Bump rails and puma

CHANGELOG.md

@@ -12,6 +12,9 @@ and this project adheres to [Semantic Versioning](http://semver.org/spec/v2.0.0.
 ### Security
 - Updated Rails to 6.1.4.4 to resolve CVE-2021-44528 (Medium, Not Vulnerable)
  [cyberark/conjur#2486](https://github.com/cyberark/conjur/pull/2486)
+- Updated Rails to 6.1.4.6 to resolve CVE-2022-23633
+ Updated Puma to 5.6.2 to resolve CVE-2022-23634
+ [cyberark/conjur#2492](https://github.com/cyberark/conjur/pull/2492) 
 
 ## [1.17.1] - 2022-02-09
 

Gemfile

@@ -19,9 +19,9 @@ gem 'http', '~> 4.2.0'
 gem 'iso8601'
 gem 'jbuilder', '~> 2.7.0'
 gem 'nokogiri', '>= 1.8.2'
-gem 'puma', '~> 5.5.1'
-gem 'rack', '~> 2.2.3'
-gem 'rails', '~> 6.1'
+gem 'puma', '~> 5.5', '>= 5.6.2'
+gem 'rack', '~> 2.2'
+gem 'rails', '~> 6.1', '>= 6.1.4.6'
 gem 'rake'
 
 gem 'pg'
@@ -30,7 +30,7 @@ gem 'sequel-pg_advisory_locking'
 gem 'sequel-postgres-schemata', require: false
 gem 'sequel-rails'
 
-gem 'activesupport', '~> 6.1'
+gem 'activesupport', '~> 6.1', '>= 6.1.4.6'
 gem 'base32-crockford'
 gem 'bcrypt'
 gem 'gli', require: false

Gemfile.lock

@@ -8,60 +8,60 @@ PATH
 GEM
  remote: https://rubygems.org/
  specs:
- actioncable (6.1.4.4)
- actionpack (= 6.1.4.4)
- activesupport (= 6.1.4.4)
+ actioncable (6.1.4.6)
+ actionpack (= 6.1.4.6)
+ activesupport (= 6.1.4.6)
  nio4r (~> 2.0)
  websocket-driver (>= 0.6.1)
- actionmailbox (6.1.4.4)
- actionpack (= 6.1.4.4)
- activejob (= 6.1.4.4)
- activerecord (= 6.1.4.4)
- activestorage (= 6.1.4.4)
- activesupport (= 6.1.4.4)
+ actionmailbox (6.1.4.6)
+ actionpack (= 6.1.4.6)
+ activejob (= 6.1.4.6)
+ activerecord (= 6.1.4.6)
+ activestorage (= 6.1.4.6)
+ activesupport (= 6.1.4.6)
  mail (>= 2.7.1)
- actionmailer (6.1.4.4)
- actionpack (= 6.1.4.4)
- actionview (= 6.1.4.4)
- activejob (= 6.1.4.4)
- activesupport (= 6.1.4.4)
+ actionmailer (6.1.4.6)
+ actionpack (= 6.1.4.6)
+ actionview (= 6.1.4.6)
+ activejob (= 6.1.4.6)
+ activesupport (= 6.1.4.6)
  mail (~> 2.5, >= 2.5.4)
  rails-dom-testing (~> 2.0)
- actionpack (6.1.4.4)
- actionview (= 6.1.4.4)
- activesupport (= 6.1.4.4)
+ actionpack (6.1.4.6)
+ actionview (= 6.1.4.6)
+ activesupport (= 6.1.4.6)
  rack (~> 2.0, >= 2.0.9)
  rack-test (>= 0.6.3)
  rails-dom-testing (~> 2.0)
  rails-html-sanitizer (~> 1.0, >= 1.2.0)
- actiontext (6.1.4.4)
- actionpack (= 6.1.4.4)
- activerecord (= 6.1.4.4)
- activestorage (= 6.1.4.4)
- activesupport (= 6.1.4.4)
+ actiontext (6.1.4.6)
+ actionpack (= 6.1.4.6)
+ activerecord (= 6.1.4.6)
+ activestorage (= 6.1.4.6)
+ activesupport (= 6.1.4.6)
  nokogiri (>= 1.8.5)
- actionview (6.1.4.4)
- activesupport (= 6.1.4.4)
+ actionview (6.1.4.6)
+ activesupport (= 6.1.4.6)
  builder (~> 3.1)
  erubi (~> 1.4)
  rails-dom-testing (~> 2.0)
  rails-html-sanitizer (~> 1.1, >= 1.2.0)
- activejob (6.1.4.4)
- activesupport (= 6.1.4.4)
+ activejob (6.1.4.6)
+ activesupport (= 6.1.4.6)
  globalid (>= 0.3.6)
- activemodel (6.1.4.4)
- activesupport (= 6.1.4.4)
- activerecord (6.1.4.4)
- activemodel (= 6.1.4.4)
- activesupport (= 6.1.4.4)
- activestorage (6.1.4.4)
- actionpack (= 6.1.4.4)
- activejob (= 6.1.4.4)
- activerecord (= 6.1.4.4)
- activesupport (= 6.1.4.4)
+ activemodel (6.1.4.6)
+ activesupport (= 6.1.4.6)
+ activerecord (6.1.4.6)
+ activemodel (= 6.1.4.6)
+ activesupport (= 6.1.4.6)
+ activestorage (6.1.4.6)
+ actionpack (= 6.1.4.6)
+ activejob (= 6.1.4.6)
+ activerecord (= 6.1.4.6)
+ activesupport (= 6.1.4.6)
  marcel (~> 1.0.0)
  mini_mime (>= 1.1.0)
- activesupport (6.1.4.4)
+ activesupport (6.1.4.6)
  concurrent-ruby (~> 1.0, >= 1.0.2)
  i18n (>= 1.6, < 2)
  minitest (>= 5.1)
@@ -253,7 +253,7 @@ GEM
  listen (3.7.0)
  rb-fsevent (~> 0.10, >= 0.10.3)
  rb-inotify (~> 0.9, >= 0.9.10)
- loofah (2.13.0)
+ loofah (2.14.0)
  crass (~> 1.0.2)
  nokogiri (>= 1.5.9)
  mail (2.7.1)
@@ -299,7 +299,7 @@ GEM
  pry-rails (0.3.9)
  pry (>= 0.10.4)
  public_suffix (4.0.6)
- puma (5.5.2)
+ puma (5.6.2)
  nio4r (~> 2.0)
  racc (1.6.0)
  rack (2.2.3)
@@ -312,20 +312,20 @@ GEM
  rack-rewrite (1.5.1)
  rack-test (1.1.0)
  rack (>= 1.0, < 3)
- rails (6.1.4.4)
- actioncable (= 6.1.4.4)
- actionmailbox (= 6.1.4.4)
- actionmailer (= 6.1.4.4)
- actionpack (= 6.1.4.4)
- actiontext (= 6.1.4.4)
- actionview (= 6.1.4.4)
- activejob (= 6.1.4.4)
- activemodel (= 6.1.4.4)
- activerecord (= 6.1.4.4)
- activestorage (= 6.1.4.4)
- activesupport (= 6.1.4.4)
+ rails (6.1.4.6)
+ actioncable (= 6.1.4.6)
+ actionmailbox (= 6.1.4.6)
+ actionmailer (= 6.1.4.6)
+ actionpack (= 6.1.4.6)
+ actiontext (= 6.1.4.6)
+ actionview (= 6.1.4.6)
+ activejob (= 6.1.4.6)
+ activemodel (= 6.1.4.6)
+ activerecord (= 6.1.4.6)
+ activestorage (= 6.1.4.6)
+ activesupport (= 6.1.4.6)
  bundler (>= 1.15.0)
- railties (= 6.1.4.4)
+ railties (= 6.1.4.6)
  sprockets-rails (>= 2.0.0)
  rails-controller-testing (1.0.5)
  actionpack (>= 5.0.1.rc1)
@@ -342,9 +342,9 @@ GEM
  rails_layout (1.0.42)
  rails_serve_static_assets (0.0.5)
  rails_stdout_logging (0.0.5)
- railties (6.1.4.4)
- actionpack (= 6.1.4.4)
- activesupport (= 6.1.4.4)
+ railties (6.1.4.6)
+ actionpack (= 6.1.4.6)
+ activesupport (= 6.1.4.6)
  method_source
  rake (>= 0.13)
  thor (~> 1.0)
@@ -465,7 +465,7 @@ PLATFORMS
  x86_64-linux
 
 DEPENDENCIES
- activesupport (~> 6.1)
+ activesupport (~> 6.1, >= 6.1.4.5)
  anyway_config
  aruba
  aws-sdk-iam
@@ -507,10 +507,10 @@ DEPENDENCIES
  pg
  pry-byebug
  pry-rails
- puma (~> 5.5.1)
- rack (~> 2.2.3)
+ puma (~> 5.5, >= 5.6.2)
+ rack (~> 2.2)
  rack-rewrite
- rails (~> 6.1)
+ rails (~> 6.1, >= 6.1.4.5)
  rails-controller-testing
  rails_12factor
  rails_layout