From d27f1ab2edba31e5dfba87cb96a4eda0c0ba6353 Mon Sep 17 00:00:00 2001 From: Douglas Lutz <=> Date: Fri, 6 Mar 2020 16:25:37 -0300 Subject: [PATCH] Fix security violations * Rake upgraded to 12.3.3 Issue: https://github.com/advisories/GHSA-jppv-gw3r-w3q8 * Nokogiri upgraded to 1.10.8 Issue: https://github.com/sparklemotion/nokogiri/issues/1992 --- .gitlab-ci.yml | 2 +- Gemfile.lock | 4 ++-- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/.gitlab-ci.yml b/.gitlab-ci.yml index b60ec4812..e283d79de 100644 --- a/.gitlab-ci.yml +++ b/.gitlab-ci.yml @@ -25,7 +25,7 @@ rspec: - source ~/.profile - nvm install v12.4.0 - nvm use 12.4.0 - - bundle install --without development production -j $(nproc) --path .gitlab-cache + - bundle install --without development production -j $(nproc) - cp config/database.yml.example config/database.yml - bundle exec rake db:create db:test:prepare - npm install yarn --global diff --git a/Gemfile.lock b/Gemfile.lock index 334ad56a5..58916fb2d 100644 --- a/Gemfile.lock +++ b/Gemfile.lock @@ -252,7 +252,7 @@ GEM multi_json (1.13.1) multipart-post (2.0.0) nio4r (2.3.1) - nokogiri (1.10.5) + nokogiri (1.10.9) mini_portile2 (~> 2.4.0) normalize-rails (4.1.1) orm_adapter (0.5.0) @@ -318,7 +318,7 @@ GEM thor (>= 0.19.0, < 2.0) rainbow (3.0.0) raindrops (0.19.0) - rake (12.3.2) + rake (13.0.1) ransack (2.1.1) actionpack (>= 5.0) activerecord (>= 5.0)