From 8f67aa4148d4cc3264566a9106e9b2b07a0df81e Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Mon, 6 Oct 2025 10:03:07 +0000 Subject: [PATCH] fix: Gemfile & Gemfile.lock to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-RUBY-REXML-13110060 --- Gemfile | 2 +- Gemfile.lock | 65 ++++++++++++++++++++++++++++++---------------------- 2 files changed, 39 insertions(+), 28 deletions(-) diff --git a/Gemfile b/Gemfile index 97a319f..d26e10a 100644 --- a/Gemfile +++ b/Gemfile @@ -6,7 +6,7 @@ git_source(:github) { |repo_name| "https://github.com/#{repo_name}" } gem 'rspec', '~> 3.9' -gem 'rubocop', require: false +gem 'rubocop', '>= 1.66.0', require: false gem 'simplecov', require: false, group: :test diff --git a/Gemfile.lock b/Gemfile.lock index 87ed2c2..9488cb5 100644 --- a/Gemfile.lock +++ b/Gemfile.lock @@ -2,60 +2,71 @@ GEM remote: https://rubygems.org/ specs: ansi (1.5.0) - ast (2.4.1) - diff-lcs (1.4.4) + ast (2.4.3) + diff-lcs (1.6.2) docile (1.3.2) - parallel (1.19.2) - parser (2.7.1.4) + hirb (0.7.3) + json (2.15.0) + language_server-protocol (3.17.0.5) + lint_roller (1.1.0) + parallel (1.27.0) + parser (3.3.9.0) ast (~> 2.4.1) - rainbow (3.0.0) - regexp_parser (1.7.1) - rexml (3.2.4) + racc + prism (1.5.1) + racc (1.8.1) + rainbow (3.1.1) + regexp_parser (2.11.3) rspec (3.9.0) rspec-core (~> 3.9.0) rspec-expectations (~> 3.9.0) rspec-mocks (~> 3.9.0) - rspec-core (3.9.2) + rspec-core (3.9.3) rspec-support (~> 3.9.3) - rspec-expectations (3.9.2) + rspec-expectations (3.9.4) diff-lcs (>= 1.2.0, < 2.0) rspec-support (~> 3.9.0) rspec-mocks (3.9.1) diff-lcs (>= 1.2.0, < 2.0) rspec-support (~> 3.9.0) rspec-support (3.9.3) - rubocop (0.88.0) + rubocop (1.81.1) + json (~> 2.3) + language_server-protocol (~> 3.17.0.2) + lint_roller (~> 1.1.0) parallel (~> 1.10) - parser (>= 2.7.1.1) + parser (>= 3.3.0.2) rainbow (>= 2.2.2, < 4.0) - regexp_parser (>= 1.7) - rexml - rubocop-ast (>= 0.1.0, < 1.0) + regexp_parser (>= 2.9.3, < 3.0) + rubocop-ast (>= 1.47.1, < 2.0) ruby-progressbar (~> 1.7) - unicode-display_width (>= 1.4.0, < 2.0) - rubocop-ast (0.1.0) - parser (>= 2.7.0.1) - ruby-progressbar (1.10.1) - simplecov (0.18.5) + unicode-display_width (>= 2.4.0, < 4.0) + rubocop-ast (1.47.1) + parser (>= 3.3.7.2) + prism (~> 1.4) + ruby-progressbar (1.13.0) + simplecov (0.22.0) docile (~> 1.1) simplecov-html (~> 0.11) - simplecov-console (0.7.2) + simplecov_json_formatter (~> 0.1) + simplecov-console (0.4.2) ansi + hirb simplecov - terminal-table - simplecov-html (0.12.2) - terminal-table (1.8.0) - unicode-display_width (~> 1.1, >= 1.1.1) - unicode-display_width (1.7.0) + simplecov-html (0.13.2) + simplecov_json_formatter (0.1.4) + unicode-display_width (3.2.0) + unicode-emoji (~> 4.1) + unicode-emoji (4.1.0) PLATFORMS ruby DEPENDENCIES rspec (~> 3.9) - rubocop + rubocop (>= 1.66.0) simplecov simplecov-console BUNDLED WITH - 2.1.4 + 2.3.27