From f38faa6c0505bc377aa46bcd6d440005102f0e93 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Wed, 14 Dec 2022 04:43:09 +0000 Subject: [PATCH] Bump loofah from 2.4.0 to 2.19.1 Bumps [loofah](https://github.com/flavorjones/loofah) from 2.4.0 to 2.19.1. - [Release notes](https://github.com/flavorjones/loofah/releases) - [Changelog](https://github.com/flavorjones/loofah/blob/main/CHANGELOG.md) - [Commits](https://github.com/flavorjones/loofah/compare/v2.4.0...v2.19.1) --- updated-dependencies: - dependency-name: loofah dependency-type: direct:production ... Signed-off-by: dependabot[bot] --- Gemfile | 2 +- Gemfile.lock | 4 ++-- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/Gemfile b/Gemfile index 829c76a..ff49863 100644 --- a/Gemfile +++ b/Gemfile @@ -14,4 +14,4 @@ gem 'rack', '~> 2.1.1' # Loofah is a general library for manipulating and transforming HTML/XML documents and fragments, built on top of Nokogiri. # Fix CVE-2019-15587 https://github.com/flavorjones/loofah/issues/171 -gem 'loofah', '~> 2.4.0' +gem 'loofah', '~> 2.19.1' diff --git a/Gemfile.lock b/Gemfile.lock index 4f0a4ff..b181c72 100644 --- a/Gemfile.lock +++ b/Gemfile.lock @@ -47,7 +47,7 @@ GEM concurrent-ruby (~> 1.0) iniparse (1.4.4) jaro_winkler (1.5.1) - loofah (2.4.0) + loofah (2.19.1) crass (~> 1.0.2) nokogiri (>= 1.5.9) method_source (0.9.2) @@ -113,7 +113,7 @@ DEPENDENCIES bundler (~> 1.15) bundler-audit (~> 0.6.0) fasterer (~> 0.4.1) - loofah (~> 2.4.0) + loofah (~> 2.19.1) nokogiri (~> 1.10.7) overcommit (~> 0.46.0) rack (~> 2.1.1)