Fix: vulnerability found by GitHub: GHSA-q58g-455p-8vw9

5 years ago · ecd8ff9ee9
parent e146427539
commit ecd8ff9ee9
2 changed files with 4 additions and 2 deletions
--- a/1
+++ b/1
@ -8,6 +8,7 @@ gem 'fastlane'
 gem 'cocoapods', '1.8.4'
 #guard against rubyzip vulnerability
 gem "rubyzip", ">= 1.3.0"
+gem "excon", ">= 0.71.0"

 plugins_path = File.join(File.dirname(__FILE__), 'fastlane', 'Pluginfile')
 eval_gemfile(plugins_path) if File.exist?(plugins_path)
--- a/Gemfile.lock
+++ b/Gemfile.lock
@ -63,7 +63,7 @@ GEM
    dotenv (2.7.5)
    emoji_regex (1.0.1)
    escape (0.0.4)
-    excon (0.66.0)
+    excon (0.71.1)
    faraday (0.15.4)
      multipart-post (>= 1.2, < 3)
    faraday-cookie_jar (0.0.6)
@ -211,8 +211,9 @@ PLATFORMS

 DEPENDENCIES
  cocoapods (= 1.8.4)
+  excon (>= 0.71.0)
  fastlane
  rubyzip (>= 1.3.0)

 BUNDLED WITH
-   1.16.1
+   1.17.2