From d6f242cadd2fdb30b0f81a95578d5d08254a51a1 Mon Sep 17 00:00:00 2001
From: "dependabot-preview[bot]"
<27856297+dependabot-preview[bot]@users.noreply.github.com>
Date: Thu, 27 Aug 2020 11:13:25 +0000
Subject: [PATCH] [Security] Bump loofah from 2.2.3 to 2.7.0
Bumps [loofah](https://github.com/flavorjones/loofah) from 2.2.3 to 2.7.0. **This update includes a security fix.**
- [Release notes](https://github.com/flavorjones/loofah/releases)
- [Changelog](https://github.com/flavorjones/loofah/blob/master/CHANGELOG.md)
- [Commits](https://github.com/flavorjones/loofah/compare/v2.2.3...v2.7.0)
Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
---
Gemfile.lock | 6 +++---
1 file changed, 3 insertions(+), 3 deletions(-)
diff --git a/Gemfile.lock b/Gemfile.lock
index 6835bcf..0335b90 100644
--- a/Gemfile.lock
+++ b/Gemfile.lock
@@ -92,7 +92,7 @@ GEM
rake (< 13.0)
coderay (1.1.2)
concurrent-ruby (1.1.5)
- crass (1.0.4)
+ crass (1.0.6)
date_by_example (0.1.1)
devise (4.7.1)
bcrypt (~> 3.0)
@@ -136,7 +136,7 @@ GEM
rb-fsevent (~> 0.9, >= 0.9.4)
rb-inotify (~> 0.9, >= 0.9.7)
ruby_dep (~> 1.2)
- loofah (2.2.3)
+ loofah (2.7.0)
crass (~> 1.0.2)
nokogiri (>= 1.5.9)
mail (2.7.1)
@@ -150,7 +150,7 @@ GEM
minitest (5.11.3)
msgpack (1.3.1)
nio4r (2.5.1)
- nokogiri (1.10.4)
+ nokogiri (1.10.10)
mini_portile2 (~> 2.4.0)
orm_adapter (0.5.0)
parallel (1.17.0)