Skip to content

[Snyk] Fix for 1 vulnerabilities - #130

Merged
YOU54F merged 2 commits into
masterfrom
snyk-fix-eb2db8b40f29216a80c489ed6479d911
Nov 30, 2024
Merged

[Snyk] Fix for 1 vulnerabilities#130
YOU54F merged 2 commits into
masterfrom
snyk-fix-eb2db8b40f29216a80c489ed6479d911

Conversation

@mefellows

@mefellows mefellows commented Nov 23, 2024

Copy link
Copy Markdown
Member

depends #122

snyk-top-banner

Snyk has created this PR to fix 1 vulnerabilities in the rubygems dependencies of this project.

Snyk changed the following file(s):

  • examples/Gemfile
⚠️ Warning
Failed to update the Gemfile.lock, please update manually before merging.

Vulnerabilities that will be fixed with an upgrade:

Issue Score
medium severity Reliance on Untrusted Inputs in a Security Decision
SNYK-RUBY-SINATRA-6483832
  586  

Important

  • Check the changes in this PR to ensure they won't cause issues with your project.
  • Max score is 1000. Note that the real score may have changed since the PR was raised.
  • This PR was automatically created by Snyk using the credentials of a real user.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report
📜 Customise PR templates
🛠 Adjust project settings
📚 Read about Snyk's upgrade logic


Learn how to fix vulnerabilities with free interactive lessons:

🦉 Learn about vulnerability in an interactive lesson of Snyk Learn.

@YOU54F

YOU54F commented Nov 29, 2024

Copy link
Copy Markdown
Member

We won't be able to update this at the moment until #122 is merged

Because pact-provider-verifier >= 1.26.0 depends on rack ~> 2.1
  and sinatra >= 4.0.0 depends on rack >= 3.0.0, < 4,
  pact-provider-verifier >= 1.26.0 is incompatible with sinatra >= 4.0.0.
So, because Gemfile depends on sinatra >= 4.1.0
  and Gemfile depends on pact-provider-verifier >= 1.38.1,
  version solving has failed.

@YOU54F
YOU54F merged commit 5737728 into master Nov 30, 2024
@YOU54F
YOU54F deleted the snyk-fix-eb2db8b40f29216a80c489ed6479d911 branch November 30, 2024 11:37
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants