From 3f4c027cc9e563f4b1d2cd1d02fa22eef84e337a Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Thu, 5 Jun 2025 18:54:33 +0000 Subject: [PATCH] fix: aspnetcore/security/authorization/secure-data/samples/starter/wwwroot/lib/bootstrap/Gemfile & aspnetcore/security/authorization/secure-data/samples/starter/wwwroot/lib/bootstrap/Gemfile.lock to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-RUBY-FFI-22037 --- .../starter/wwwroot/lib/bootstrap/Gemfile | 2 +- .../wwwroot/lib/bootstrap/Gemfile.lock | 46 +++++++++++-------- 2 files changed, 29 insertions(+), 19 deletions(-) diff --git a/aspnetcore/security/authorization/secure-data/samples/starter/wwwroot/lib/bootstrap/Gemfile b/aspnetcore/security/authorization/secure-data/samples/starter/wwwroot/lib/bootstrap/Gemfile index feb162291c..e774b429d2 100644 --- a/aspnetcore/security/authorization/secure-data/samples/starter/wwwroot/lib/bootstrap/Gemfile +++ b/aspnetcore/security/authorization/secure-data/samples/starter/wwwroot/lib/bootstrap/Gemfile @@ -1,6 +1,6 @@ source 'https://rubygems.org' group :development, :test do - gem 'jekyll', '~> 3.1.2' + gem 'jekyll', '~> 3.2.0' gem 'jekyll-sitemap', '~> 0.11.0' end diff --git a/aspnetcore/security/authorization/secure-data/samples/starter/wwwroot/lib/bootstrap/Gemfile.lock b/aspnetcore/security/authorization/secure-data/samples/starter/wwwroot/lib/bootstrap/Gemfile.lock index 1b5dc3e902..e0562fcedd 100644 --- a/aspnetcore/security/authorization/secure-data/samples/starter/wwwroot/lib/bootstrap/Gemfile.lock +++ b/aspnetcore/security/authorization/secure-data/samples/starter/wwwroot/lib/bootstrap/Gemfile.lock @@ -2,42 +2,52 @@ GEM remote: https://rubygems.org/ specs: addressable (2.4.0) - colorator (0.1) - ffi (1.9.14-x64-mingw32) - jekyll (3.1.6) - colorator (~> 0.1) + colorator (1.1.0) + ffi (1.17.2) + ffi (1.17.2-x64-mingw32) + forwardable-extended (2.6.0) + jekyll (3.2.1) + colorator (~> 1.0) jekyll-sass-converter (~> 1.0) jekyll-watch (~> 1.1) kramdown (~> 1.3) liquid (~> 3.0) mercenary (~> 0.3.3) + pathutil (~> 0.9) rouge (~> 1.7) safe_yaml (~> 1.0) - jekyll-sass-converter (1.4.0) + jekyll-sass-converter (1.5.2) sass (~> 3.4) jekyll-sitemap (0.11.0) addressable (~> 2.4.0) - jekyll-watch (1.4.0) - listen (~> 3.0, < 3.1) - kramdown (1.11.1) + jekyll-watch (1.5.1) + listen (~> 3.0) + kramdown (1.17.0) liquid (3.0.6) - listen (3.0.8) - rb-fsevent (~> 0.9, >= 0.9.4) - rb-inotify (~> 0.9, >= 0.9.7) + listen (3.9.0) + rb-fsevent (~> 0.10, >= 0.10.3) + rb-inotify (~> 0.9, >= 0.9.10) mercenary (0.3.6) - rb-fsevent (0.9.7) - rb-inotify (0.9.7) - ffi (>= 0.5.0) + pathutil (0.16.2) + forwardable-extended (~> 2.6) + rb-fsevent (0.11.2) + rb-inotify (0.11.1) + ffi (~> 1.0) rouge (1.11.1) - safe_yaml (1.0.4) - sass (3.4.22) + safe_yaml (1.0.5) + sass (3.7.4) + sass-listen (~> 4.0.0) + sass-listen (4.0.0) + rb-fsevent (~> 0.9, >= 0.9.4) + rb-inotify (~> 0.9, >= 0.9.7) PLATFORMS + ruby x64-mingw32 DEPENDENCIES - jekyll (~> 3.1.2) + jekyll (~> 3.2.0) jekyll-sitemap (~> 0.11.0) BUNDLED WITH - 1.12.5 + 1.17.3