From 43bc19417f636d8c8c69cbefce80ad5e43cbc739 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" Date: Fri, 5 Oct 2018 02:08:43 +0000 Subject: [PATCH] [Security] Bump nokogiri from 1.8.4 to 1.8.5 Bumps [nokogiri](https://github.com/sparklemotion/nokogiri) from 1.8.4 to 1.8.5. **This update includes security fixes.** - [Release notes](https://github.com/sparklemotion/nokogiri/releases) - [Changelog](https://github.com/sparklemotion/nokogiri/blob/master/CHANGELOG.md) - [Commits](https://github.com/sparklemotion/nokogiri/compare/v1.8.4...v1.8.5) Signed-off-by: dependabot[bot] --- Gemfile | 2 +- Gemfile.lock | 4 ++-- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/Gemfile b/Gemfile index 5a0ee6553f..0e970ea39a 100644 --- a/Gemfile +++ b/Gemfile @@ -161,7 +161,7 @@ gem 'sprockets', '~> 3.7.0' # also, better than thin since we can control worker concurrency. gem 'unicorn' -gem 'nokogiri', '~> 1.8.4' +gem 'nokogiri', '~> 1.8.5' # carrierwave 0.11.3 should allow to use fog-aws without the rest of the # fog dependency chain. We only need aws here, so we can avoid it diff --git a/Gemfile.lock b/Gemfile.lock index bb0621f8d5..3ef6a09038 100644 --- a/Gemfile.lock +++ b/Gemfile.lock @@ -361,7 +361,7 @@ GEM netrc (0.11.0) newrelic_rpm (4.5.0.337) nio4r (2.3.0) - nokogiri (1.8.4) + nokogiri (1.8.5) mini_portile2 (~> 2.3.0) nokogumbo (1.5.0) nokogiri @@ -670,7 +670,7 @@ DEPENDENCIES mysql2 (~> 0.5.0) net-ldap (~> 0.16.0) newrelic_rpm - nokogiri (~> 1.8.4) + nokogiri (~> 1.8.5) oj (~> 3.5.0) okcomputer (~> 1.16.0) omniauth!