From 091de0512d0b0ad8a0ec9b27aa2515dddc4b7bb5 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Sat, 4 Apr 2026 22:13:46 +0000 Subject: [PATCH] fix: builders/testdata/ruby/functions/with_dependencies/Gemfile & builders/testdata/ruby/functions/with_dependencies/Gemfile.lock to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-RUBY-RACK-15878254 - https://snyk.io/vuln/SNYK-RUBY-RACK-15878260 - https://snyk.io/vuln/SNYK-RUBY-RACK-15878256 - https://snyk.io/vuln/SNYK-RUBY-RACK-15878255 - https://snyk.io/vuln/SNYK-RUBY-RACK-15878257 - https://snyk.io/vuln/SNYK-RUBY-RACK-15878258 - https://snyk.io/vuln/SNYK-RUBY-RACK-15878259 - https://snyk.io/vuln/SNYK-RUBY-RACK-15878237 --- .../ruby/functions/with_dependencies/Gemfile | 2 +- .../functions/with_dependencies/Gemfile.lock | 18 +++++++++--------- 2 files changed, 10 insertions(+), 10 deletions(-) diff --git a/builders/testdata/ruby/functions/with_dependencies/Gemfile b/builders/testdata/ruby/functions/with_dependencies/Gemfile index cf23ed2ca..7253bf821 100644 --- a/builders/testdata/ruby/functions/with_dependencies/Gemfile +++ b/builders/testdata/ruby/functions/with_dependencies/Gemfile @@ -13,5 +13,5 @@ # limitations under the License. source "https://rubygems.org" -gem "functions_framework", "~> 0.7" +gem "functions_framework", "~> 0.7", ">= 0.7.1" gem "grpc", "~> 1.32" diff --git a/builders/testdata/ruby/functions/with_dependencies/Gemfile.lock b/builders/testdata/ruby/functions/with_dependencies/Gemfile.lock index 61d445eea..8069fc26d 100644 --- a/builders/testdata/ruby/functions/with_dependencies/Gemfile.lock +++ b/builders/testdata/ruby/functions/with_dependencies/Gemfile.lock @@ -1,10 +1,10 @@ GEM remote: https://rubygems.org/ specs: - cloud_events (0.1.2) - functions_framework (0.7.0) - cloud_events (~> 0.1) - puma (~> 4.3) + cloud_events (0.9.0) + functions_framework (0.11.0) + cloud_events (>= 0.5.1, < 2.a) + puma (>= 4.3.0, < 6.a) rack (~> 2.1) google-protobuf (3.13.0) googleapis-common-protos-types (1.0.5) @@ -12,17 +12,17 @@ GEM grpc (1.32.0) google-protobuf (~> 3.13) googleapis-common-protos-types (~> 1.0) - nio4r (2.5.4) - puma (4.3.6) + nio4r (2.7.5) + puma (5.6.9) nio4r (~> 2.0) - rack (2.2.3) + rack (2.2.23) PLATFORMS ruby DEPENDENCIES - functions_framework (~> 0.7) + functions_framework (~> 0.7, >= 0.7.1) grpc (~> 1.32) BUNDLED WITH - 2.1.4 + 2.3.27