Merge pull request #1804 from sinatra/fix-dependabot-warnings

Resolve security warnings for dependencies
sinatra · Aug 2, 2022 · bc8d0c8 · bc8d0c8
2 parents 3d3dbb2 + a1722ca
commit bc8d0c8
Show file tree

Hide file tree

Showing 3 changed files with 4 additions and 4 deletions.
diff --git a/Gemfile b/Gemfile
@@ -30,7 +30,7 @@ gem 'activesupport', '~> 6.1'
 
 gem 'asciidoctor'
 gem 'builder'
-gem 'commonmarker', '~> 0.20.0', platforms: [:ruby]
+gem 'commonmarker', '~> 0.23.4', platforms: [:ruby]
 gem 'erubi'
 gem 'eventmachine'
 gem 'falcon', '~> 0.40', platforms: [:ruby]

diff --git a/sinatra-contrib/Gemfile b/sinatra-contrib/Gemfile
@@ -24,8 +24,8 @@ group :development, :test do
 
   platform :ruby do
     gem 'execjs', '2.0.0'
-    gem 'nokogiri', '1.5.10'
-    gem 'redcarpet', '2.3.0'
+    gem 'nokogiri', '1.13.6'
+    gem 'redcarpet', '3.5.1'
     gem 'yajl-ruby'
   end
 

diff --git a/sinatra-contrib/sinatra-contrib.gemspec b/sinatra-contrib/sinatra-contrib.gemspec
@@ -51,7 +51,7 @@ RubyGems 2.0 or newer is required to protect against public gem pushes. You can
   s.add_development_dependency 'markaby'
   s.add_development_dependency 'nokogiri'
   s.add_development_dependency 'rack-test', '~> 2'
-  s.add_development_dependency 'rake', '< 11'
+  s.add_development_dependency 'rake', '>= 12.3.3'
   s.add_development_dependency 'redcarpet'
   s.add_development_dependency 'rspec', '~> 3'
   s.add_development_dependency 'slim'