From b689905ebf3c495665d1de81954f52a703974343 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Wed, 20 May 2020 03:48:34 +0100 Subject: [PATCH 1/2] fix: Gemfile & Gemfile.lock to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-RUBY-ACTIVESUPPORT-569598 --- Gemfile | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/Gemfile b/Gemfile index a88f281a..4ba1c6cd 100644 --- a/Gemfile +++ b/Gemfile @@ -13,7 +13,7 @@ end group :building do gem 'xcodebuild-rb', git: 'git://github.com/lukeredpath/xcodebuild-rb.git' - gem 'xcodeproj' - gem 'cocoapods', '>=1.2.0' + gem 'xcodeproj', '>= 1.4.2' + gem 'cocoapods', '>= 1.3.0' gem 'ios-sim-test', git: 'git://github.com/alloy/ios-sim-test.git' end From 957ababeb3a9ec5b764765e33d5079fc564b0b93 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Wed, 20 May 2020 03:48:35 +0100 Subject: [PATCH 2/2] fix: Gemfile & Gemfile.lock to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-RUBY-ACTIVESUPPORT-569598 --- Gemfile.lock | 96 ++++++++++++++++++++++++++++++---------------------- 1 file changed, 56 insertions(+), 40 deletions(-) diff --git a/Gemfile.lock b/Gemfile.lock index acab6ddc..d72b01c5 100644 --- a/Gemfile.lock +++ b/Gemfile.lock @@ -16,69 +16,83 @@ GIT GEM remote: https://rubygems.org/ specs: - CFPropertyList (2.3.5) - activesupport (4.2.8) + CFPropertyList (3.0.2) + activesupport (4.2.11.3) i18n (~> 0.7) minitest (~> 5.1) thread_safe (~> 0.3, >= 0.3.4) tzinfo (~> 1.1) - claide (1.0.1) - cocoapods (1.2.0) + algoliasearch (1.7.0) + httpclient (~> 2.4) + json (>= 1.5.1) + atomos (0.1.3) + claide (1.0.3) + cocoapods (1.9.1) activesupport (>= 4.0.2, < 5) - claide (>= 1.0.1, < 2.0) - cocoapods-core (= 1.2.0) - cocoapods-deintegrate (>= 1.0.1, < 2.0) - cocoapods-downloader (>= 1.1.3, < 2.0) + claide (>= 1.0.2, < 2.0) + cocoapods-core (= 1.9.1) + cocoapods-deintegrate (>= 1.0.3, < 2.0) + cocoapods-downloader (>= 1.2.2, < 2.0) cocoapods-plugins (>= 1.0.0, < 2.0) cocoapods-search (>= 1.0.0, < 2.0) cocoapods-stats (>= 1.0.0, < 2.0) - cocoapods-trunk (>= 1.1.2, < 2.0) + cocoapods-trunk (>= 1.4.0, < 2.0) cocoapods-try (>= 1.1.0, < 2.0) - colored (~> 1.2) + colored2 (~> 3.1) escape (~> 0.0.4) - fourflusher (~> 2.0.1) + fourflusher (>= 2.3.0, < 3.0) gh_inspector (~> 1.0) - molinillo (~> 0.5.5) + molinillo (~> 0.6.6) nap (~> 1.0) - ruby-macho (~> 0.2.5) - xcodeproj (>= 1.4.1, < 2.0) - cocoapods-core (1.2.0) - activesupport (>= 4.0.2, < 5) + ruby-macho (~> 1.4) + xcodeproj (>= 1.14.0, < 2.0) + cocoapods-core (1.9.1) + activesupport (>= 4.0.2, < 6) + algoliasearch (~> 1.0) + concurrent-ruby (~> 1.1) fuzzy_match (~> 2.0.4) nap (~> 1.0) - cocoapods-deintegrate (1.0.1) - cocoapods-downloader (1.1.3) + netrc (~> 0.11) + typhoeus (~> 1.0) + cocoapods-deintegrate (1.0.4) + cocoapods-downloader (1.3.0) cocoapods-plugins (1.0.0) nap cocoapods-search (1.0.0) - cocoapods-stats (1.0.0) - cocoapods-trunk (1.1.2) + cocoapods-stats (1.1.0) + cocoapods-trunk (1.5.0) nap (>= 0.8, < 2.0) - netrc (= 0.7.8) - cocoapods-try (1.1.0) + netrc (~> 0.11) + cocoapods-try (1.2.0) colored (1.2) + colored2 (3.1.2) + concurrent-ruby (1.1.6) daemons (1.2.3) domain_name (0.5.20160615) unf (>= 0.0.5, < 1.0.0) escape (0.0.4) + ethon (0.12.0) + ffi (>= 1.3.0) eventmachine (1.2.0.1) - fourflusher (2.0.1) + ffi (1.12.2) + fourflusher (2.3.1) fuzzy_match (2.0.4) - gh_inspector (1.0.3) + gh_inspector (1.1.3) http-cookie (1.0.2) domain_name (~> 0.5) httpclient (2.8.0) - i18n (0.8.1) + i18n (0.9.5) + concurrent-ruby (~> 1.0) json (2.0.3) macaddr (1.7.1) systemu (~> 2.6.2) mime-types (2.99.2) - minitest (5.10.1) - molinillo (0.5.7) + minitest (5.14.1) + molinillo (0.6.6) multi_json (1.12.1) - nanaimo (0.2.3) + nanaimo (0.2.6) nap (1.1.0) - netrc (0.7.8) + netrc (0.11.0) pusher (1.1.0) httpclient (~> 2.7) multi_json (~> 1.0) @@ -92,7 +106,7 @@ GEM http-cookie (>= 1.0.2, < 2.0) mime-types (>= 1.16, < 3.0) netrc (~> 0.7) - ruby-macho (0.2.6) + ruby-macho (1.4.0) sinatra (1.4.7) rack (~> 1.5) rack-protection (~> 1.4) @@ -105,25 +119,27 @@ GEM rack (>= 1, < 3) thread_safe (0.3.6) tilt (2.0.5) - tzinfo (1.2.2) + typhoeus (1.4.0) + ethon (>= 0.9.0) + tzinfo (1.2.7) thread_safe (~> 0.1) unf (0.1.4) unf_ext unf_ext (0.0.7.2) uuid (2.3.8) macaddr (~> 1.0) - xcodeproj (1.4.2) - CFPropertyList (~> 2.3.3) - activesupport (>= 3) - claide (>= 1.0.1, < 2.0) - colored (~> 1.2) - nanaimo (~> 0.2.3) + xcodeproj (1.16.0) + CFPropertyList (>= 2.3.3, < 4.0) + atomos (~> 0.1.3) + claide (>= 1.0.2, < 2.0) + colored2 (~> 3.1) + nanaimo (~> 0.2.6) PLATFORMS ruby DEPENDENCIES - cocoapods (>= 1.2.0) + cocoapods (>= 1.3.0) ios-sim-test! json pusher @@ -133,7 +149,7 @@ DEPENDENCIES thin uuid xcodebuild-rb! - xcodeproj + xcodeproj (>= 1.4.2) BUNDLED WITH - 1.13.6 + 1.17.3