From d8470ec1617b7c656836e10915d00b4621a5b343 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Wed, 9 Sep 2026 00:56:21 +0000 Subject: [PATCH] Bump the bundler group across 1 directory with 9 updates Bumps the bundler group with 8 updates in the /backend directory: | Package | From | To | | --- | --- | --- | | [puma](https://github.com/puma/puma) | `6.6.1` | `7.2.1` | | [devise](https://github.com/heartcombo/devise) | `4.9.4` | `5.0.4` | | [rack-cors](https://github.com/cyu/rack-cors) | `2.0.1` | `2.0.2` | | [addressable](https://github.com/sporkmonger/addressable) | `2.8.7` | `2.9.0` | | [faraday](https://github.com/lostisland/faraday) | `1.8.0` | `1.10.6` | | [jwt](https://github.com/jwt/ruby-jwt) | `2.3.0` | `2.10.3` | | [websocket-driver](https://github.com/faye/websocket-driver-ruby) | `0.7.7` | `0.8.2` | | [yard](https://github.com/lsegal/yard) | `0.9.36` | `0.9.44` | Updates `puma` from 6.6.1 to 7.2.1 - [Release notes](https://github.com/puma/puma/releases) - [Changelog](https://github.com/puma/puma/blob/main/History.md) - [Commits](https://github.com/puma/puma/compare/v6.6.1...v7.2.1) Updates `devise` from 4.9.4 to 5.0.4 - [Release notes](https://github.com/heartcombo/devise/releases) - [Changelog](https://github.com/heartcombo/devise/blob/main/CHANGELOG.md) - [Commits](https://github.com/heartcombo/devise/compare/v4.9.4...v5.0.4) Updates `rack-cors` from 2.0.1 to 2.0.2 - [Changelog](https://github.com/cyu/rack-cors/blob/master/CHANGELOG.md) - [Commits](https://github.com/cyu/rack-cors/compare/v2.0.1...v2.0.2) Updates `addressable` from 2.8.7 to 2.9.0 - [Changelog](https://github.com/sporkmonger/addressable/blob/main/CHANGELOG.md) - [Commits](https://github.com/sporkmonger/addressable/compare/addressable-2.8.7...addressable-2.9.0) Updates `bcrypt` from 3.1.20 to 3.1.22 - [Release notes](https://github.com/bcrypt-ruby/bcrypt-ruby/releases) - [Changelog](https://github.com/bcrypt-ruby/bcrypt-ruby/blob/master/CHANGELOG) - [Commits](https://github.com/bcrypt-ruby/bcrypt-ruby/compare/v3.1.20...v3.1.22) Updates `faraday` from 1.8.0 to 1.10.6 - [Release notes](https://github.com/lostisland/faraday/releases) - [Changelog](https://github.com/lostisland/faraday/blob/main/CHANGELOG.md) - [Commits](https://github.com/lostisland/faraday/compare/v1.8.0...v1.10.6) Updates `jwt` from 2.3.0 to 2.10.3 - [Release notes](https://github.com/jwt/ruby-jwt/releases) - [Changelog](https://github.com/jwt/ruby-jwt/blob/main/CHANGELOG.md) - [Commits](https://github.com/jwt/ruby-jwt/compare/v2.3.0...v2.10.3) Updates `websocket-driver` from 0.7.7 to 0.8.2 - [Changelog](https://github.com/faye/websocket-driver-ruby/blob/main/CHANGELOG.md) - [Commits](https://github.com/faye/websocket-driver-ruby/compare/0.7.7...0.8.2) Updates `yard` from 0.9.36 to 0.9.44 - [Release notes](https://github.com/lsegal/yard/releases) - [Changelog](https://github.com/lsegal/yard/blob/main/CHANGELOG.md) - [Commits](https://github.com/lsegal/yard/compare/v0.9.36...v0.9.44) --- updated-dependencies: - dependency-name: addressable dependency-version: 2.9.0 dependency-type: indirect - dependency-name: bcrypt dependency-version: 3.1.22 dependency-type: indirect - dependency-name: devise dependency-version: 5.0.4 dependency-type: direct:production - dependency-name: faraday dependency-version: 1.10.6 dependency-type: indirect - dependency-name: jwt dependency-version: 2.10.3 dependency-type: indirect - dependency-name: puma dependency-version: 7.2.1 dependency-type: direct:production - dependency-name: rack-cors dependency-version: 2.0.2 dependency-type: direct:production - dependency-name: websocket-driver dependency-version: 0.8.2 dependency-type: indirect - dependency-name: yard dependency-version: 0.9.44 dependency-type: indirect ... Signed-off-by: dependabot[bot] --- backend/Gemfile | 6 ++--- backend/Gemfile.lock | 59 ++++++++++++++++++++++++-------------------- 2 files changed, 35 insertions(+), 30 deletions(-) diff --git a/backend/Gemfile b/backend/Gemfile index b10c380f..2951a450 100644 --- a/backend/Gemfile +++ b/backend/Gemfile @@ -23,12 +23,12 @@ gem "mongoid", "9.0.11" # https://www.mongodb.com/docs/mongoid/current/reference gem "pg" # Use Puma as the app server -gem "puma", "~> 6.6" +gem "puma", "~> 7.2" # Authentication libraries gem "cancancan", "~> 3.6.1" gem "cancancan-mongoid", "~> 2.0" -gem "devise", "~> 4.8" +gem "devise", "~> 5.0" gem "devise_invitable", "~> 2.0" gem "omniauth", "~> 1.8" gem "omniauth-facebook", "~> 3.0" @@ -66,7 +66,7 @@ gem "ruby-progressbar", require: false gem "kaminari-actionview" gem "kaminari-mongoid" -gem "rack-cors", "2.0.1", require: "rack/cors" # freezing to gemfile.lock version because heroku is not respecting lockfile +gem "rack-cors", "2.0.2", require: "rack/cors" # freezing to gemfile.lock version because heroku is not respecting lockfile gem "simplecov", require: false, group: :test group :development, :test do diff --git a/backend/Gemfile.lock b/backend/Gemfile.lock index ef1fbeca..84c7b47d 100644 --- a/backend/Gemfile.lock +++ b/backend/Gemfile.lock @@ -77,8 +77,8 @@ GEM minitest (>= 5.1, < 6) securerandom (>= 0.3) tzinfo (~> 2.0, >= 2.0.5) - addressable (2.8.7) - public_suffix (>= 2.0.2, < 7.0) + addressable (2.9.0) + public_suffix (>= 2.0.2, < 8.0) andand (1.3.3) annotate (3.2.0) activerecord (>= 3.2, < 8.0) @@ -86,7 +86,7 @@ GEM ast (2.4.2) awesome_print (1.9.2) base64 (0.3.0) - bcrypt (3.1.20) + bcrypt (3.1.22) benchmark (0.5.0) better_errors (2.10.1) erubi (>= 1.0.0) @@ -137,9 +137,9 @@ GEM rexml crass (1.0.7) csv (3.3.0) - cuprite (0.15) + cuprite (0.18) capybara (~> 3.0) - ferrum (~> 0.14.0) + ferrum (~> 0.18.0) database_cleaner (2.1.0) database_cleaner-active_record (>= 2, < 3) database_cleaner-active_record (2.2.2) @@ -152,10 +152,10 @@ GEM date (3.5.1) descendants_tracker (0.0.4) thread_safe (~> 0.3, >= 0.3.1) - devise (4.9.4) + devise (5.0.4) bcrypt (~> 3.0) orm_adapter (~> 0.1) - railties (>= 4.1.0) + railties (>= 7.0) responders warden (~> 1.2.3) devise_invitable (2.0.11) @@ -181,30 +181,34 @@ GEM factory_bot_rails (6.4.3) factory_bot (~> 6.4) railties (>= 5.0.0) - faraday (1.8.0) + faraday (1.10.6) faraday-em_http (~> 1.0) faraday-em_synchrony (~> 1.0) faraday-excon (~> 1.1) - faraday-httpclient (~> 1.0.1) + faraday-httpclient (~> 1.0) + faraday-multipart (~> 1.0) faraday-net_http (~> 1.0) - faraday-net_http_persistent (~> 1.1) + faraday-net_http_persistent (~> 1.0) faraday-patron (~> 1.0) faraday-rack (~> 1.0) - multipart-post (>= 1.2, < 3) + faraday-retry (~> 1.0) ruby2_keywords (>= 0.0.4) faraday-em_http (1.0.0) - faraday-em_synchrony (1.0.0) + faraday-em_synchrony (1.0.1) faraday-excon (1.1.0) faraday-httpclient (1.0.1) - faraday-net_http (1.0.1) + faraday-multipart (1.2.0) + multipart-post (~> 2.0) + faraday-net_http (1.0.2) faraday-net_http_persistent (1.2.0) faraday-patron (1.0.0) faraday-rack (1.0.0) - ferrum (0.14) + faraday-retry (1.0.4) + ferrum (0.18.0) addressable (~> 2.5) + base64 (~> 0.2) concurrent-ruby (~> 1.1) - webrick (~> 1.7) - websocket-driver (>= 0.6, < 0.8) + websocket-driver (~> 0.7) ffaker (2.23.0) foreman (0.88.1) geocoder (1.8.3) @@ -230,7 +234,8 @@ GEM rdoc (>= 4.0.0) reline (>= 0.4.2) json (2.7.1) - jwt (2.3.0) + jwt (2.10.3) + base64 kaminari-actionview (1.2.2) actionview kaminari-core (= 1.2.2) @@ -277,7 +282,7 @@ GEM mongoid-compatibility (>= 0.5.1) multi_json (1.15.0) multi_xml (0.6.0) - multipart-post (2.1.1) + multipart-post (2.4.1) nearest_time_zone (0.0.4) andand kdtree @@ -331,8 +336,8 @@ GEM yard (~> 0.9.11) pry-rails (0.3.11) pry (>= 0.13.0) - public_suffix (6.0.2) - puma (6.6.1) + public_suffix (7.0.5) + puma (7.2.1) nio4r (~> 2.0) pusher (2.0.3) httpclient (~> 2.8) @@ -341,7 +346,7 @@ GEM pusher-signature (0.1.8) racc (1.8.1) rack (2.2.24) - rack-cors (2.0.1) + rack-cors (2.0.2) rack (>= 2.0.0) rack-session (1.0.2) rack (< 3) @@ -401,7 +406,7 @@ GEM request_store (1.7.0) rack (>= 1.4) require_all (3.0.0) - responders (3.2.0) + responders (3.2.1) actionpack (>= 7.0) railties (>= 7.0) rexml (3.4.4) @@ -498,13 +503,13 @@ GEM crack (>= 0.3.2) hashdiff (>= 0.4.0, < 2.0.0) webrick (1.9.2) - websocket-driver (0.7.7) + websocket-driver (0.8.2) base64 websocket-extensions (>= 0.1.0) websocket-extensions (0.1.5) xpath (3.2.0) nokogiri (~> 1.8) - yard (0.9.36) + yard (0.9.44) zeitwerk (2.8.3) PLATFORMS @@ -527,7 +532,7 @@ DEPENDENCIES cuprite database_cleaner database_cleaner-mongoid - devise (~> 4.8) + devise (~> 5.0) devise_invitable (~> 2.0) dotenv-rails erb_lint (~> 0.5.0) @@ -548,9 +553,9 @@ DEPENDENCIES pry-byebug pry-doc pry-rails - puma (~> 6.6) + puma (~> 7.2) pusher - rack-cors (= 2.0.1) + rack-cors (= 2.0.2) rack-timeout rails (~> 7.2.0, >= 7.2.3.2) rake