Skip to content

Commit 3b2310c

Browse files
committed
Update gems for rexml vulnerability
and related
1 parent 5539fe9 commit 3b2310c

File tree

3 files changed

+23
-14
lines changed

3 files changed

+23
-14
lines changed

.github/workflows/jekyll.yml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -38,7 +38,7 @@ jobs:
3838
- name: Setup Ruby
3939
uses: ruby/setup-ruby@v1
4040
with:
41-
ruby-version: '3.3.5' # Not needed with a .ruby-version file
41+
ruby-version: '3.4' # Not needed with a .ruby-version file
4242
bundler-cache: true # runs 'bundle install' and caches installed gems automatically
4343
cache-version: 0 # Increment this number if you need to re-download cached gems
4444
- name: Setup Pages

Gemfile

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -38,3 +38,7 @@ gem "http_parser.rb", "~> 0.6.0", :platforms => [:jruby]
3838

3939
# It seems that jekyll-link-attributes requires this, but the dependency is wonky
4040
gem "nokogiri"
41+
42+
# Adding gems which are being moved out of Ruby stdlib
43+
gem "fiddle"
44+
gem "faraday-retry"

Gemfile.lock

Lines changed: 18 additions & 13 deletions
Original file line numberDiff line numberDiff line change
@@ -4,27 +4,30 @@ GEM
44
addressable (2.8.7)
55
public_suffix (>= 2.0.2, < 7.0)
66
base64 (0.3.0)
7-
bigdecimal (3.2.2)
7+
bigdecimal (3.3.1)
88
colorator (1.1.0)
99
concurrent-ruby (1.3.5)
1010
csv (3.3.5)
1111
em-websocket (0.5.3)
1212
eventmachine (>= 0.12.9)
1313
http_parser.rb (~> 0)
1414
eventmachine (1.2.7)
15-
faraday (2.13.4)
15+
faraday (2.14.0)
1616
faraday-net_http (>= 2.0, < 3.5)
1717
json
1818
logger
1919
faraday-net_http (3.4.1)
2020
net-http (>= 0.5.0)
21+
faraday-retry (2.3.2)
22+
faraday (~> 2.0)
2123
ffi (1.17.2-x64-mingw-ucrt)
2224
ffi (1.17.2-x86_64-linux-gnu)
25+
fiddle (1.1.8)
2326
forwardable-extended (2.6.0)
24-
google-protobuf (4.31.1-x64-mingw-ucrt)
27+
google-protobuf (4.32.1-x64-mingw-ucrt)
2528
bigdecimal
2629
rake (>= 13)
27-
google-protobuf (4.31.1-x86_64-linux-gnu)
30+
google-protobuf (4.32.1-x86_64-linux-gnu)
2831
bigdecimal
2932
rake (>= 13)
3033
http_parser.rb (0.8.0)
@@ -63,7 +66,7 @@ GEM
6366
jekyll (>= 3.7, < 5.0)
6467
jekyll-watch (2.2.1)
6568
listen (~> 3.0)
66-
json (2.13.2)
69+
json (2.15.1)
6770
kramdown (2.5.1)
6871
rexml (>= 3.3.9)
6972
kramdown-parser-gfm (1.1.0)
@@ -83,9 +86,9 @@ GEM
8386
jekyll-sitemap (~> 1.3)
8487
net-http (0.6.0)
8588
uri
86-
nokogiri (1.18.9-x64-mingw-ucrt)
89+
nokogiri (1.18.10-x64-mingw-ucrt)
8790
racc (~> 1.4)
88-
nokogiri (1.18.9-x86_64-linux-gnu)
91+
nokogiri (1.18.10-x86_64-linux-gnu)
8992
racc (~> 1.4)
9093
octokit (4.25.1)
9194
faraday (>= 1, < 3)
@@ -98,12 +101,12 @@ GEM
98101
rb-fsevent (0.11.2)
99102
rb-inotify (0.11.1)
100103
ffi (~> 1.0)
101-
rexml (3.4.1)
102-
rouge (4.6.0)
104+
rexml (3.4.4)
105+
rouge (4.6.1)
103106
safe_yaml (1.0.5)
104-
sass-embedded (1.89.2-x64-mingw-ucrt)
107+
sass-embedded (1.93.2-x64-mingw-ucrt)
105108
google-protobuf (~> 4.31)
106-
sass-embedded (1.89.2-x86_64-linux-gnu)
109+
sass-embedded (1.93.2-x86_64-linux-gnu)
107110
google-protobuf (~> 4.31)
108111
sawyer (0.9.2)
109112
addressable (>= 2.3.5)
@@ -115,7 +118,7 @@ GEM
115118
tzinfo-data (1.2025.2)
116119
tzinfo (>= 1.0.0)
117120
unicode-display_width (2.6.0)
118-
uri (1.0.3)
121+
uri (1.0.4)
119122
wdm (0.2.0)
120123
webrick (1.9.1)
121124

@@ -124,6 +127,8 @@ PLATFORMS
124127
x86_64-linux
125128

126129
DEPENDENCIES
130+
faraday-retry
131+
fiddle
127132
http_parser.rb (~> 0.6.0)
128133
jekyll (~> 4.3)
129134
jekyll-feed
@@ -137,4 +142,4 @@ DEPENDENCIES
137142
wdm (~> 0.1)
138143

139144
BUNDLED WITH
140-
2.5.22
145+
2.7.2

0 commit comments

Comments
 (0)