From eaa5f4a09ed36537276416e190528db1b66d23c9 Mon Sep 17 00:00:00 2001 From: "dependabot-preview[bot]" <27856297+dependabot-preview[bot]@users.noreply.github.com> Date: Mon, 12 Jul 2021 17:24:10 +0000 Subject: [PATCH 1/3] [Security] Bump addressable from 2.7.0 to 2.8.0 Bumps [addressable](https://github.com/sporkmonger/addressable) from 2.7.0 to 2.8.0. **This update includes a security fix.** - [Release notes](https://github.com/sporkmonger/addressable/releases) - [Changelog](https://github.com/sporkmonger/addressable/blob/main/CHANGELOG.md) - [Commits](https://github.com/sporkmonger/addressable/compare/addressable-2.7.0...addressable-2.8.0) Signed-off-by: dependabot-preview[bot] --- Gemfile.lock | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-) diff --git a/Gemfile.lock b/Gemfile.lock index 344e858c4..7726f91b7 100644 --- a/Gemfile.lock +++ b/Gemfile.lock @@ -78,7 +78,7 @@ GEM minitest (~> 5.1) thread_safe (~> 0.3, >= 0.3.4) tzinfo (~> 1.1) - addressable (2.7.0) + addressable (2.8.0) public_suffix (>= 2.0.2, < 5.0) angular-i18n (0.1.2) angular-rails-templates (1.0.2) @@ -247,7 +247,9 @@ GEM mime-types (3.2.2) mime-types-data (~> 3.2015) mime-types-data (3.2018.0812) - mimemagic (0.3.3) + mimemagic (0.3.10) + nokogiri (~> 1) + rake mini_mime (1.0.1) mini_portile2 (2.4.0) minitest (5.14.2) From 12b40fcce102c0c74818d2efa978b9bf5ebbbab2 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Wed, 6 Oct 2021 23:17:43 +0000 Subject: [PATCH 2/3] Bump sidekiq from 5.0.3 to 5.2.8 Bumps [sidekiq](https://github.com/mperham/sidekiq) from 5.0.3 to 5.2.8. - [Release notes](https://github.com/mperham/sidekiq/releases) - [Changelog](https://github.com/mperham/sidekiq/blob/main/Changes.md) - [Commits](https://github.com/mperham/sidekiq/compare/v5.0.3...v5.2.8) --- updated-dependencies: - dependency-name: sidekiq dependency-type: direct:production ... Signed-off-by: dependabot[bot] --- Gemfile.lock | 16 +++++++++------- 1 file changed, 9 insertions(+), 7 deletions(-) diff --git a/Gemfile.lock b/Gemfile.lock index 344e858c4..0d82549f5 100644 --- a/Gemfile.lock +++ b/Gemfile.lock @@ -128,8 +128,8 @@ GEM compass (~> 1.0.0) sass-rails (< 5.1) sprockets (< 4.0) - concurrent-ruby (1.1.7) - connection_pool (2.2.1) + concurrent-ruby (1.1.9) + connection_pool (2.2.5) crack (0.4.3) safe_yaml (~> 1.0.0) crass (1.0.6) @@ -247,7 +247,9 @@ GEM mime-types (3.2.2) mime-types-data (~> 3.2015) mime-types-data (3.2018.0812) - mimemagic (0.3.3) + mimemagic (0.3.10) + nokogiri (~> 1) + rake mini_mime (1.0.1) mini_portile2 (2.4.0) minitest (5.14.2) @@ -505,11 +507,11 @@ GEM shoulda-context (1.2.2) shoulda-matchers (2.8.0) activesupport (>= 3.0.0) - sidekiq (5.0.3) - concurrent-ruby (~> 1.0) - connection_pool (~> 2.2, >= 2.2.0) + sidekiq (5.2.8) + connection_pool (~> 2.2, >= 2.2.2) + rack (< 2.1.0) rack-protection (>= 1.5.0) - redis (~> 3.3, >= 3.3.3) + redis (>= 3.3.5, < 5) sidekiq-failures (1.0.0) sidekiq (>= 4.0.0) sidekiq-scheduler (2.1.6) From 5ab8fed7703e13e936f4e0a36afbb0244cdfabb4 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Fri, 11 Feb 2022 21:49:21 +0000 Subject: [PATCH 3/3] Bump puma from 5.0.2 to 5.6.2 Bumps [puma](https://github.com/puma/puma) from 5.0.2 to 5.6.2. - [Release notes](https://github.com/puma/puma/releases) - [Changelog](https://github.com/puma/puma/blob/master/History.md) - [Commits](https://github.com/puma/puma/compare/v5.0.2...v5.6.2) --- updated-dependencies: - dependency-name: puma dependency-type: direct:production ... Signed-off-by: dependabot[bot] --- Gemfile.lock | 8 +++++--- 1 file changed, 5 insertions(+), 3 deletions(-) diff --git a/Gemfile.lock b/Gemfile.lock index 344e858c4..fefc2bc5c 100644 --- a/Gemfile.lock +++ b/Gemfile.lock @@ -247,7 +247,9 @@ GEM mime-types (3.2.2) mime-types-data (~> 3.2015) mime-types-data (3.2018.0812) - mimemagic (0.3.3) + mimemagic (0.3.10) + nokogiri (~> 1) + rake mini_mime (1.0.1) mini_portile2 (2.4.0) minitest (5.14.2) @@ -265,7 +267,7 @@ GEM ngannotate-rails (1.2.2) execjs rails (>= 3.1) - nio4r (2.5.4) + nio4r (2.5.8) nokogiri (1.10.10) mini_portile2 (~> 2.4.0) oauth2 (1.4.0) @@ -303,7 +305,7 @@ GEM polyamorous (1.3.1) activerecord (>= 3.0) public_suffix (4.0.6) - puma (5.0.2) + puma (5.6.2) nio4r (~> 2.0) pundit (1.1.0) activesupport (>= 3.0.0)