Merge pull request #668 from UNC-Libraries/omniauth-update

Update omniauth to fix security issue
UNC-Libraries · Sep 7, 2021 · c819c7c · c819c7c
2 parents 053d93f + bd8ba04
commit c819c7c
Show file tree

Hide file tree

Showing 2 changed files with 4 additions and 3 deletions.
diff --git a/Gemfile b/Gemfile
@@ -60,7 +60,7 @@ gem 'redis', '~> 3.3.0'
 gem 'rsolr', '~> 2.0.2'
 gem 'devise', '~> 4.8.0'
 gem 'devise-guests', '~> 0.7.0'
-gem 'omniauth', '~> 1.9.1'
+gem 'omniauth', '~> 2.0.4'
 gem 'omniauth-shibboleth', '~> 1.3'
 
 gem 'bulkrax', '~> 1.0.0'

diff --git a/Gemfile.lock b/Gemfile.lock
@@ -626,9 +626,10 @@ GEM
       multi_json (~> 1.3)
       multi_xml (~> 0.5)
       rack (>= 1.2, < 3)
-    omniauth (1.9.1)
+    omniauth (2.0.4)
       hashie (>= 3.4.6)
       rack (>= 1.6.2, < 3)
+      rack-protection
     omniauth-shibboleth (1.3.0)
       omniauth (>= 1.0.0)
     openseadragon (0.6.0)
@@ -964,7 +965,7 @@ DEPENDENCIES
   loofah (~> 2.10.0)
   mini_magick (~> 4.9.4)
   nokogiri (~> 1.11.7)
-  omniauth (~> 1.9.1)
+  omniauth (~> 2.0.4)
   omniauth-shibboleth (~> 1.3)
   passenger (= 5.3.7)
   pg (~> 1.2.3)