From 687b468f682c35adc0f10a482c450ad47f4f60ad Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Tue, 28 Sep 2021 19:10:27 -0700 Subject: [PATCH 1/2] fix: Gemfile & Gemfile.lock to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-RUBY-NOKOGIRI-1726792 --- Gemfile | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/Gemfile b/Gemfile index f9452d7..42f574b 100644 --- a/Gemfile +++ b/Gemfile @@ -5,7 +5,7 @@ source "https://rubygems.org" git_source(:github) {|repo_name| "https://github.com/#{repo_name}" } gem "sinatra" -gem "twilio-ruby" +gem "twilio-ruby", ">= 5.25.1" gem "mime-types" gem "rack-test" gem "rspec" From 513b121da2bc1e5c4b8fff8a9d70df18110a451e Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Tue, 28 Sep 2021 19:10:27 -0700 Subject: [PATCH 2/2] fix: Gemfile & Gemfile.lock to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-RUBY-NOKOGIRI-1726792 --- Gemfile.lock | 38 +++++++++++++++++++++++++++++--------- 1 file changed, 29 insertions(+), 9 deletions(-) diff --git a/Gemfile.lock b/Gemfile.lock index 8505b39..52b2739 100644 --- a/Gemfile.lock +++ b/Gemfile.lock @@ -2,17 +2,36 @@ GEM remote: https://rubygems.org/ specs: diff-lcs (1.3) - faraday (0.15.4) + faraday (1.8.0) + faraday-em_http (~> 1.0) + faraday-em_synchrony (~> 1.0) + faraday-excon (~> 1.1) + faraday-httpclient (~> 1.0.1) + faraday-net_http (~> 1.0) + faraday-net_http_persistent (~> 1.1) + faraday-patron (~> 1.0) + faraday-rack (~> 1.0) multipart-post (>= 1.2, < 3) - jwt (2.2.1) + ruby2_keywords (>= 0.0.4) + faraday-em_http (1.0.0) + faraday-em_synchrony (1.0.0) + faraday-excon (1.1.0) + faraday-httpclient (1.0.1) + faraday-net_http (1.0.1) + faraday-net_http_persistent (1.2.0) + faraday-patron (1.0.0) + faraday-rack (1.0.0) + jwt (2.2.3) mime-types (3.2.2) mime-types-data (~> 3.2015) mime-types-data (3.2019.0331) - mini_portile2 (2.4.0) + mini_portile2 (2.6.1) multipart-post (2.1.1) mustermann (1.0.3) - nokogiri (1.10.3) - mini_portile2 (~> 2.4.0) + nokogiri (1.12.5) + mini_portile2 (~> 2.6.1) + racc (~> 1.4) + racc (1.5.2) rack (2.0.7) rack-protection (2.0.5) rack @@ -31,14 +50,15 @@ GEM diff-lcs (>= 1.2.0, < 2.0) rspec-support (~> 3.8.0) rspec-support (3.8.2) + ruby2_keywords (0.0.5) sinatra (2.0.5) mustermann (~> 1.0) rack (~> 2.0) rack-protection (= 2.0.5) tilt (~> 2.0) tilt (2.0.9) - twilio-ruby (5.25.1) - faraday (~> 0.9) + twilio-ruby (5.58.3) + faraday (>= 0.9, < 2.0) jwt (>= 1.5, <= 2.5) nokogiri (>= 1.6, < 2.0) @@ -50,7 +70,7 @@ DEPENDENCIES rack-test rspec sinatra - twilio-ruby + twilio-ruby (>= 5.25.1) BUNDLED WITH - 1.17.2 + 1.17.3