From a95a990d1075ffcd3b55f756c9e472c548783f29 Mon Sep 17 00:00:00 2001 From: Matthew Walton Date: Tue, 20 Feb 2018 11:32:15 +0000 Subject: [PATCH 1/2] SMS-923 Update remaining dependencies with security issues. --- Gemfile | 2 +- Gemfile.lock | 114 +++++++++++++++++++++++++++++------------------- esendex.gemspec | 2 +- 3 files changed, 71 insertions(+), 47 deletions(-) diff --git a/Gemfile b/Gemfile index a9b3d48..f9b4ecd 100644 --- a/Gemfile +++ b/Gemfile @@ -3,7 +3,7 @@ source "http://rubygems.org" gemspec group :development, :test do - gem 'rails', "~> 4.1.16" + gem 'rails', "~> 4.2.7.1" gem 'rake', '~> 12.2.1' gem 'rspec' gem 'rspec-rails' diff --git a/Gemfile.lock b/Gemfile.lock index e8d0be8..fff51f6 100644 --- a/Gemfile.lock +++ b/Gemfile.lock @@ -3,51 +3,63 @@ PATH specs: esendex (0.6.0) nestful (~> 0.0.8) - nokogiri (~> 1.6.8.1) + nokogiri (~> 1.8.2) GEM remote: http://rubygems.org/ specs: - actionmailer (4.1.16) - actionpack (= 4.1.16) - actionview (= 4.1.16) + actionmailer (4.2.7.1) + actionpack (= 4.2.7.1) + actionview (= 4.2.7.1) + activejob (= 4.2.7.1) mail (~> 2.5, >= 2.5.4) - actionpack (4.1.16) - actionview (= 4.1.16) - activesupport (= 4.1.16) - rack (~> 1.5.2) + rails-dom-testing (~> 1.0, >= 1.0.5) + actionpack (4.2.7.1) + actionview (= 4.2.7.1) + activesupport (= 4.2.7.1) + rack (~> 1.6) rack-test (~> 0.6.2) - actionview (4.1.16) - activesupport (= 4.1.16) + rails-dom-testing (~> 1.0, >= 1.0.5) + rails-html-sanitizer (~> 1.0, >= 1.0.2) + actionview (4.2.7.1) + activesupport (= 4.2.7.1) builder (~> 3.1) erubis (~> 2.7.0) - activemodel (4.1.16) - activesupport (= 4.1.16) + rails-dom-testing (~> 1.0, >= 1.0.5) + rails-html-sanitizer (~> 1.0, >= 1.0.2) + activejob (4.2.7.1) + activesupport (= 4.2.7.1) + globalid (>= 0.3.0) + activemodel (4.2.7.1) + activesupport (= 4.2.7.1) builder (~> 3.1) - activerecord (4.1.16) - activemodel (= 4.1.16) - activesupport (= 4.1.16) - arel (~> 5.0.0) + activerecord (4.2.7.1) + activemodel (= 4.2.7.1) + activesupport (= 4.2.7.1) + arel (~> 6.0) activeresource (4.1.0) activemodel (~> 4.0) activesupport (~> 4.0) rails-observers (~> 0.1.2) - activesupport (4.1.16) - i18n (~> 0.6, >= 0.6.9) + activesupport (4.2.7.1) + i18n (~> 0.7) json (~> 1.7, >= 1.7.7) minitest (~> 5.1) - thread_safe (~> 0.1) + thread_safe (~> 0.3, >= 0.3.4) tzinfo (~> 1.1) - arel (5.0.1.20140414130214) + arel (6.0.4) builder (3.2.3) coderay (1.1.2) concurrent-ruby (1.0.5) + crass (1.0.3) diff-lcs (1.3) erubis (2.7.0) ffi (1.9.21) ffi (1.9.21-x64-mingw32) ffi (1.9.21-x86-mingw32) formatador (0.2.5) + globalid (0.4.1) + activesupport (>= 4.2.0) growl (1.0.3) guard (2.14.2) formatador (>= 0.2.4) @@ -69,46 +81,58 @@ GEM listen (3.0.8) rb-fsevent (~> 0.9, >= 0.9.4) rb-inotify (~> 0.9, >= 0.9.7) + loofah (2.2.0) + crass (~> 1.0.2) + nokogiri (>= 1.5.9) lumberjack (1.0.12) mail (2.7.0) mini_mime (>= 0.1.1) method_source (0.9.0) mini_mime (1.0.0) - mini_portile2 (2.1.0) + mini_portile2 (2.3.0) minitest (5.11.3) nenv (0.3.0) nestful (0.0.8) activesupport (>= 3.0.0.beta) - nokogiri (1.6.8.1) - mini_portile2 (~> 2.1.0) - nokogiri (1.6.8.1-x64-mingw32) - mini_portile2 (~> 2.1.0) - nokogiri (1.6.8.1-x86-mingw32) - mini_portile2 (~> 2.1.0) + nokogiri (1.8.2) + mini_portile2 (~> 2.3.0) + nokogiri (1.8.2-x64-mingw32) + mini_portile2 (~> 2.3.0) + nokogiri (1.8.2-x86-mingw32) + mini_portile2 (~> 2.3.0) notiffany (0.1.1) nenv (~> 0.1) shellany (~> 0.0) pry (0.11.3) coderay (~> 1.1.0) method_source (~> 0.9.0) - rack (1.5.5) + rack (1.6.8) rack-test (0.6.3) rack (>= 1.0) - rails (4.1.16) - actionmailer (= 4.1.16) - actionpack (= 4.1.16) - actionview (= 4.1.16) - activemodel (= 4.1.16) - activerecord (= 4.1.16) - activesupport (= 4.1.16) + rails (4.2.7.1) + actionmailer (= 4.2.7.1) + actionpack (= 4.2.7.1) + actionview (= 4.2.7.1) + activejob (= 4.2.7.1) + activemodel (= 4.2.7.1) + activerecord (= 4.2.7.1) + activesupport (= 4.2.7.1) bundler (>= 1.3.0, < 2.0) - railties (= 4.1.16) - sprockets-rails (~> 2.0) + railties (= 4.2.7.1) + sprockets-rails + rails-deprecated_sanitizer (1.0.3) + activesupport (>= 4.2.0.alpha) + rails-dom-testing (1.0.9) + activesupport (>= 4.2.0, < 5.0) + nokogiri (~> 1.6) + rails-deprecated_sanitizer (>= 1.0.1) + rails-html-sanitizer (1.0.3) + loofah (~> 2.0) rails-observers (0.1.2) activemodel (~> 4.0) - railties (4.1.16) - actionpack (= 4.1.16) - activesupport (= 4.1.16) + railties (4.2.7.1) + actionpack (= 4.2.7.1) + activesupport (= 4.2.7.1) rake (>= 0.8.7) thor (>= 0.18.1, < 2.0) rake (12.2.1) @@ -142,10 +166,10 @@ GEM sprockets (3.7.1) concurrent-ruby (~> 1.0) rack (> 1, < 3) - sprockets-rails (2.3.3) - actionpack (>= 3.0) - activesupport (>= 3.0) - sprockets (>= 2.8, < 4.0) + sprockets-rails (3.2.1) + actionpack (>= 4.0) + activesupport (>= 4.0) + sprockets (>= 3.0.0) thor (0.20.0) thread_safe (0.3.6) tzinfo (1.2.5) @@ -164,7 +188,7 @@ DEPENDENCIES guard guard-rspec listen (~> 3.0.0) - rails (~> 4.1.16) + rails (~> 4.2.7.1) rails-observers (= 0.1.2) rake (~> 12.2.1) rb-fsevent diff --git a/esendex.gemspec b/esendex.gemspec index 3845176..e61e6ed 100644 --- a/esendex.gemspec +++ b/esendex.gemspec @@ -16,5 +16,5 @@ Gem::Specification.new do |gem| gem.version = Esendex::VERSION gem.required_ruby_version = "~> 2.2" gem.add_runtime_dependency "nestful", ["~> 0.0.8"] - gem.add_runtime_dependency "nokogiri", ["~> 1.6.8.1"] + gem.add_runtime_dependency "nokogiri", ["~> 1.8.2"] end From 8e57579ecb442ba45d71fc7279b1b8a1e8bbc94d Mon Sep 17 00:00:00 2001 From: Matthew Walton Date: Tue, 20 Feb 2018 13:53:59 +0000 Subject: [PATCH 2/2] SMS-923 Use less strict nokogiri dependency, add license specifier to gemspec --- Gemfile.lock | 2 +- esendex.gemspec | 3 ++- 2 files changed, 3 insertions(+), 2 deletions(-) diff --git a/Gemfile.lock b/Gemfile.lock index fff51f6..6d37765 100644 --- a/Gemfile.lock +++ b/Gemfile.lock @@ -3,7 +3,7 @@ PATH specs: esendex (0.6.0) nestful (~> 0.0.8) - nokogiri (~> 1.8.2) + nokogiri (~> 1.8, >= 1.8.2) GEM remote: http://rubygems.org/ diff --git a/esendex.gemspec b/esendex.gemspec index e61e6ed..ba1d76c 100644 --- a/esendex.gemspec +++ b/esendex.gemspec @@ -7,6 +7,7 @@ Gem::Specification.new do |gem| gem.description = "Send SMS from your application using the Esendex API" gem.summary = "Gem for interacting with the Esendex API" gem.homepage = "http://developers.esendex.com" + gem.licenses = 'Nonstandard' gem.files = Dir["{app,config,lib}/**/*"] gem.test_files = Dir["spec/**/*"] @@ -16,5 +17,5 @@ Gem::Specification.new do |gem| gem.version = Esendex::VERSION gem.required_ruby_version = "~> 2.2" gem.add_runtime_dependency "nestful", ["~> 0.0.8"] - gem.add_runtime_dependency "nokogiri", ["~> 1.8.2"] + gem.add_runtime_dependency "nokogiri", ['~> 1.8', '>= 1.8.2'] end