From 1ddb73ea9798b805c74964db21ea16897296c94d Mon Sep 17 00:00:00 2001 From: Sojan Jose Date: Wed, 20 Dec 2023 13:38:34 -0800 Subject: [PATCH] chore(security): Security upgrade omniauth from 2.1.1 to 2.1.2 (#8591) Co-authored-by: snyk-bot --- Gemfile | 2 +- Gemfile.lock | 8 ++++---- 2 files changed, 5 insertions(+), 5 deletions(-) diff --git a/Gemfile b/Gemfile index 6b6813846a46..8debc879fb16 100644 --- a/Gemfile +++ b/Gemfile @@ -162,7 +162,7 @@ gem 'omniauth-oauth2' gem 'audited', '~> 5.4', '>= 5.4.1' # need for google auth -gem 'omniauth' +gem 'omniauth', '>= 2.1.2' gem 'omniauth-google-oauth2' gem 'omniauth-rails_csrf_protection', '~> 1.0' diff --git a/Gemfile.lock b/Gemfile.lock index b224d09aa276..0469be6c9362 100644 --- a/Gemfile.lock +++ b/Gemfile.lock @@ -511,7 +511,7 @@ GEM rack (>= 1.2, < 4) snaky_hash (~> 2.0) version_gem (~> 1.1) - omniauth (2.1.1) + omniauth (2.1.2) hashie (>= 3.4.6) rack (>= 2.2.3) rack-protection @@ -568,8 +568,8 @@ GEM rack (>= 2.0.0) rack-mini-profiler (3.2.0) rack (>= 1.2.0) - rack-protection (3.0.6) - rack + rack-protection (3.1.0) + rack (~> 2.2, >= 2.2.4) rack-proxy (0.7.6) rack rack-test (2.1.0) @@ -905,7 +905,7 @@ DEPENDENCIES neighbor newrelic-sidekiq-metrics (>= 1.6.2) newrelic_rpm - omniauth + omniauth (>= 2.1.2) omniauth-google-oauth2 omniauth-oauth2 omniauth-rails_csrf_protection (~> 1.0)