upgrade Devise to 4.7.1 for security issues

rubytaiwan · Feb 26, 2020 · 354aac1 · 354aac1
1 parent 13666d6
commit 354aac1
Show file tree

Hide file tree

Showing 2 changed files with 4 additions and 4 deletions.
diff --git a/Gemfile b/Gemfile
@@ -11,7 +11,7 @@ gem "bootstrap-sass"
 
 gem "uglifier"
 
-gem "devise", "~> 4.7"
+gem "devise", ">= 4.7.1"
 gem "babosa"
 gem "rails_autolink"
 gem "settingslogic"

diff --git a/Gemfile.lock b/Gemfile.lock
@@ -45,7 +45,7 @@ GEM
     autoprefixer-rails (9.7.4)
       execjs
     babosa (1.0.2)
-    bcrypt (3.1.10)
+    bcrypt (3.1.13)
     bootstrap-sass (3.4.1)
       autoprefixer-rails (>= 5.2.1)
       sassc (>= 2.0.0)
@@ -77,7 +77,7 @@ GEM
     coffee-script-source (1.9.1.1)
     concurrent-ruby (1.1.6)
     crass (1.0.6)
-    devise (3.5.2)
+    devise (4.7.1)
       bcrypt (~> 3.0)
       orm_adapter (~> 0.1)
       railties (>= 4.1.0)
@@ -250,7 +250,7 @@ DEPENDENCIES
   capistrano-rails (~> 1.1)
   capybara
   coffee-rails
-  devise (~> 4.7)
+  devise (>= 4.7.1)
   eventmachine (= 1.0.4)
   exception_notification
   factory_girl_rails