From 7f75233dce76d855fb9fca01912f8e94bc6b90f4 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Fri, 28 Aug 2026 16:05:50 +0000 Subject: [PATCH] Bump the bundler group across 1 directory with 14 updates Bumps the bundler group with 9 updates in the /backend directory: | Package | From | To | | --- | --- | --- | | [puma](https://github.com/puma/puma) | `5.6.8` | `7.2.1` | | [devise](https://github.com/heartcombo/devise) | `4.9.4` | `5.0.4` | | [rack-cors](https://github.com/cyu/rack-cors) | `2.0.1` | `2.0.2` | | [addressable](https://github.com/sporkmonger/addressable) | `2.8.7` | `2.9.0` | | [faraday](https://github.com/lostisland/faraday) | `1.8.0` | `1.10.6` | | [jwt](https://github.com/jwt/ruby-jwt) | `2.3.0` | `2.10.3` | | [net-imap](https://github.com/ruby/net-imap) | `0.5.12` | `0.5.15` | | [websocket-driver](https://github.com/faye/websocket-driver-ruby) | `0.7.6` | `0.8.2` | | [yard](https://github.com/lsegal/yard) | `0.9.36` | `0.9.44` | Updates `puma` from 5.6.8 to 7.2.1 - [Release notes](https://github.com/puma/puma/releases) - [Changelog](https://github.com/puma/puma/blob/main/History.md) - [Commits](https://github.com/puma/puma/compare/v5.6.8...v7.2.1) Updates `devise` from 4.9.4 to 5.0.4 - [Release notes](https://github.com/heartcombo/devise/releases) - [Changelog](https://github.com/heartcombo/devise/blob/main/CHANGELOG.md) - [Commits](https://github.com/heartcombo/devise/compare/v4.9.4...v5.0.4) Updates `rack-cors` from 2.0.1 to 2.0.2 - [Changelog](https://github.com/cyu/rack-cors/blob/master/CHANGELOG.md) - [Commits](https://github.com/cyu/rack-cors/compare/v2.0.1...v2.0.2) Updates `addressable` from 2.8.7 to 2.9.0 - [Changelog](https://github.com/sporkmonger/addressable/blob/main/CHANGELOG.md) - [Commits](https://github.com/sporkmonger/addressable/compare/addressable-2.8.7...addressable-2.9.0) Updates `bcrypt` from 3.1.20 to 3.1.22 - [Release notes](https://github.com/bcrypt-ruby/bcrypt-ruby/releases) - [Changelog](https://github.com/bcrypt-ruby/bcrypt-ruby/blob/master/CHANGELOG) - [Commits](https://github.com/bcrypt-ruby/bcrypt-ruby/compare/v3.1.20...v3.1.22) Updates `concurrent-ruby` from 1.3.5 to 1.3.8 - [Release notes](https://github.com/ruby-concurrency/concurrent-ruby/releases) - [Changelog](https://github.com/ruby-concurrency/concurrent-ruby/blob/master/CHANGELOG.md) - [Commits](https://github.com/ruby-concurrency/concurrent-ruby/compare/v1.3.5...v1.3.8) Updates `erb` from 6.0.0 to 6.0.7 - [Release notes](https://github.com/ruby/erb/releases) - [Changelog](https://github.com/ruby/erb/blob/master/NEWS.md) - [Commits](https://github.com/ruby/erb/compare/v6.0.0...v6.0.7) Updates `faraday` from 1.8.0 to 1.10.6 - [Release notes](https://github.com/lostisland/faraday/releases) - [Changelog](https://github.com/lostisland/faraday/blob/main/CHANGELOG.md) - [Commits](https://github.com/lostisland/faraday/compare/v1.8.0...v1.10.6) Updates `jwt` from 2.3.0 to 2.10.3 - [Release notes](https://github.com/jwt/ruby-jwt/releases) - [Changelog](https://github.com/jwt/ruby-jwt/blob/main/CHANGELOG.md) - [Commits](https://github.com/jwt/ruby-jwt/compare/v2.3.0...v2.10.3) Updates `net-imap` from 0.5.12 to 0.5.15 - [Release notes](https://github.com/ruby/net-imap/releases) - [Commits](https://github.com/ruby/net-imap/compare/v0.5.12...v0.5.15) Updates `nokogiri` from 1.18.10 to 1.19.4 - [Release notes](https://github.com/sparklemotion/nokogiri/releases) - [Changelog](https://github.com/sparklemotion/nokogiri/blob/main/CHANGELOG.md) - [Commits](https://github.com/sparklemotion/nokogiri/compare/v1.18.10...v1.19.4) Updates `rack` from 2.2.21 to 2.2.24 - [Release notes](https://github.com/rack/rack/releases) - [Changelog](https://github.com/rack/rack/blob/main/CHANGELOG.md) - [Commits](https://github.com/rack/rack/compare/v2.2.21...v2.2.24) Updates `websocket-driver` from 0.7.6 to 0.8.2 - [Changelog](https://github.com/faye/websocket-driver-ruby/blob/main/CHANGELOG.md) - [Commits](https://github.com/faye/websocket-driver-ruby/compare/0.7.6...0.8.2) Updates `yard` from 0.9.36 to 0.9.44 - [Release notes](https://github.com/lsegal/yard/releases) - [Changelog](https://github.com/lsegal/yard/blob/main/CHANGELOG.md) - [Commits](https://github.com/lsegal/yard/compare/v0.9.36...v0.9.44) --- updated-dependencies: - dependency-name: addressable dependency-version: 2.9.0 dependency-type: indirect - dependency-name: bcrypt dependency-version: 3.1.22 dependency-type: indirect - dependency-name: concurrent-ruby dependency-version: 1.3.8 dependency-type: indirect - dependency-name: devise dependency-version: 5.0.4 dependency-type: direct:production - dependency-name: erb dependency-version: 6.0.6 dependency-type: indirect - dependency-name: faraday dependency-version: 1.10.6 dependency-type: indirect - dependency-name: jwt dependency-version: 2.10.3 dependency-type: indirect - dependency-name: net-imap dependency-version: 0.5.15 dependency-type: indirect - dependency-name: nokogiri dependency-version: 1.19.4 dependency-type: indirect - dependency-name: puma dependency-version: 7.2.1 dependency-type: direct:production - dependency-name: rack dependency-version: 3.2.6 dependency-type: indirect - dependency-name: rack-cors dependency-version: 2.0.2 dependency-type: direct:production - dependency-name: websocket-driver dependency-version: 0.8.2 dependency-type: indirect - dependency-name: yard dependency-version: 0.9.44 dependency-type: indirect ... Signed-off-by: dependabot[bot] --- backend/Gemfile | 6 +-- backend/Gemfile.lock | 122 ++++++++++++++++++++++++------------------- 2 files changed, 70 insertions(+), 58 deletions(-) diff --git a/backend/Gemfile b/backend/Gemfile index 7d2a28f7a..2d3748737 100644 --- a/backend/Gemfile +++ b/backend/Gemfile @@ -18,12 +18,12 @@ gem "mongoid", "8.1.3" # https://www.mongodb.com/docs/mongoid/current/reference/ gem "pg" # Use Puma as the app server -gem "puma", "5.6.8" +gem "puma", "7.2.1" # Authentication libraries gem "cancancan", "~> 3.6.1" gem "cancancan-mongoid", "~> 2.0" -gem "devise", "~> 4.8" +gem "devise", "~> 5.0" gem "devise_invitable", "~> 2.0" gem "omniauth", "~> 1.8" gem "omniauth-facebook", "~> 3.0" @@ -61,7 +61,7 @@ gem "ruby-progressbar", require: false gem "kaminari-actionview" gem "kaminari-mongoid" -gem "rack-cors", "2.0.1", require: "rack/cors" # freezing to gemfile.lock version because heroku is not respecting lockfile +gem "rack-cors", "2.0.2", require: "rack/cors" # freezing to gemfile.lock version because heroku is not respecting lockfile gem "simplecov", require: false, group: :test group :development, :test do diff --git a/backend/Gemfile.lock b/backend/Gemfile.lock index 3ffebe8ab..61c129bc4 100644 --- a/backend/Gemfile.lock +++ b/backend/Gemfile.lock @@ -81,8 +81,8 @@ GEM mutex_m securerandom (>= 0.3) tzinfo (~> 2.0) - addressable (2.8.7) - public_suffix (>= 2.0.2, < 7.0) + addressable (2.9.0) + public_suffix (>= 2.0.2, < 8.0) andand (1.3.3) annotate (3.2.0) activerecord (>= 3.2, < 8.0) @@ -90,7 +90,7 @@ GEM ast (2.4.2) awesome_print (1.9.2) base64 (0.3.0) - bcrypt (3.1.20) + bcrypt (3.1.22) benchmark (0.5.0) better_errors (2.10.1) erubi (>= 1.0.0) @@ -103,7 +103,7 @@ GEM erubi (~> 1.4) parser (>= 2.4) smart_properties - bigdecimal (3.3.1) + bigdecimal (4.1.2) brakeman (6.1.2) racc bson (4.15.0) @@ -130,19 +130,19 @@ GEM coercible (1.0.0) descendants_tracker (~> 0.0.1) colored (1.2) - concurrent-ruby (1.3.5) - connection_pool (2.5.5) + concurrent-ruby (1.3.8) + connection_pool (3.0.2) countries (4.0.1) i18n_data (~> 0.13.0) sixarm_ruby_unaccent (~> 1.1) crack (1.0.1) bigdecimal rexml - crass (1.0.6) + crass (1.0.7) csv (3.3.0) - cuprite (0.15) + cuprite (0.17) capybara (~> 3.0) - ferrum (~> 0.14.0) + ferrum (~> 0.17.0) database_cleaner (2.1.0) database_cleaner-active_record (>= 2, < 3) database_cleaner-active_record (2.2.2) @@ -152,13 +152,13 @@ GEM database_cleaner-mongoid (2.0.1) database_cleaner-core (~> 2.0.0) mongoid - date (3.5.0) + date (3.5.1) descendants_tracker (0.0.4) thread_safe (~> 0.3, >= 0.3.1) - devise (4.9.4) + devise (5.0.4) bcrypt (~> 3.0) orm_adapter (~> 0.1) - railties (>= 4.1.0) + railties (>= 7.0) responders warden (~> 1.2.3) devise_invitable (2.0.11) @@ -171,7 +171,7 @@ GEM dotenv (= 3.1.0) railties (>= 6.1) drb (2.2.3) - erb (6.0.0) + erb (6.0.7) erb_lint (0.5.0) activesupport better_html (>= 2.0.1) @@ -185,30 +185,35 @@ GEM factory_bot_rails (6.4.3) factory_bot (~> 6.4) railties (>= 5.0.0) - faraday (1.8.0) + faraday (1.10.6) faraday-em_http (~> 1.0) faraday-em_synchrony (~> 1.0) faraday-excon (~> 1.1) - faraday-httpclient (~> 1.0.1) + faraday-httpclient (~> 1.0) + faraday-multipart (~> 1.0) faraday-net_http (~> 1.0) - faraday-net_http_persistent (~> 1.1) + faraday-net_http_persistent (~> 1.0) faraday-patron (~> 1.0) faraday-rack (~> 1.0) - multipart-post (>= 1.2, < 3) + faraday-retry (~> 1.0) ruby2_keywords (>= 0.0.4) faraday-em_http (1.0.0) - faraday-em_synchrony (1.0.0) + faraday-em_synchrony (1.0.1) faraday-excon (1.1.0) faraday-httpclient (1.0.1) - faraday-net_http (1.0.1) + faraday-multipart (1.2.0) + multipart-post (~> 2.0) + faraday-net_http (1.0.2) faraday-net_http_persistent (1.2.0) faraday-patron (1.0.0) faraday-rack (1.0.0) - ferrum (0.14) + faraday-retry (1.0.4) + ferrum (0.17.2) addressable (~> 2.5) + base64 (~> 0.2) concurrent-ruby (~> 1.1) webrick (~> 1.7) - websocket-driver (>= 0.6, < 0.8) + websocket-driver (~> 0.7) ffaker (2.23.0) foreman (0.88.1) geocoder (1.8.3) @@ -223,16 +228,18 @@ GEM hashdiff (1.2.1) hashie (3.5.7) httpclient (2.8.3) - i18n (1.14.7) + i18n (1.15.2) concurrent-ruby (~> 1.0) i18n_data (0.13.0) - io-console (0.8.1) - irb (1.15.3) + io-console (0.9.2) + irb (1.18.0) pp (>= 0.6.0) + prism (>= 1.3.0) rdoc (>= 4.0.0) reline (>= 0.4.2) json (2.7.1) - jwt (2.3.0) + jwt (2.10.3) + base64 kaminari-actionview (1.2.1) actionview kaminari-core (= 1.2.1) @@ -248,7 +255,7 @@ GEM launchy (>= 2.2, < 4) lint_roller (1.1.0) logger (1.7.0) - loofah (2.24.1) + loofah (2.25.2) crass (~> 1.0.2) nokogiri (>= 1.12.0) mail (2.9.0) @@ -262,7 +269,9 @@ GEM method_source (1.1.0) mini_mime (1.1.5) mini_portile2 (2.8.9) - minitest (5.26.2) + minitest (6.0.6) + drb (~> 2.0) + prism (~> 1.5) mongo (2.20.1) bson (>= 4.14.1, < 6.0.0) mongoid (8.1.3) @@ -278,23 +287,23 @@ GEM mongoid-compatibility (>= 0.5.1) multi_json (1.15.0) multi_xml (0.6.0) - multipart-post (2.1.1) + multipart-post (2.4.1) mutex_m (0.3.0) nearest_time_zone (0.0.4) andand kdtree require_all - net-imap (0.5.12) + net-imap (0.5.15) date net-protocol net-pop (0.1.2) net-protocol - net-protocol (0.2.2) + net-protocol (0.3.0) timeout net-smtp (0.5.1) net-protocol - nio4r (2.7.3) - nokogiri (1.18.10) + nio4r (2.7.5) + nokogiri (1.19.4) mini_portile2 (~> 2.8.2) racc (~> 1.4) oauth2 (1.4.7) @@ -317,9 +326,10 @@ GEM ast (~> 2.4.1) racc pg (1.5.6) - pp (0.6.3) + pp (0.6.4) prettyprint prettyprint (0.2.0) + prism (1.9.0) pry (0.14.2) coderay (~> 1.1) method_source (~> 1.0) @@ -331,11 +341,8 @@ GEM yard (~> 0.9.11) pry-rails (0.3.11) pry (>= 0.13.0) - psych (5.2.6) - date - stringio - public_suffix (6.0.2) - puma (5.6.8) + public_suffix (7.0.5) + puma (7.2.1) nio4r (~> 2.0) pusher (2.0.3) httpclient (~> 2.8) @@ -343,8 +350,8 @@ GEM pusher-signature (~> 0.1.8) pusher-signature (0.1.8) racc (1.8.1) - rack (2.2.21) - rack-cors (2.0.1) + rack (2.2.24) + rack-cors (2.0.2) rack (>= 2.0.0) rack-session (1.0.2) rack (< 3) @@ -372,8 +379,8 @@ GEM activesupport (>= 5.0.0) minitest nokogiri (>= 1.6) - rails-html-sanitizer (1.6.2) - loofah (~> 2.21) + rails-html-sanitizer (1.7.1) + loofah (~> 2.25, >= 2.25.2) nokogiri (>= 1.15.7, != 1.16.7, != 1.16.6, != 1.16.5, != 1.16.4, != 1.16.3, != 1.16.2, != 1.16.1, != 1.16.0.rc1, != 1.16.0) rails_12factor (0.0.3) rails_serve_static_assets @@ -390,19 +397,24 @@ GEM zeitwerk (~> 2.6) rainbow (3.1.1) rake (13.2.1) - rdoc (6.16.0) + rbs (4.1.3) + logger + prism (>= 1.6.0) + tsort + rdoc (8.0.0) erb - psych (>= 4.0.0) + prism (>= 1.6.0) + rbs (>= 4.0.0) tsort redis-client (0.26.1) connection_pool regexp_parser (2.9.0) - reline (0.6.3) + reline (0.7.0) io-console (~> 0.5) request_store (1.5.0) rack (>= 1.4) require_all (3.0.0) - responders (3.2.0) + responders (3.2.1) actionpack (>= 7.0) railties (>= 7.0) rexml (3.4.4) @@ -483,12 +495,11 @@ GEM rubocop-performance (~> 1.20.2) standardrb (1.0.1) standard - stringio (3.1.8) symmetric-encryption (4.6.0) coercible (~> 1.0) - thor (1.4.0) + thor (1.5.0) thread_safe (0.3.6) - timeout (0.4.4) + timeout (0.6.1) tomorrowio_rb (0.0.3) tsort (0.2.0) tzinfo (2.0.6) @@ -504,13 +515,14 @@ GEM crack (>= 0.3.2) hashdiff (>= 0.4.0, < 2.0.0) webrick (1.9.2) - websocket-driver (0.7.6) + websocket-driver (0.8.2) + base64 websocket-extensions (>= 0.1.0) websocket-extensions (0.1.5) xpath (3.2.0) nokogiri (~> 1.8) - yard (0.9.36) - zeitwerk (2.7.3) + yard (0.9.44) + zeitwerk (2.8.3) PLATFORMS ruby @@ -532,7 +544,7 @@ DEPENDENCIES cuprite database_cleaner database_cleaner-mongoid - devise (~> 4.8) + devise (~> 5.0) devise_invitable (~> 2.0) dotenv-rails erb_lint @@ -553,9 +565,9 @@ DEPENDENCIES pry-byebug pry-doc pry-rails - puma (= 5.6.8) + puma (= 7.2.1) pusher - rack-cors (= 2.0.1) + rack-cors (= 2.0.2) rack-timeout rails (~> 7.1.0) rails_12factor