Update Nokogiri to v1.12.5
This addresses a CVE that is only relevant to JRuby users (https://github.com/sparklemotion/nokogiri/blob/main/CHANGELOG.md), but this gem is still flagged by security scanners. Some other dependency updates: * ruby-magic https://my.diffend.io/gems/ruby-magic/0.4.0/0.5.3 * racc diff: https://my.diffend.io/gems/racc/1.5.2/1.6.0 * mini_portile2: https://my.diffend.io/gems/mini_portile2/2.5.0/2.6.1 Changelog: changed
Showing
... | ... | @@ -170,7 +170,7 @@ gem 'asciidoctor-kroki', '~> 0.5.0', require: false |
gem 'rouge', '~> 3.27.0' | ||
gem 'truncato', '~> 0.7.11' | ||
gem 'bootstrap_form', '~> 4.2.0' | ||
gem 'nokogiri', '~> 1.11.4' | ||
gem 'nokogiri', '~> 1.12' | ||
gem 'escape_utils', '~> 1.1' | ||
# Calendar rendering | ||
... | ... | @@ -277,7 +277,7 @@ gem 'licensee', '~> 9.14.1' |
gem 'charlock_holmes', '~> 0.7.7' | ||
# Detect mime content type from content | ||
gem 'ruby-magic', '~> 0.4' | ||
gem 'ruby-magic', '~> 0.5' | ||
# Faster blank | ||
gem 'fast_blank' | ||
... | ... |
Please register or sign in to comment