From ab81dd667b5a4de30c8f209c874d40e5863c25a5 Mon Sep 17 00:00:00 2001 From: Henne Vogelsang Date: Tue, 11 Apr 2023 12:55:30 +0200 Subject: [PATCH] Stop pinning nokogiri for security updates... The bundle does this already. --- Gemfile | 6 +----- Gemfile.lock | 1 - 2 files changed, 1 insertion(+), 6 deletions(-) diff --git a/Gemfile b/Gemfile index 3c7da75d..b19b52f7 100644 --- a/Gemfile +++ b/Gemfile @@ -221,14 +221,10 @@ gem 'selectize-rails' # For collecting performance data gem 'skylight' -# Nokogiri < 1.8.1 is subject to: -# CVE-2017-0663, CVE-2017-7375, CVE-2017-7376, CVE-2017-9047, CVE-2017-9048, -# CVE-2017-9049, CVE-2017-9050 -gem 'nokogiri', '>= 1.8.1' - # memcached binary connector gem 'dalli' +# to generate ical files gem 'icalendar' group :development do diff --git a/Gemfile.lock b/Gemfile.lock index 2fb68c07..5cb15e25 100644 --- a/Gemfile.lock +++ b/Gemfile.lock @@ -683,7 +683,6 @@ DEPENDENCIES money-rails mysql2 next_rails - nokogiri (>= 1.8.1) omniauth omniauth-facebook omniauth-github