From def0568ebf8b03d4971d75bbdae27b9a197343e4 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Arne=20Natsk=C3=A5r?= Date: Fri, 3 Jul 2026 07:44:11 +0200 Subject: [PATCH] Bump vulnerable dependencies to fix security advisories MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit - Bouncy Castle (bcprov-jdk18on, bcpkix-jdk18on): 1.82 → 1.84, fixing Critical GOST 28147 keystream reuse, High timing channel, and Moderate LDAP injection / broken algorithm CVEs - nokogiri: 1.19.2 → 1.19.4, fixing multiple use-after-free, null pointer, and ReDoS CVEs - concurrent-ruby: 1.3.6 → 1.3.7, fixing AtomicReference livelock and ReadWriteLock issues - faraday: 2.14.1 → 2.14.3, fixing NestedParamsEncoder stack exhaustion DoS Co-Authored-By: Claude Sonnet 4.6 --- docs/Gemfile.lock | 26 +++++++++++++------------- pom.xml | 2 +- 2 files changed, 14 insertions(+), 14 deletions(-) diff --git a/docs/Gemfile.lock b/docs/Gemfile.lock index 5fc670c..7753cc3 100644 --- a/docs/Gemfile.lock +++ b/docs/Gemfile.lock @@ -24,7 +24,7 @@ GEM coffee-script-source (1.12.2) colorator (1.1.0) commonmarker (0.23.12) - concurrent-ruby (1.3.6) + concurrent-ruby (1.3.7) connection_pool (3.0.2) csv (3.3.5) dnsruby (1.73.1) @@ -40,11 +40,11 @@ GEM logger eventmachine (1.2.7) execjs (2.10.1) - faraday (2.14.1) + faraday (2.14.3) faraday-net_http (>= 2.0, < 3.5) json logger - faraday-net_http (3.4.2) + faraday-net_http (3.4.4) net-http (~> 0.5) ffi (1.17.4-aarch64-linux-gnu) ffi (1.17.4-aarch64-linux-musl) @@ -224,7 +224,7 @@ GEM gemoji (>= 3, < 5) html-pipeline (~> 2.2) jekyll (>= 3.0, < 5.0) - json (2.19.3) + json (2.20.0) kramdown (2.4.0) rexml kramdown-parser-gfm (1.1.0) @@ -245,21 +245,21 @@ GEM prism (~> 1.5) net-http (0.9.1) uri (>= 0.11.1) - nokogiri (1.19.2-aarch64-linux-gnu) + nokogiri (1.19.4-aarch64-linux-gnu) racc (~> 1.4) - nokogiri (1.19.2-aarch64-linux-musl) + nokogiri (1.19.4-aarch64-linux-musl) racc (~> 1.4) - nokogiri (1.19.2-arm-linux-gnu) + nokogiri (1.19.4-arm-linux-gnu) racc (~> 1.4) - nokogiri (1.19.2-arm-linux-musl) + nokogiri (1.19.4-arm-linux-musl) racc (~> 1.4) - nokogiri (1.19.2-arm64-darwin) + nokogiri (1.19.4-arm64-darwin) racc (~> 1.4) - nokogiri (1.19.2-x86_64-darwin) + nokogiri (1.19.4-x86_64-darwin) racc (~> 1.4) - nokogiri (1.19.2-x86_64-linux-gnu) + nokogiri (1.19.4-x86_64-linux-gnu) racc (~> 1.4) - nokogiri (1.19.2-x86_64-linux-musl) + nokogiri (1.19.4-x86_64-linux-musl) racc (~> 1.4) octokit (4.25.1) faraday (>= 1, < 3) @@ -310,4 +310,4 @@ DEPENDENCIES github-pages (= 232) BUNDLED WITH - 2.5.11 + 2.6.7 diff --git a/pom.xml b/pom.xml index b0a24de..44b4cee 100644 --- a/pom.xml +++ b/pom.xml @@ -36,7 +36,7 @@ 11 11 - 1.82 + 1.84 2.0.9 4.0.1