From 30948e487bf152b2691062368b83769eaf41c15b Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Tue, 17 Sep 2024 18:03:14 +0000 Subject: [PATCH 1/7] Bump rubocop-performance from 1.21.1 to 1.22.1 Bumps [rubocop-performance](https://github.com/rubocop/rubocop-performance) from 1.21.1 to 1.22.1. - [Release notes](https://github.com/rubocop/rubocop-performance/releases) - [Changelog](https://github.com/rubocop/rubocop-performance/blob/master/CHANGELOG.md) - [Commits](https://github.com/rubocop/rubocop-performance/compare/v1.21.1...v1.22.1) --- updated-dependencies: - dependency-name: rubocop-performance dependency-type: direct:development update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] --- Gemfile.lock | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/Gemfile.lock b/Gemfile.lock index 63878397b..45ef6ebb3 100644 --- a/Gemfile.lock +++ b/Gemfile.lock @@ -324,7 +324,7 @@ GEM rubocop-minitest (0.36.0) rubocop (>= 1.61, < 2.0) rubocop-ast (>= 1.31.1, < 2.0) - rubocop-performance (1.21.1) + rubocop-performance (1.22.1) rubocop (>= 1.48.1, < 2.0) rubocop-ast (>= 1.31.1, < 2.0) rubocop-rake (0.6.0) From 7aaa8c27dddf4fa26b67b38091f6986ac7ece843 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Thu, 19 Sep 2024 18:56:43 +0000 Subject: [PATCH 2/7] Bump mongo from 2.20.1 to 2.21.0 Bumps [mongo](https://github.com/mongodb/mongo-ruby-driver) from 2.20.1 to 2.21.0. - [Release notes](https://github.com/mongodb/mongo-ruby-driver/releases) - [Commits](https://github.com/mongodb/mongo-ruby-driver/compare/v2.20.1...v2.21.0) --- updated-dependencies: - dependency-name: mongo dependency-type: direct:development update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] --- Gemfile.lock | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/Gemfile.lock b/Gemfile.lock index 63878397b..a5fd16051 100644 --- a/Gemfile.lock +++ b/Gemfile.lock @@ -219,7 +219,7 @@ GEM mini_mime (1.1.5) mini_portile2 (2.8.7) minitest (5.25.1) - mongo (2.20.1) + mongo (2.21.0) bson (>= 4.14.1, < 6.0.0) multi_json (1.15.0) multi_xml (0.7.1) From 703f2b75a7399f3842cca683aeb8d834e10db6e0 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Fri, 20 Sep 2024 15:00:03 +0000 Subject: [PATCH 3/7] Bump puma from 6.4.2 to 6.4.3 Bumps [puma](https://github.com/puma/puma) from 6.4.2 to 6.4.3. - [Release notes](https://github.com/puma/puma/releases) - [Changelog](https://github.com/puma/puma/blob/master/History.md) - [Commits](https://github.com/puma/puma/compare/v6.4.2...v6.4.3) --- updated-dependencies: - dependency-name: puma dependency-type: indirect ... Signed-off-by: dependabot[bot] --- Gemfile.lock | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/Gemfile.lock b/Gemfile.lock index 63878397b..9346e5913 100644 --- a/Gemfile.lock +++ b/Gemfile.lock @@ -268,7 +268,7 @@ GEM pg (1.5.8) power_assert (2.0.3) public_suffix (6.0.1) - puma (6.4.2) + puma (6.4.3) nio4r (~> 2.0) raabro (1.4.0) racc (1.8.1) From 8953c0936aa4a744b64cebb382f9ae0d3d6d6ffb Mon Sep 17 00:00:00 2001 From: Tatsuya Koishi Date: Tue, 24 Sep 2024 23:05:12 +0900 Subject: [PATCH 4/7] #3761 --- .ruby-version | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.ruby-version b/.ruby-version index a0891f563..fa7adc7ac 100644 --- a/.ruby-version +++ b/.ruby-version @@ -1 +1 @@ -3.3.4 +3.3.5 From d98da2c5baebe6d71df064d6a211ff291cafb02e Mon Sep 17 00:00:00 2001 From: Tatsuya Koishi Date: Tue, 24 Sep 2024 23:05:38 +0900 Subject: [PATCH 5/7] #3761 --- .github/workflows/test.yml | 2 +- Gemfile.lock | 19 ++++++++++--------- 2 files changed, 11 insertions(+), 10 deletions(-) diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml index 3a3f971f5..68a1d343c 100644 --- a/.github/workflows/test.yml +++ b/.github/workflows/test.yml @@ -24,7 +24,7 @@ jobs: - uses: actions/checkout@v3 - uses: ruby/setup-ruby@v1 with: - ruby-version: 3.3.4 + ruby-version: 3.3.5 - name: apt install run: | sudo apt update diff --git a/Gemfile.lock b/Gemfile.lock index 63878397b..94d6d89a4 100644 --- a/Gemfile.lock +++ b/Gemfile.lock @@ -172,8 +172,9 @@ GEM etc (1.4.3) eventmachine (1.2.7) facets (3.1.0) - faraday (2.11.0) + faraday (2.12.0) faraday-net_http (>= 2.0, < 3.4) + json logger faraday-net_http (3.3.0) net-http @@ -194,12 +195,12 @@ GEM csv mini_mime (>= 1.0.0) multi_xml (>= 0.5.2) - i18n (1.14.5) + i18n (1.14.6) concurrent-ruby (~> 1.0) json (2.7.2) json-schema (5.0.0) addressable (~> 2.8) - jwt (2.9.0) + jwt (2.9.1) base64 language_server-protocol (3.17.0.3) logger (1.6.1) @@ -219,7 +220,7 @@ GEM mini_mime (1.1.5) mini_portile2 (2.8.7) minitest (5.25.1) - mongo (2.20.1) + mongo (2.21.0) bson (>= 4.14.1, < 6.0.0) multi_json (1.15.0) multi_xml (0.7.1) @@ -268,7 +269,7 @@ GEM pg (1.5.8) power_assert (2.0.3) public_suffix (6.0.1) - puma (6.4.2) + puma (6.4.3) nio4r (~> 2.0) raabro (1.4.0) racc (1.8.1) @@ -324,7 +325,7 @@ GEM rubocop-minitest (0.36.0) rubocop (>= 1.61, < 2.0) rubocop-ast (>= 1.31.1, < 2.0) - rubocop-performance (1.21.1) + rubocop-performance (1.22.1) rubocop (>= 1.48.1, < 2.0) rubocop-ast (>= 1.31.1, < 2.0) rubocop-rake (0.6.0) @@ -385,7 +386,7 @@ GEM uri (0.13.1) useragent (0.16.10) version_gem (1.1.4) - webrick (1.8.1) + webrick (1.8.2) websocket-driver (0.7.6) websocket-extensions (>= 0.1.0) websocket-extensions (0.1.5) @@ -432,7 +433,7 @@ DEPENDENCIES yamllint RUBY VERSION - ruby 3.3.4p94 + ruby 3.3.5p100 BUNDLED WITH - 2.5.18 + 2.5.19 From 31253511186a14612243c22ea8288319c06fe7a8 Mon Sep 17 00:00:00 2001 From: Tatsuya Koishi Date: Wed, 25 Sep 2024 02:26:11 +0900 Subject: [PATCH 6/7] CVE-2024-47220 CVE-2024-45614 --- Gemfile.lock | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/Gemfile.lock b/Gemfile.lock index 94d6d89a4..9f0b916ca 100644 --- a/Gemfile.lock +++ b/Gemfile.lock @@ -65,18 +65,18 @@ GIT GIT remote: https://github.com/pooza/ginseng-web.git - revision: e528adc0c49c603afc395f965f273629ffb32a4e + revision: 3800d9620ab3b35e44751de7cf820c9e28a9bd5d specs: - ginseng-web (1.3.32) + ginseng-web (1.3.33) erb - puma (>= 6.4.2) + puma (>= 6.4.3) rack (>= 3.1.5) rss sassc sinatra slim tilt (~> 2.1.0) - webrick + webrick (>= 1.8.2) GIT remote: https://github.com/pooza/ginseng-youtube.git From 53a0408a7aeaf317cd62ba9ffe235093086660f6 Mon Sep 17 00:00:00 2001 From: Tatsuya Koishi Date: Wed, 25 Sep 2024 02:41:44 +0900 Subject: [PATCH 7/7] bundle update --- Gemfile.lock | 1 + 1 file changed, 1 insertion(+) diff --git a/Gemfile.lock b/Gemfile.lock index 9f0b916ca..75649742b 100644 --- a/Gemfile.lock +++ b/Gemfile.lock @@ -399,6 +399,7 @@ GEM PLATFORMS aarch64-linux x86_64-freebsd-13 + x86_64-freebsd-14 x86_64-linux DEPENDENCIES