From 2c004dee23bf20738240563d02f2c49da4ed2156 Mon Sep 17 00:00:00 2001 From: Stoica Alexandru Date: Wed, 15 Apr 2026 13:06:45 +0100 Subject: [PATCH] chore(deps): bump activesupport to patched 7.2+ line Closes dependabot alerts #10, #11, #12 (SafeBuffer XSS, ReDoS, DoS). Minor Rails train bump (7.1 -> 7.2+) within gemspec constraints. --- Gemfile.lock | 16 +++++++--------- 1 file changed, 7 insertions(+), 9 deletions(-) diff --git a/Gemfile.lock b/Gemfile.lock index c075ffb..3a170be 100644 --- a/Gemfile.lock +++ b/Gemfile.lock @@ -8,19 +8,18 @@ PATH GEM remote: https://rubygems.org/ specs: - activesupport (7.1.6) + activesupport (7.2.3.1) base64 benchmark (>= 0.3) bigdecimal - concurrent-ruby (~> 1.0, >= 1.0.2) + concurrent-ruby (~> 1.0, >= 1.3.1) connection_pool (>= 2.2.5) drb i18n (>= 1.6, < 2) logger (>= 1.4.2) - minitest (>= 5.1) - mutex_m + minitest (>= 5.1, < 6) securerandom (>= 0.3) - tzinfo (~> 2.0) + tzinfo (~> 2.0, >= 2.0.5) ast (2.4.2) base64 (0.3.0) benchmark (0.5.0) @@ -32,8 +31,7 @@ GEM i18n (1.14.8) concurrent-ruby (~> 1.0) logger (1.7.0) - minitest (5.26.1) - mutex_m (0.3.0) + minitest (5.27.0) parallel (1.22.1) parser (3.1.2.0) ast (~> 2.4.1) @@ -52,7 +50,7 @@ GEM rubocop-ast (1.17.0) parser (>= 3.1.1.0) ruby-progressbar (1.11.0) - securerandom (0.3.2) + securerandom (0.4.1) tzinfo (2.0.6) concurrent-ruby (~> 1.0) unicode-display_width (2.1.0) @@ -65,4 +63,4 @@ DEPENDENCIES zip-codes! BUNDLED WITH - 2.3.4 + 2.5.19