Skip to content

[Snyk] Fix for 144 vulnerabilities #40

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
dominicusin wants to merge 1 commit into
base: master
Choose a base branch
from
Open

[Snyk] Fix for 144 vulnerabilities #40

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
152 changes: 76 additions & 76 deletions pkgs/applications/version-management/gitlab/Gemfile
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -8,114 +8,114 @@ def linux_only(require_as)
RUBY_PLATFORM.include?('linux') && require_as
end

gem "rails", "~> 4.1.0"
gem "rails", "~> 7.1.5", ">= 7.1.5.2"

# Make links from text
gem 'rails_autolink', '~> 1.1'
gem 'rails_autolink', '~> 1.1', '>= 1.1.7'

# Default values for AR models
gem "default_value_for", "~> 3.0.0"
gem "default_value_for", "~> 3.6.0"

# Supported DBs
gem "mysql2", group: :mysql
gem "pg", group: :postgres

# Auth
gem "devise", '3.2.4'
gem "devise-async", '0.9.0'
gem 'omniauth', "~> 1.1.3"
gem 'omniauth-google-oauth2'
gem 'omniauth-twitter'
gem 'omniauth-github'
gem 'omniauth-shibboleth'
gem "devise", "4.7.0"
gem "devise-async", "1.0.0"
gem 'omniauth', '~> 2.1.0'
gem 'omniauth-google-oauth2', '>= 0.2.6'
gem 'omniauth-twitter', '>= 1.1.0'
gem 'omniauth-github', '>= 2.0.0'
gem 'omniauth-shibboleth', '>= 1.1.2'

# Extracting information from a git repository
# Provide access to Gitlab::Git library
gem "gitlab_git", '7.0.0.rc10'
gem "gitlab_git", "7.0.0"

# Ruby/Rack Git Smart-HTTP Server Handler
gem 'gitlab-grack', '~> 2.0.0.pre', require: 'grack'
gem 'gitlab-grack', '~> 2.0.0.0', require: 'grack'

# LDAP Auth
gem 'gitlab_omniauth-ldap', '1.1.0', require: "omniauth-ldap"
gem 'gitlab_omniauth-ldap', '2.2.0', require: "omniauth-ldap"

# Git Wiki
gem 'gollum-lib', '~> 3.0.0'
gem 'gollum-lib', '~> 4.2.7'

# Language detection
gem "gitlab-linguist", "~> 3.0.0", require: "linguist"

# API
gem "grape", "~> 0.6.1"
gem "grape-entity", "~> 0.4.2"
gem 'rack-cors', require: 'rack/cors'
gem "grape", "~> 0.7.0"
gem "grape-entity", "~> 0.4.3"
gem 'rack-cors', '>= 0.4.1', require: 'rack/cors'

# Format dates and times
# based on human-friendly examples
gem "stamp"

# Enumeration fields
gem 'enumerize'
gem 'enumerize', '>= 0.8.0'

# Pagination
gem "kaminari", "~> 0.15.1"
gem "kaminari", "~> 0.16.0"

# HAML
gem "haml-rails"
gem "haml-rails", ">= 0.6.0"

# Files attachments
gem "carrierwave"
gem "carrierwave", ">= 0.10.0"

# Drag and Drop UI
gem 'dropzonejs-rails'
gem 'dropzonejs-rails', '>= 0.4.16'

# for aws storage
gem "fog", "~> 1.14"
gem "fog", "~> 1.22", ">= 1.22.0"
gem "unf"

# Authorization
gem "six"

# Seed data
gem "seed-fu"
gem "seed-fu", ">= 2.3.6"

# Markup pipeline for GitLab
gem 'html-pipeline-gitlab', '~> 0.1.0'
gem 'html-pipeline-gitlab', '~> 0.1.6'

# Markdown to HTML
gem "github-markup"

# Required markup gems by github-markdown
gem 'redcarpet', '~> 3.1.2'
gem 'RedCloth'
gem 'rdoc', '~>3.6'
gem 'redcarpet', '~> 3.2.3'
gem 'RedCloth', '>= 4.3.0'
gem 'rdoc', '~> 4.3', '>= 4.3.0'
gem 'org-ruby', '= 0.9.9'
gem 'creole', '~>0.3.6'
gem 'wikicloth', '=0.8.1'
gem 'asciidoctor', '= 0.1.4'
gem 'asciidoctor', '= 1.5.8'

# Diffs
gem 'diffy', '~> 3.0.3'
gem 'diffy', '~> 3.4.1'

# Application server
group :unicorn do
gem "unicorn", '~> 4.6.3'
gem 'unicorn-worker-killer'
gem "unicorn", "~> 4.7.0"
gem 'unicorn-worker-killer', '>= 0.4.3'
end

# State machine
gem "state_machine"

# Issue tags
gem "acts-as-taggable-on"
gem "acts-as-taggable-on", ">= 3.1.0"

# Background jobs
gem 'slim'
gem 'sinatra', require: nil
gem 'sidekiq', '2.17.0'
gem 'sinatra', '>= 4.0.0', require: nil
gem 'sidekiq', '2.17.1'

# HTTP requests
gem "httparty"
gem "httparty", ">= 0.21.0"

# Colored output to console
gem "colored"
Expand All @@ -124,17 +124,17 @@ gem "colored"
gem 'settingslogic'

# Misc
gem "foreman"
gem "foreman", ">= 0.64.0"
gem 'version_sorter'

# Cache
gem "redis-rails"
gem "redis-rails", ">= 5.0.2"

# Campfire integration
gem 'tinder', '~> 1.9.2'
gem 'tinder', '~> 1.9.4'

# HipChat integration
gem "hipchat", "~> 0.14.0"
gem "hipchat", "~> 1.0.0"

# Flowdock integration
gem "gitlab-flowdock-git-hook", "~> 0.4.2"
Expand All @@ -146,16 +146,16 @@ gem "gemnasium-gitlab-service", "~> 0.2"
gem "slack-notifier", "~> 0.3.2"

# d3
gem "d3_rails", "~> 3.1.4"
gem "d3_rails", "~> 3.2.0"

# underscore-rails
gem "underscore-rails", "~> 1.4.4"

# Sanitize user input
gem "sanitize", '~> 2.0'
gem "sanitize", "~> 2.1", ">= 2.1.1"

# Protect against bruteforcing
gem "rack-attack"
gem "rack-attack", ">= 3.0.0"

# Ace editor
gem 'ace-rails-ap'
Expand All @@ -166,57 +166,57 @@ gem 'mousetrap-rails'
# Semantic UI Sass for Sidebar
gem 'semantic-ui-sass', '~> 0.16.1.0'

gem "sass-rails", '~> 4.0.2'
gem "coffee-rails"
gem "uglifier"
gem "sass-rails", "~> 6.0.0"
gem "coffee-rails", ">= 4.2.2"
gem "uglifier", ">= 2.3.3"
gem "therubyracer"
gem 'turbolinks'
gem 'jquery-turbolinks'
gem 'turbolinks', '>= 5.0.0'
gem 'jquery-turbolinks', '>= 2.0.2'

gem 'select2-rails'
gem 'select2-rails', '>= 3.5.11'
gem 'jquery-atwho-rails', "~> 0.3.3"
gem "jquery-rails"
gem "jquery-ui-rails"
gem "jquery-rails", ">= 4.0.1"
gem "jquery-ui-rails", ">= 5.0.0"
gem "jquery-scrollto-rails"
gem "raphael-rails", "~> 2.1.2"
gem 'bootstrap-sass', '~> 3.0'
gem "font-awesome-rails", '~> 4.2'
gem "gitlab_emoji", "~> 0.0.1.1"
gem "gon", '~> 5.0.0'
gem 'bootstrap-sass', '~> 3.4', '>= 3.4.0'
gem "font-awesome-rails", "~> 4.7", ">= 4.7.0.8"
gem "gitlab_emoji", "~> 0.1.0.0"
gem "gon", "~> 5.0.3"
gem 'nprogress-rails'
gem 'request_store'
gem "virtus"

group :development do
gem "annotate", "~> 2.6.0.beta2"
gem "letter_opener"
gem 'quiet_assets', '~> 1.0.1'
gem 'rack-mini-profiler', require: false
gem "annotate", "~> 2.6.1.0"
gem "letter_opener", ">= 1.2.0"
gem 'quiet_assets', '~> 1.0.3'
gem 'rack-mini-profiler', '>= 0.9.1', require: false

# Better errors handler
gem 'better_errors'
gem 'better_errors', '>= 2.3.0'
gem 'binding_of_caller'

gem 'rails_best_practices'
gem 'rails_best_practices', '>= 1.15.1'

# Docs generator
gem "sdoc"
gem "sdoc", ">= 1.0.0"

# thin instead webrick
gem 'thin'
gem 'thin', '>= 1.6.2'
end

group :development, :test do
gem 'coveralls', require: false
gem 'coveralls', '>= 0.7.1', require: false
# gem 'rails-dev-tweaks'
gem 'spinach-rails'
gem "rspec-rails"
gem "capybara", '~> 2.2.1'
gem "rspec-rails", ">= 2.14.1"
gem "capybara", "~> 2.3.0"
gem "pry"
gem "awesome_print"
gem "database_cleaner"
gem "launchy"
gem 'factory_girl_rails'
gem "launchy", ">= 2.4.3"
gem 'factory_girl_rails', '>= 4.4.0'

# Prevent occasions where minitest is not bundled in packaged versions of ruby (see #3826)
gem 'minitest', '~> 5.3.0'
Expand All @@ -225,18 +225,18 @@ group :development, :test do
gem "ffaker"

# Guard
gem 'guard-rspec'
gem 'guard-spinach'
gem 'guard-rspec', '>= 4.2.1'
gem 'guard-spinach', '>= 0.0.3'

# Notification
gem 'rb-fsevent', require: darwin_only('rb-fsevent')
gem 'growl', require: darwin_only('growl')
gem 'rb-inotify', require: linux_only('rb-inotify')
gem 'rb-inotify', '>= 0.9.3', require: linux_only('rb-inotify')

# PhantomJS driver for Capybara
gem 'poltergeist', '~> 1.5.1'
gem 'poltergeist', '~> 1.6.0'

gem 'jasmine', '2.0.2'
gem 'jasmine', '2.0.3'

gem "spring", '1.1.3'
gem "spring-commands-rspec", '1.0.1'
Expand All @@ -245,9 +245,9 @@ end

group :test do
gem "simplecov", require: false
gem "shoulda-matchers", "~> 2.1.0"
gem 'email_spec'
gem "webmock"
gem "shoulda-matchers", "~> 2.2.0"
gem 'email_spec', '>= 1.6.0'
gem "webmock", ">= 1.16.1"
gem 'test_after_commit'
end

Expand Down