From a9732622537c24a16d0ad9aae55439320cfa9234 Mon Sep 17 00:00:00 2001
From: "dependabot-preview[bot]"
<27856297+dependabot-preview[bot]@users.noreply.github.com>
Date: Tue, 3 Aug 2021 11:13:13 +0000
Subject: [PATCH] [Security] Bump loofah from 2.2.3 to 2.11.0
Bumps [loofah](https://github.com/flavorjones/loofah) from 2.2.3 to 2.11.0. **This update includes a security fix.**
- [Release notes](https://github.com/flavorjones/loofah/releases)
- [Changelog](https://github.com/flavorjones/loofah/blob/main/CHANGELOG.md)
- [Commits](https://github.com/flavorjones/loofah/compare/v2.2.3...v2.11.0)
Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
---
Gemfile.lock | 16 ++++++++++------
1 file changed, 10 insertions(+), 6 deletions(-)
diff --git a/Gemfile.lock b/Gemfile.lock
index 6835bcf..e5306d1 100644
--- a/Gemfile.lock
+++ b/Gemfile.lock
@@ -92,7 +92,7 @@ GEM
rake (< 13.0)
coderay (1.1.2)
concurrent-ruby (1.1.5)
- crass (1.0.4)
+ crass (1.0.6)
date_by_example (0.1.1)
devise (4.7.1)
bcrypt (~> 3.0)
@@ -136,7 +136,7 @@ GEM
rb-fsevent (~> 0.9, >= 0.9.4)
rb-inotify (~> 0.9, >= 0.9.7)
ruby_dep (~> 1.2)
- loofah (2.2.3)
+ loofah (2.11.0)
crass (~> 1.0.2)
nokogiri (>= 1.5.9)
mail (2.7.1)
@@ -144,14 +144,17 @@ GEM
marcel (0.3.3)
mimemagic (~> 0.3.2)
method_source (0.9.2)
- mimemagic (0.3.3)
+ mimemagic (0.3.10)
+ nokogiri (~> 1)
+ rake
mini_mime (1.0.2)
- mini_portile2 (2.4.0)
+ mini_portile2 (2.6.1)
minitest (5.11.3)
msgpack (1.3.1)
nio4r (2.5.1)
- nokogiri (1.10.4)
- mini_portile2 (~> 2.4.0)
+ nokogiri (1.12.0)
+ mini_portile2 (~> 2.6.1)
+ racc (~> 1.4)
orm_adapter (0.5.0)
parallel (1.17.0)
parser (2.6.4.0)
@@ -167,6 +170,7 @@ GEM
public_suffix (4.0.1)
puma (4.1.1)
nio4r (~> 2.0)
+ racc (1.5.2)
rack (2.0.7)
rack-proxy (0.6.5)
rack