Skip to content

security: remove or force-upgrade rack? #1150

Closed
@SethTisue

Description

@SethTisue

I submitted #1148 to upgrade rack, but it didn't actually get us to a new enough rack version to make the security warning go away

I tried adding gem 'rack', '>= 2.1.4' to Gemfile and then running bundle update --all but the result was:

Bundler could not find compatible versions for gem "rack":
  In Gemfile:
    rack (>= 2.1.4)

    rack-jekyll was resolved to 0.5.0, which depends on
      rack (~> 1.5)

but 0.5.0 is the latest available version of rack-jekyll, as per https://github.com/adaoraul/rack-jekyll and https://rubygems.org/gems/rack-jekyll/versions/0.5.0

Metadata

Metadata

Assignees

Labels

No labels
No labels

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions