From cdf8a8f9f5ed04080e7015a8ae4ad5e8dd4af3fe Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Thu, 8 Jul 2021 06:38:41 +0000 Subject: [PATCH] fix: Gemfile & Gemfile.lock to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-RUBY-ADDRESSABLE-1316242 --- Gemfile | 8 ++++---- Gemfile.lock | 48 ++++++++++++++++++++++++------------------------ 2 files changed, 28 insertions(+), 28 deletions(-) mode change 100755 => 100644 Gemfile diff --git a/Gemfile b/Gemfile old mode 100755 new mode 100644 index 02327b9..69b240e --- a/Gemfile +++ b/Gemfile @@ -1,9 +1,9 @@ source 'https://rubygems.org' -gem 'jekyll' +gem 'jekyll', '>= 4.0.0' group :jekyll_plugins do - gem 'jekyll-sitemap' - gem 'jekyll-feed' - gem 'jekyll-seo-tag' + gem 'jekyll-sitemap', '>= 1.4.0' + gem 'jekyll-feed', '>= 0.13.0' + gem 'jekyll-seo-tag', '>= 2.6.1' end \ No newline at end of file diff --git a/Gemfile.lock b/Gemfile.lock index 8bf55e2..3f04ec7 100644 --- a/Gemfile.lock +++ b/Gemfile.lock @@ -1,40 +1,40 @@ GEM remote: https://rubygems.org/ specs: - addressable (2.7.0) + addressable (2.8.0) public_suffix (>= 2.0.2, < 5.0) colorator (1.1.0) - concurrent-ruby (1.1.6) - em-websocket (0.5.1) + concurrent-ruby (1.1.9) + em-websocket (0.5.2) eventmachine (>= 0.12.9) http_parser.rb (~> 0.6.0) eventmachine (1.2.7) - ffi (1.12.2) + ffi (1.15.3) forwardable-extended (2.6.0) http_parser.rb (0.6.0) - i18n (1.8.2) + i18n (1.8.10) concurrent-ruby (~> 1.0) - jekyll (4.0.0) + jekyll (4.2.0) addressable (~> 2.4) colorator (~> 1.0) em-websocket (~> 0.5) - i18n (>= 0.9.5, < 2) + i18n (~> 1.0) jekyll-sass-converter (~> 2.0) jekyll-watch (~> 2.0) - kramdown (~> 2.1) + kramdown (~> 2.3) kramdown-parser-gfm (~> 1.0) liquid (~> 4.0) - mercenary (~> 0.3.3) + mercenary (~> 0.4.0) pathutil (~> 0.9) rouge (~> 3.0) safe_yaml (~> 1.0) - terminal-table (~> 1.8) - jekyll-feed (0.13.0) + terminal-table (~> 2.0) + jekyll-feed (0.15.1) jekyll (>= 3.7, < 5.0) jekyll-sass-converter (2.1.0) sassc (> 2.0.1, < 3.0) - jekyll-seo-tag (2.6.1) - jekyll (>= 3.3, < 5.0) + jekyll-seo-tag (2.7.1) + jekyll (>= 3.8, < 5.0) jekyll-sitemap (1.4.0) jekyll (>= 3.7, < 5.0) jekyll-watch (2.2.1) @@ -44,22 +44,22 @@ GEM kramdown-parser-gfm (1.1.0) kramdown (~> 2.0) liquid (4.0.3) - listen (3.2.1) + listen (3.5.1) rb-fsevent (~> 0.10, >= 0.10.3) rb-inotify (~> 0.9, >= 0.9.10) - mercenary (0.3.6) + mercenary (0.4.0) pathutil (0.16.2) forwardable-extended (~> 2.6) - public_suffix (4.0.3) - rb-fsevent (0.10.3) + public_suffix (4.0.6) + rb-fsevent (0.11.0) rb-inotify (0.10.1) ffi (~> 1.0) rexml (3.2.5) - rouge (3.17.0) + rouge (3.26.0) safe_yaml (1.0.5) - sassc (2.2.1) + sassc (2.4.0) ffi (~> 1.9) - terminal-table (1.8.0) + terminal-table (2.0.0) unicode-display_width (~> 1.1, >= 1.1.1) unicode-display_width (1.7.0) @@ -67,10 +67,10 @@ PLATFORMS ruby DEPENDENCIES - jekyll - jekyll-feed - jekyll-seo-tag - jekyll-sitemap + jekyll (>= 4.0.0) + jekyll-feed (>= 0.13.0) + jekyll-seo-tag (>= 2.6.1) + jekyll-sitemap (>= 1.4.0) BUNDLED WITH 2.1.4