From 767cc7e1d94255a30083ef0592110b90870a7ec9 Mon Sep 17 00:00:00 2001 From: "snyk-io[bot]" <141718529+snyk-io[bot]@users.noreply.github.com> Date: Tue, 30 Dec 2025 05:38:23 +0000 Subject: [PATCH] fix: ruby-person-poller/Gemfile & ruby-person-poller/Gemfile.lock to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-RUBY-HTTPARTY-14563114 --- ruby-person-poller/Gemfile | 2 +- ruby-person-poller/Gemfile.lock | 14 ++++++++++---- 2 files changed, 11 insertions(+), 5 deletions(-) diff --git a/ruby-person-poller/Gemfile b/ruby-person-poller/Gemfile index 924ccdc..0bb613c 100644 --- a/ruby-person-poller/Gemfile +++ b/ruby-person-poller/Gemfile @@ -5,4 +5,4 @@ git_source(:github) {|repo_name| "https://github.com/#{repo_name}" } gem "activesupport" -gem "httparty" +gem "httparty", ">= 0.24.0" diff --git a/ruby-person-poller/Gemfile.lock b/ruby-person-poller/Gemfile.lock index 171e4c4..a4eee82 100644 --- a/ruby-person-poller/Gemfile.lock +++ b/ruby-person-poller/Gemfile.lock @@ -6,13 +6,19 @@ GEM i18n (~> 0.7) minitest (~> 5.1) tzinfo (~> 1.1) + bigdecimal (3.3.1) concurrent-ruby (1.0.5) - httparty (0.15.6) + csv (3.3.5) + httparty (0.24.0) + csv + mini_mime (>= 1.0.0) multi_xml (>= 0.5.2) i18n (0.9.0) concurrent-ruby (~> 1.0) + mini_mime (1.1.5) minitest (5.10.3) - multi_xml (0.6.0) + multi_xml (0.7.1) + bigdecimal (~> 3.1) thread_safe (0.3.6) tzinfo (1.2.4) thread_safe (~> 0.1) @@ -22,7 +28,7 @@ PLATFORMS DEPENDENCIES activesupport - httparty + httparty (>= 0.24.0) BUNDLED WITH - 1.15.4 + 2.3.27