diff --git a/configs/components/rubygem-net-http.rb b/configs/components/rubygem-net-http.rb index f309dfd2..28b44078 100644 --- a/configs/components/rubygem-net-http.rb +++ b/configs/components/rubygem-net-http.rb @@ -6,7 +6,6 @@ ### Maintained by update_gems automation ### pkg.version '0.8.0' pkg.sha256sum 'df42c47ce9f9e95ad32a317c97c12f945bc1af365288837ea4ff259876ecb46d' - pkg.build_requires 'rubygem-uri' ### End automated maintenance section ### instance_eval File.read('configs/components/_base-rubygem.rb') diff --git a/configs/components/rubygem-uri.rb b/configs/components/rubygem-uri.rb deleted file mode 100644 index 9ef87230..00000000 --- a/configs/components/rubygem-uri.rb +++ /dev/null @@ -1,16 +0,0 @@ -##### -# Component release information: -# https://rubygems.org/gems/uri -# Notes: -# 2025-12-14: This is a default gem, and is only included here to address -# CVE-2025-61594. This component should be removed once Ruby 3.2.10 is released. -##### -component 'rubygem-uri' do |pkg, _settings, _platform| - ### Maintained by update_gems automation ### - # PINNED - pkg.version '0.12.5' - pkg.sha256sum '883424e272244f029ad3b9fe0e9ad18d1c33cdadff0a366c301ce737c62eb414' - ### End automated maintenance section ### - - instance_eval File.read('configs/components/_base-rubygem.rb') -end diff --git a/configs/projects/agent-runtime-main.rb b/configs/projects/agent-runtime-main.rb index cc69ed49..3e421581 100644 --- a/configs/projects/agent-runtime-main.rb +++ b/configs/projects/agent-runtime-main.rb @@ -62,9 +62,6 @@ proj.component 'rubygem-text' proj.component 'rubygem-thor' - # Remove this once Ruby 3.2.10 is released - proj.component 'rubygem-uri' - # We add rexml explicitly in here because even though ruby 3 ships with rexml as its default gem, the version # of rexml it ships with can contain CVEs. So, we add it here to update to a higher version free from the CVEs. proj.component 'rubygem-rexml' diff --git a/configs/projects/openbolt-runtime.rb b/configs/projects/openbolt-runtime.rb index da7b3659..9b8afc33 100644 --- a/configs/projects/openbolt-runtime.rb +++ b/configs/projects/openbolt-runtime.rb @@ -224,9 +224,6 @@ proj.component 'rubygem-webrick' proj.component 'rubygem-yard' - # Remove this once Ruby 3.2.10 is released - proj.component 'rubygem-uri' - # Core Windows dependencies proj.component 'rubygem-windows_error' proj.component 'rubygem-winrm' diff --git a/tasks/update_gems.rake b/tasks/update_gems.rake index 7c9824ae..ba77b4fe 100644 --- a/tasks/update_gems.rake +++ b/tasks/update_gems.rake @@ -109,7 +109,7 @@ DEFAULT_AND_BUNDLED_GEMS = [ 'tsort', 'typeprof', 'un', - # 'uri', + 'uri', 'weakref', 'win32ole', 'yaml',