From 877a84291e6c3e8b09df8651293673f28eb7c756 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Fri, 15 Aug 2025 09:19:37 +0000 Subject: [PATCH] fix: Gemfile to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-RUBY-ACTIVERECORD-11800112 --- Gemfile | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/Gemfile b/Gemfile index ae5d736..a877b56 100644 --- a/Gemfile +++ b/Gemfile @@ -4,7 +4,7 @@ git_source(:github) { |repo| "https://github.com/#{repo}.git" } ruby '2.5.1' # Bundle edge Rails instead: gem 'rails', github: 'rails/rails' -gem 'rails', '~> 5.2.0' +gem 'rails', '~> 7.1.5', '>= 7.1.5.2' # Use postgresql as the database for Active Record gem 'pg', '>= 0.18', '< 2.0' # Use Puma as the app server @@ -27,7 +27,7 @@ gem 'turbolinks', '~> 5' # Build JSON APIs with ease. Read more: https://github.com/rails/jbuilder gem 'jbuilder', '~> 2.5' gem 'sprockets', '~> 3.7.2' -gem 'ledermann-rails-settings' +gem 'ledermann-rails-settings', '>= 2.6.0' gem 'terrapin' #gem 'capistrano-nvm', require: false # Use Redis adapter to run Action Cable in production