From 19c98eaa20724f5dc308e6b450c3ea22c3b83f53 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Tue, 15 Jul 2025 00:05:00 +0000 Subject: [PATCH] fix: Gemfile & Gemfile.lock to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-RUBY-NOKOGIRI-10674179 - https://snyk.io/vuln/SNYK-RUBY-NOKOGIRI-10674176 - https://snyk.io/vuln/SNYK-RUBY-NOKOGIRI-10674184 - https://snyk.io/vuln/SNYK-RUBY-NOKOGIRI-10674192 - https://snyk.io/vuln/SNYK-RUBY-NOKOGIRI-7164639 - https://snyk.io/vuln/SNYK-RUBY-NOKOGIRI-8732769 - https://snyk.io/vuln/SNYK-RUBY-NOKOGIRI-8732779 - https://snyk.io/vuln/SNYK-RUBY-REXML-7577227 - https://snyk.io/vuln/SNYK-RUBY-REXML-7814166 - https://snyk.io/vuln/SNYK-RUBY-NOKOGIRI-9510795 - https://snyk.io/vuln/SNYK-RUBY-NOKOGIRI-10494060 - https://snyk.io/vuln/SNYK-RUBY-NOKOGIRI-10494063 - https://snyk.io/vuln/SNYK-RUBY-REXML-7577228 - https://snyk.io/vuln/SNYK-RUBY-REXML-8309365 - https://snyk.io/vuln/SNYK-RUBY-ACTIVESUPPORT-3360028 - https://snyk.io/vuln/SNYK-RUBY-ACTIVESUPPORT-3237242 - https://snyk.io/vuln/SNYK-RUBY-REXML-6861566 - https://snyk.io/vuln/SNYK-RUBY-REXML-7462086 - https://snyk.io/vuln/SNYK-RUBY-NOKOGIRI-9510789 - https://snyk.io/vuln/SNYK-RUBY-ACTIVESUPPORT-5851458 - https://snyk.io/vuln/SNYK-RUBY-NOKOGIRI-9789079 - https://snyk.io/vuln/SNYK-RUBY-NOKOGIRI-10674188 - https://snyk.io/vuln/SNYK-RUBY-NOKOGIRI-8453714 --- Gemfile | 18 ++++---- Gemfile.lock | 113 +++++++++++++++++++++++++-------------------------- 2 files changed, 65 insertions(+), 66 deletions(-) mode change 100755 => 100644 Gemfile diff --git a/Gemfile b/Gemfile old mode 100755 new mode 100644 index e3aacc5..90085ef --- a/Gemfile +++ b/Gemfile @@ -7,27 +7,27 @@ source "https://rubygems.org" # # This will help ensure the proper Jekyll version is running. # Happy Jekylling! -gem "jekyll", "~> 4.1.0" +gem "jekyll", "~> 4.2.0" # This is the default theme for new Jekyll sites. You may change this to anything you like. -gem "minima" +gem "minima", ">= 2.5.2" # To upgrade, run `bundle update github-pages`. # gem "github-pages", group: :jekyll_plugins # If you have any plugins, put them here! group :jekyll_plugins do - gem "jekyll-feed", "~> 0.12" - gem 'jekyll-octicons' - gem 'jekyll-remote-theme' + gem "jekyll-feed", "~> 0.15", ">= 0.15.1" + gem 'jekyll-octicons', '>= 14.2.0' + gem 'jekyll-remote-theme', '>= 0.4.3' gem "jekyll-twitter-plugin" - gem 'jekyll-relative-links' - gem 'jekyll-seo-tag' - gem 'jekyll-toc' + gem 'jekyll-relative-links', '>= 0.7.0' + gem 'jekyll-seo-tag', '>= 2.7.0' + gem 'jekyll-toc', '>= 0.15.0' gem 'jekyll-gist' gem 'jekyll-paginate' gem 'jekyll-sitemap' end gem "kramdown-math-katex" -gem "jemoji" +gem "jemoji", ">= 0.13.0" # Windows and JRuby does not include zoneinfo files, so bundle the tzinfo-data gem # and associated library. diff --git a/Gemfile.lock b/Gemfile.lock index b0b5eba..f1e39e0 100644 --- a/Gemfile.lock +++ b/Gemfile.lock @@ -1,153 +1,152 @@ GEM remote: https://rubygems.org/ specs: - activesupport (6.0.3.3) + activesupport (6.0.6.1) concurrent-ruby (~> 1.0, >= 1.0.2) i18n (>= 0.7, < 2) minitest (~> 5.1) tzinfo (~> 1.1) zeitwerk (~> 2.2, >= 2.2.2) - addressable (2.8.0) - public_suffix (>= 2.0.2, < 5.0) + addressable (2.8.7) + public_suffix (>= 2.0.2, < 7.0) colorator (1.1.0) - concurrent-ruby (1.1.7) - em-websocket (0.5.1) + concurrent-ruby (1.3.5) + em-websocket (0.5.3) eventmachine (>= 0.12.9) - http_parser.rb (~> 0.6.0) + http_parser.rb (~> 0) eventmachine (1.2.7) execjs (2.7.0) faraday (0.17.3) multipart-post (>= 1.2, < 3) - ffi (1.13.1) + ffi (1.17.2) forwardable-extended (2.6.0) - gemoji (3.0.1) - html-pipeline (2.14.0) + gemoji (4.1.0) + html-pipeline (2.14.3) activesupport (>= 2) nokogiri (>= 1.4) - http_parser.rb (0.6.0) - i18n (1.8.5) + http_parser.rb (0.8.0) + i18n (1.14.7) concurrent-ruby (~> 1.0) - jekyll (4.1.1) + jekyll (4.2.2) addressable (~> 2.4) colorator (~> 1.0) em-websocket (~> 0.5) i18n (~> 1.0) jekyll-sass-converter (~> 2.0) jekyll-watch (~> 2.0) - kramdown (~> 2.1) + kramdown (~> 2.3) kramdown-parser-gfm (~> 1.0) liquid (~> 4.0) mercenary (~> 0.4.0) pathutil (~> 0.9) rouge (~> 3.0) safe_yaml (~> 1.0) - terminal-table (~> 1.8) - jekyll-feed (0.15.0) + terminal-table (~> 2.0) + jekyll-feed (0.17.0) jekyll (>= 3.7, < 5.0) jekyll-gist (1.5.0) octokit (~> 4.2) - jekyll-octicons (11.0.0) + jekyll-octicons (19.8.0) jekyll (>= 3.6, < 5.0) - octicons (= 11.0.0) + octicons (= 19.8.0) jekyll-paginate (1.1.0) - jekyll-relative-links (0.6.1) + jekyll-relative-links (0.7.0) jekyll (>= 3.3, < 5.0) - jekyll-remote-theme (0.4.2) + jekyll-remote-theme (0.4.3) addressable (~> 2.0) jekyll (>= 3.5, < 5.0) jekyll-sass-converter (>= 1.0, <= 3.0.0, != 2.0.0) rubyzip (>= 1.3.0, < 3.0) - jekyll-sass-converter (2.1.0) + jekyll-sass-converter (2.2.0) sassc (> 2.0.1, < 3.0) - jekyll-seo-tag (2.6.1) - jekyll (>= 3.3, < 5.0) + jekyll-seo-tag (2.8.0) + jekyll (>= 3.8, < 5.0) jekyll-sitemap (1.4.0) jekyll (>= 3.7, < 5.0) - jekyll-toc (0.14.0) - jekyll (>= 3.8) - nokogiri (~> 1.10) + jekyll-toc (0.19.0) + jekyll (>= 3.9) + nokogiri (~> 1.12) jekyll-twitter-plugin (2.1.0) jekyll-watch (2.2.1) listen (~> 3.0) - jemoji (0.12.0) - gemoji (~> 3.0) + jemoji (0.13.0) + gemoji (>= 3, < 5) html-pipeline (~> 2.2) jekyll (>= 3.0, < 5.0) katex (0.6.0) execjs (~> 2.7) - kramdown (2.3.1) - rexml + kramdown (2.5.1) + rexml (>= 3.3.9) kramdown-math-katex (1.0.1) katex (~> 0.4) kramdown (~> 2.0) kramdown-parser-gfm (1.1.0) kramdown (~> 2.0) - liquid (4.0.3) - listen (3.2.1) + liquid (4.0.4) + listen (3.9.0) rb-fsevent (~> 0.10, >= 0.10.3) rb-inotify (~> 0.9, >= 0.9.10) mercenary (0.4.0) - mini_portile2 (2.8.5) - minima (2.5.1) + mini_portile2 (2.8.9) + minima (2.5.2) jekyll (>= 3.5, < 5.0) jekyll-feed (~> 0.9) jekyll-seo-tag (~> 2.1) - minitest (5.14.2) + minitest (5.25.5) multipart-post (2.1.1) - nokogiri (1.16.3) + nokogiri (1.15.7) mini_portile2 (~> 2.8.2) racc (~> 1.4) - octicons (11.0.0) - nokogiri (>= 1.6.3.1) + octicons (19.8.0) octokit (4.18.0) faraday (>= 0.9) sawyer (~> 0.8.0, >= 0.5.3) pathutil (0.16.2) forwardable-extended (~> 2.6) - public_suffix (4.0.6) - racc (1.7.3) - rb-fsevent (0.10.4) - rb-inotify (0.10.1) + public_suffix (5.1.1) + racc (1.8.1) + rb-fsevent (0.11.2) + rb-inotify (0.11.1) ffi (~> 1.0) - rexml (3.2.5) - rouge (3.23.0) - rubyzip (2.3.0) + rexml (3.4.1) + rouge (3.30.0) + rubyzip (2.4.1) safe_yaml (1.0.5) sassc (2.4.0) ffi (~> 1.9) sawyer (0.8.2) addressable (>= 2.3.5) faraday (> 0.8, < 2.0) - terminal-table (1.8.0) + terminal-table (2.0.0) unicode-display_width (~> 1.1, >= 1.1.1) thread_safe (0.3.6) - tzinfo (1.2.10) + tzinfo (1.2.11) thread_safe (~> 0.1) tzinfo-data (1.2020.1) tzinfo (>= 1.0.0) - unicode-display_width (1.7.0) + unicode-display_width (1.8.0) wdm (0.1.1) - zeitwerk (2.4.0) + zeitwerk (2.6.18) PLATFORMS ruby DEPENDENCIES faraday (< 1.0) - jekyll (~> 4.1.0) - jekyll-feed (~> 0.12) + jekyll (~> 4.2.0) + jekyll-feed (~> 0.15, >= 0.15.1) jekyll-gist - jekyll-octicons + jekyll-octicons (>= 14.2.0) jekyll-paginate - jekyll-relative-links - jekyll-remote-theme - jekyll-seo-tag + jekyll-relative-links (>= 0.7.0) + jekyll-remote-theme (>= 0.4.3) + jekyll-seo-tag (>= 2.7.0) jekyll-sitemap - jekyll-toc + jekyll-toc (>= 0.15.0) jekyll-twitter-plugin - jemoji + jemoji (>= 0.13.0) kramdown-math-katex - minima + minima (>= 2.5.2) tzinfo (~> 1.2) tzinfo-data wdm (~> 0.1.1)