From 8afdcb248d831caa4557a0d4eb5c0289a5f09c7a Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Tue, 14 Oct 2025 05:27:06 +0000 Subject: [PATCH] fix: builders/testdata/ruby/functions/with_dependencies/Gemfile & builders/testdata/ruby/functions/with_dependencies/Gemfile.lock to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-RUBY-RACK-13378928 - https://snyk.io/vuln/SNYK-RUBY-RACK-13378930 - https://snyk.io/vuln/SNYK-RUBY-RACK-13378932 - https://snyk.io/vuln/SNYK-RUBY-RACK-13535097 - https://snyk.io/vuln/SNYK-RUBY-RACK-13524628 --- .../ruby/functions/with_dependencies/Gemfile | 2 +- .../functions/with_dependencies/Gemfile.lock | 18 +++++++++--------- 2 files changed, 10 insertions(+), 10 deletions(-) diff --git a/builders/testdata/ruby/functions/with_dependencies/Gemfile b/builders/testdata/ruby/functions/with_dependencies/Gemfile index cf23ed2ca..7253bf821 100644 --- a/builders/testdata/ruby/functions/with_dependencies/Gemfile +++ b/builders/testdata/ruby/functions/with_dependencies/Gemfile @@ -13,5 +13,5 @@ # limitations under the License. source "https://rubygems.org" -gem "functions_framework", "~> 0.7" +gem "functions_framework", "~> 0.7", ">= 0.7.1" gem "grpc", "~> 1.32" diff --git a/builders/testdata/ruby/functions/with_dependencies/Gemfile.lock b/builders/testdata/ruby/functions/with_dependencies/Gemfile.lock index 61d445eea..5b0a83a18 100644 --- a/builders/testdata/ruby/functions/with_dependencies/Gemfile.lock +++ b/builders/testdata/ruby/functions/with_dependencies/Gemfile.lock @@ -1,10 +1,10 @@ GEM remote: https://rubygems.org/ specs: - cloud_events (0.1.2) - functions_framework (0.7.0) - cloud_events (~> 0.1) - puma (~> 4.3) + cloud_events (0.7.1) + functions_framework (0.11.0) + cloud_events (>= 0.5.1, < 2.a) + puma (>= 4.3.0, < 6.a) rack (~> 2.1) google-protobuf (3.13.0) googleapis-common-protos-types (1.0.5) @@ -12,17 +12,17 @@ GEM grpc (1.32.0) google-protobuf (~> 3.13) googleapis-common-protos-types (~> 1.0) - nio4r (2.5.4) - puma (4.3.6) + nio4r (2.7.4) + puma (5.6.9) nio4r (~> 2.0) - rack (2.2.3) + rack (2.2.20) PLATFORMS ruby DEPENDENCIES - functions_framework (~> 0.7) + functions_framework (~> 0.7, >= 0.7.1) grpc (~> 1.32) BUNDLED WITH - 2.1.4 + 2.3.27