[Snyk] Security upgrade webrick from 1.7.0 to 1.8.2

[pavelbe4solutions]

Snyk has created this PR to fix 1 vulnerabilities in the rubygems dependencies of this project.

Snyk changed the following file(s):

• docs/Gemfile
• docs/Gemfile.lock

Vulnerabilities that will be fixed with an upgrade:

	Issue	Score
	HTTP Request Smuggling SNYK-RUBY-WEBRICK-8068535	658

---

Important

• Check the changes in this PR to ensure they won't cause issues with your project.
• Max score is 1000. Note that the real score may have changed since the PR was raised.
• This PR was automatically created by Snyk using the credentials of a real user.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report
📜 Customise PR templates
🛠 Adjust project settings
📚 Read about Snyk's upgrade logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Learn about vulnerability in an interactive lesson of Snyk Learn.

[dryrunsecurity]

DryRun Security Summary

This pull request updates the dependency versions for the webrick and nokogiri gems in the docs/Gemfile and docs/Gemfile.lock files, likely to address known security vulnerabilities in the previous versions of these gems, which is a positive security improvement.

Expand for full summary

Summary:

The changes in this pull request focus on updating the dependency versions for the webrick and nokogiri gems in the docs/Gemfile and docs/Gemfile.lock files. These updates are likely to address known security vulnerabilities in the previous versions of these gems, which is a positive security improvement.

The update to the webrick gem from version ~> 1.7 to ~> 1.8, >= 1.8.2 is particularly important, as the webrick gem is a Ruby web server library that has had a history of security vulnerabilities. Keeping this dependency up-to-date is crucial for maintaining the security of the application.

Similarly, the update to the nokogiri gem to version 1.15.4 is also a security enhancement, as earlier versions of Nokogiri have been known to have security vulnerabilities, such as XML External Entity (XXE) attacks. Regularly reviewing and updating dependencies is a crucial part of maintaining the security of any application.

Files Changed:

• docs/Gemfile: The changes in this file update the version of the webrick gem from ~> 1.7 to ~> 1.8, >= 1.8.2, which is likely to address known security vulnerabilities in the previous version.
• docs/Gemfile.lock: The changes in this file include the addition of the mini_portile2 gem, version 2.8.7, which is a dependency for the nokogiri gem. The nokogiri gem is also updated to version 1.15.4 for the ruby, arm64-darwin-22, and arm64-darwin-23 platforms, which is a security enhancement. Additionally, the webrick gem is updated to version 1.8.2, which is also a security improvement.

Code Analysis

We ran 9 analyzers against 2 files and 1 analyzer had findings. 8 analyzers had no findings.

Analyzer	Findings
Sensitive Files Analyzer	2 findings

Riskiness

🟢 Risk threshold not exceeded.

View PR in the DryRun Dashboard.