[Snyk] Fix for 3 vulnerabilities

[pavelbe4solutions]

Snyk has created this PR to fix 3 vulnerabilities in the rubygems dependencies of this project.

Snyk changed the following file(s):

• Gemfile

⚠️ Warning

``` Failed to update the Gemfile.lock, please update manually before merging. ```

Vulnerabilities that will be fixed with an upgrade:

	Issue	Score
	Uncontrolled Resource Consumption ('Resource Exhaustion') SNYK-RUBY-REXML-7577227	738
	Denial of Service (DoS) SNYK-RUBY-REXML-7577228	631
	Denial of Service (DoS) SNYK-RUBY-REXML-7462086	479

---

Important

• Check the changes in this PR to ensure they won't cause issues with your project.
• Max score is 1000. Note that the real score may have changed since the PR was raised.
• This PR was automatically created by Snyk using the credentials of a real user.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report
📜 Customise PR templates
🛠 Adjust project settings
📚 Read about Snyk's upgrade logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Denial of Service (DoS)

[//]: # 'snyk:metadata:{"customTemplate":{"variablesUsed":[],"fieldsUsed":[]},"dependencies":[{"name":"cocoapods","from":"1.13.0","to":"1.14.0"},{"name":"fastlane","from":"2.219.0","to":"2.220.0"}],"env":"prod","issuesToFix":[{"exploit_maturity":"No Known Exploit","id":"SNYK-RUBY-REXML-7462086","priority_score":479,"priority_score_factors":[{"type":"fixability","label":true,"score":214},{"type":"cvssScore","label":"5.3","score":265},{"type":"scoreVersion","label":"v1","score":1}],"severity":"medium","title":"Denial of Service (DoS)"},{"exploit_maturity":"Proof of Concept","id":"SNYK-RUBY-REXML-7577227","priority_score":738,"priority_score_factors":[{"type":"exploit","label":"Proof of Concept","score":107},{"type":"freshness","label":true,"score":71},{"type":"fixability","label":true,"score":214},{"type":"cvssScore","label":"6.9","score":345},{"type":"scoreVersion","label":"v1","score":1}],"severity":"medium","title":"Uncontrolled Resource Consumption ('Resource Exhaustion')"},{"exploit_maturity":"No Known Exploit","id":"SNYK-RUBY-REXML-7577228","priority_score":631,"priority_score_factors":[{"type":"freshness","label":true,"score":71},{"type":"fixability","label":true,"score":214},{"type":"cvssScore","label":"6.9","score":345},{"type":"scoreVersion","label":"v1","score":1}],"severity":"medium","title":"Denial of Service (DoS)"},{"exploit_maturity":"No Known Exploit","id":"SNYK-RUBY-REXML-7462086","priority_score":479,"priority_score_factors":[{"type":"fixability","label":true,"score":214},{"type":"cvssScore","label":"5.3","score":265},{"type":"scoreVersion","label":"v1","score":1}],"severity":"medium","title":"Denial of Service (DoS)"},{"exploit_maturity":"Proof of Concept","id":"SNYK-RUBY-REXML-7577227","priority_score":738,"priority_score_factors":[{"type":"exploit","label":"Proof of Concept","score":107},{"type":"freshness","label":true,"score":71},{"type":"fixability","label":true,"score":214},{"type":"cvssScore","label":"6.9","score":345},{"type":"scoreVersion","label":"v1","score":1}],"severity":"medium","title":"Uncontrolled Resource Consumption ('Resource Exhaustion')"},{"exploit_maturity":"No Known Exploit","id":"SNYK-RUBY-REXML-7577228","priority_score":631,"priority_score_factors":[{"type":"freshness","label":true,"score":71},{"type":"fixability","label":true,"score":214},{"type":"cvssScore","label":"6.9","score":345},{"type":"scoreVersion","label":"v1","score":1}],"severity":"medium","title":"Denial of Service (DoS)"}],"prId":"218287bd-a032-40ea-8232-84c2ae1dc363","prPublicId":"218287bd-a032-40ea-8232-84c2ae1dc363","packageManager":"rubygems","priorityScoreList":[479,738,631],"projectPublicId":"0d53aca4-774d-402b-9e1c-22fb9af85863","projectUrl":"https://app.snyk.io/org/pavelbe4solutions/project/0d53aca4-774d-402b-9e1c-22fb9af85863?utm_source=github&utm_medium=referral&page=fix-pr","prType":"fix","templateFieldSources":{"branchName":"default","commitMessage":"default","description":"default","title":"default"},"templateVariants":["pr-warning-shown","priorityScore"],"type":"auto","upgrade":["SNYK-RUBY-REXML-7462086","SNYK-RUBY-REXML-7577227","SNYK-RUBY-REXML-7577228"],"vulns":["SNYK-RUBY-REXML-7462086","SNYK-RUBY-REXML-7577227","SNYK-RUBY-REXML-7577228"],"patch":[],"isBreakingChange":false,"remediationStrategy":"vuln"}'

[dryrunsecurity]

DryRun Security Summary

The pull request updates the versions of the cocoapods and fastlane gems in the project's Gemfile, which is a recommended practice to ensure that security vulnerabilities are addressed and the application benefits from the latest improvements, but it's important to review the release notes and thoroughly test the application to ensure there are no regressions or unexpected behavior.

Expand for full summary

Summary:

The changes in this pull request involve updating the versions of the cocoapods and fastlane gems in the project's Gemfile. These updates are likely to include bug fixes, security improvements, and new features for the respective dependencies. From an application security perspective, updating dependencies to their latest versions is a recommended practice to ensure that security vulnerabilities are addressed and the application benefits from the latest improvements.

However, it's important to review the release notes and changelogs for the updated gems to understand the nature of the changes and any potential security implications. Additionally, thoroughly testing the application after updating dependencies is crucial to ensure that there are no regressions or unexpected behavior. Overall, the changes in this Gemfile appear to be routine updates to keep the application's dependencies up-to-date, which is a positive step from an application security perspective.

Files Changed:

• Gemfile: The changes in this file update the versions of the cocoapods gem from ~> 1.13 to ~> 1.14, >= 1.14.0, and the fastlane gem from ~> 2 to ~> 2, >= 2.220.0. These updates are likely to include bug fixes, security improvements, and new features for the respective dependencies.

Code Analysis

We ran 9 analyzers against 1 file and 1 analyzer had findings. 8 analyzers had no findings.

Analyzer	Findings
Sensitive Files Analyzer	1 finding

Riskiness

🟢 Risk threshold not exceeded.

View PR in the DryRun Dashboard.