From 18055a3087e56134db87579eda86e2dc3afd995c Mon Sep 17 00:00:00 2001
From: snyk-bot <snyk-bot@snyk.io>
Date: Wed, 19 Mar 2025 07:07:27 +0000
Subject: [PATCH] fix: Gemfile & Gemfile.lock to reduce vulnerabilities

The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-RUBY-RACK-9398129
---
 Gemfile      | 2 +-
 Gemfile.lock | 6 +++---
 2 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/Gemfile b/Gemfile
index 3ab468336f6..73f0467bafe 100644
--- a/Gemfile
+++ b/Gemfile
@@ -58,7 +58,7 @@ gem 'phonelib'
 gem 'premailer-rails', '>= 1.12.0'
 gem 'profanity_filter'
 gem 'propshaft'
-gem 'rack', '~> 3.0.12'
+gem 'rack', '~> 3.0.14'
 gem 'rack-attack', github: 'rack/rack-attack', ref: 'd9fedfae4f7f6409f33857763391f4e18a6d7467'
 gem 'rack-cors', '> 2.0.1', require: 'rack/cors'
 gem 'rack-headers_filter'
diff --git a/Gemfile.lock b/Gemfile.lock
index 22fb054ed57..293a2ee42d9 100644
--- a/Gemfile.lock
+++ b/Gemfile.lock
@@ -512,7 +512,7 @@ GEM
       nio4r (~> 2.0)
     raabro (1.4.0)
     racc (1.8.1)
-    rack (3.0.12)
+    rack (3.0.14)
     rack-cors (2.0.2)
       rack (>= 2.0.0)
     rack-headers_filter (0.0.1)
@@ -831,7 +831,7 @@ DEPENDENCIES
   pry-rails
   psych
   puma (~> 6.0)
-  rack (~> 3.0.12)
+  rack (~> 3.0.14)
   rack-attack!
   rack-cors (> 2.0.1)
   rack-headers_filter
@@ -885,7 +885,7 @@ DEPENDENCIES
   zxcvbn (= 0.1.12)
 
 RUBY VERSION
-   ruby 3.4.1p0
+   ruby 2.7.8p225
 
 BUNDLED WITH
    2.6.3