From d8472c08b8e6825a628d67bc04b6ab9e24ed144a Mon Sep 17 00:00:00 2001 From: "snyk-io[bot]" <141718529+snyk-io[bot]@users.noreply.github.com> Date: Tue, 30 Dec 2025 07:15:29 +0000 Subject: [PATCH] fix: Gemfile & Gemfile.lock to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-RUBY-HTTPARTY-14563114 --- Gemfile | 2 +- Gemfile.lock | 14 ++++++++++---- 2 files changed, 11 insertions(+), 5 deletions(-) diff --git a/Gemfile b/Gemfile index caab225..24e0287 100644 --- a/Gemfile +++ b/Gemfile @@ -4,4 +4,4 @@ gem "sinatra", require: false gem "omniauth" gem "omniauth-salesloft" -gem "httparty" +gem "httparty", ">= 0.24.0" diff --git a/Gemfile.lock b/Gemfile.lock index 1fe2300..ce772d6 100644 --- a/Gemfile.lock +++ b/Gemfile.lock @@ -1,14 +1,20 @@ GEM remote: https://rubygems.org/ specs: + bigdecimal (3.3.1) + csv (3.3.5) faraday (0.11.0) multipart-post (>= 1.2, < 3) hashie (3.5.3) - httparty (0.14.0) + httparty (0.24.0) + csv + mini_mime (>= 1.0.0) multi_xml (>= 0.5.2) jwt (1.5.6) + mini_mime (1.1.5) multi_json (1.12.1) - multi_xml (0.6.0) + multi_xml (0.7.1) + bigdecimal (~> 3.1) multipart-post (2.0.0) oauth2 (1.3.1) faraday (>= 0.8, < 0.12) @@ -38,10 +44,10 @@ PLATFORMS ruby DEPENDENCIES - httparty + httparty (>= 0.24.0) omniauth omniauth-salesloft sinatra BUNDLED WITH - 1.11.2 + 2.3.27