[Snyk] Fix for 7 vulnerabilities

[ayoinc]

Snyk has created this PR to fix 7 vulnerabilities in the rubygems dependencies of this project.

Snyk changed the following file(s):

• play-with-docker/Portus/Gemfile

⚠️ Warning

Failed to update the Gemfile.lock, please update manually before merging.

Vulnerabilities that will be fixed with an upgrade:

	Issue	Score
	Expired Pointer Dereference SNYK-RUBY-NOKOGIRI-10674179	726
	Stack-based Buffer Overflow SNYK-RUBY-NOKOGIRI-10674176	721
	Expired Pointer Dereference SNYK-RUBY-NOKOGIRI-10674184	721
	Out-of-bounds Read SNYK-RUBY-NOKOGIRI-10674192	721
	Heap-based Buffer Overflow SNYK-RUBY-NOKOGIRI-10494060	561
	Heap-based Buffer Overflow SNYK-RUBY-NOKOGIRI-10494063	561
	Stack-based Buffer Overflow SNYK-RUBY-NOKOGIRI-10674188	376

---

Important

• Check the changes in this PR to ensure they won't cause issues with your project.
• Max score is 1000. Note that the real score may have changed since the PR was raised.
• This PR was automatically created by Snyk using the credentials of a real user.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report
📜 Customise PR templates
🛠 Adjust project settings
📚 Read about Snyk's upgrade logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Learn about vulnerability in an interactive lesson of Snyk Learn.

[ayoinc]

🎉 Snyk checks have passed. No issues have been found so far.

✅ security/snyk check is complete. No issues have been found. (View Details)

[Copilot]

Pull Request Overview

This PR bumps several Ruby gem versions to address known vulnerabilities flagged by Snyk.

• Upgrades Rails from 4.2.8 to 7.0.0
• Updates sass-rails to 6.0.0+, kaminari to 1.0.0+, and web-console to 3.0.0
• Addresses seven Nokogiri-related security issues

Comments suppressed due to low confidence (3)

play-with-docker/Portus/Gemfile:3

• [nitpick] Using "> 7.0.0" pins you to patch releases within 7.0.x only. If you’d like to automatically receive Rails 7 minor versions (7.1, 7.2, etc.), consider using "> 7.0" instead.

gem "rails", "~> 7.0.0"

play-with-docker/Portus/Gemfile:1

• The PR warning indicates the Gemfile.lock wasn’t updated. Please run bundle install and commit the updated Gemfile.lock to lock in these dependency changes consistently.

source "https://rubygems.org"

play-with-docker/Portus/Gemfile:4

• [nitpick] sass-rails 6.x now uses the sassc engine internally. Ensure you have the sassc-rails gem (or another compatible Sass compiler) in your bundle, or consider migrating explicitly to sassc-rails for future compatibility.

gem "sass-rails", ">= 6.0.0"