New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Bundle update to resolve critical security vulns #63

Open

CleanCut wants to merge 1 commit into master from dependency-updates

Contributor

CleanCut commented Apr 2, 2024

I believe this will at least resolve the "critical" vulnerabilities, plus a bunch of the other ones.

I don't expect this will resolve all the listed vulnerabilities, unfortanately.

Steps I took:

Updated Ruby version from 2.6.3 to 3.3.0 in .ruby-version and Gemfile
bundle update


          bundle update to resolve critical security vulns (plus some of the ot…

4627fec

…her lower vulns)

CleanCut requested a review from mjimenez98

April 2, 2024 16:27

Contributor Author

CleanCut commented Apr 2, 2024

Oh snap, there's no CI set up. 😳 We probably shouldn't merge this until we either manually ensure things still work, or set up CI.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet