diff --git a/src/Gemfile b/src/Gemfile index 0a9d458..ece2ff8 100644 --- a/src/Gemfile +++ b/src/Gemfile @@ -1,43 +1,43 @@ source "https://rubygems.org" ruby RUBY_VERSION # Hello! This is where you manage which Jekyll version is used to run. # When you want to use a different version, change it below, save the # file and run `bundle install`. Run Jekyll with `bundle exec`, like so: # # bundle exec jekyll serve # # This will help ensure the proper Jekyll version is running. # Happy Jekylling! # jekyll-assets does not support jekyll 4 yet gem "jekyll", "~> 3.0" # This is the default theme for new Jekyll sites. You may change this to anything you like. gem "minima", "~> 2.0" # not sure why jekyll doesn't generate this dependency automatically gem "kramdown-parser-gfm" -# Raise rack dependency version to avoid security issue -gem "rack", ">= 2.1.4" +# Raise rack dependency version to avoid security issues +gem "rack", ">= 2.2.3.1" # Needed by jekyll-assets group :jekyll_assets_deps do gem "public_suffix" gem "ruby_dep" gem "rb-inotify" gem "listen" gem "jekyll-watch" gem "json" end # If you want to use GitHub Pages, remove the "gem "jekyll"" above and # uncomment the line below. To upgrade, run `bundle update github-pages`. # gem "github-pages", group: :jekyll_plugins # If you have any plugins, put them here! group :jekyll_plugins do gem "jekyll-assets", "~> 2.0" gem "font-awesome-sass" end diff --git a/src/Gemfile.lock b/src/Gemfile.lock index e3ebc09..ae74001 100644 --- a/src/Gemfile.lock +++ b/src/Gemfile.lock @@ -1,108 +1,108 @@ GEM remote: https://rubygems.org/ specs: addressable (2.8.0) public_suffix (>= 2.0.2, < 5.0) colorator (1.1.0) concurrent-ruby (1.1.9) em-websocket (0.5.2) eventmachine (>= 0.12.9) http_parser.rb (~> 0.6.0) eventmachine (1.2.7) extras (0.3.0) forwardable-extended (~> 2.5) fastimage (2.2.4) ffi (1.15.3) font-awesome-sass (5.15.1) sassc (>= 1.11) forwardable-extended (2.6.0) http_parser.rb (0.6.0) i18n (0.9.5) concurrent-ruby (~> 1.0) jekyll (3.9.1) addressable (~> 2.4) colorator (~> 1.0) em-websocket (~> 0.5) i18n (~> 0.7) jekyll-sass-converter (~> 1.0) jekyll-watch (~> 2.0) kramdown (>= 1.17, < 3) liquid (~> 4.0) mercenary (~> 0.3.3) pathutil (~> 0.9) rouge (>= 1.7, < 4) safe_yaml (~> 1.0) jekyll-assets (2.3.0) concurrent-ruby (~> 1.0) extras (~> 0.2) fastimage (~> 2.0, >= 1.8) jekyll (~> 3.1, >= 3.0) pathutil (>= 0.8) rack (> 1, < 3) sprockets (~> 3.3, < 3.8) jekyll-feed (0.15.1) jekyll (>= 3.7, < 5.0) jekyll-sass-converter (1.5.2) sass (~> 3.4) jekyll-seo-tag (2.7.1) jekyll (>= 3.8, < 5.0) jekyll-watch (2.2.1) listen (~> 3.0) json (2.5.1) kramdown (2.3.1) rexml kramdown-parser-gfm (1.1.0) kramdown (~> 2.0) liquid (4.0.3) listen (3.5.1) rb-fsevent (~> 0.10, >= 0.10.3) rb-inotify (~> 0.9, >= 0.9.10) mercenary (0.3.6) minima (2.5.1) jekyll (>= 3.5, < 5.0) jekyll-feed (~> 0.9) jekyll-seo-tag (~> 2.1) pathutil (0.16.2) forwardable-extended (~> 2.6) public_suffix (4.0.6) - rack (2.2.3) + rack (2.2.3.1) rb-fsevent (0.11.0) rb-inotify (0.10.1) ffi (~> 1.0) rexml (3.2.5) rouge (3.26.0) ruby_dep (1.5.0) safe_yaml (1.0.5) sass (3.7.4) sass-listen (~> 4.0.0) sass-listen (4.0.0) rb-fsevent (~> 0.9, >= 0.9.4) rb-inotify (~> 0.9, >= 0.9.7) sassc (2.4.0) ffi (~> 1.9) sprockets (3.7.2) concurrent-ruby (~> 1.0) rack (> 1, < 3) PLATFORMS ruby DEPENDENCIES font-awesome-sass jekyll (~> 3.0) jekyll-assets (~> 2.0) jekyll-watch json kramdown-parser-gfm listen minima (~> 2.0) public_suffix - rack (>= 2.1.4) + rack (>= 2.2.3.1) rb-inotify ruby_dep RUBY VERSION ruby 2.5.9p229 BUNDLED WITH 1.16.1