From 4dd488ad09dfdd07f97e20e7f0af08deecf5b84e Mon Sep 17 00:00:00 2001
From: snyk-bot <snyk-bot@snyk.io>
Date: Thu, 4 Apr 2024 21:09:13 +0000
Subject: [PATCH] fix: Gemfile to reduce vulnerabilities

The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-RUBY-ACTIONPACK-6274386
- https://snyk.io/vuln/SNYK-RUBY-ACTIONPACK-6274388
- https://snyk.io/vuln/SNYK-RUBY-NOKOGIRI-6228056
- https://snyk.io/vuln/SNYK-RUBY-RACK-6274383
- https://snyk.io/vuln/SNYK-RUBY-RACK-6274384
- https://snyk.io/vuln/SNYK-RUBY-RACK-6274385
---
 Gemfile | 30 +++++++++++++++---------------
 1 file changed, 15 insertions(+), 15 deletions(-)

diff --git a/Gemfile b/Gemfile
index 205118b..18b7f77 100644
--- a/Gemfile
+++ b/Gemfile
@@ -7,7 +7,7 @@ end
 
 ruby '2.5.5'
 
-gem 'rails', '5.2.1'
+gem 'rails', '7.0.8.1'
 
 # Use MySQL & PG as the database for Active Record
 # gem 'mysql2'
@@ -15,14 +15,14 @@ gem 'pg'
 # Use Puma as the app server
 gem 'puma'
 # Use SCSS for stylesheets
-gem 'sass-rails'
+gem 'sass-rails', '>= 5.0.8'
 # Use Uglifier as compressor for JavaScript assets
 gem 'uglifier'
 # See https://github.com/rails/execjs#readme for more supported runtimes
 gem 'mini_racer'
 
 # Use CoffeeScript for .coffee assets and views
-gem 'coffee-rails'
+gem 'coffee-rails', '>= 5.0.0'
 # Turbolinks makes navigating your web application faster. Read more: https://github.com/turbolinks/turbolinks
 gem 'turbolinks'
 # Build JSON APIs with ease. Read more: https://github.com/rails/jbuilder
@@ -35,20 +35,20 @@ gem 'jbuilder', '2.7.0'
 # Use Capistrano for deployment
 # gem 'capistrano-rails', group: :development
 
-gem 'haml-rails'
+gem 'haml-rails', '>= 2.0.0'
 
-gem 'foundation-rails'
+gem 'foundation-rails', '>= 6.6.1.0'
 gem 'autoprefixer-rails'
 
-gem 'jquery-rails'
+gem 'jquery-rails', '>= 4.3.4'
 
 gem 'validates_timeliness', '~> 5.0.0.alpha2'
 
-gem 'serviceworker-rails'
+gem 'serviceworker-rails', '>= 0.6.0'
 
-gem 'devise'
+gem 'devise', '>= 4.7.0'
 gem 'devise-foundation-views'
-gem 'omniauth-google-oauth2'
+gem 'omniauth-google-oauth2', '>= 0.6.1'
 
 gem 'stateful_enum' # TODO: May be we can remove this if we are not using much of its functionality
 
@@ -56,16 +56,16 @@ gem 'material_design_iconsfont', git: 'https://github.com/AquisTech/material_des
 
 gem 'pagy'
 gem 'jquery-datatables'
-gem 'ajax-datatables-rails'
+gem 'ajax-datatables-rails', '>= 1.3.0'
 
 group :development, :test do
   # Call 'byebug' anywhere in the code to stop execution and get a debugger console
   gem 'byebug', platforms: [:mri, :mingw, :x64_mingw]
-  gem "factory_bot_rails"
-  gem "rspec-rails"
-  gem "capybara"
+  gem "factory_bot_rails", ">= 6.2.0"
+  gem "rspec-rails", ">= 4.0.2"
+  gem "capybara", ">= 2.14.0"
   gem "selenium-webdriver"
-  gem "chromedriver-helper"
+  gem "chromedriver-helper", ">= 2.1.1"
   gem "database_cleaner"
   gem "faker"
   gem "shoulda-matchers", require: false
@@ -73,7 +73,7 @@ end
 
 group :development do
   # Access an IRB console on exception pages or by using <%= console %> anywhere in the code.
-  gem 'web-console'
+  gem 'web-console', '>= 4.0.0'
   gem 'listen', '>= 3.0.5', '< 3.2'
   gem 'overcommit'
   gem 'bundler-audit'