summaryrefslogtreecommitdiff
path: root/Gemfile
diff options
context:
space:
mode:
authorTim Smith <tsmith84@gmail.com>2020-04-01 20:24:34 -0700
committerTim Smith <tsmith84@gmail.com>2020-04-01 21:40:11 -0700
commitd529fc0f453b09ef29d20e29db44ced850769123 (patch)
tree924ccf0b90e0d818bf9022d1341abc297217107c /Gemfile
parent4b728c6ec8ed4b4ab5ac4807de69f363566cb948 (diff)
downloadchef-d529fc0f453b09ef29d20e29db44ced850769123.tar.gz
Update Ruby to 2.6.6, Rake to 12.3.3 and libarchive to 3.4.2bumps_15
Ruby resolves 2 CVEs: https://www.ruby-lang.org/en/news/2020/03/31/ruby-2-6-6-released/ Rake is bundled in Ruby libarchive updated to 3.4.2 for multiple security issues including CVE-2019-19221 and CVE-2020-9308 Signed-off-by: Tim Smith <tsmith@chef.io>
Diffstat (limited to 'Gemfile')
-rw-r--r--Gemfile2
1 files changed, 1 insertions, 1 deletions
diff --git a/Gemfile b/Gemfile
index e41d41e4c7..8b75e347f8 100644
--- a/Gemfile
+++ b/Gemfile
@@ -59,7 +59,7 @@ group(:development, :test) do
# we pin rake as a copy of rake is installed from the ruby source
# if you bump the ruby version you should confirm we don't end up with
# two rake gems installed again
- gem "rake", "<= 12.3.2"
+ gem "rake", "<= 12.3.3"
gem "rspec-core", "~> 3.5"
gem "rspec-mocks", "~> 3.5"