From fff65bf4edfff5eac317b255db44329fa92ddab6 Mon Sep 17 00:00:00 2001
From: "snyk-io[bot]" <141718529+snyk-io[bot]@users.noreply.github.com>
Date: Tue, 7 Oct 2025 21:49:00 +0000
Subject: [PATCH] fix: Gemfile to reduce vulnerabilities

The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-RUBY-RACK-13378928
- https://snyk.io/vuln/SNYK-RUBY-RACK-13378930
- https://snyk.io/vuln/SNYK-RUBY-RACK-13378932
---
 Gemfile | 20 ++++++++++----------
 1 file changed, 10 insertions(+), 10 deletions(-)

diff --git a/Gemfile b/Gemfile
index fbc7ca0..cf1d4b0 100644
--- a/Gemfile
+++ b/Gemfile
@@ -3,25 +3,25 @@ source 'https://rubygems.org'
 ruby '2.2.2'
 
 # Bundle edge Rails instead: gem 'rails', github: 'rails/rails'
-gem 'rails', '4.2.1'
+gem 'rails', '5.0.0'
 
-gem 'puma'
+gem 'puma', '>= 2.12.0'
 gem 'foreman'
 
 group :test do
-  gem 'rspec-rails', '~> 3.0.0'
+  gem 'rspec-rails', '~> 3.1.0'
   gem 'vcr'
   gem 'webmock'
 end
 
 group :development, :test do
   gem 'byebug'
-  gem 'web-console', '~> 2.0'
+  gem 'web-console', '~> 2.2', '>= 2.2.0'
   gem 'spring'
-  gem 'better_errors'
+  gem 'better_errors', '>= 2.2.0'
   gem 'binding_of_caller'
 
-  gem 'factory_girl_rails'
+  gem 'factory_girl_rails', '>= 4.6.0'
   gem 'faker'
   gem 'pry'
 end
@@ -34,12 +34,12 @@ gem 'neo4j', '~> 4.1.1'
 gem 'dotenv-rails'
 gem 'rails_12factor', group: :production
 
-gem 'responders', '~> 2.0'
+gem 'responders', '~> 2.1', '>= 2.1.1'
 
 # Authentication
-gem 'omniauth'
-gem 'omniauth-google-oauth2'
-gem 'devise'
+gem 'omniauth', '>= 1.3.1'
+gem 'omniauth-google-oauth2', '>= 0.2.7'
+gem 'devise', '>= 4.0.0'
 
 gem "neo4jrb-paperclip", github: 'subvertallchris/neo4jrb-paperclip', require: "neo4jrb_paperclip"
 gem "aws-sdk"