)
       rack
     rack-test (0.6.3)
       rack (>= 1.0)
     rack-timeout (0.4.2)
     raindrops (0.18.0)
-    rake (12.0.0)
+    rake (12.3.3)
     rb-fsevent (0.9.8)
     rb-inotify (0.9.10)
       ffi (>= 0.5.0, < 2)
@@ -249,9 +249,10 @@ DEPENDENCIES
   pry
   pry-nav
   rack-contrib!
+  rack-protection (~> 1.5.5)
   rack-test
   rack-timeout
-  rake
+  rake (~> 12.3.3)
   rdiscount
   rest-client
   rs_voteable_mongo (~> 1.3)