Dithn · dependabot · Nov 22, 2022
diff --git a/Gemfile b/Gemfile
@@ -120,7 +120,7 @@ group :development do
   # NOTE: [@rhymes] binding_of_caller 1.0 breaks Docker Compose, see <https://github.com/forem/forem/issues/12068>
   gem "binding_of_caller", "~> 0.8" # Retrieve the binding of a method's caller
 
-  gem "brakeman", "~> 4.10", require: false # Brakeman detects security vulnerabilities in Ruby on Rails applications via static analysis
+  gem "brakeman", "~> 5.4", require: false # Brakeman detects security vulnerabilities in Ruby on Rails applications via static analysis
   gem "bundler-audit", "~> 0.7" # bundler-audit provides patch-level verification for Bundled apps
   gem "derailed_benchmarks", "~> 2.0", require: false # A series of things you can use to benchmark a Rails or Ruby app
   gem "erb_lint", github: "thepracticaldev/erb-lint", branch: "jess/remove-version-pinning", require: false # ERB Linter tool

diff --git a/Gemfile.lock b/Gemfile.lock
@@ -133,7 +133,7 @@ GEM
       safely_block (>= 0.1.1)
     bootsnap (1.5.1)
       msgpack (~> 1.0)
-    brakeman (4.10.1)
+    brakeman (5.4.0)
     browser (5.2.0)
     brpoplpush-redis_script (0.1.1)
       concurrent-ruby (~> 1.0, >= 1.0.5)
@@ -454,7 +454,7 @@ GEM
     mini_histogram (0.3.1)
     mini_magick (4.11.0)
     mini_mime (1.0.2)
-    mini_portile2 (2.5.0)
+    mini_portile2 (2.8.0)
     minitest (5.14.3)
     msgpack (1.3.3)
     multi_json (1.15.0)
@@ -465,12 +465,12 @@ GEM
     nenv (0.3.0)
     netrc (0.11.0)
     nio4r (2.5.4)
-    nokogiri (1.11.1)
-      mini_portile2 (~> 2.5.0)
+    nokogiri (1.13.9)
+      mini_portile2 (~> 2.8.0)
       racc (~> 1.4)
-    nokogiri (1.11.1-x86_64-darwin)
+    nokogiri (1.13.9-x86_64-darwin)
       racc (~> 1.4)
-    nokogiri (1.11.1-x86_64-linux)
+    nokogiri (1.13.9-x86_64-linux)
       racc (~> 1.4)
     notiffany (0.1.3)
       nenv (~> 0.1)
@@ -537,7 +537,7 @@ GEM
       rest-client (~> 2.0, >= 2.0.2)
     pusher-signature (0.1.8)
     raabro (1.4.0)
-    racc (1.5.2)
+    racc (1.6.0)
     rack (2.2.3)
     rack-attack (6.4.0)
       rack (>= 1.0, < 3)
@@ -852,7 +852,7 @@ DEPENDENCIES
   binding_of_caller (~> 0.8)
   blazer (~> 2.4.1)
   bootsnap (>= 1.1.0)
-  brakeman (~> 4.10)
+  brakeman (~> 5.4)
   buffer (~> 0.1)
   bullet (~> 6.1)
   bundler-audit (~> 0.7)

diff --git a/vendor/cache/brakeman-4.10.1.gem b/vendor/cache/brakeman-4.10.1.gem
diff --git a/vendor/cache/brakeman-5.4.0.gem b/vendor/cache/brakeman-5.4.0.gem
diff --git a/vendor/cache/mini_portile2-2.5.0.gem b/vendor/cache/mini_portile2-2.5.0.gem
diff --git a/vendor/cache/mini_portile2-2.8.0.gem b/vendor/cache/mini_portile2-2.8.0.gem
diff --git a/vendor/cache/nokogiri-1.11.1-x86_64-darwin.gem b/vendor/cache/nokogiri-1.11.1-x86_64-darwin.gem
diff --git a/vendor/cache/nokogiri-1.11.1-x86_64-linux.gem b/vendor/cache/nokogiri-1.11.1-x86_64-linux.gem
diff --git a/vendor/cache/nokogiri-1.11.1.gem b/vendor/cache/nokogiri-1.11.1.gem
diff --git a/vendor/cache/nokogiri-1.13.9-x86_64-darwin.gem b/vendor/cache/nokogiri-1.13.9-x86_64-darwin.gem
diff --git a/vendor/cache/nokogiri-1.13.9-x86_64-linux.gem b/vendor/cache/nokogiri-1.13.9-x86_64-linux.gem
diff --git a/vendor/cache/nokogiri-1.13.9.gem b/vendor/cache/nokogiri-1.13.9.gem
diff --git a/vendor/cache/racc-1.5.2.gem b/vendor/cache/racc-1.5.2.gem
diff --git a/vendor/cache/racc-1.6.0.gem b/vendor/cache/racc-1.6.0.gem