Welcome to mirror list, hosted at ThFree Co, Russian Federation.

gitlab.com/gitlab-org/gitaly.git - Unnamed repository; edit this file 'description' to name the repository.
summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorStan Hu <stanhu@gmail.com>2019-12-06 01:25:08 +0300
committerStan Hu <stanhu@gmail.com>2019-12-06 01:27:01 +0300
commit78d11f211c652061d7db8717f0e2db3a49008572 (patch)
tree5ff694dcd3c4a5f0184e9df940238cb5eb844641
parentd1ecb43ff8eb0f1de1b941d62c9dbce9bb63c62e (diff)
Update loofah gem to v2.3.1
This keeps the version consistent with CE/EE, saving a little disk space and build times. This update addresses a CVE: https://github.com/flavorjones/loofah/blob/master/CHANGELOG.md
-rw-r--r--changelogs/unreleased/sh-update-loofah-gem.yml5
-rw-r--r--ruby/Gemfile.lock2
2 files changed, 6 insertions, 1 deletions
diff --git a/changelogs/unreleased/sh-update-loofah-gem.yml b/changelogs/unreleased/sh-update-loofah-gem.yml
new file mode 100644
index 000000000..ec5340be5
--- /dev/null
+++ b/changelogs/unreleased/sh-update-loofah-gem.yml
@@ -0,0 +1,5 @@
+---
+title: Update loofah gem to v2.3.1
+merge_request: 1678
+author:
+type: security
diff --git a/ruby/Gemfile.lock b/ruby/Gemfile.lock
index 90c4e1bcc..9f6e66476 100644
--- a/ruby/Gemfile.lock
+++ b/ruby/Gemfile.lock
@@ -99,7 +99,7 @@ GEM
licensee (8.9.2)
rugged (~> 0.24)
listen (0.5.3)
- loofah (2.3.0)
+ loofah (2.3.1)
crass (~> 1.0.2)
nokogiri (>= 1.5.9)
memoizable (0.4.2)