From f3a0afeab32e1f702eb8943061c101f9f1ca1a05 Mon Sep 17 00:00:00 2001
From: cve-remediation-bot <cve-bot@users.noreply.github.com>
Date: Thu, 6 Aug 2026 14:29:07 +0000
Subject: [PATCH] chore(deps): remediate CVE-2026-54297 (faraday)

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
---
 puppet_forge.gemspec | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/puppet_forge.gemspec b/puppet_forge.gemspec
index 81d3770..fe861f8 100644
--- a/puppet_forge.gemspec
+++ b/puppet_forge.gemspec
@@ -21,7 +21,7 @@ Gem::Specification.new do |spec|
   spec.required_ruby_version = '>= 3.1.0'
 
   spec.add_runtime_dependency "base64", '>= 0.2.0', '< 0.4.0'
-  spec.add_runtime_dependency "faraday", "~> 2.0"
+  spec.add_runtime_dependency "faraday", ">= 2.14.3", "< 3.0"
   spec.add_runtime_dependency "faraday-follow_redirects", ">= 0.3", "< 0.6"
   spec.add_dependency "minitar",  '~> 1.0', '>= 1.0.2'
   spec.add_dependency "semantic_puppet", "~> 1.0"