Merge pull request #150 from OpenCSPM/build

bump kramdown
OpenCSPM · Apr 20, 2021 · 5daed27 · 5daed27
2 parents 051eab5 + 5f4c037
commit 5daed27
Show file tree

Hide file tree

Showing 3 changed files with 5 additions and 3 deletions.
diff --git a/docker/Gemfile b/docker/Gemfile
@@ -31,6 +31,7 @@ gem 'addressable', '~> 2.7'
 gem 'json_schemer', '~> 0.2.15'
 gem 'fast_jsonparser', '~> 0.5'
 gem 'pry', '~> 0.13.1'
+gem 'kramdown', '~> 2.3.1' # update for CVE-2021-28834
 
 group :development do
   gem 'spring'

diff --git a/docker/Gemfile.lock b/docker/Gemfile.lock
@@ -158,7 +158,7 @@ GEM
       regexp_parser (~> 2.0)
       uri_template (~> 0.7)
     jwt (2.2.2)
-    kramdown (2.3.0)
+    kramdown (2.3.1)
       rexml
     kramdown-parser-gfm (1.1.0)
       kramdown (~> 2.0)
@@ -280,7 +280,7 @@ GEM
     retriable (3.1.2)
     reverse_markdown (2.0.0)
       nokogiri
-    rexml (3.2.4)
+    rexml (3.2.5)
     rolify (5.3.0)
     rspec (3.10.0)
       rspec-core (~> 3.10.0)
@@ -389,6 +389,7 @@ DEPENDENCIES
   fast_jsonparser (~> 0.5)
   google-cloud-storage (~> 1.29)
   json_schemer (~> 0.2.15)
+  kramdown (~> 2.3.1)
   listen (~> 3.2)
   lograge (~> 0.11.2)
   omniauth (~> 2.0, >= 2.0.0)

diff --git a/docker/docker-compose.yml b/docker/docker-compose.yml
@@ -6,7 +6,7 @@ x-app: &app
     RAILS_ENV: ${RAILS_ENV:-production}
     RAILS_SERVE_STATIC_FILES: 1
     RAILS_LOG_TO_STDOUT: 1
-  image: gcr.io/opencspm/engine:0.1.19
+  image: gcr.io/opencspm/engine:0.1.20
   tmpfs:
     - /tmp