From 539d96d61a286ac97757a918dd42a021b77bdfdb Mon Sep 17 00:00:00 2001 From: Bess Sadler Date: Tue, 25 May 2021 11:44:49 -0400 Subject: [PATCH] Downgrade rails and do not bump redis (#918) * Downgrade rails and do not bump redis * Add notes for future troubleshooting. * Downgrade faraday --- Gemfile | 7 +- Gemfile.lock | 416 ++++++++++++++++++++++++++------------------------- 2 files changed, 222 insertions(+), 201 deletions(-) diff --git a/Gemfile b/Gemfile index 02fcd23d..25e1a83a 100644 --- a/Gemfile +++ b/Gemfile @@ -6,7 +6,9 @@ gem 'graphql-client' gem 'jbuilder', '~> 2.0' gem 'jquery-rails' gem 'rack', '>= 2.0.6' -gem 'rails', '~> 5.2' +# Locking rails at 5.2.4.5 until we can handle this upgrade: https://github.com/rails/rails/releases/tag/v5.2.4.6 +# The problem is CVE-2021-22885 and we should fix it upsteam. +gem 'rails', '5.2.4.5' gem 'sass-rails', '~> 5.0' gem 'turbolinks' gem 'uglifier', '>= 1.3.0' @@ -55,6 +57,7 @@ gem 'ddtrace' gem 'devise', '~> 4.7.1' gem 'devise-guests', '~> 0.3' gem 'devise_invitable' +gem 'faraday', '< 1' gem 'iiif-presentation' gem 'iso-639' gem 'lograge' @@ -63,6 +66,8 @@ gem 'omniauth', '~> 1.8.1' gem 'omniauth-cas' gem 'open_uri_redirections' gem 'redis-namespace' +# Upgrading past redis 3.3.5 currently breaks deploy. Test any upgrades here carefully. +gem 'redis', '3.3.5' gem 'riiif' gem 'rsolr', '~> 1.0.6' gem 'sidekiq', '< 6' diff --git a/Gemfile.lock b/Gemfile.lock index 18953adf..91b2bf47 100644 --- a/Gemfile.lock +++ b/Gemfile.lock @@ -14,43 +14,43 @@ GIT GEM remote: https://rubygems.org/ specs: - actioncable (5.2.6) - actionpack (= 5.2.6) + actioncable (5.2.4.5) + actionpack (= 5.2.4.5) nio4r (~> 2.0) websocket-driver (>= 0.6.1) - actionmailer (5.2.6) - actionpack (= 5.2.6) - actionview (= 5.2.6) - activejob (= 5.2.6) + actionmailer (5.2.4.5) + actionpack (= 5.2.4.5) + actionview (= 5.2.4.5) + activejob (= 5.2.4.5) mail (~> 2.5, >= 2.5.4) rails-dom-testing (~> 2.0) - actionpack (5.2.6) - actionview (= 5.2.6) - activesupport (= 5.2.6) + actionpack (5.2.4.5) + actionview (= 5.2.4.5) + activesupport (= 5.2.4.5) rack (~> 2.0, >= 2.0.8) rack-test (>= 0.6.3) rails-dom-testing (~> 2.0) rails-html-sanitizer (~> 1.0, >= 1.0.2) - actionview (5.2.6) - activesupport (= 5.2.6) + actionview (5.2.4.5) + activesupport (= 5.2.4.5) builder (~> 3.1) erubi (~> 1.4) rails-dom-testing (~> 2.0) rails-html-sanitizer (~> 1.0, >= 1.0.3) - activejob (5.2.6) - activesupport (= 5.2.6) + activejob (5.2.4.5) + activesupport (= 5.2.4.5) globalid (>= 0.3.6) - activemodel (5.2.6) - activesupport (= 5.2.6) - activerecord (5.2.6) - activemodel (= 5.2.6) - activesupport (= 5.2.6) + activemodel (5.2.4.5) + activesupport (= 5.2.4.5) + activerecord (5.2.4.5) + activemodel (= 5.2.4.5) + activesupport (= 5.2.4.5) arel (>= 9.0) - activestorage (5.2.6) - actionpack (= 5.2.6) - activerecord (= 5.2.6) - marcel (~> 1.0.0) - activesupport (5.2.6) + activestorage (5.2.4.5) + actionpack (= 5.2.4.5) + activerecord (= 5.2.4.5) + marcel (~> 0.3.1) + activesupport (5.2.4.5) concurrent-ruby (~> 1.0, >= 1.0.2) i18n (>= 0.7, < 2) minitest (~> 5.1) @@ -59,26 +59,26 @@ GEM activerecord (>= 5.0, < 6.1) addressable (2.7.0) public_suffix (>= 2.0.2, < 5.0) - airbrussh (1.3.1) + airbrussh (1.4.0) sshkit (>= 1.6.1, != 1.7.0) - almond-rails (0.1.0) - rails (>= 4.2, < 6) - amq-protocol (2.3.0) + almond-rails (0.3.0) + rails (>= 4.2) + amq-protocol (2.3.2) arel (9.0.0) - ast (2.4.0) - autoprefixer-rails (9.6.1.1) - execjs + ast (2.4.2) + autoprefixer-rails (10.2.5.1) + execjs (> 0) babel-source (5.8.35) babel-transpiler (0.7.0) babel-source (>= 4.0, < 6) execjs (~> 2.0) - bcrypt (3.1.13) - binding_of_caller (0.7.2) + bcrypt (3.1.16) + binding_of_caller (1.0.0) debug_inspector (>= 0.0.1) bixby (2.0.0) rubocop (= 0.63.1) rubocop-rspec (= 1.31.0) - blacklight (6.20.0) + blacklight (6.24.0) bootstrap-sass (~> 3.2) deprecation globalid @@ -88,7 +88,7 @@ GEM rails (>= 4.2, < 6) rsolr (>= 1.0.6, < 3) twitter-typeahead-rails (= 0.11.1.pre.corejavascript) - blacklight-gallery (0.11.0) + blacklight-gallery (0.12.0) blacklight (~> 6.3) bootstrap-sass (~> 3.0) openseadragon (>= 0.2.0) @@ -147,25 +147,26 @@ GEM sass (~> 3.3) sassy-maps (< 1.0.0) builder (3.2.4) - bunny (2.14.3) - amq-protocol (~> 2.3, >= 2.3.0) - byebug (9.0.6) - cancancan (3.1.0) - capistrano (3.11.0) + bunny (2.18.0) + amq-protocol (~> 2.3, >= 2.3.1) + sorted_set (~> 1, >= 1.0.2) + byebug (11.1.3) + cancancan (3.2.1) + capistrano (3.16.0) airbrussh (>= 1.0.0) i18n rake (>= 10.0.0) sshkit (>= 1.9.0) - capistrano-bundler (1.5.0) + capistrano-bundler (2.0.1) capistrano (~> 3.1) - capistrano-passenger (0.2.0) + capistrano-passenger (0.2.1) capistrano (~> 3.0) - capistrano-rails (1.4.0) + capistrano-rails (1.6.1) capistrano (~> 3.1) - capistrano-bundler (~> 1.1) - capistrano-rails-console (2.1.1) + capistrano-bundler (>= 1.1, < 3) + capistrano-rails-console (2.3.0) capistrano (>= 3.5.0, < 4.0.0) - sshkit-interactive (~> 0.2.0) + sshkit-interactive (~> 0.3.0) capybara (2.18.0) addressable mini_mime (>= 0.1.3) @@ -173,10 +174,10 @@ GEM rack (>= 1.0.0) rack-test (>= 0.5.4) xpath (>= 2.0, < 4.0) - capybara-screenshot (1.0.22) + capybara-screenshot (1.0.25) capybara (>= 1.0, < 4) launchy - carrierwave (2.1.1) + carrierwave (2.2.0) activemodel (>= 5.0.0) activesupport (>= 5.0.0) addressable (~> 2.6) @@ -184,95 +185,100 @@ GEM mimemagic (>= 0.3.0) mini_mime (>= 0.1.3) ssrf_filter (~> 1.0) - childprocess (0.9.0) - ffi (~> 1.0, >= 1.0.11) + childprocess (3.0.0) clipboard-rails (1.7.1) - coderay (1.1.1) + coderay (1.1.3) concurrent-ruby (1.1.8) - connection_pool (2.2.2) - coveralls (0.8.21) + connection_pool (2.2.5) + coveralls (0.8.23) json (>= 1.8, < 3) - simplecov (~> 0.14.1) + simplecov (~> 0.16.1) term-ansicolor (~> 1.3) - thor (~> 0.19.4) + thor (>= 0.19.4, < 2.0) tins (~> 1.6) - crack (0.4.3) - safe_yaml (~> 1.0.0) + crack (0.4.5) + rexml crass (1.0.6) - dalli (2.7.6) - database_cleaner (1.7.0) - ddtrace (0.11.2) + dalli (2.7.11) + database_cleaner (2.0.1) + database_cleaner-active_record (~> 2.0.0) + database_cleaner-active_record (2.0.1) + activerecord (>= 5.a) + database_cleaner-core (~> 2.0.0) + database_cleaner-core (2.0.1) + ddtrace (0.49.0) + ffi (~> 1.0) msgpack - debug_inspector (0.0.2) + debug_inspector (1.1.0) declarative (0.0.20) declarative-option (0.1.0) - deprecation (1.0.0) + deprecation (1.1.0) activesupport - devise (4.7.1) + devise (4.7.3) bcrypt (~> 3.0) orm_adapter (~> 0.1) railties (>= 4.1.0) responders warden (~> 1.2.3) - devise-guests (0.5.0) + devise-guests (0.7.0) devise devise_invitable (1.7.5) actionmailer (>= 4.1.0) devise (>= 4.0.0) - diff-lcs (1.2.5) + diff-lcs (1.4.4) diffy (3.4.0) - docile (1.1.5) + docile (1.4.0) erubi (1.10.0) - execjs (2.7.0) - factory_bot (4.8.2) - activesupport (>= 3.0.0) - factory_bot_rails (4.8.2) - factory_bot (~> 4.8.2) - railties (>= 3.0.0) - faraday (0.15.4) + execjs (2.8.1) + factory_bot (6.2.0) + activesupport (>= 5.0.0) + factory_bot_rails (6.2.0) + factory_bot (~> 6.2.0) + railties (>= 5.0.0) + faraday (0.17.4) multipart-post (>= 1.2, < 3) faraday_middleware (0.14.0) faraday (>= 0.7.4, < 1.0) - ffi (1.14.2) - friendly_id (5.4.0) + ffi (1.15.1) + friendly_id (5.4.2) activerecord (>= 4.0.0) - github-markup (3.0.4) + github-markup (4.0.0) globalid (0.4.2) activesupport (>= 4.2.0) - graphql (1.8.15) - graphql-client (0.14.0) - activesupport (>= 3.0, < 6.0) - graphql (~> 1.6) - hashdiff (1.0.0) + graphql (1.12.10) + graphql-client (0.16.0) + activesupport (>= 3.0) + graphql (~> 1.8) + hashdiff (1.0.1) hashie (3.5.7) honeybadger (4.8.0) i18n (1.8.10) concurrent-ruby (~> 1.0) i18n-active_record (0.4.0) i18n (>= 0.5.0) - iiif-image-api (0.1.0) - activesupport (<= 6) - iiif-presentation (0.2.0) + iiif-image-api (0.2.0) + activesupport + iiif-presentation (1.0.0) activesupport (>= 3.2.18) faraday (>= 0.9) json - iiif_manifest (1.0.1) + iiif_manifest (1.1.0) activesupport (>= 4) image_processing (1.12.1) mini_magick (>= 4.9.5, < 5) ruby-vips (>= 2.0.17, < 3) - iso-639 (0.2.8) + iso-639 (0.3.5) jaro_winkler (1.5.4) - jbuilder (2.9.1) - activesupport (>= 4.2.0) - jquery-rails (4.3.5) + jbuilder (2.11.2) + activesupport (>= 5.0.0) + jquery-rails (4.4.0) rails-dom-testing (>= 1, < 3) railties (>= 4.2.0) thor (>= 0.14, < 2.0) jquery-tablesorter (1.20.8) railties (>= 3.2, < 6) json (2.5.1) - jwt (2.2.2) + jwt (2.2.3) kaminari (1.2.1) activesupport (>= 4.1.0) kaminari-actionview (= 1.2.1) @@ -285,13 +291,13 @@ GEM activerecord kaminari-core (= 1.2.1) kaminari-core (1.2.1) - launchy (2.4.3) - addressable (~> 2.3) + launchy (2.5.0) + addressable (~> 2.7) leaflet-rails (1.7.0) rails (>= 4.2.0) legato (0.7.0) multi_json - lograge (0.9.0) + lograge (0.11.2) actionpack (>= 4) activesupport (>= 4) railties (>= 4) @@ -302,9 +308,10 @@ GEM nokogiri (>= 1.5.9) mail (2.7.1) mini_mime (>= 0.1.1) - marcel (1.0.1) - method_source (0.8.2) - mimemagic (0.4.3) + marcel (0.3.3) + mimemagic (~> 0.3.2) + method_source (1.0.0) + mimemagic (0.3.10) nokogiri (~> 1) rake mini_magick (4.11.0) @@ -312,19 +319,19 @@ GEM mini_portile2 (2.5.1) minitest (5.14.4) modernizr-rails (2.7.1) - msgpack (1.2.4) + msgpack (1.4.2) multi_json (1.15.0) multi_xml (0.6.0) multipart-post (2.1.1) - net-scp (1.2.1) - net-ssh (>= 2.6.5) - net-ssh (5.1.0) + net-scp (3.0.0) + net-ssh (>= 2.6.5, < 7.0.0) + net-ssh (6.1.0) nio4r (2.5.7) - nokogiri (1.11.4) + nokogiri (1.11.5) mini_portile2 (~> 2.5.0) racc (~> 1.4) normalize-rails (3.0.3) - oauth2 (1.4.4) + oauth2 (1.4.7) faraday (>= 0.8, < 2.0) jwt (>= 1.0, < 3.0) multi_json (~> 1.3) @@ -333,89 +340,90 @@ GEM omniauth (1.8.1) hashie (>= 3.4.6, < 3.6.0) rack (>= 1.6.2, < 3) - omniauth-cas (1.1.1) + omniauth-cas (2.0.0) addressable (~> 2.3) nokogiri (~> 1.5) omniauth (~> 1.2) open_uri_redirections (0.2.1) - openseadragon (0.5.0) + openseadragon (0.6.0) rails (> 3.2.0) orm_adapter (0.5.0) paper_trail (10.3.1) activerecord (>= 4.2) request_store (~> 1.1) - parallel (1.19.1) - parser (2.7.0.2) - ast (~> 2.4.0) + parallel (1.20.1) + parser (3.0.1.1) + ast (~> 2.4.1) pg (0.21.0) - powerpack (0.1.2) - pry (0.10.4) - coderay (~> 1.1.0) - method_source (~> 0.8.1) - slop (~> 3.4) - pry-byebug (3.4.0) - byebug (~> 9.0) - pry (~> 0.10) - pry-rails (0.3.4) - pry (>= 0.9.10) + powerpack (0.1.3) + pry (0.13.1) + coderay (~> 1.1) + method_source (~> 1.0) + pry-byebug (3.9.0) + byebug (~> 11.0) + pry (~> 0.13.0) + pry-rails (0.3.9) + pry (>= 0.10.4) public_suffix (4.0.6) - puma (4.3.8) + puma (5.3.2) nio4r (~> 2.0) racc (1.5.2) rack (2.2.3) - rack-protection (2.0.8.1) + rack-protection (2.1.0) rack rack-proxy (0.6.5) rack rack-test (1.1.0) rack (>= 1.0, < 3) - rails (5.2.6) - actioncable (= 5.2.6) - actionmailer (= 5.2.6) - actionpack (= 5.2.6) - actionview (= 5.2.6) - activejob (= 5.2.6) - activemodel (= 5.2.6) - activerecord (= 5.2.6) - activestorage (= 5.2.6) - activesupport (= 5.2.6) + rails (5.2.4.5) + actioncable (= 5.2.4.5) + actionmailer (= 5.2.4.5) + actionpack (= 5.2.4.5) + actionview (= 5.2.4.5) + activejob (= 5.2.4.5) + activemodel (= 5.2.4.5) + activerecord (= 5.2.4.5) + activestorage (= 5.2.4.5) + activesupport (= 5.2.4.5) bundler (>= 1.3.0) - railties (= 5.2.6) + railties (= 5.2.4.5) sprockets-rails (>= 2.0.0) - rails-controller-testing (1.0.1) - actionpack (~> 5.x) - actionview (~> 5.x) - activesupport (~> 5.x) + rails-controller-testing (1.0.5) + actionpack (>= 5.0.1.rc1) + actionview (>= 5.0.1.rc1) + activesupport (>= 5.0.1.rc1) rails-dom-testing (2.0.3) activesupport (>= 4.2.0) nokogiri (>= 1.6) rails-html-sanitizer (1.3.0) loofah (~> 2.3) - railties (5.2.6) - actionpack (= 5.2.6) - activesupport (= 5.2.6) + railties (5.2.4.5) + actionpack (= 5.2.4.5) + activesupport (= 5.2.4.5) method_source rake (>= 0.8.7) thor (>= 0.19.0, < 2.0) rainbow (3.0.0) rake (12.3.3) + rbtree (0.4.4) redcarpet (3.5.1) redis (3.3.5) - redis-namespace (1.7.0) + redis-namespace (1.8.1) redis (>= 3.0.4) representable (3.0.4) declarative (< 0.1.0) declarative-option (< 0.2.0) uber (< 0.2.0) - request_store (1.4.1) + request_store (1.5.0) rack (>= 1.4) - responders (3.0.0) + responders (3.0.1) actionpack (>= 5.0) railties (>= 5.0) - riiif (2.1.0) + rexml (3.2.5) + riiif (2.3.0) deprecation (>= 1.0.0) - iiif-image-api (~> 0.1.0) - railties (>= 4.2, < 6) + iiif-image-api (>= 0.1.0) + railties (>= 4.2, < 7) roar (1.1.0) representable (~> 3.0.0) roar-rails (1.1.0) @@ -427,23 +435,23 @@ GEM uber (< 0.2.0) rsolr (1.0.13) builder (>= 2.1.2) - rspec-core (3.5.4) - rspec-support (~> 3.5.0) - rspec-expectations (3.5.0) + rspec-core (3.10.1) + rspec-support (~> 3.10.0) + rspec-expectations (3.10.1) diff-lcs (>= 1.2.0, < 2.0) - rspec-support (~> 3.5.0) - rspec-mocks (3.5.0) + rspec-support (~> 3.10.0) + rspec-mocks (3.10.2) diff-lcs (>= 1.2.0, < 2.0) - rspec-support (~> 3.5.0) - rspec-rails (3.5.2) - actionpack (>= 3.0) - activesupport (>= 3.0) - railties (>= 3.0) - rspec-core (~> 3.5.0) - rspec-expectations (~> 3.5.0) - rspec-mocks (~> 3.5.0) - rspec-support (~> 3.5.0) - rspec-support (3.5.0) + rspec-support (~> 3.10.0) + rspec-rails (5.0.1) + actionpack (>= 5.2) + activesupport (>= 5.2) + railties (>= 5.2) + rspec-core (~> 3.10) + rspec-expectations (~> 3.10) + rspec-mocks (~> 3.10) + rspec-support (~> 3.10) + rspec-support (3.10.2) rubocop (0.63.1) jaro_winkler (~> 1.5.1) parallel (~> 1.10) @@ -454,42 +462,43 @@ GEM unicode-display_width (~> 1.4.0) rubocop-rspec (1.31.0) rubocop (>= 0.60.0) - ruby-oembed (0.12.0) - ruby-prof (0.16.2) - ruby-progressbar (1.10.1) - ruby-vips (2.0.17) - ffi (~> 1.9) + ruby-oembed (0.15.0) + ruby-prof (1.4.3) + ruby-progressbar (1.11.0) + ruby-vips (2.1.2) + ffi (~> 1.12) rubyzip (1.3.0) - safe_yaml (1.0.5) sass (3.4.25) - sass-rails (5.0.6) - railties (>= 4.0.0, < 6) + sass-rails (5.1.0) + railties (>= 5.2.0) sass (~> 3.1) sprockets (>= 2.8, < 4.0) sprockets-rails (>= 2.0, < 4.0) tilt (>= 1.1, < 3) - sassc (2.2.0) + sassc (2.4.0) ffi (~> 1.9) sassy-maps (0.4.0) sass (~> 3.3) - selenium-webdriver (3.141.0) - childprocess (~> 0.5) - rubyzip (~> 1.2, >= 1.2.2) + selenium-webdriver (3.142.7) + childprocess (>= 0.5, < 4.0) + rubyzip (>= 1.2.2) + semantic_range (3.0.0) serverengine (2.1.1) sigdump (~> 0.2.2) - sidekiq (4.2.10) - concurrent-ruby (~> 1.0) - connection_pool (~> 2.2, >= 2.2.0) + set (1.0.1) + sidekiq (5.2.9) + connection_pool (~> 2.2, >= 2.2.2) + rack (~> 2.0) rack-protection (>= 1.5.0) - redis (~> 3.2, >= 3.2.1) + redis (>= 3.3.5, < 4.2) sigdump (0.2.4) - signet (0.12.0) + signet (0.15.0) addressable (~> 2.3) - faraday (~> 0.9) + faraday (>= 0.17.3, < 2.0) jwt (>= 1.5, < 3.0) multi_json (~> 1.10) - simplecov (0.14.1) - docile (~> 1.1.0) + simplecov (0.16.1) + docile (~> 1.1) json (>= 1.8, < 3) simplecov-html (~> 0.10.0) simplecov-html (0.10.2) @@ -498,15 +507,17 @@ GEM rails (>= 3, < 7) redcarpet (>= 2.0.1, < 4) twitter-text (~> 1.4) - sitemap_generator (5.2.0) + sitemap_generator (6.1.2) builder (~> 3.0) - slop (3.6.0) sneakers (2.12.0) bunny (~> 2.14) concurrent-ruby (~> 1.0) rake (~> 12.3) serverengine (~> 2.1.0) thor + sorted_set (1.0.3) + rbtree + set (~> 1.0) sprockets (3.7.2) concurrent-ruby (~> 1.0) rack (> 1, < 3) @@ -518,30 +529,32 @@ GEM actionpack (>= 4.0) activesupport (>= 4.0) sprockets (>= 3.0.0) - sqlite3 (1.4.0) - sshkit (1.18.2) + sqlite3 (1.4.2) + sshkit (1.21.2) net-scp (>= 1.1.2) net-ssh (>= 2.8.0) - sshkit-interactive (0.2.0) - sshkit (~> 1.9) + sshkit-interactive (0.3.0) + sshkit (~> 1.12) ssrf_filter (1.0.7) string_rtl (0.1.0) susy (2.2.14) sass (>= 3.3.0, < 3.5) - term-ansicolor (1.6.0) + sync (0.5.0) + term-ansicolor (1.7.1) tins (~> 1.0) test_xml (0.1.8) diffy (~> 3.0) nokogiri (>= 1.3.2) - thor (0.19.4) + thor (0.20.3) thread_safe (0.3.6) - tilt (2.0.5) - tins (1.16.3) + tilt (2.0.10) + tins (1.29.1) + sync tophat (2.3.1) actionpack (>= 3.0.0) - turbolinks (5.0.1) - turbolinks-source (~> 5) - turbolinks-source (5.0.0) + turbolinks (5.2.1) + turbolinks-source (~> 5.2) + turbolinks-source (5.2.0) twitter-text (1.14.7) unf (~> 0.1.0) twitter-typeahead-rails (0.11.1.pre.corejavascript) @@ -551,33 +564,34 @@ GEM tzinfo (1.2.9) thread_safe (~> 0.1) uber (0.1.0) - uglifier (3.0.2) + uglifier (4.2.0) execjs (>= 0.3.0, < 3) underscore-rails (1.8.3) unf (0.1.4) unf_ext unf_ext (0.0.7.7) unicode-display_width (1.4.1) - warden (1.2.8) - rack (>= 2.0.6) + warden (1.2.9) + rack (>= 2.0.9) web-console (2.3.0) activemodel (>= 4.0) binding_of_caller (>= 0.7.2) railties (>= 4.0) sprockets-rails (>= 2.0, < 4.0) - webdrivers (3.8.0) + webdrivers (3.9.4) nokogiri (~> 1.6) rubyzip (~> 1.0) selenium-webdriver (~> 3.0) - webmock (3.8.0) + webmock (3.13.0) addressable (>= 2.3.6) crack (>= 0.3.2) hashdiff (>= 0.4.0, < 2.0.0) - webpacker (4.0.0.rc.7) - activesupport (>= 4.2) + webpacker (6.0.0.pre.2) + activesupport (>= 5.2) rack-proxy (>= 0.6.1) - railties (>= 4.2) - websocket-driver (0.7.3) + railties (>= 5.2) + semantic_range (>= 2.3.0) + websocket-driver (0.7.4) websocket-extensions (>= 0.1.0) websocket-extensions (0.1.5) xpath (3.2.0) @@ -607,6 +621,7 @@ DEPENDENCIES devise-guests (~> 0.3) devise_invitable factory_bot_rails + faraday (< 1) graphql-client honeybadger iiif-presentation @@ -625,8 +640,9 @@ DEPENDENCIES pul-assets! puma rack (>= 2.0.6) - rails (~> 5.2) + rails (= 5.2.4.5) rails-controller-testing + redis (= 3.3.5) redis-namespace riiif rsolr (~> 1.0.6)