Skip to content
This repository has been archived by the owner on Jun 26, 2023. It is now read-only.

Automated Bundle Update #7

Merged
merged 1 commit into from Dec 19, 2019
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Jump to
Jump to file
Failed to load files.
Diff view
Diff view
62 changes: 31 additions & 31 deletions Gemfile.lock
@@ -1,78 +1,78 @@
GEM
remote: https://rubygems.org/
specs:
actionpack (6.0.0)
actionview (= 6.0.0)
activesupport (= 6.0.0)
rack (~> 2.0)
actionpack (6.0.2.1)
Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

actionview (= 6.0.2.1)
activesupport (= 6.0.2.1)
rack (~> 2.0, >= 2.0.8)
rack-test (>= 0.6.3)
rails-dom-testing (~> 2.0)
rails-html-sanitizer (~> 1.0, >= 1.2.0)
actionview (6.0.0)
activesupport (= 6.0.0)
actionview (6.0.2.1)
Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

activesupport (= 6.0.2.1)
builder (~> 3.1)
erubi (~> 1.4)
rails-dom-testing (~> 2.0)
rails-html-sanitizer (~> 1.1, >= 1.2.0)
activemodel (6.0.0)
activesupport (= 6.0.0)
activerecord (6.0.0)
activemodel (= 6.0.0)
activesupport (= 6.0.0)
activesupport (6.0.0)
activemodel (6.0.2.1)
Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

activesupport (= 6.0.2.1)
activerecord (6.0.2.1)
Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

activemodel (= 6.0.2.1)
activesupport (= 6.0.2.1)
activesupport (6.0.2.1)
Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

concurrent-ruby (~> 1.0, >= 1.0.2)
i18n (>= 0.7, < 2)
minitest (~> 5.1)
tzinfo (~> 1.1)
zeitwerk (~> 2.1, >= 2.1.8)
builder (3.2.3)
zeitwerk (~> 2.2)
builder (3.2.4)
Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

builder

Patch version upgrade 📈🔹 3.2.3 → 3.2.4

[change-log, source-code]

concurrent-ruby (1.1.5)
crass (1.0.4)
crass (1.0.5)
Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

crass

Patch version upgrade 📈🔹 1.0.4 → 1.0.5

[change-log, source-code]

Commits

A change of 4 commits. See the full changes on the compare page.

These are the individual commits:

double_entry (1.0.1)
activerecord (>= 3.2.0)
activesupport (>= 3.2.0)
money (>= 6.0.0)
railties (>= 3.2.0)
erubi (1.8.0)
i18n (1.6.0)
erubi (1.9.0)
Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

erubi

Minor version upgrade 📈🔶 1.8.0 → 1.9.0

[change-log, source-code]

Commits

A change of 7 commits. See the full changes on the compare page.

These are the individual commits:

i18n (1.7.0)
Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

concurrent-ruby (~> 1.0)
json (2.2.0)
json (2.3.0)
Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

json

Minor version upgrade 📈🔶 2.2.0 → 2.3.0

[change-log, source-code]

jwt (2.1.0)
jwt_signed_request (2.5.1)
jwt (>= 1.5.0, < 2.2.0)
rack
loofah (2.2.3)
loofah (2.4.0)
Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

loofah

Minor version upgrade 📈🔶 2.2.3 → 2.4.0

[change-log, source-code]

🎉 Patched vulnerabilities:

Commits

A change of 56 commits. See the full changes on the compare page.

These are the first 10 commits:

crass (~> 1.0.2)
nokogiri (>= 1.5.9)
method_source (0.9.2)
mini_portile2 (2.4.0)
minitest (5.11.3)
money (6.13.4)
minitest (5.13.0)
Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

money (6.13.6)
Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

i18n (>= 0.6.4, <= 2)
nokogiri (1.10.4)
nokogiri (1.10.7)
Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

nokogiri

Patch version upgrade 📈🔹 1.10.4 → 1.10.7

[change-log, source-code]

🎉 Patched vulnerabilities:

Commits

A change of 16 commits. See the full changes on the compare page.

These are the first 10 commits:

mini_portile2 (~> 2.4.0)
pagerduty (2.1.2)
json (>= 1.7.7)
rack (2.0.7)
rack (2.0.8)
Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

rack

Patch version upgrade 📈🔹 2.0.7 → 2.0.8

[change-log, source-code]

🎉 Patched vulnerabilities:

  • CVE-2019-16782
    Possible information leak / session hijack vulnerability

    URL: GHSA-hrqr-hxpp-chr3

    There's a possible information leak / session hijack vulnerability in Rack. Attackers may be able to find and hijack sessions by using timing attacks targeting the session id. Session ids are usually stored and indexed in a database that uses some kind of scheme for speeding up lookups of that session id. By carefully measuring the amount of time it takes to look up a session, an attacker may be able to find a valid session id and hijack the session. The session id itself may be generated randomly, but the way the session is indexed by the backing store does not use a secure comparison. Impact: The session id stored in a cookie is the same id that is used when querying the backing session storage engine. Most storage mechanisms (for example a database) use some sort of indexing in order to speed up the lookup of that id. By carefully timing requests and session lookup failures, an attacker may be able to perform a timing attack to determine an existing session id and hijack that session.

Commits

A change of 14 commits. See the full changes on the compare page.

These are the first 10 commits:

rack-test (1.1.0)
rack (>= 1.0, < 3)
rails-dom-testing (2.0.3)
activesupport (>= 4.2.0)
nokogiri (>= 1.6)
rails-html-sanitizer (1.2.0)
loofah (~> 2.2, >= 2.2.2)
railties (6.0.0)
actionpack (= 6.0.0)
activesupport (= 6.0.0)
rails-html-sanitizer (1.3.0)
Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

rails-html-sanitizer

Minor version upgrade 📈🔶 1.2.0 → 1.3.0

[change-log, source-code]

Commits

A change of 4 commits. See the full changes on the compare page.

These are the individual commits:

loofah (~> 2.3)
railties (6.0.2.1)
Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

actionpack (= 6.0.2.1)
activesupport (= 6.0.2.1)
method_source
rake (>= 0.8.7)
thor (>= 0.20.3, < 2.0)
rake (12.3.3)
thor (0.20.3)
rake (13.0.1)
Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

thor (1.0.1)
Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

thread_safe (0.3.6)
tzinfo (1.2.5)
thread_safe (~> 0.1)
zeitwerk (2.1.9)
zeitwerk (2.2.2)
Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

zeitwerk

Minor version upgrade 📈🔶 2.1.9 → 2.2.2

[change-log, source-code]

Commits

A change of 45 commits. See the full changes on the compare page.

These are the first 10 commits:

zxcvbn-ruby (1.0.0)

PLATFORMS
Expand Down
93 changes: 69 additions & 24 deletions stdout.txt
@@ -1,36 +1,81 @@
Fetching gem metadata from https://rubygems.org/.............
Resolving dependencies...
Using rake 12.3.3 (was 12.3.2)
Fetching rake 13.0.1 (was 12.3.3)
Installing rake 13.0.1 (was 12.3.3)
Using concurrent-ruby 1.1.5
Using i18n 1.6.0
Using minitest 5.11.3
Using i18n 1.7.0 (was 1.6.0)
Fetching minitest 5.13.0 (was 5.11.3)
Installing minitest 5.13.0 (was 5.11.3)
Using thread_safe 0.3.6
Using tzinfo 1.2.5
Using zeitwerk 2.1.9
Using activesupport 6.0.0 (was 5.2.2.1)
Using builder 3.2.3
Using erubi 1.8.0
Fetching zeitwerk 2.2.2 (was 2.1.9)
Installing zeitwerk 2.2.2 (was 2.1.9)
Fetching activesupport 6.0.2.1 (was 6.0.0)
Installing activesupport 6.0.2.1 (was 6.0.0)
Fetching builder 3.2.4 (was 3.2.3)
Installing builder 3.2.4 (was 3.2.3)
Using erubi 1.9.0 (was 1.8.0)
Using mini_portile2 2.4.0
Using nokogiri 1.10.4 (was 1.10.1)
Fetching nokogiri 1.10.7 (was 1.10.4)
Installing nokogiri 1.10.7 (was 1.10.4) with native extensions
Using rails-dom-testing 2.0.3
Using crass 1.0.4
Using loofah 2.2.3
Using rails-html-sanitizer 1.2.0 (was 1.0.4)
Using actionview 6.0.0 (was 5.2.2.1)
Using rack 2.0.7 (was 2.0.6)
Using crass 1.0.5 (was 1.0.4)
Fetching loofah 2.4.0 (was 2.2.3)
Installing loofah 2.4.0 (was 2.2.3)
Using rails-html-sanitizer 1.3.0 (was 1.2.0)
Fetching actionview 6.0.2.1 (was 6.0.0)
Installing actionview 6.0.2.1 (was 6.0.0)
Fetching rack 2.0.8 (was 2.0.7)
Installing rack 2.0.8 (was 2.0.7)
Using rack-test 1.1.0
Using actionpack 6.0.0 (was 5.2.2.1)
Using activemodel 6.0.0 (was 5.2.2.1)
Using activerecord 6.0.0 (was 5.2.2.1)
Fetching actionpack 6.0.2.1 (was 6.0.0)
Installing actionpack 6.0.2.1 (was 6.0.0)
Fetching activemodel 6.0.2.1 (was 6.0.0)
Installing activemodel 6.0.2.1 (was 6.0.0)
Fetching activerecord 6.0.2.1 (was 6.0.0)
Installing activerecord 6.0.2.1 (was 6.0.0)
Using bundler 1.17.3
Using money 6.13.4 (was 6.13.2)
Fetching money 6.13.6 (was 6.13.4)
Installing money 6.13.6 (was 6.13.4)
Using method_source 0.9.2
Using thor 0.20.3
Using railties 6.0.0 (was 5.2.2.1)
Using double_entry 1.0.1
Using json 2.2.0
Fetching thor 1.0.1 (was 0.20.3)
Installing thor 1.0.1 (was 0.20.3)
Fetching railties 6.0.2.1 (was 6.0.0)
Installing railties 6.0.2.1 (was 6.0.0)
Fetching double_entry 1.0.1
Installing double_entry 1.0.1
Fetching json 2.3.0 (was 2.2.0)
Installing json 2.3.0 (was 2.2.0) with native extensions
Using jwt 2.1.0
Using jwt_signed_request 2.5.1
Using pagerduty 2.1.2
Using zxcvbn-ruby 1.0.0 (was 0.1.2)
Fetching jwt_signed_request 2.5.1
Installing jwt_signed_request 2.5.1
Fetching pagerduty 2.1.2
Installing pagerduty 2.1.2
Using zxcvbn-ruby 1.0.0
Bundle updated!
Post-install message from double_entry:
Please note the following changes in DoubleEntry:
- New table `double_entry_line_metadata` has been introduced and is *required* for
aggregate reporting filtering to work. Existing applications must manually manage
this change via a migration similar to the following:

class CreateDoubleEntryLineMetadata < ActiveRecord::Migration
def self.up
create_table "#{DoubleEntry.table_name_prefix}line_metadata", :force => true do |t|
t.integer "line_id", :null => false
t.string "key", :limit => 48, :null => false
t.string "value", :limit => 64, :null => false
t.timestamps :null => false
end

add_index "#{DoubleEntry.table_name_prefix}line_metadata",
["line_id", "key", "value"],
:name => "lines_meta_line_id_key_value_idx"
end

def self.down
drop_table "#{DoubleEntry.table_name_prefix}line_metadata"
end
end

Please ensure that you update your database accordingly.