Skip to content

Dependency conflict with Sinatra (Mustermann) #69

@SpyMachine

Description

@SpyMachine

I have a bit of an issue.

Trying to resolve https://security.snyk.io/vuln/SNYK-RUBY-SINATRA-3150405, however I cannot update Sinatra because oas_parser is still using mustermann 1.x.

Bundler could not find compatible versions for gem "mustermann":
  In snapshot (Gemfile.lock):
    mustermann (= 1.1.1)

  In Gemfile:
    oas_parser (= 0.25.4) was resolved to 0.25.4, which depends on
      mustermann-contrib (~> 1.1.1) was resolved to 1.1.1, which depends on
        mustermann (= 1.1.1)

    sinatra (~> 2.2.3) was resolved to 2.2.3, which depends on
      mustermann (~> 2.0)

Running `bundle update` will rebuild your snapshot from scratch, using only
the gems in your Gemfile, which may resolve the conflict.

Would it be possible to update oas_parser to use mustermann 2.x?

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions