Merge pull request #4627 from tomhughes/security-policy

[rails.git] / Gemfile.lock

diff --git a/Gemfile.lock b/Gemfile.lock
index 62a312dca9addedf8700e42c8e818d72528f4723..bf78a3d3d181d2130ec4ee1436b83ad83af866ff 100644 (file)
--- a/Gemfile.lock
+++ b/Gemfile.lock
@@ -3,35 +3,35 @@ GEM
   specs:
     aasm (5.5.0)
       concurrent-ruby (~> 1.0)
   specs:
     aasm (5.5.0)
       concurrent-ruby (~> 1.0)

-    actioncable (7.1.3.2)
-      actionpack (= 7.1.3.2)
-      activesupport (= 7.1.3.2)
+    actioncable (7.1.3.3)
+      actionpack (= 7.1.3.3)
+      activesupport (= 7.1.3.3)

       nio4r (~> 2.0)
       websocket-driver (>= 0.6.1)
       zeitwerk (~> 2.6)
       nio4r (~> 2.0)
       websocket-driver (>= 0.6.1)
       zeitwerk (~> 2.6)

-    actionmailbox (7.1.3.2)
-      actionpack (= 7.1.3.2)
-      activejob (= 7.1.3.2)
-      activerecord (= 7.1.3.2)
-      activestorage (= 7.1.3.2)
-      activesupport (= 7.1.3.2)
+    actionmailbox (7.1.3.3)
+      actionpack (= 7.1.3.3)
+      activejob (= 7.1.3.3)
+      activerecord (= 7.1.3.3)
+      activestorage (= 7.1.3.3)
+      activesupport (= 7.1.3.3)

       mail (>= 2.7.1)
       net-imap
       net-pop
       net-smtp
       mail (>= 2.7.1)
       net-imap
       net-pop
       net-smtp

-    actionmailer (7.1.3.2)
-      actionpack (= 7.1.3.2)
-      actionview (= 7.1.3.2)
-      activejob (= 7.1.3.2)
-      activesupport (= 7.1.3.2)
+    actionmailer (7.1.3.3)
+      actionpack (= 7.1.3.3)
+      actionview (= 7.1.3.3)
+      activejob (= 7.1.3.3)
+      activesupport (= 7.1.3.3)

       mail (~> 2.5, >= 2.5.4)
       net-imap
       net-pop
       net-smtp
       rails-dom-testing (~> 2.2)
       mail (~> 2.5, >= 2.5.4)
       net-imap
       net-pop
       net-smtp
       rails-dom-testing (~> 2.2)

-    actionpack (7.1.3.2)
-      actionview (= 7.1.3.2)
-      activesupport (= 7.1.3.2)
+    actionpack (7.1.3.3)
+      actionview (= 7.1.3.3)
+      activesupport (= 7.1.3.3)

       nokogiri (>= 1.8.5)
       racc
       rack (>= 2.2.4)
       nokogiri (>= 1.8.5)
       racc
       rack (>= 2.2.4)


@@ -41,39 +41,39 @@ GEM
       rails-html-sanitizer (~> 1.6)
     actionpack-page_caching (1.2.4)
       actionpack (>= 4.0.0)
       rails-html-sanitizer (~> 1.6)
     actionpack-page_caching (1.2.4)
       actionpack (>= 4.0.0)

-    actiontext (7.1.3.2)
-      actionpack (= 7.1.3.2)
-      activerecord (= 7.1.3.2)
-      activestorage (= 7.1.3.2)
-      activesupport (= 7.1.3.2)
+    actiontext (7.1.3.3)
+      actionpack (= 7.1.3.3)
+      activerecord (= 7.1.3.3)
+      activestorage (= 7.1.3.3)
+      activesupport (= 7.1.3.3)

       globalid (>= 0.6.0)
       nokogiri (>= 1.8.5)
       globalid (>= 0.6.0)
       nokogiri (>= 1.8.5)

-    actionview (7.1.3.2)
-      activesupport (= 7.1.3.2)
+    actionview (7.1.3.3)
+      activesupport (= 7.1.3.3)

       builder (~> 3.1)
       erubi (~> 1.11)
       rails-dom-testing (~> 2.2)
       rails-html-sanitizer (~> 1.6)
     active_record_union (1.3.0)
       activerecord (>= 4.0)
       builder (~> 3.1)
       erubi (~> 1.11)
       rails-dom-testing (~> 2.2)
       rails-html-sanitizer (~> 1.6)
     active_record_union (1.3.0)
       activerecord (>= 4.0)

-    activejob (7.1.3.2)
-      activesupport (= 7.1.3.2)
+    activejob (7.1.3.3)
+      activesupport (= 7.1.3.3)

       globalid (>= 0.3.6)
       globalid (>= 0.3.6)

-    activemodel (7.1.3.2)
-      activesupport (= 7.1.3.2)
-    activerecord (7.1.3.2)
-      activemodel (= 7.1.3.2)
-      activesupport (= 7.1.3.2)
+    activemodel (7.1.3.3)
+      activesupport (= 7.1.3.3)
+    activerecord (7.1.3.3)
+      activemodel (= 7.1.3.3)
+      activesupport (= 7.1.3.3)

       timeout (>= 0.4.0)
       timeout (>= 0.4.0)

-    activerecord-import (1.6.0)
+    activerecord-import (1.7.0)

       activerecord (>= 4.2)
       activerecord (>= 4.2)

-    activestorage (7.1.3.2)
-      actionpack (= 7.1.3.2)
-      activejob (= 7.1.3.2)
-      activerecord (= 7.1.3.2)
-      activesupport (= 7.1.3.2)
+    activestorage (7.1.3.3)
+      actionpack (= 7.1.3.3)
+      activejob (= 7.1.3.3)
+      activerecord (= 7.1.3.3)
+      activesupport (= 7.1.3.3)

       marcel (~> 1.0)
       marcel (~> 1.0)

-    activesupport (7.1.3.2)
+    activesupport (7.1.3.3)

       base64
       bigdecimal
       concurrent-ruby (~> 1.0, >= 1.0.2)
       base64
       bigdecimal
       concurrent-ruby (~> 1.0, >= 1.0.2)


@@ -95,16 +95,16 @@ GEM
     autoprefixer-rails (10.4.16.0)
       execjs (~> 2)
     aws-eventstream (1.3.0)
     autoprefixer-rails (10.4.16.0)
       execjs (~> 2)
     aws-eventstream (1.3.0)

-    aws-partitions (1.925.0)
-    aws-sdk-core (3.194.1)
+    aws-partitions (1.931.0)
+    aws-sdk-core (3.196.1)

       aws-eventstream (~> 1, >= 1.3.0)
       aws-partitions (~> 1, >= 1.651.0)
       aws-sigv4 (~> 1.8)
       jmespath (~> 1, >= 1.6.1)
       aws-eventstream (~> 1, >= 1.3.0)
       aws-partitions (~> 1, >= 1.651.0)
       aws-sigv4 (~> 1.8)
       jmespath (~> 1, >= 1.6.1)

-    aws-sdk-kms (1.80.0)
+    aws-sdk-kms (1.81.0)

       aws-sdk-core (~> 3, >= 3.193.0)
       aws-sigv4 (~> 1.1)
       aws-sdk-core (~> 3, >= 3.193.0)
       aws-sigv4 (~> 1.1)

-    aws-sdk-s3 (1.149.1)
+    aws-sdk-s3 (1.151.0)

       aws-sdk-core (~> 3, >= 3.194.0)
       aws-sdk-kms (~> 1)
       aws-sigv4 (~> 1.8)
       aws-sdk-core (~> 3, >= 3.194.0)
       aws-sdk-kms (~> 1)
       aws-sigv4 (~> 1.8)


@@ -262,10 +262,9 @@ GEM
       concurrent-ruby (~> 1.0)
     i18n-js (3.9.2)
       i18n (>= 0.6.6)
       concurrent-ruby (~> 1.0)
     i18n-js (3.9.2)
       i18n (>= 0.6.6)

-    i18n-tasks (1.0.13)
+    i18n-tasks (1.0.14)

       activesupport (>= 4.0.2)
       ast (>= 2.1.0)
       activesupport (>= 4.0.2)
       ast (>= 2.1.0)

-      better_html (>= 1.0, < 3.0)

       erubi
       highline (>= 2.0.0)
       i18n
       erubi
       highline (>= 2.0.0)
       i18n


@@ -331,7 +330,7 @@ GEM
     mini_portile2 (2.8.6)
     mini_racer (0.9.0)
       libv8-node (~> 18.19.0.0)
     mini_portile2 (2.8.6)
     mini_racer (0.9.0)
       libv8-node (~> 18.19.0.0)

-    minitest (5.22.3)
+    minitest (5.23.0)

     minitest-focus (1.4.0)
       minitest (>= 4, < 6)
     msgpack (1.7.2)
     minitest-focus (1.4.0)
       minitest (>= 4, < 6)
     msgpack (1.7.2)


@@ -340,7 +339,7 @@ GEM
     mutex_m (0.2.0)
     net-http (0.4.1)
       uri
     mutex_m (0.2.0)
     net-http (0.4.1)
       uri

-    net-imap (0.4.10)
+    net-imap (0.4.11)

       date
       net-protocol
     net-pop (0.1.2)
       date
       net-protocol
     net-pop (0.1.2)


@@ -349,8 +348,8 @@ GEM
       timeout
     net-smtp (0.5.0)
       net-protocol
       timeout
     net-smtp (0.5.0)
       net-protocol

-    nio4r (2.7.2)
-    nokogiri (1.16.4)
+    nio4r (2.7.3)
+    nokogiri (1.16.5)

       mini_portile2 (~> 2.8.2)
       racc (~> 1.4)
     oauth (0.4.7)
       mini_portile2 (~> 2.8.2)
       racc (~> 1.4)
     oauth (0.4.7)


@@ -396,7 +395,7 @@ GEM
     omniauth-openid (2.0.1)
       omniauth (>= 1.0, < 3.0)
       rack-openid (~> 1.4.0)
     omniauth-openid (2.0.1)
       omniauth (>= 1.0, < 3.0)
       rack-openid (~> 1.4.0)

-    omniauth-rails_csrf_protection (1.0.1)
+    omniauth-rails_csrf_protection (1.0.2)

       actionpack (>= 4.2)
       omniauth (~> 2.0)
     openstreetmap-deadlock_retry (1.3.1)
       actionpack (>= 4.2)
       omniauth (~> 2.0)
     openstreetmap-deadlock_retry (1.3.1)


@@ -413,7 +412,7 @@ GEM
     puma (5.6.8)
       nio4r (~> 2.0)
     quad_tile (1.0.1)
     puma (5.6.8)
       nio4r (~> 2.0)
     quad_tile (1.0.1)

-    racc (1.7.3)
+    racc (1.8.0)

     rack (2.2.9)
     rack-cors (2.0.2)
       rack (>= 2.0.0)
     rack (2.2.9)
     rack-cors (2.0.2)
       rack (>= 2.0.0)


@@ -431,20 +430,20 @@ GEM
     rackup (1.0.0)
       rack (< 3)
       webrick
     rackup (1.0.0)
       rack (< 3)
       webrick

-    rails (7.1.3.2)
-      actioncable (= 7.1.3.2)
-      actionmailbox (= 7.1.3.2)
-      actionmailer (= 7.1.3.2)
-      actionpack (= 7.1.3.2)
-      actiontext (= 7.1.3.2)
-      actionview (= 7.1.3.2)
-      activejob (= 7.1.3.2)
-      activemodel (= 7.1.3.2)
-      activerecord (= 7.1.3.2)
-      activestorage (= 7.1.3.2)
-      activesupport (= 7.1.3.2)
+    rails (7.1.3.3)
+      actioncable (= 7.1.3.3)
+      actionmailbox (= 7.1.3.3)
+      actionmailer (= 7.1.3.3)
+      actionpack (= 7.1.3.3)
+      actiontext (= 7.1.3.3)
+      actionview (= 7.1.3.3)
+      activejob (= 7.1.3.3)
+      activemodel (= 7.1.3.3)
+      activerecord (= 7.1.3.3)
+      activestorage (= 7.1.3.3)
+      activesupport (= 7.1.3.3)

       bundler (>= 1.15.0)
       bundler (>= 1.15.0)

-      railties (= 7.1.3.2)
+      railties (= 7.1.3.3)

     rails-controller-testing (1.0.5)
       actionpack (>= 5.0.1.rc1)
       actionview (>= 5.0.1.rc1)
     rails-controller-testing (1.0.5)
       actionpack (>= 5.0.1.rc1)
       actionview (>= 5.0.1.rc1)


@@ -459,9 +458,12 @@ GEM
     rails-i18n (7.0.9)
       i18n (>= 0.7, < 2)
       railties (>= 6.0.0, < 8)
     rails-i18n (7.0.9)
       i18n (>= 0.7, < 2)
       railties (>= 6.0.0, < 8)

-    railties (7.1.3.2)
-      actionpack (= 7.1.3.2)
-      activesupport (= 7.1.3.2)
+    rails_param (1.3.1)
+      actionpack (>= 3.2.0)
+      activesupport (>= 3.2.0)
+    railties (7.1.3.3)
+      actionpack (= 7.1.3.3)
+      activesupport (= 7.1.3.3)

       irb
       rackup (>= 1.0.0)
       rake (>= 12.2)
       irb
       rackup (>= 1.0.0)
       rake (>= 12.2)


@@ -470,22 +472,23 @@ GEM
     rainbow (3.1.1)
     rake (13.2.1)
     rb-fsevent (0.11.2)
     rainbow (3.1.1)
     rake (13.2.1)
     rb-fsevent (0.11.2)

-    rb-inotify (0.10.1)
+    rb-inotify (0.11.1)

       ffi (~> 1.0)
     rdoc (6.6.3.1)
       psych (>= 4.0.0)
       ffi (~> 1.0)
     rdoc (6.6.3.1)
       psych (>= 4.0.0)

-    regexp_parser (2.9.0)
-    reline (0.5.5)
+    regexp_parser (2.9.2)
+    reline (0.5.7)

       io-console (~> 0.5)
     request_store (1.7.0)
       rack (>= 1.4)
       io-console (~> 0.5)
     request_store (1.7.0)
       rack (>= 1.4)

-    rexml (3.2.6)
+    rexml (3.2.8)
+      strscan (>= 3.0.9)

     rinku (2.0.6)
     rotp (6.3.0)
     rouge (4.2.1)
     rtlcss (0.2.1)
       mini_racer (>= 0.6.3)
     rinku (2.0.6)
     rotp (6.3.0)
     rouge (4.2.1)
     rtlcss (0.2.1)
       mini_racer (>= 0.6.3)

-    rubocop (1.63.4)
+    rubocop (1.63.5)

       json (~> 2.3)
       language_server-protocol (>= 3.17.0)
       parallel (~> 1.10)
       json (~> 2.3)
       language_server-protocol (>= 3.17.0)
       parallel (~> 1.10)


@@ -508,7 +511,7 @@ GEM
     rubocop-performance (1.21.0)
       rubocop (>= 1.48.1, < 2.0)
       rubocop-ast (>= 1.31.1, < 2.0)
     rubocop-performance (1.21.0)
       rubocop (>= 1.48.1, < 2.0)
       rubocop-ast (>= 1.31.1, < 2.0)

-    rubocop-rails (2.24.1)
+    rubocop-rails (2.25.0)

       activesupport (>= 4.2.0)
       rack (>= 1.1)
       rubocop (>= 1.33.0, < 2.0)
       activesupport (>= 4.2.0)
       rack (>= 1.1)
       rubocop (>= 1.33.0, < 2.0)


@@ -526,8 +529,7 @@ GEM
     sass-embedded (1.64.2)
       google-protobuf (~> 3.23)
       rake (>= 13.0.0)
     sass-embedded (1.64.2)
       google-protobuf (~> 3.23)
       rake (>= 13.0.0)

-    secure_headers (6.5.0)
-    selenium-webdriver (4.20.1)
+    selenium-webdriver (4.21.1)

       base64 (~> 0.2)
       rexml (~> 3.2, >= 3.2.5)
       rubyzip (>= 1.2.2, < 3.0)
       base64 (~> 0.2)
       rexml (~> 3.2, >= 3.2.5)
       rubyzip (>= 1.2.2, < 3.0)


@@ -558,6 +560,7 @@ GEM
     stringio (3.1.0)
     strong_migrations (1.8.0)
       activerecord (>= 5.2)
     stringio (3.1.0)
     strong_migrations (1.8.0)
       activerecord (>= 5.2)

+    strscan (3.1.0)

     terminal-table (3.0.2)
       unicode-display_width (>= 1.1.1, < 3)
     terser (1.2.2)
     terminal-table (3.0.2)
       unicode-display_width (>= 1.1.1, < 3)
     terser (1.2.2)


@@ -592,7 +595,7 @@ GEM
     websocket-extensions (0.1.5)
     xpath (3.2.0)
       nokogiri (~> 1.8)
     websocket-extensions (0.1.5)
     xpath (3.2.0)
       nokogiri (~> 1.8)

-    zeitwerk (2.6.13)
+    zeitwerk (2.6.14)

 
 PLATFORMS
   ruby
 
 PLATFORMS
   ruby


@@ -654,6 +657,7 @@ DEPENDENCIES
   mini_racer (~> 0.9.0)
   minitest (~> 5.1)
   minitest-focus
   mini_racer (~> 0.9.0)
   minitest (~> 5.1)
   minitest-focus

+  multi_xml (~> 0.6.0)

   oauth-plugin (>= 0.5.1)
   omniauth (~> 2.0.2)
   omniauth-facebook
   oauth-plugin (>= 0.5.1)
   omniauth (~> 2.0.2)
   omniauth-facebook


@@ -672,6 +676,7 @@ DEPENDENCIES
   rails (~> 7.1.0)
   rails-controller-testing
   rails-i18n (~> 7.0.0)
   rails (~> 7.1.0)
   rails-controller-testing
   rails-i18n (~> 7.0.0)

+  rails_param

   rinku (>= 2.0.6)
   rotp
   rtlcss
   rinku (>= 2.0.6)
   rotp
   rtlcss


@@ -684,7 +689,6 @@ DEPENDENCIES
   rubocop-rake
   sanitize
   sass-embedded (~> 1.64.0)
   rubocop-rake
   sanitize
   sass-embedded (~> 1.64.0)

-  secure_headers

   selenium-webdriver
   simplecov
   simplecov-lcov
   selenium-webdriver
   simplecov
   simplecov-lcov